This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft
File:                     CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft (raw, json)
Hash identifier:          jw59WGOhmLDUj58WcQTE0xyZJhrZNhDfxG2VbgBYen4=
Subject key identifier:   54:5B:3E:D1:EE:77:45:3C:49:CB:52:0A:64:E5:21:97:F7:3C:AF:79
Authority key identifier: CF:C8:86:EC:4D:9F:2C:4A:31:EE:53:AC:15:71:4B:D4:E7:02:87:52
Certificate issuer:       /CN=CFC886EC4D9F2C4A31EE53AC15714BD4E7028752
Certificate serial:       2CF892E9C1C27DDC81D58879E0EFA7B758D1E0D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft
Manifest number:          010B
Signing time:             Fri 19 Dec 2025 22:38:15 +0000
Manifest this update:     Fri 19 Dec 2025 22:33:15 +0000
Manifest next update:     Sun 21 Dec 2025 01:16:15 +0000
Files and hashes:         1: CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.crl (hash: 5eOCbjVWdqWe35tLbjTajlvD+Zu2qpI29dSWggCtL4U=)
                          2: 323830343a326565633a3a2f33322d3438203d3e20323634383631.roa (hash: Pmd2oHMVN3RO65spy8KBeP91n4F+2uJwEIYTdWohKkU=)
                          3: 3136382e3230352e35322e302f32322d3234203d3e20323634383631.roa (hash: sszuikLyJCfK/q7HZ7Bf5gDMhQQ8QEhvjEDczDvmx9s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.crl
                          rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 01:16:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f8:92:e9:c1:c2:7d:dc:81:d5:88:79:e0:ef:a7:b7:58:d1:e0:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFC886EC4D9F2C4A31EE53AC15714BD4E7028752
        Validity
            Not Before: Dec 19 22:33:15 2025 GMT
            Not After : Dec 21 01:16:15 2025 GMT
        Subject: CN=545B3ED1EE77453C49CB520A64E52197F73CAF79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f7:d0:49:47:fa:73:c7:93:9f:68:ee:d8:b3:
                    a5:77:d1:7a:45:58:89:c0:9d:ac:75:7e:ec:d1:bf:
                    57:26:bf:b9:a2:84:fe:40:a9:ec:63:e0:c4:e0:e1:
                    45:7d:d4:f8:09:d5:27:31:3c:34:86:99:3a:a2:ce:
                    5f:18:37:c4:e4:69:e6:22:70:a2:6b:1e:df:db:1c:
                    cd:32:8f:bc:8e:78:48:ba:cd:47:89:4e:59:de:e5:
                    bb:08:85:1e:24:05:3b:8e:2b:d6:37:b0:35:96:14:
                    fc:c7:30:d5:73:88:27:cb:62:70:e8:a4:3c:8b:3f:
                    dd:00:39:22:c7:bd:39:e0:10:d0:d5:be:83:b5:ab:
                    de:39:10:f2:5c:10:65:60:0e:07:08:ac:00:d4:7f:
                    81:8b:38:3d:2a:49:bb:c2:2d:29:fd:d6:7c:42:75:
                    23:1b:d9:ad:d6:81:e4:3c:39:04:0f:bc:ba:47:e6:
                    0e:c5:c4:ca:7b:2e:89:46:8a:b9:48:7d:ca:ee:d3:
                    5f:48:f4:3a:90:8a:93:35:17:12:ea:69:f9:4a:74:
                    b8:60:4d:7a:09:34:3e:26:b9:4f:ae:d5:f0:4e:eb:
                    11:42:99:2e:ca:51:59:f1:90:d2:db:0a:cb:a2:ad:
                    a3:57:ae:16:d2:12:a4:dd:be:ee:99:b9:8d:07:31:
