This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft
File:                     CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft (raw, json)
Hash identifier:          p9Y5Qat86wMn3znHSv7K8JRxEEYd1dam6cxgVX5JHe4=
Subject key identifier:   FD:6A:3C:BF:45:CF:A3:F9:62:64:C5:DD:97:14:7D:44:DF:81:75:48
Authority key identifier: CC:EF:2D:3E:A5:BD:18:7C:45:EA:6D:3A:8F:AF:71:CD:15:F7:D2:A7
Certificate issuer:       /CN=CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7
Certificate serial:       54A45A9FCFF2881131F2CCB51F6E71F81EB7A6CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft
Manifest number:          034A
Signing time:             Thu 01 Jan 2026 06:02:30 +0000
Manifest this update:     Thu 01 Jan 2026 05:57:30 +0000
Manifest next update:     Fri 02 Jan 2026 06:09:30 +0000
Files and hashes:         1: CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.crl (hash: S2MhE7lgfSJd0GUM37ACygNGjNHu1c0SBCgxb3E51gc=)
                          2: 34352e3233312e3130302e302f32322d3234203d3e20323637323336.roa (hash: t7wZjfHEHsD5Rmlff5gVkl4UrV8eQCO1lvq1c9DJVOw=)
                          3: 323830343a346136303a3a2f33322d3438203d3e20323637323336.roa (hash: mXVXROdrhx5zziqcEEeWD0Vzy58pLNqk9Cz+8buZybE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.crl
                          rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 Jan 2026 06:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:a4:5a:9f:cf:f2:88:11:31:f2:cc:b5:1f:6e:71:f8:1e:b7:a6:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7
        Validity
            Not Before: Jan  1 05:57:30 2026 GMT
            Not After : Jan  2 06:09:30 2026 GMT
        Subject: CN=FD6A3CBF45CFA3F96264C5DD97147D44DF817548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:77:74:93:f9:7b:a2:69:76:2f:33:bf:10:ee:
                    93:1d:86:7b:e3:01:87:3f:c8:83:0f:76:5d:38:bc:
                    d0:78:ff:ed:e5:b6:ad:a8:7e:43:dd:b2:41:bd:91:
                    0c:98:5d:9a:c3:44:61:b9:ee:94:88:7b:0f:6f:d4:
                    a7:d2:94:a6:cf:0c:52:b8:28:75:3f:53:5b:85:c1:
                    f5:86:1d:af:3e:7c:4d:04:5d:f4:ac:20:dc:ef:e9:
                    29:47:dc:2f:a1:86:4d:43:36:80:0f:d7:82:52:e9:
                    87:77:f6:5c:0f:71:11:d7:17:0f:2f:a2:7f:64:ee:
                    83:ea:22:80:99:7b:5e:76:00:b9:53:05:08:c3:29:
                    5e:99:a2:b1:c3:e3:4a:9c:ea:65:8d:aa:c7:93:8b:
                    73:e0:37:b2:01:36:fb:20:24:c4:8b:a4:49:f7:24:
                    2d:a6:1c:dd:00:b8:cc:ba:7f:1c:1a:4e:7d:9f:0e:
                    49:b0:3b:83:2e:60:fe:e2:d3:da:35:62:53:60:3b:
                    06:21:a9:6c:52:46:82:c9:c5:34:40:5f:47:9c:08:
                    2e:58:c5:02:0c:4e:76:b0:81:10:cc:77:7d:bc:06:
                    65:62:dd:2c:28:58:ce:2e:80:22:35:7b:a4:92:bf:
                    00:b6:e4:79:cc:ad:41:02:70:15:a8:c0:3c:39:ec:
                    c7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6A:3C:BF:45:CF:A3:F9:62:64:C5:DD:97:14:7D:44:DF:81:75:48
            X509v3 Authority Key Identifier:
                keyid:CC:EF:2D:3E:A5:BD:18:7C:45:EA:6D:3A:8F:AF:71:CD:15:F7:D2:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:1d:0c:b7:ef:e7:37:80:b0:53:25:1a:10:7c:70:89:6f:d4:
         2e:21:3f:64:30:c4:8a:fd:f0:be:77:9f:da:49:00:f8:2d:89:
         d8:68:8d:5b:0f:38:97:d1:d5:4f:5b:c0:40:48:bc:c4:c3:bc:
         8c:20:db:e3:60:11:28:4f:e9:c1:07:87:fa:cc:7f:e9:2d:64:
         5d:a0:34:b9:73:7e:af:74:0f:cd:88:6e:e2:70:ef:d1:91:a2:
         c3:97:89:d6:26:51:d4:4c:b1:2f:bf:14:58:22:15:2f:5a:1e:
         9c:2c:70:40:a9:53:55:b4:5a:b8:e0:21:df:db:d9:22:a1:32:
         2d:3c:92:b6:47:99:bb:80:bc:f2:fe:d5:0a:20:fd:13:0a:4e:
         30:e9:1f:4b:2a:ba:09:fc:a0:40:8a:58:56:13:e4:33:7c:43:
         3a:9f:c5:1d:77:87:94:c3:fb:ed:3e:3c:9d:08:61:db:2f:69:
         2f:a1:a1:65:09:f4:8b:be:a5:8d:a2:c9:f8:16:8a:bc:2d:bb:
         c2:59:60:75:5f:36:05:4b:d2:df:c6:9d:00:72:44:3f:30:28:
         c0:a7:e5:30:0d:aa:ff:67:09:cd:5d:5d:fa:0d:b0:64:53:6c:
         1f:43:19:8d:47:c5:77:65:79:55:09:28:db:e2:07:9d:fa:e8:
         02:a3:f9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 07:40:44 2026 by rpki-client