This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8hfcH6aRRCNUeoRXHYnQNkNM8XQyBMpvsr3Rm3cAfCSB/0/7A802A6EBF1AA8211D8D3736A55331593F4FC244.mft
File:                     7A802A6EBF1AA8211D8D3736A55331593F4FC244.mft (raw, json)
Hash identifier:          T2swUM2/lAV3BLaaTcqAYzq+0Y6ZQZ7pIE8hA3kli7k=
Subject key identifier:   24:88:E6:75:ED:18:5F:D5:FA:E9:06:FE:93:77:5C:DE:D3:25:37:D2
Authority key identifier: 7A:80:2A:6E:BF:1A:A8:21:1D:8D:37:36:A5:53:31:59:3F:4F:C2:44
Certificate issuer:       /CN=7A802A6EBF1AA8211D8D3736A55331593F4FC244
Certificate serial:       76AED60F587A45EE6D8B50A801D9EDCB1D1BB957
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A802A6EBF1AA8211D8D3736A55331593F4FC244.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hfcH6aRRCNUeoRXHYnQNkNM8XQyBMpvsr3Rm3cAfCSB/0/7A802A6EBF1AA8211D8D3736A55331593F4FC244.mft
Manifest number:          0173
Signing time:             Mon 22 Dec 2025 16:05:01 +0000
Manifest this update:     Mon 22 Dec 2025 16:00:01 +0000
Manifest next update:     Tue 23 Dec 2025 18:20:01 +0000
Files and hashes:         1: 3137372e37352e34302e302f32312d3234203d3e203533303430.roa (hash: +usPaJgFK6IAHqpmR2Ty7pl2P3JibJXX42COU682x0c=)
                          2: 7A802A6EBF1AA8211D8D3736A55331593F4FC244.crl (hash: EiH/M++Bg/79YUpbLIfpP0wsRe50Ncp1o3+ZVL6GEHc=)
                          3: 323830343a393264303a3a2f33322d3438203d3e203533303430.roa (hash: AGZPJmoBXe4ub3n4QBejdn+nQ3UPAzWXqHK4BjW2yUM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8hfcH6aRRCNUeoRXHYnQNkNM8XQyBMpvsr3Rm3cAfCSB/0/7A802A6EBF1AA8211D8D3736A55331593F4FC244.crl
                          rsync://rpki-repo.registro.br/repo/8hfcH6aRRCNUeoRXHYnQNkNM8XQyBMpvsr3Rm3cAfCSB/0/7A802A6EBF1AA8211D8D3736A55331593F4FC244.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A802A6EBF1AA8211D8D3736A55331593F4FC244.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 18:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ae:d6:0f:58:7a:45:ee:6d:8b:50:a8:01:d9:ed:cb:1d:1b:b9:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A802A6EBF1AA8211D8D3736A55331593F4FC244
        Validity
            Not Before: Dec 22 16:00:01 2025 GMT
            Not After : Dec 23 18:20:01 2025 GMT
        Subject: CN=2488E675ED185FD5FAE906FE93775CDED32537D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7a:19:1d:e8:04:23:29:1d:87:40:34:95:7f:
                    89:94:7c:47:c0:c0:79:c0:e8:29:e5:5b:d4:56:54:
                    14:2f:23:d9:22:65:9e:91:cf:65:69:4b:e1:25:39:
                    62:e1:80:44:24:ee:6a:b7:cd:68:9f:64:a3:44:8f:
                    19:a9:10:0a:0f:9e:12:5e:97:cb:74:18:53:02:f2:
                    81:45:f5:28:d5:27:7f:27:57:84:d2:f4:88:4a:0b:
                    a0:ad:ad:df:ca:59:f9:d9:a2:5b:ee:17:84:03:de:
                    dc:fe:8a:3c:73:64:3f:13:d1:43:70:f0:85:a9:e5:
                    1d:02:05:8e:84:4c:0f:e0:01:2e:23:c0:5d:99:bf:
                    50:f1:54:c0:84:cb:77:a8:48:08:af:fc:c7:88:cc:
                    f4:e8:fd:62:a6:d2:56:d0:b7:93:30:93:e6:88:b9:
                    54:ef:61:c4:b4:1c:9e:e2:38:16:a0:b6:7c:95:8d:
                    df:1b:f2:55:cf:9d:da:68:af:5a:c8:8e:ed:f4:25:
                    f5:5d:6a:38:81:db:f8:76:8b:3d:5d:19:01:30:9f:
                    fb:94:8a:41:f5:6b:dc:ac:67:14:72:70:af:01:34:
                    ac:46:4d:45:3a:28:39:b9:c3:f3:1c:9d:9d:18:08:
