This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.mft
File:                     68EC60223DF10BE63B7A84464ACF2A9697173D75.mft (raw, json)
Hash identifier:          MBda0bnOqRQQ8UNLXp3dMpr5o4nC/J3zd0yzNrO1W8I=
Subject key identifier:   F9:58:5B:C6:C3:42:AE:D7:93:6C:FE:C0:B8:03:A9:E9:E8:D5:FD:6A
Authority key identifier: 68:EC:60:22:3D:F1:0B:E6:3B:7A:84:46:4A:CF:2A:96:97:17:3D:75
Certificate issuer:       /CN=68EC60223DF10BE63B7A84464ACF2A9697173D75
Certificate serial:       37DFF8077C1A042DE43F7AF6CF113834A032D376
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68EC60223DF10BE63B7A84464ACF2A9697173D75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.mft
Manifest number:          0332
Signing time:             Sat 20 Dec 2025 01:32:57 +0000
Manifest this update:     Sat 20 Dec 2025 01:27:57 +0000
Manifest next update:     Sun 21 Dec 2025 03:17:57 +0000
Files and hashes:         1: 3134332e3235352e302e302f32322d3234203d3e20323635313430.roa (hash: jKf9Vk2YfC8ukz9g1OK429wD3IUbFlCEsk6xy7G4mRU=)
                          2: 323830343a326233343a3a2f33322d3336203d3e20323635313430.roa (hash: e293ucudGtZaweGXAccg++hTWsDiYVPUspL2krLmXvw=)
                          3: 68EC60223DF10BE63B7A84464ACF2A9697173D75.crl (hash: dfqHvpmX0Ggs2WhPV6Y1YdPq8VnntWsTPDuXEgs+Wn4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.crl
                          rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68EC60223DF10BE63B7A84464ACF2A9697173D75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 03:17:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:df:f8:07:7c:1a:04:2d:e4:3f:7a:f6:cf:11:38:34:a0:32:d3:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68EC60223DF10BE63B7A84464ACF2A9697173D75
        Validity
            Not Before: Dec 20 01:27:57 2025 GMT
            Not After : Dec 21 03:17:57 2025 GMT
        Subject: CN=F9585BC6C342AED7936CFEC0B803A9E9E8D5FD6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7f:ac:44:16:5a:69:cb:f5:47:64:97:7c:2a:
                    eb:66:5d:09:49:ff:df:0d:d2:74:4e:74:50:a0:49:
                    b2:6a:dd:11:d9:44:f4:47:46:63:49:f0:19:d3:51:
                    ab:47:9c:2a:2b:dd:fa:1a:73:cc:b3:f2:3e:39:1f:
                    d8:2a:f9:2b:a8:6e:60:41:e9:0b:a9:37:f8:3f:e4:
                    99:ba:fe:b4:34:ee:d4:20:ac:c7:07:7b:d8:c1:32:
                    4d:8b:c0:1a:38:1d:76:50:64:66:c4:c6:82:9b:f1:
                    3e:97:97:4d:94:ee:90:e0:b0:db:82:e1:46:6b:8c:
                    43:da:ec:d2:2a:8d:f2:15:a5:aa:11:55:6a:59:84:
                    60:9c:2d:ea:5a:db:1c:8d:1c:a5:9c:40:57:49:1f:
                    0a:c1:ca:ac:03:29:96:b0:8c:37:e6:57:c7:df:d6:
                    08:c6:97:de:85:04:0a:16:2b:ab:d7:a8:83:ef:08:
                    7f:e1:ca:d0:f8:51:96:5c:82:df:65:b0:53:00:b7:
                    80:35:ba:f8:68:e8:b0:84:b0:31:30:82:20:4c:8e:
                    93:45:29:a3:47:c7:70:77:90:17:2a:44:67:60:18:
                    07:49:1c:cb:ce:d5:c9:ad:42:fa:b5:9c:1d:69:e4:
                    31:9e:ac:06:d8:eb:cf:fd:a5:bb:22:50:97:8d:80:
                    05:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:58:5B:C6:C3:42:AE:D7:93:6C:FE:C0:B8:03:A9:E9:E8:D5:FD:6A
            X509v3 Authority Key Identifier:
                keyid:68:EC:60:22:3D:F1:0B:E6:3B:7A:84:46:4A:CF:2A:96:97:17:3D:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68EC60223DF10BE63B7A84464ACF2A9697173D75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:ea:14:ea:57:9a:4a:7c:01:94:8f:9d:a6:ac:eb:bc:ef:0d:
         a9:be:fd:79:6c:90:d1:02:a4:f1:0c:d5:eb:24:f3:17:94:6e:
         35:48:32:1d:f1:e4:54:3f:e7:85:01:39:53:39:f4:9f:d2:d2:
         5b:b0:5d:cb:36:b6:01:db:cc:ad:75:e6:ef:80:8f:0e:84:8f:
         43:e7:6f:43:2b:01:d9:77:25:bc:7b:bb:52:2d:61:80:33:09:
         91:27:24:e7:26:c5:3b:41:75:26:db:13:2b:66:2f:b7:94:1e:
         e3:e5:40:cd:6f:72:fd:56:91:ce:cc:d5:8a:44:95:07:88:c9:
         82:90:0c:bd:fa:3d:c1:95:52:a0:df:56:ea:81:2f:ca:04:1b:
         4f:e5:e8:7c:12:6e:af:46:f0:87:06:27:73:63:bd:42:9d:29:
         2f:bd:42:fe:c2:3d:4f:e0:cd:bb:2a:b6:87:d3:9d:0b:74:f6:
         86:89:d6:f0:7a:4a:8e:1d:55:cd:90:e6:8d:ab:2e:0e:b1:08:
         65:db:69:f6:f5:c2:94:73:22:22:de:96:30:1b:ce:58:47:25:
         a7:ce:08:be:49:d8:14:e6:01:38:e3:4f:5d:25:4a:bd:5e:3c:
         d6:3a:f6:ef:75:de:f0:08:65:09:10:c3:24:53:b3:15:f1:52:
         df:8d:2f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:48:03 2025 by rpki-client