This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.mft
File:                     355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.mft (raw, json)
Hash identifier:          oqZ3EFuD0bFmYmkZqTK8rG/tkYyLkb1JSUQDbD3MgpI=
Subject key identifier:   8A:77:1A:98:7B:F8:82:8A:8F:6E:3B:F4:C5:A7:71:C7:59:E8:A0:4D
Authority key identifier: 35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2
Certificate issuer:       /CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2
Certificate serial:       41D37C9625036F10FB9D359D05105DFA256C2C90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.mft
Manifest number:          02D9
Signing time:             Wed 31 Dec 2025 18:02:26 +0000
Manifest this update:     Wed 31 Dec 2025 17:57:26 +0000
Manifest next update:     Thu 01 Jan 2026 20:42:26 +0000
Files and hashes:         1: 3137392e3139312e34352e302f32342d3234203d3e20323635303933.roa (hash: +5NaMFmY/ghveU85+04t3twxtg6cpoLDESPesS27f+k=)
                          2: 3137302e3233332e3130342e302f32322d3232203d3e20323635303933.roa (hash: LG3timFUf8lHEqWIx1bv84c8pWLqePxA6wOWJFy+IHA=)
                          3: 3137302e3233332e3130362e302f32342d3234203d3e20323635303933.roa (hash: A1/pPkisDqvRrkw5T8P+2zfx/mYAGJ4PXQyXcSl6Jzs=)
                          4: 323830343a333262303a633030323a3a2f34382d3438203d3e20323635303933.roa (hash: jhK91V8zZ8GpJuafZy4jHsV7EY79OqWLNuLpagRsWvc=)
                          5: 323830343a333262303a3a2f33322d3333203d3e20323635303933.roa (hash: StTDcuD0GdZAz7falHHgWbnPTsDVQVO4LGK8ovW3eio=)
                          6: 323830343a333262303a353030303a3a2f34382d3438203d3e20323635303933.roa (hash: eGkMqhu8X9H2izg5IEUJonHvGafi4FYD/utiUAQLjfg=)
                          7: 3137392e3139312e34362e302f32332d3234203d3e20323635303933.roa (hash: jD9+p9wfG/oT+P9FcyVK72iU4cmDvcfHQHGMC+om1jA=)
                          8: 323830343a333262303a633030303a3a2f34382d3438203d3e20323635303933.roa (hash: hi1s1lsCFkrIP42bBdlGMTWNj7YvCONW9LJiY8/v8HM=)
                          9: 3137392e3139312e34342e302f32342d3234203d3e20323635303933.roa (hash: X9EygzHy5RDA/wgbEFESoa0pa24MpUamd4vCIGx01HY=)
                          10: 323830343a333262303a623030303a3a2f34382d3438203d3e20323635303933.roa (hash: laRfRzgcSlnM28dqzDXxgl7DYr7nJ+ea4cp/PV/Ofbc=)
                          11: 355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.crl (hash: jFTzH9rk61DC/EUobfo2opOqi245fKkcHnRgSotNcQk=)
                          12: 3137302e3233332e3130372e302f32342d3234203d3e20323635303933.roa (hash: j8MIyRH+pMLdFRJ7pSL/iej1bQUwiDY9wwhWEvl1lj8=)
                          13: 3137302e3233332e3130342e302f32332d3234203d3e20323635303933.roa (hash: JV5I5HqqdWik8+FEEdHxopkmVUuWtkadM1lOeOybePg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.crl
                          rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 Jan 2026 20:42:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d3:7c:96:25:03:6f:10:fb:9d:35:9d:05:10:5d:fa:25:6c:2c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2
        Validity
            Not Before: Dec 31 17:57:26 2025 GMT
            Not After : Jan  1 20:42:26 2026 GMT
        Subject: CN=8A771A987BF8828A8F6E3BF4C5A771C759E8A04D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3a:ed:92:3a:94:04:10:95:6e:4f:35:81:27:
                    dd:07:7c:58:bc:dc:fa:ae:4f:0f:f7:c8:9c:40:9c:
                    03:34:af:61:1a:3e:b2:7a:86:49:3a:1d:a2:12:f0:
                    ac:f4:52:f4:45:01:28:4c:9c:19:2e:7b:f3:c2:71:
                    ac:12:9f:84:59:89:56:a1:f9:08:45:0f:01:81:3e:
                    97:de:e2:ec:7e:4b:34:d0:1a:21:a9:12:76:a2:61:
                    37:d5:1e:3b:cd:34:08:59:17:7d:f5:f8:23:42:5b:
                    c3:06:24:0c:72:d9:42:f7:27:4b:aa:01:3f:58:31:
                    1a:be:c0:74:fc:75:48:2b:86:be:10:a9:f2:27:c2:
                    09:c2:18:09:08:3e:e5:12:87:2c:28:90:43:f3:df:
                    5d:81:d7:72:04:6c:d7:1f:9e:89:e3:c3:c7:c4:94:
                    58:9c:69:52:53:0b:54:72:20:7a:6a:85:bd:c5:e8:
                    e9:f9:93:51:d7:97:89:7c:78:71:11:40:b8:4b:3b:
                    8d:9f:a5:4a:12:c5:27:9b:37:8d:6d:85:8c:8a:36:
                    6c:ae:2b:ef:fb:15:af:49:53:91:71:d8:58:b5:9f:
                    61:7c:78:28:5c:7a:e7:3c:b5:18:5c:98:9a:11:17:
                    bb:3c:5c:ab:79:b2:f0:7d:16:15:a8:89:54:78:90:
                    80:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:77:1A:98:7B:F8:82:8A:8F:6E:3B:F4:C5:A7:71:C7:59:E8:A0:4D
            X509v3 Authority Key Identifier:
                keyid:35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:e1:0a:1f:f9:0f:1f:85:e2:21:32:71:45:f2:ee:17:82:15:
         69:45:5c:e0:bb:3b:01:97:60:6e:64:3d:3f:8b:5a:d2:20:0e:
         5e:2d:35:2e:f0:d2:ac:e3:a2:83:39:c8:58:97:20:96:a0:dc:
         b5:11:66:2e:89:6f:ea:84:d5:07:99:f4:b1:f1:85:c5:58:98:
         0b:52:f4:b8:30:7f:4b:fd:6b:ce:0e:e9:7f:13:ea:ea:69:0a:
         7b:ea:88:1c:ab:eb:eb:ce:26:f1:cb:ef:96:df:94:e3:87:55:
         e6:18:7f:94:2c:1c:b0:d2:ea:df:dd:76:5b:d9:7b:57:9a:62:
         c5:79:83:97:bc:05:21:54:94:5c:1a:65:c9:bc:a4:5c:27:04:
         81:d7:e1:20:9a:44:08:37:97:c1:f0:0e:4a:ba:31:9d:93:98:
         da:fd:a5:dd:86:da:58:92:61:85:7c:94:4b:ae:91:47:86:bc:
         58:ab:0a:40:23:3d:32:14:f0:db:fc:a1:f6:48:61:28:0b:2d:
         09:9f:f7:d6:da:c7:5c:c9:d9:e2:ba:25:c6:57:b4:3a:a8:3b:
         45:ce:36:e3:7c:16:da:e8:75:a8:ca:e4:5a:32:97:24:f1:68:
         8b:43:73:7e:53:ef:56:d0:51:f5:56:44:fd:cd:4a:df:2f:01:
         59:11:4c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 01:03:46 2026 by rpki-client