This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.mft
File:                     F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.mft (raw, json)
Hash identifier:          U1ptl0NCBHWzNo6/KQFb9O4pzMy6DLB8hzKriJFafSw=
Subject key identifier:   FF:27:B7:92:B5:4B:B2:43:67:F7:32:F7:7C:4B:F8:C0:45:1A:C4:4B
Authority key identifier: F6:85:5C:37:8F:9C:9C:A3:71:CE:AA:34:0A:9F:CB:F4:8F:C9:DF:A2
Certificate issuer:       /CN=F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2
Certificate serial:       436BD71990506AD259712F779339ACE987C3BB50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.mft
Manifest number:          024C
Signing time:             Sun 21 Dec 2025 16:19:16 +0000
Manifest this update:     Sun 21 Dec 2025 16:14:16 +0000
Manifest next update:     Mon 22 Dec 2025 18:16:16 +0000
Files and hashes:         1: 3138392e38352e3134342e302f32302d3332203d3e203238333035.roa (hash: CX/cj410Z6WPwJMrud8he6flcqEqe568hjn5TZSbfVs=)
                          2: 3138392e33392e39362e302f32302d3332203d3e203238333035.roa (hash: VDrfAwL3Ri73wmHCCBTJ8HFlRF9Bay2CAlDSTwJLpoI=)
                          3: 323830343a323839383a3a2f33322d313238203d3e203238333035.roa (hash: QgzU9rceU0pX2SIMJeO4ViSomBaMzkZwR8ail6IEh6I=)
                          4: F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.crl (hash: AbLDjvWOpppMNte4dfPD4c2v4itKbbkcDIQ3CjggLgo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.crl
                          rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 18:16:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:6b:d7:19:90:50:6a:d2:59:71:2f:77:93:39:ac:e9:87:c3:bb:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2
        Validity
            Not Before: Dec 21 16:14:16 2025 GMT
            Not After : Dec 22 18:16:16 2025 GMT
        Subject: CN=FF27B792B54BB24367F732F77C4BF8C0451AC44B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bb:09:9d:4f:49:7b:88:30:fc:41:4a:e5:47:
                    64:41:32:b2:b7:1c:ce:9a:6c:54:b1:f4:63:99:0a:
                    72:99:5e:31:ab:d5:b1:a4:2a:20:8f:37:65:ab:40:
                    7b:86:39:d8:14:bf:fc:ad:ef:0a:bb:34:ca:7d:70:
                    36:b4:e8:3a:b6:74:99:8b:e3:cd:3a:42:60:e4:d9:
                    5b:a8:18:f7:0b:05:8d:77:d4:d1:15:ec:f8:f9:1b:
                    01:d6:b3:40:f0:0a:24:00:98:d0:46:1c:90:94:07:
                    f1:70:a7:18:74:04:c5:40:80:c1:c9:0e:22:a9:f2:
                    d1:e3:b4:a7:8c:07:fb:0e:c6:48:bf:24:94:39:11:
                    6a:e3:9e:8f:91:b2:f1:c4:1d:7e:69:48:74:09:4a:
                    97:c0:76:e4:43:af:18:8b:0a:93:ce:6b:a4:b1:ec:
                    1a:e3:4e:6d:04:5a:c0:d6:68:dd:5e:5d:0e:ae:6f:
                    d7:76:ac:3b:40:95:7f:c7:e8:c6:28:9a:e4:ed:73:
                    8e:96:3e:0a:67:d9:19:ca:e2:23:29:19:59:76:36:
                    1f:96:38:c2:29:3e:ef:2e:05:ae:5b:be:c9:e8:b5:
                    98:eb:a8:93:24:6c:39:f2:91:63:d8:a9:a7:f8:79:
                    6a:e0:59:08:87:d2:08:4c:6e:7a:e9:f8:fb:d0:33:
                    c9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:27:B7:92:B5:4B:B2:43:67:F7:32:F7:7C:4B:F8:C0:45:1A:C4:4B
            X509v3 Authority Key Identifier:
                keyid:F6:85:5C:37:8F:9C:9C:A3:71:CE:AA:34:0A:9F:CB:F4:8F:C9:DF:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:26:e5:36:90:11:ec:16:78:97:16:ab:ea:66:70:6c:5c:82:
         0c:d3:43:f7:f5:07:92:24:ac:94:0d:a0:08:8f:8c:68:0f:e9:
         c8:db:7f:f6:94:1d:66:bd:bc:8c:95:b0:f7:f7:db:85:a6:62:
         57:b9:f0:8c:ac:fa:aa:45:91:6a:ea:36:54:9d:28:69:36:f3:
         c6:89:15:9c:6d:df:ba:af:84:35:04:87:d0:98:b8:59:72:cc:
         d3:4e:30:69:e4:39:45:f6:d3:4e:fc:39:43:f9:48:d1:5c:3c:
         33:7a:23:cc:fc:2b:4e:41:77:fe:1c:de:22:48:fa:c0:be:67:
         da:95:d6:a9:b3:1a:48:ca:fa:55:32:53:55:8f:ac:f8:16:85:
         be:b0:55:f2:8e:8d:b6:7b:1c:de:19:6a:83:bc:19:fb:1a:3e:
         57:ae:91:1c:2e:d4:a1:0f:31:81:00:13:87:bd:88:32:bf:1d:
         31:23:5c:ce:6a:cb:eb:0b:c2:7b:b9:76:89:b1:2a:c2:5e:ea:
         b3:af:08:c9:c5:23:75:69:03:7f:cf:7c:51:d9:f1:35:bd:61:
         cc:78:d9:25:95:8e:7d:80:33:5d:4a:dd:27:9c:36:1b:fb:cf:
         32:ca:2e:4b:56:d3:d9:c1:fe:e2:cc:0a:03:3a:50:17:90:43:
         bc:a0:de:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 09:45:33 2025 by rpki-client