This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/7ABC8468E5758989936DBE8D1F4AAB06B9B34867.mft
File:                     7ABC8468E5758989936DBE8D1F4AAB06B9B34867.mft (raw, json)
Hash identifier:          hH5xo/3LAz727vLYfX2riGs4F4no2iVp5DhuuBFDa9A=
Subject key identifier:   34:0E:4B:90:5F:A8:37:9C:BE:85:E4:11:BC:73:47:63:05:B8:8C:64
Authority key identifier: 7A:BC:84:68:E5:75:89:89:93:6D:BE:8D:1F:4A:AB:06:B9:B3:48:67
Certificate issuer:       /CN=7ABC8468E5758989936DBE8D1F4AAB06B9B34867
Certificate serial:       2CAE24503D69D86F55661B82DE13A53036A3ED76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABC8468E5758989936DBE8D1F4AAB06B9B34867.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/7ABC8468E5758989936DBE8D1F4AAB06B9B34867.mft
Manifest number:          0255
Signing time:             Sat 20 Dec 2025 09:50:21 +0000
Manifest this update:     Sat 20 Dec 2025 09:45:21 +0000
Manifest next update:     Sun 21 Dec 2025 09:57:21 +0000
Files and hashes:         1: 34352e3233322e3135362e302f32322d3332203d3e20323637323730.roa (hash: hj97DHQ5JDyGIOtWbdcL0G3x1ZxdJtfHiP8S1jW1ZJs=)
                          2: 7ABC8468E5758989936DBE8D1F4AAB06B9B34867.crl (hash: ARjHCeiK0ZKfJGYk6tHoAh4QO5EPP06K19DivbwjNZY=)
                          3: 323830343a346165343a3a2f33322d313238203d3e20323637323730.roa (hash: 288ogYZMAR9QJphd0axUKi64bXA0iFqxUm8s3TGO0Iw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/7ABC8468E5758989936DBE8D1F4AAB06B9B34867.crl
                          rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/7ABC8468E5758989936DBE8D1F4AAB06B9B34867.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABC8468E5758989936DBE8D1F4AAB06B9B34867.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 09:57:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ae:24:50:3d:69:d8:6f:55:66:1b:82:de:13:a5:30:36:a3:ed:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ABC8468E5758989936DBE8D1F4AAB06B9B34867
        Validity
            Not Before: Dec 20 09:45:21 2025 GMT
            Not After : Dec 21 09:57:21 2025 GMT
        Subject: CN=340E4B905FA8379CBE85E411BC73476305B88C64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fa:f7:ac:22:ee:ad:3d:95:d7:02:15:57:8d:
                    17:44:76:d0:51:c4:32:e9:c8:fe:b2:71:dc:67:0e:
                    98:cd:78:93:e5:0e:78:8c:a0:9f:e2:cf:79:3a:52:
                    14:d6:be:7d:09:d2:0a:9d:2f:e3:82:6f:47:44:e1:
                    6f:dc:d5:28:9e:45:0f:68:85:60:c7:f1:d7:31:cf:
                    51:c0:a9:23:fd:88:bd:f2:ad:76:49:67:97:72:9c:
                    c1:76:63:40:fd:a4:6f:b5:78:1e:b8:d4:ff:93:9c:
                    04:e0:2b:c3:fc:f1:16:a4:ff:48:6a:bf:9d:ba:78:
                    e3:db:f1:13:b6:06:ad:51:71:ea:0d:97:0d:3e:af:
                    7c:2d:c8:c9:4e:67:e9:1b:f8:29:9d:e1:09:34:60:
                    05:09:00:3c:9d:99:24:40:5a:30:1f:49:74:72:15:
                    46:15:33:49:3c:a9:2c:09:a1:9a:2c:d0:36:ae:2c:
                    f7:3a:92:ad:8f:a7:b6:2c:d2:7f:b0:bb:9c:21:bc:
                    95:67:f5:ff:35:58:96:2e:44:08:ce:65:53:85:40:
                    2e:6b:85:2c:1a:5d:43:c9:46:ff:13:98:78:33:71:
                    55:0d:41:d4:d5:65:13:8c:e3:9f:09:b2:53:12:18:
                    23:d8:36:ef:85:16:75:e7:9d:e8:ce:fc:68:02:8c:
