This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.mft
File:                     4060CF147FD7B929ED4E779D61DCD3763F62E9B6.mft (raw, json)
Hash identifier:          WJYXRHi9j4uyPflm89Waq6Ic5vxUQpMrsGK+kiJzpYI=
Subject key identifier:   CC:31:10:54:4B:9F:E9:7F:D0:04:9A:1D:79:F5:D5:3A:63:64:AC:58
Authority key identifier: 40:60:CF:14:7F:D7:B9:29:ED:4E:77:9D:61:DC:D3:76:3F:62:E9:B6
Certificate issuer:       /CN=4060CF147FD7B929ED4E779D61DCD3763F62E9B6
Certificate serial:       282E541D4B993B5071F45D80D68480511E8D70DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.mft
Manifest number:          0340
Signing time:             Sun 21 Dec 2025 08:15:53 +0000
Manifest this update:     Sun 21 Dec 2025 08:10:53 +0000
Manifest next update:     Mon 22 Dec 2025 10:36:53 +0000
Files and hashes:         1: 323830343a376566303a3a2f33322d313238203d3e20323731363536.roa (hash: BSWaPmS67xRVsnW3AMVQYa8EI6CRtHNg5ATogTv70Zs=)
                          2: 34352e3138362e3233322e302f32322d3332203d3e20323731363536.roa (hash: AwKwCZdwbOUibuNR1i8XrT9Tfaror0z1Pm6/W6G5zwc=)
                          3: 4060CF147FD7B929ED4E779D61DCD3763F62E9B6.crl (hash: VYNOKZEFmgewJ0gjdjOQjxjuH+axs6vwpM4i6olcHHY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.crl
                          rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 10:36:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:2e:54:1d:4b:99:3b:50:71:f4:5d:80:d6:84:80:51:1e:8d:70:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4060CF147FD7B929ED4E779D61DCD3763F62E9B6
        Validity
            Not Before: Dec 21 08:10:53 2025 GMT
            Not After : Dec 22 10:36:53 2025 GMT
        Subject: CN=CC3110544B9FE97FD0049A1D79F5D53A6364AC58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e5:cd:bf:4e:3f:63:42:d7:bd:f7:90:90:fa:
                    be:52:88:76:d4:ff:f6:77:0e:a2:cd:3e:09:22:15:
                    51:65:d5:a6:72:57:99:67:64:6c:bf:ed:15:34:c6:
                    8b:4f:1c:79:1b:2d:3a:94:6a:43:bc:92:e0:33:69:
                    e2:19:e3:3c:f1:7e:a8:97:77:fb:f3:1f:db:e4:43:
                    63:ef:71:e3:b5:08:d1:6b:ea:9d:19:5c:be:e4:53:
                    0e:fa:ee:60:33:42:4e:74:5c:90:ef:12:38:cd:10:
                    f0:33:88:26:15:2c:e2:40:b6:81:9c:83:0f:ce:f6:
                    04:b9:d8:3b:87:ca:20:94:ce:5d:4e:4a:ef:9d:85:
                    57:86:54:da:ba:e9:0e:cc:f7:f1:cc:47:84:50:8a:
                    d1:07:7d:ff:12:b7:3a:98:b5:0b:a1:dd:df:5d:d3:
                    44:36:d0:7c:a6:f4:d5:f9:d3:16:b5:2f:d8:61:7f:
                    43:dc:e9:33:3f:7f:07:42:c6:c5:52:b6:9b:28:0b:
                    82:10:6b:28:26:5c:76:19:ef:16:65:db:07:26:51:
                    32:ef:3f:21:01:9d:ef:94:d1:56:da:1a:c3:1c:30:
                    70:3f:9d:dc:c4:f7:46:eb:02:09:12:ae:10:a6:97:
                    b8:35:97:50:d1:5e:27:8d:b6:d1:4c:8b:49:86:35:
                    ef:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:31:10:54:4B:9F:E9:7F:D0:04:9A:1D:79:F5:D5:3A:63:64:AC:58
            X509v3 Authority Key Identifier:
                keyid:40:60:CF:14:7F:D7:B9:29:ED:4E:77:9D:61:DC:D3:76:3F:62:E9:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:2a:91:a8:94:8f:65:8f:16:50:dc:e2:5c:e7:1f:e6:d6:05:
         4f:1b:75:79:19:aa:ed:d4:03:e8:66:b5:d5:ec:76:03:5a:ec:
         59:ab:d1:67:3f:6c:0f:cb:b3:54:66:62:69:32:29:19:64:5c:
         83:9d:c5:81:6b:73:dc:72:7f:68:8c:2b:1b:f3:4d:e6:89:76:
         d5:56:05:1f:d7:db:55:69:55:d7:11:a1:43:ab:ee:3e:d0:fc:
         66:43:23:79:8f:e4:15:cb:6f:0a:ab:d1:8e:6b:78:ec:dc:f3:
         7c:e4:5b:8a:f6:1d:88:96:69:91:f5:b6:7c:88:3c:6d:dd:fa:
         90:e2:02:c8:52:01:cc:65:ed:6a:95:94:36:de:14:7c:23:51:
         67:d9:dd:f7:30:c7:cf:f7:95:7a:bc:6a:0d:cd:fc:6d:68:b1:
         b9:2f:08:e0:75:d8:82:b2:e8:c6:a8:68:b8:b8:52:29:07:06:
         ab:05:db:80:b3:cd:7f:90:0f:e3:36:10:9b:98:f0:69:1c:a7:
         3c:59:33:1d:a4:c6:76:f4:e3:85:82:f8:91:7e:3a:90:de:c2:
         9a:12:67:08:c0:a6:30:45:b1:fc:00:b8:e0:6a:d0:4f:9a:d7:
         01:a0:7e:b4:dc:72:ce:3b:74:5a:18:ee:cb:d8:83:62:7e:76:
         ab:bf:e2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 13:05:20 2025 by rpki-client