                    7f:fc:c8:0f:cb:10:c1:57:4f:0e:46:9f:cd:f4:8c:
                    1c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:88:E6:75:ED:18:5F:D5:FA:E9:06:FE:93:77:5C:DE:D3:25:37:D2
            X509v3 Authority Key Identifier:
                keyid:7A:80:2A:6E:BF:1A:A8:21:1D:8D:37:36:A5:53:31:59:3F:4F:C2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hfcH6aRRCNUeoRXHYnQNkNM8XQyBMpvsr3Rm3cAfCSB/0/7A802A6EBF1AA8211D8D3736A55331593F4FC244.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A802A6EBF1AA8211D8D3736A55331593F4FC244.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hfcH6aRRCNUeoRXHYnQNkNM8XQyBMpvsr3Rm3cAfCSB/0/7A802A6EBF1AA8211D8D3736A55331593F4FC244.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:94:c1:80:fc:dc:a6:e7:1b:03:5b:26:15:18:9d:d1:79:66:
         4b:d3:f1:11:9e:93:b0:3f:c5:30:fb:03:c3:f2:c4:d2:15:54:
         dc:38:c4:88:46:07:89:d0:b7:1d:0a:8f:23:f2:36:57:4e:5a:
         c3:e3:79:72:af:36:59:e4:e3:c5:ed:f8:f6:d3:df:a3:f9:82:
         f0:ef:b8:23:a5:19:cf:2d:a0:8c:5b:a5:a9:2c:23:19:bd:b4:
         87:47:b0:79:46:ce:ad:8e:74:0c:d7:48:13:e8:7d:7f:6b:c3:
         f0:af:59:e1:73:25:cf:1c:6a:c3:ba:7e:ad:c2:08:52:31:74:
         bc:05:a7:3e:b6:55:d4:e9:d3:1f:2b:76:bb:1b:c4:0b:f6:12:
         38:6c:1d:b6:8c:39:48:b0:98:31:4c:54:a8:82:b1:7c:6a:7b:
         3c:f3:49:8c:e3:89:6d:36:f9:31:42:95:9b:d9:8e:02:b6:79:
         38:c7:c4:8c:91:1c:47:2f:37:ba:fe:7a:44:d5:72:ba:74:f4:
         e7:19:fc:27:59:42:54:b6:ab:1f:fc:cd:ac:c2:33:3e:2c:0a:
         dc:08:46:20:8a:27:c5:0a:c2:15:a5:47:a6:58:9b:b9:cd:50:
         5a:02:7b:23:5f:6e:19:27:2c:c5:36:11:cb:ee:7c:de:68:ac:
         53:08:09:fa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUdq7WD1h6Re5ti1CoAdntyx0buVcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0E4MDJBNkVCRjFBQTgyMTFEOEQzNzM2QTU1MzMxNTkz
RjRGQzI0NDAeFw0yNTEyMjIxNjAwMDFaFw0yNTEyMjMxODIwMDFaMDMxMTAvBgNV
BAMTKDI0ODhFNjc1RUQxODVGRDVGQUU5MDZGRTkzNzc1Q0RFRDMyNTM3RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ehkd6AQjKR2HQDSVf4mUfEfA
wHnA6CnlW9RWVBQvI9kiZZ6Rz2VpS+ElOWLhgEQk7mq3zWifZKNEjxmpEAoPnhJe
l8t0GFMC8oFF9SjVJ38nV4TS9IhKC6Ctrd/KWfnZolvuF4QD3tz+ijxzZD8T0UNw
8IWp5R0CBY6ETA/gAS4jwF2Zv1DxVMCEy3eoSAiv/MeIzPTo/WKm0lbQt5Mwk+aI
uVTvYcS0HJ7iOBagtnyVjd8b8lXPndpor1rIju30JfVdajiB2/h2iz1dGQEwn/uU
ikH1a9ysZxRycK8BNKxGTUU6KDm5w/McnZ0YCH/8yA/LEMFXTw5Gn830jByHAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUJIjmde0YX9X66Qb+k3dc3tMlN9IwHwYDVR0j
BBgwFoAUeoAqbr8aqCEdjTc2pVMxWT9PwkQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGhmY0g2YVJSQ05VZW9SWEhZblFOa05NOFhReUJNcHZzcjNSbTNjQWZD
U0IvMC83QTgwMkE2RUJGMUFBODIxMUQ4RDM3MzZBNTUzMzE1OTNGNEZDMjQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdBODAyQTZFQkYxQUE4MjEx
RDhEMzczNkE1NTMzMTU5M0Y0RkMyNDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OGhmY0g2YVJSQ05VZW9SWEhZblFOa05NOFhReUJNcHZzcjNSbTNjQWZDU0IvMC83
QTgwMkE2RUJGMUFBODIxMUQ4RDM3MzZBNTUzMzE1OTNGNEZDMjQ0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAS5TBgPzcpucbA1smFRid0XlmS9PxEZ6TsD/FMPsDw/LE0hVU3DjEiEYHidC3
HQqPI/I2V05aw+N5cq82WeTjxe349tPfo/mC8O+4I6UZzy2gjFulqSwjGb20h0ew
eUbOrY50DNdIE+h9f2vD8K9Z4XMlzxxqw7p+rcIIUjF0vAWnPrZV1OnTHyt2uxvE
C/YSOGwdtow5SLCYMUxUqIKxfGp7PPNJjOOJbTb5MUKVm9mOArZ5OMfEjJEcRy83
uv56RNVyunT05xn8J1lCVLarH/zNrMIzPiwK3AhGIIonxQrCFaVHplibuc1QWgJ7
I19uGScsxTYRy+583misUwgJ+g==
-----END CERTIFICATE-----
Generated at Tue Dec 23 00:49:06 2025 by rpki-client