                    26:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:0E:4B:90:5F:A8:37:9C:BE:85:E4:11:BC:73:47:63:05:B8:8C:64
            X509v3 Authority Key Identifier:
                keyid:7A:BC:84:68:E5:75:89:89:93:6D:BE:8D:1F:4A:AB:06:B9:B3:48:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/7ABC8468E5758989936DBE8D1F4AAB06B9B34867.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABC8468E5758989936DBE8D1F4AAB06B9B34867.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/7ABC8468E5758989936DBE8D1F4AAB06B9B34867.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:c1:19:b1:c7:79:e2:27:17:68:4e:19:ff:83:ce:3c:91:e0:
         6d:6d:6c:ba:fc:b1:ed:a6:ff:bd:88:dc:f0:b7:55:b8:73:47:
         f9:e7:fd:2b:ce:be:72:e9:15:5d:30:08:bb:61:82:a4:00:42:
         c4:5b:da:7c:d4:19:af:88:cd:9c:6c:bd:6b:08:6d:89:0d:e4:
         83:26:c2:25:65:b1:23:b8:79:bb:56:54:0e:87:b7:80:2d:57:
         ba:a4:3c:6b:89:5e:5e:ff:b9:7d:50:9e:b0:33:8a:51:0d:c3:
         81:72:75:62:14:0f:bf:4e:65:fd:88:74:42:c7:e4:c8:20:60:
         3a:00:18:75:f4:45:60:1a:a3:24:91:35:79:b8:b9:ce:3d:d6:
         f3:0e:85:23:fb:71:11:c3:fe:35:79:07:92:f9:ee:74:3a:f5:
         15:a6:c1:f6:3a:de:80:60:fb:27:85:9b:36:88:ac:e9:4d:b0:
         43:b1:e4:a0:bb:76:4a:80:0d:71:e8:e3:7c:17:12:2a:f3:8a:
         b5:68:d9:f9:9d:d8:dc:5b:ee:35:2c:05:55:83:7c:1f:57:cd:
         d6:9a:c1:dd:5b:df:28:58:e9:ab:48:ac:2f:25:56:4e:36:ac:
         bb:fa:97:74:2c:fc:e4:21:c8:a7:f7:49:29:17:18:93:92:bf:
         01:9a:42:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULK4kUD1p2G9VZhuC3hOlMDaj7XYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0FCQzg0NjhFNTc1ODk4OTkzNkRCRThEMUY0QUFCMDZC
OUIzNDg2NzAeFw0yNTEyMjAwOTQ1MjFaFw0yNTEyMjEwOTU3MjFaMDMxMTAvBgNV
BAMTKDM0MEU0QjkwNUZBODM3OUNCRTg1RTQxMUJDNzM0NzYzMDVCODhDNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/+vesIu6tPZXXAhVXjRdEdtBR
xDLpyP6ycdxnDpjNeJPlDniMoJ/iz3k6UhTWvn0J0gqdL+OCb0dE4W/c1SieRQ9o
hWDH8dcxz1HAqSP9iL3yrXZJZ5dynMF2Y0D9pG+1eB641P+TnATgK8P88Rak/0hq
v526eOPb8RO2Bq1RceoNlw0+r3wtyMlOZ+kb+Cmd4Qk0YAUJADydmSRAWjAfSXRy
FUYVM0k8qSwJoZos0DauLPc6kq2Pp7Ys0n+wu5whvJVn9f81WJYuRAjOZVOFQC5r
hSwaXUPJRv8TmHgzcVUNQdTVZROM458JslMSGCPYNu+FFnXnnejO/GgCjCaPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUNA5LkF+oN5y+heQRvHNHYwW4jGQwHwYDVR0j
BBgwFoAUeryEaOV1iYmTbb6NH0qrBrmzSGcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWp2VWhhc3haWkxCeW5Qb0EydGVhTnVqVmI4bXZxbmdxd1ozWTJwS2ll
Rk4vMC83QUJDODQ2OEU1NzU4OTg5OTM2REJFOEQxRjRBQUIwNkI5QjM0ODY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdBQkM4NDY4RTU3NTg5ODk5
MzZEQkU4RDFGNEFBQjA2QjlCMzQ4NjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OWp2VWhhc3haWkxCeW5Qb0EydGVhTnVqVmI4bXZxbmdxd1ozWTJwS2llRk4vMC83
QUJDODQ2OEU1NzU4OTg5OTM2REJFOEQxRjRBQUIwNkI5QjM0ODY3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZsEZscd54icXaE4Z/4POPJHgbW1suvyx7ab/vYjc8LdVuHNH+ef9K86+cukV
XTAIu2GCpABCxFvafNQZr4jNnGy9awhtiQ3kgybCJWWxI7h5u1ZUDoe3gC1XuqQ8
a4leXv+5fVCesDOKUQ3DgXJ1YhQPv05l/Yh0QsfkyCBgOgAYdfRFYBqjJJE1ebi5
zj3W8w6FI/txEcP+NXkHkvnudDr1FabB9jregGD7J4WbNois6U2wQ7HkoLt2SoAN
cejjfBcSKvOKtWjZ+Z3Y3FvuNSwFVYN8H1fN1prB3VvfKFjpq0isLyVWTjasu/qX
dCz85CHIp/dJKRcYk5K/AZpCdQ==
-----END CERTIFICATE-----
Generated at Sat Dec 20 16:52:15 2025 by rpki-client