                    93:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:5B:3E:D1:EE:77:45:3C:49:CB:52:0A:64:E5:21:97:F7:3C:AF:79
            X509v3 Authority Key Identifier:
                keyid:CF:C8:86:EC:4D:9F:2C:4A:31:EE:53:AC:15:71:4B:D4:E7:02:87:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:b8:30:d8:66:34:1c:14:0f:47:94:33:ee:b7:5c:35:6f:ab:
         cc:cd:76:36:96:08:a4:98:e9:94:61:f7:c7:00:97:24:cf:8b:
         89:1a:a8:c8:3c:1a:5e:ca:cb:0a:4f:32:47:4e:35:5b:99:43:
         30:8e:7d:03:90:c9:35:fc:cc:2b:b7:1f:0f:71:ba:d0:03:7e:
         90:21:81:2c:db:be:6a:ce:28:d1:ab:16:d8:ae:be:00:46:ec:
         39:7b:63:40:7d:74:fd:5d:50:5d:c9:20:fd:0f:a9:e8:1f:08:
         0b:98:d9:87:ca:97:a8:68:47:fe:62:0c:b7:65:d3:81:02:8e:
         a8:a7:e7:a1:c6:a5:ea:09:0e:fc:69:26:90:d0:ec:af:fe:f0:
         1a:07:cf:b5:64:19:29:cc:d8:ad:32:48:5d:fd:14:a2:54:e1:
         e9:bc:37:8b:21:44:bc:06:62:75:62:46:8d:ce:61:72:61:bc:
         58:48:09:0a:1a:84:5b:cf:af:5d:5b:52:12:45:23:20:55:58:
         37:98:47:cb:0d:cb:71:72:7a:fd:1c:53:4a:c3:60:4f:00:3d:
         a1:3e:8c:ca:c6:36:34:7f:d1:da:79:f5:8e:07:4d:b3:9f:67:
         d9:61:c3:fc:70:05:a6:c6:c7:b5:64:a6:4d:a0:28:af:0f:e6:
         52:ed:fd:2e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULPiS6cHCfdyB1Yh54O+nt1jR4NIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0ZDODg2RUM0RDlGMkM0QTMxRUU1M0FDMTU3MTRCRDRF
NzAyODc1MjAeFw0yNTEyMTkyMjMzMTVaFw0yNTEyMjEwMTE2MTVaMDMxMTAvBgNV
BAMTKDU0NUIzRUQxRUU3NzQ1M0M0OUNCNTIwQTY0RTUyMTk3RjczQ0FGNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg99BJR/pzx5OfaO7Ys6V30XpF
WInAnax1fuzRv1cmv7mihP5Aqexj4MTg4UV91PgJ1ScxPDSGmTqizl8YN8TkaeYi
cKJrHt/bHM0yj7yOeEi6zUeJTlne5bsIhR4kBTuOK9Y3sDWWFPzHMNVziCfLYnDo
pDyLP90AOSLHvTngENDVvoO1q945EPJcEGVgDgcIrADUf4GLOD0qSbvCLSn91nxC
dSMb2a3WgeQ8OQQPvLpH5g7FxMp7LolGirlIfcru019I9DqQipM1FxLqaflKdLhg
TXoJND4muU+u1fBO6xFCmS7KUVnxkNLbCsuiraNXrhbSEqTdvu6ZuY0HMZORAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUVFs+0e53RTxJy1IKZOUhl/c8r3kwHwYDVR0j
BBgwFoAUz8iG7E2fLEox7lOsFXFL1OcCh1IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUJ0b2F0UDY4RWRKeWd0U1hobUdKNUFQSFJ0czlYNDVETUdKSlNZV2Q4
U0wvMC9DRkM4ODZFQzREOUYyQzRBMzFFRTUzQUMxNTcxNEJENEU3MDI4NzUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGQzg4NkVDNEQ5RjJDNEEz
MUVFNTNBQzE1NzE0QkQ0RTcwMjg3NTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OUJ0b2F0UDY4RWRKeWd0U1hobUdKNUFQSFJ0czlYNDVETUdKSlNZV2Q4U0wvMC9D
RkM4ODZFQzREOUYyQzRBMzFFRTUzQUMxNTcxNEJENEU3MDI4NzUyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAL7gw2GY0HBQPR5Qz7rdcNW+rzM12NpYIpJjplGH3xwCXJM+LiRqoyDwaXsrL
Ck8yR041W5lDMI59A5DJNfzMK7cfD3G60AN+kCGBLNu+as4o0asW2K6+AEbsOXtj
QH10/V1QXckg/Q+p6B8IC5jZh8qXqGhH/mIMt2XTgQKOqKfnocal6gkO/GkmkNDs
r/7wGgfPtWQZKczYrTJIXf0UolTh6bw3iyFEvAZidWJGjc5hcmG8WEgJChqEW8+v
XVtSEkUjIFVYN5hHyw3LcXJ6/RxTSsNgTwA9oT6MysY2NH/R2nn1jgdNs59n2WHD
/HAFpsbHtWSmTaAorw/mUu39Lg==
-----END CERTIFICATE-----
Generated at Sat Dec 20 12:58:08 2025 by rpki-client