This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft
File:                     CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft (raw, json)
Hash identifier:          SUByPln3bkzTP7teeTkMMBLM0iEJZvsi+CIFlKAR5Hk=
Subject key identifier:   FB:C1:AE:80:C2:F4:F5:64:84:41:98:4E:D0:E3:43:C9:D5:57:C3:37
Authority key identifier: CF:FC:3D:38:9E:E6:BA:B7:CC:D5:F6:60:D6:30:A8:BE:8E:1A:E0:53
Certificate issuer:       /CN=CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053
Certificate serial:       08B45570F54FFDF81C4CA00FE061AD601CAD1D8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft
Manifest number:          0350
Signing time:             Tue 30 Dec 2025 03:26:44 +0000
Manifest this update:     Tue 30 Dec 2025 03:21:44 +0000
Manifest next update:     Wed 31 Dec 2025 05:06:44 +0000
Files and hashes:         1: CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl (hash: c4LfNHZ2Dcs4AHvjNXOSSmGhqk/lbwzuuYj/a2HOxNs=)
                          2: 34352e3137362e3134302e302f32322d3234203d3e20323638393434.roa (hash: gE/DdB9YOblUsoK0HG9wnPd3YKHH2DbykTyw5B7/wBQ=)
                          3: 323830343a356366633a3a2f33322d3438203d3e20323638393434.roa (hash: JKjEt0hETRYlcDbmWQLZvhZ9xRQwxepiQuRghmhAfoA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl
                          rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 31 Dec 2025 05:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b4:55:70:f5:4f:fd:f8:1c:4c:a0:0f:e0:61:ad:60:1c:ad:1d:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053
        Validity
            Not Before: Dec 30 03:21:44 2025 GMT
            Not After : Dec 31 05:06:44 2025 GMT
        Subject: CN=FBC1AE80C2F4F5648441984ED0E343C9D557C337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:91:b1:16:b1:0a:25:96:7c:87:43:85:a7:8c:
                    d1:c7:91:b9:03:35:1d:19:4d:97:eb:87:83:82:91:
                    82:fa:5a:ef:d4:2c:d1:df:8b:0b:fb:d9:e0:b8:6c:
                    05:07:51:54:00:5c:a4:e4:39:5c:06:bb:3e:51:54:
                    d6:a9:dc:20:2f:58:5c:f6:56:e0:bf:47:3d:b5:c7:
                    19:b1:f9:ac:a3:97:16:5b:cd:63:a4:d7:67:9b:f8:
                    00:e0:32:f6:96:a3:d8:33:66:d8:a6:0c:e2:85:24:
                    19:63:17:16:7d:4e:5e:cd:1e:0c:66:ae:43:d0:0b:
                    88:05:ce:b4:10:ee:8b:a3:1d:c0:df:7c:a7:1b:9d:
                    28:09:2e:67:0d:f7:b7:ae:a2:8a:a4:00:bc:d7:fb:
                    2f:6b:f4:8a:0f:7d:12:80:f4:26:71:16:7e:38:14:
                    e9:e7:be:c5:93:a1:ae:ee:57:40:ac:09:ff:41:53:
                    c1:97:10:64:24:9f:12:c0:7e:4e:a2:03:37:39:67:
                    54:bd:fb:d1:d4:8a:44:72:25:04:e7:d6:79:61:af:
                    f8:c7:c4:18:6f:d6:46:e2:1c:31:53:7b:3b:bb:e9:
                    a3:2f:ed:51:41:e4:64:d1:38:40:6f:c3:2d:fe:06:
                    37:4c:46:06:14:c8:8a:17:f6:2e:48:52:6f:e1:a7:
