This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BEiNBxrYQsTCNbARtszLobzqyJ2ZqEbRg3sgBf1EhD3z/0/8DCCFA18685FECCC158E8F5C7931CA2DEF785A67.mft
File:                     8DCCFA18685FECCC158E8F5C7931CA2DEF785A67.mft (raw, json)
Hash identifier:          1mV4znaG5XmNBV9DDuiS5JRSqAXBkxdjlPejud72fXY=
Subject key identifier:   38:E3:74:0C:08:E5:DF:84:55:59:32:C7:44:D0:EC:68:1B:A0:17:60
Authority key identifier: 8D:CC:FA:18:68:5F:EC:CC:15:8E:8F:5C:79:31:CA:2D:EF:78:5A:67
Certificate issuer:       /CN=8DCCFA18685FECCC158E8F5C7931CA2DEF785A67
Certificate serial:       3E7C14D7D3D04A88918AF3548BADEF0173E403E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DCCFA18685FECCC158E8F5C7931CA2DEF785A67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BEiNBxrYQsTCNbARtszLobzqyJ2ZqEbRg3sgBf1EhD3z/0/8DCCFA18685FECCC158E8F5C7931CA2DEF785A67.mft
Manifest number:          02F7
Signing time:             Tue 30 Dec 2025 19:11:00 +0000
Manifest this update:     Tue 30 Dec 2025 19:06:00 +0000
Manifest next update:     Wed 31 Dec 2025 20:33:00 +0000
Files and hashes:         1: 323830343a363134633a3a2f33322d3438203d3e20323639323233.roa (hash: oKbUfkWzL2gP6Dxv9T3kozGvAmm6z/10U6ndvB/iUAM=)
                          2: 34352e3138322e3130382e302f32322d3234203d3e20323639323233.roa (hash: 491tAmS17BLwXyiDPYznZ2eVg3O1TqIr1MYgt1J0wgU=)
                          3: 8DCCFA18685FECCC158E8F5C7931CA2DEF785A67.crl (hash: VMc75maO+Xivys7FlSM99NFXuYj037Jnwhr9klsgTsI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BEiNBxrYQsTCNbARtszLobzqyJ2ZqEbRg3sgBf1EhD3z/0/8DCCFA18685FECCC158E8F5C7931CA2DEF785A67.crl
                          rsync://rpki-repo.registro.br/repo/BEiNBxrYQsTCNbARtszLobzqyJ2ZqEbRg3sgBf1EhD3z/0/8DCCFA18685FECCC158E8F5C7931CA2DEF785A67.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DCCFA18685FECCC158E8F5C7931CA2DEF785A67.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 31 Dec 2025 20:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:7c:14:d7:d3:d0:4a:88:91:8a:f3:54:8b:ad:ef:01:73:e4:03:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DCCFA18685FECCC158E8F5C7931CA2DEF785A67
        Validity
            Not Before: Dec 30 19:06:00 2025 GMT
            Not After : Dec 31 20:33:00 2025 GMT
        Subject: CN=38E3740C08E5DF84555932C744D0EC681BA01760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:10:98:b9:76:73:6a:15:7b:18:ce:3c:1b:93:
                    5b:01:39:42:73:f4:b8:63:4b:37:ea:b9:9b:0c:33:
                    f6:5d:db:46:c7:3c:83:5d:12:13:23:e8:19:d7:cf:
                    ac:8e:3d:34:51:9f:bd:63:7e:c4:eb:ea:71:3c:c5:
                    31:97:7d:f1:e1:55:2d:35:0d:30:bd:04:53:88:66:
                    2d:49:ce:d2:f5:a9:29:f7:c8:bf:b5:82:5f:47:5d:
                    fc:ea:f2:81:6e:cd:5b:3b:c2:a4:fd:6a:ad:b1:6d:
                    f9:a2:5c:8b:56:88:6a:19:89:53:fc:2f:eb:89:93:
                    ff:b5:ba:0a:6c:3d:45:84:d0:97:6b:01:a8:5f:63:
                    0c:bd:51:a2:f7:fe:e9:bf:4c:03:84:57:da:ea:01:
                    c7:7c:42:82:7d:a8:4f:a6:99:99:de:c3:2d:16:60:
                    7b:07:e8:27:a3:be:62:52:a5:92:92:f6:5c:6e:8f:
                    24:db:c8:4d:e5:28:69:92:83:8a:2d:19:15:d8:0f:
                    3a:e3:87:c9:ac:02:5f:cf:ff:7b:af:42:ed:84:93:
                    7d:75:49:f2:cc:88:b8:4e:45:90:77:bc:6f:2d:36:
                    93:ab:de:4d:64:b2:80:f5:c9:93:0e:12:00:bd:ac:
                    0e:15:a8:31:55:68:67:2e:76:74:62:c4:68:44:57:
                    5a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E3:74:0C:08:E5:DF:84:55:59:32:C7:44:D0:EC:68:1B:A0:17:60
            X509v3 Authority Key Identifier:
                keyid:8D:CC:FA:18:68:5F:EC:CC:15:8E:8F:5C:79:31:CA:2D:EF:78:5A:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BEiNBxrYQsTCNbARtszLobzqyJ2ZqEbRg3sgBf1EhD3z/0/8DCCFA18685FECCC158E8F5C7931CA2DEF785A67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DCCFA18685FECCC158E8F5C7931CA2DEF785A67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BEiNBxrYQsTCNbARtszLobzqyJ2ZqEbRg3sgBf1EhD3z/0/8DCCFA18685FECCC158E8F5C7931CA2DEF785A67.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:71:e8:bb:b3:37:28:ad:af:10:25:e0:2d:77:9d:d4:dd:70:
         2b:95:3d:71:53:75:fa:c9:55:5c:cf:64:8a:20:c6:43:24:56:
         61:aa:75:5c:70:bb:3d:72:b4:d8:9e:b7:f7:7a:1b:41:6f:ff:
         4c:b7:3c:c1:0b:d5:cd:7a:2b:db:51:01:56:f4:0e:d1:03:82:
         60:4f:d3:20:42:c1:6e:ca:31:41:78:f6:12:a7:87:7c:ca:0b:
         dd:f4:f8:04:ae:b0:92:aa:b4:0e:30:a6:34:75:25:c6:55:78:
         f0:f5:2a:be:00:79:3d:16:68:79:0a:7d:ab:91:06:64:ac:23:
         a0:ec:e5:cb:2b:f3:fd:6a:28:e8:58:88:f5:86:f2:4a:b9:e9:
         dc:48:08:c6:b5:7e:90:cb:c3:fa:df:1c:9d:18:a2:54:fe:cb:
         f2:3d:9a:d8:ae:45:e1:5a:a8:26:7d:26:cf:bb:a0:a4:ae:0c:
         f6:6a:2e:9a:a6:fd:d7:06:ee:99:14:f0:1e:90:62:a2:0a:25:
         c8:8a:05:fd:e1:e0:4e:5c:0d:0f:d9:fe:d3:5c:f1:b5:70:a6:
         d5:bd:51:f3:a5:09:51:d8:c7:be:85:68:99:9d:60:a7:41:f9:
         89:22:2f:cb:9f:89:bf:29:13:03:df:13:d0:b2:10:a2:b7:20:
         ad:b7:25:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 03:32:49 2025 by rpki-client