This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/FDB293D8646ACB35E10785D8B748695F452A1DC2.mft
File:                     FDB293D8646ACB35E10785D8B748695F452A1DC2.mft (raw, json)
Hash identifier:          MkoprFzDtesd/ztPaob2jpQaAd4Qo/+FXxsY3D7FiT0=
Subject key identifier:   9C:81:79:72:F7:37:91:20:CE:E0:DB:F7:09:4D:64:C8:F7:02:84:E9
Authority key identifier: FD:B2:93:D8:64:6A:CB:35:E1:07:85:D8:B7:48:69:5F:45:2A:1D:C2
Certificate issuer:       /CN=FDB293D8646ACB35E10785D8B748695F452A1DC2
Certificate serial:       74A8396DF31EB6FD02B302C16B587877C6EC5416
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDB293D8646ACB35E10785D8B748695F452A1DC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/FDB293D8646ACB35E10785D8B748695F452A1DC2.mft
Manifest number:          0287
Signing time:             Thu 25 Dec 2025 00:41:17 +0000
Manifest this update:     Thu 25 Dec 2025 00:36:17 +0000
Manifest next update:     Fri 26 Dec 2025 03:07:17 +0000
Files and hashes:         1: 3230302e392e3232302e302f32322d3234203d3e20323632343538.roa (hash: qWwteUwuGwJ0ND9/alnNykGDt+ikwykr3fOizpbCz3I=)
                          2: 323830343a3461633a3a2f33322d3332203d3e20323632343538.roa (hash: jV3LTzhNcCe4J2+Az0Sjk0NtDOt/LC8m5u2QHVsDkTA=)
                          3: 3137372e35332e34382e302f32312d3234203d3e20323632343538.roa (hash: YVE7NH+mdIYF4qQ3TLI6q0p7hQ4d2SL2VdI0yLkk6f0=)
                          4: FDB293D8646ACB35E10785D8B748695F452A1DC2.crl (hash: BHscvK2wnCtSk5YlZvfIx27DgSu4DPZBRAUUeyHRcoc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/FDB293D8646ACB35E10785D8B748695F452A1DC2.crl
                          rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/FDB293D8646ACB35E10785D8B748695F452A1DC2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDB293D8646ACB35E10785D8B748695F452A1DC2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 26 Dec 2025 03:07:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a8:39:6d:f3:1e:b6:fd:02:b3:02:c1:6b:58:78:77:c6:ec:54:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDB293D8646ACB35E10785D8B748695F452A1DC2
        Validity
            Not Before: Dec 25 00:36:17 2025 GMT
            Not After : Dec 26 03:07:17 2025 GMT
        Subject: CN=9C817972F7379120CEE0DBF7094D64C8F70284E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6c:c5:5d:77:c4:cb:a6:f6:96:82:74:ea:ef:
                    a9:b1:ed:d0:73:08:2e:ed:7d:14:40:4f:f2:b0:ab:
                    36:00:f1:9f:00:ef:b1:59:e8:27:c1:68:00:12:02:
                    f8:8c:29:86:42:a3:d1:d9:c7:9c:cb:b4:6a:7d:49:
                    81:12:11:52:12:24:91:66:e9:73:8c:d6:b6:ea:a2:
                    41:e1:37:65:65:57:7d:35:59:80:94:9b:e2:0c:f9:
                    7b:69:d1:62:30:e0:31:72:03:fa:a5:3b:da:31:b8:
                    31:6e:94:25:75:37:48:9f:46:d3:9c:8c:f5:ce:a0:
                    cd:50:54:82:3d:33:48:9c:3a:90:e1:43:e9:7b:4b:
                    7c:ed:ce:14:df:fc:b8:a5:5c:62:ee:2e:fe:53:9c:
                    25:1e:12:09:78:6c:fe:0c:12:17:b2:be:2a:f7:d5:
                    ec:b1:ed:9a:7c:25:9c:38:14:e1:e1:db:24:b9:de:
                    17:04:b6:5c:ab:1a:16:0d:55:cd:cb:04:e1:cf:8b:
                    0e:73:a1:cb:2c:6c:29:e8:8a:4e:13:31:e6:ee:4c:
                    6e:e5:4a:a4:06:1e:03:a5:63:52:ce:64:f1:42:72:
                    b2:09:b3:d6:de:94:44:e6:cc:89:e7:84:62:8e:0e:
                    77:67:07:e9:f0:70:b6:b2:ed:51:c4:36:80:a3:b7:
                    ff:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:81:79:72:F7:37:91:20:CE:E0:DB:F7:09:4D:64:C8:F7:02:84:E9
            X509v3 Authority Key Identifier:
                keyid:FD:B2:93:D8:64:6A:CB:35:E1:07:85:D8:B7:48:69:5F:45:2A:1D:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/FDB293D8646ACB35E10785D8B748695F452A1DC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDB293D8646ACB35E10785D8B748695F452A1DC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/FDB293D8646ACB35E10785D8B748695F452A1DC2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:ff:fc:3c:de:3d:96:f2:40:e2:38:35:bd:a2:63:84:f3:28:
         8d:bb:73:33:ca:3a:ab:b0:80:98:a7:01:32:a7:b3:d5:bc:45:
         41:9d:40:30:77:c2:af:09:e8:eb:08:17:55:89:d7:b2:ab:67:
         2a:df:24:18:6f:fd:61:40:d8:0b:39:d3:83:1d:62:51:08:1c:
         65:a0:ea:ec:66:6e:5f:4e:4c:36:0e:9e:20:3a:b6:73:b6:0c:
         81:90:84:ff:2c:a5:0e:8f:13:c5:f1:47:5a:ed:4b:6a:6b:b9:
         c1:49:1a:29:9e:24:35:cb:b6:69:0a:27:38:36:da:26:77:35:
         b8:b6:24:30:1b:a9:8d:c4:8f:ae:50:ae:ca:28:aa:ca:97:b8:
         7d:50:ef:00:6b:18:6d:97:33:3f:45:25:69:f9:e9:4e:aa:62:
         ed:a0:ae:76:1a:8f:7d:ac:4b:64:9e:d6:24:59:d8:f9:5b:b2:
         f8:1b:9b:c9:44:fc:9c:7a:4d:85:4a:05:b4:42:c3:61:a4:bf:
         91:aa:f0:24:b9:3a:c1:6a:6a:e1:5d:fa:56:b7:5b:4f:3c:1e:
         af:6a:6a:fa:02:78:d0:ab:41:bf:c7:0f:00:d4:f4:9d:ab:94:
         f8:11:bf:fe:c1:31:5c:1d:2d:11:9a:cc:04:90:77:0d:82:0d:
         65:d2:1a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 12:51:15 2025 by rpki-client