                    92:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C1:AE:80:C2:F4:F5:64:84:41:98:4E:D0:E3:43:C9:D5:57:C3:37
            X509v3 Authority Key Identifier:
                keyid:CF:FC:3D:38:9E:E6:BA:B7:CC:D5:F6:60:D6:30:A8:BE:8E:1A:E0:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:12:77:7a:86:3a:d8:8e:8f:1a:78:e7:c3:ea:60:5d:9c:7d:
         e6:64:83:c5:fa:12:ee:33:55:c0:02:a8:ec:ff:06:02:c3:9f:
         78:05:52:80:a6:0d:77:df:d6:c3:46:30:25:ec:36:7f:e2:e8:
         89:e3:f1:91:4a:2c:53:4a:ff:59:40:5e:93:be:f4:8f:ee:58:
         39:46:ec:40:75:1f:76:8c:bb:03:3f:a0:0f:11:01:20:37:ef:
         4f:9e:eb:6c:c4:91:03:0c:17:4e:54:1d:f2:d3:f8:ab:cb:85:
         db:56:b9:e9:8a:00:b2:04:69:fd:01:ac:fe:23:98:05:72:21:
         75:d1:87:6e:37:bc:c8:b5:74:f8:4e:26:bf:28:32:93:01:a6:
         6e:c0:5a:0a:a3:ec:bb:9f:2b:0e:0d:7a:43:48:16:11:ba:07:
         41:26:b2:26:38:53:0c:72:ce:c2:65:c6:8f:94:42:01:e3:8b:
         4b:3a:75:93:00:d6:6a:66:71:58:27:fd:f8:fe:52:81:62:4a:
         14:ac:93:6f:5d:45:66:b7:2d:eb:7e:85:3c:54:cf:ca:29:6e:
         ef:f5:de:6c:40:69:81:7a:91:79:8c:69:9e:86:82:63:e2:98:
         16:b0:ef:7e:72:b9:69:97:22:57:90:8c:09:37:4b:8f:25:80:
         b2:50:2b:bb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCLRVcPVP/fgcTKAP4GGtYBytHY8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0ZGQzNEMzg5RUU2QkFCN0NDRDVGNjYwRDYzMEE4QkU4
RTFBRTA1MzAeFw0yNTEyMzAwMzIxNDRaFw0yNTEyMzEwNTA2NDRaMDMxMTAvBgNV
BAMTKEZCQzFBRTgwQzJGNEY1NjQ4NDQxOTg0RUQwRTM0M0M5RDU1N0MzMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpkbEWsQollnyHQ4WnjNHHkbkD
NR0ZTZfrh4OCkYL6Wu/ULNHfiwv72eC4bAUHUVQAXKTkOVwGuz5RVNap3CAvWFz2
VuC/Rz21xxmx+ayjlxZbzWOk12eb+ADgMvaWo9gzZtimDOKFJBljFxZ9Tl7NHgxm
rkPQC4gFzrQQ7oujHcDffKcbnSgJLmcN97euooqkALzX+y9r9IoPfRKA9CZxFn44
FOnnvsWToa7uV0CsCf9BU8GXEGQknxLAfk6iAzc5Z1S9+9HUikRyJQTn1nlhr/jH
xBhv1kbiHDFTezu76aMv7VFB5GTROEBvwy3+BjdMRgYUyIoX9i5IUm/hp5IXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU+8GugML09WSEQZhO0ONDydVXwzcwHwYDVR0j
BBgwFoAUz/w9OJ7murfM1fZg1jCovo4a4FMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODlLRlJtYWZuWlV2N1VMa2dycjZMeWhzMzJNWUd2QnE0S3FMQkJzS1k5
RFcvMS9DRkZDM0QzODlFRTZCQUI3Q0NENUY2NjBENjMwQThCRThFMUFFMDUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGRkMzRDM4OUVFNkJBQjdD
Q0Q1RjY2MEQ2MzBBOEJFOEUxQUUwNTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
ODlLRlJtYWZuWlV2N1VMa2dycjZMeWhzMzJNWUd2QnE0S3FMQkJzS1k5RFcvMS9D
RkZDM0QzODlFRTZCQUI3Q0NENUY2NjBENjMwQThCRThFMUFFMDUzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARRJ3eoY62I6PGnjnw+pgXZx95mSDxfoS7jNVwAKo7P8GAsOfeAVSgKYNd9/W
w0YwJew2f+LoiePxkUosU0r/WUBek770j+5YOUbsQHUfdoy7Az+gDxEBIDfvT57r
bMSRAwwXTlQd8tP4q8uF21a56YoAsgRp/QGs/iOYBXIhddGHbje8yLV0+E4mvygy
kwGmbsBaCqPsu58rDg16Q0gWEboHQSayJjhTDHLOwmXGj5RCAeOLSzp1kwDWamZx
WCf9+P5SgWJKFKyTb11FZrct636FPFTPyilu7/XebEBpgXqReYxpnoaCY+KYFrDv
fnK5aZciV5CMCTdLjyWAslAruw==
-----END CERTIFICATE-----
Generated at Tue Dec 30 08:58:39 2025 by rpki-client