This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft
File:                     21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft (raw, json)
Hash identifier:          pZ4R0KHRg3gSDJnJ5BKp7HfejJxQaDztEA0wcP0VG2A=
Subject key identifier:   C4:A9:1F:8D:9A:C7:83:DB:D2:E6:5F:FC:04:EA:DF:3F:20:D2:40:90
Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
Certificate issuer:       /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Certificate serial:       4C944D742B5020D4FA9FBA6C4209C19A7F1B61B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft
Manifest number:          01A1
Signing time:             Tue 30 Dec 2025 14:56:02 +0000
Manifest this update:     Tue 30 Dec 2025 14:51:02 +0000
Manifest next update:     Wed 31 Dec 2025 15:46:02 +0000
Files and hashes:         1: 323830343a323734383a3a2f33322d3332203d3e20323633383931.roa (hash: MO6euXOe3+e/c5Y8E5tznHMe0mpIDKm2mZmkPoTVZII=)
                          2: 3137302e37382e3136332e302f32342d3234203d3e20323633383931.roa (hash: 7xYxxrOSzrS8k5y97eIDahGvI9CFe6PC4Z6wgywaHcA=)
                          3: 323830343a323734383a3a2f33342d3334203d3e20323633383931.roa (hash: P72Vo0+btTdKLtZrwM6d6w1d0tSzgvKj3HQWGsIM80w=)
                          4: 323830343a323734383a3a2f33332d3333203d3e20323633383931.roa (hash: 2PavSs/XlyAnstVNXVfHqNUh15pZH0dOS5gkVJPXKtM=)
                          5: 21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl (hash: IZJhCMerJEHQMmgJk6oCtTUtUU0w13KteNXJleUesnU=)
                          6: 3133382e3230342e34392e302f32342d3234203d3e20323633383931.roa (hash: fnh0ESskr/VjHvCeSJYSJ+yhqrvpgXqsJ2QHzdbAUrc=)
                          7: 323830343a323734383a383030303a3a2f33332d3333203d3e20323633383931.roa (hash: ZeYgp7BvXvd74/k48bnu+qRITehFL0rvHom26iEGLjk=)
                          8: 3137302e37382e3136302e302f32332d3233203d3e20323633383931.roa (hash: nIftzw3+iZpcDi7LXAU8XgDFUdrkMrxxET01lz87b78=)
                          9: 3137302e37382e3136322e302f32332d3233203d3e20323633383931.roa (hash: j7yRviWUtBR47diRRZQSwOhBel2iKKRcdCzb2LcKh5U=)
                          10: 3133382e3230342e35302e302f32342d3234203d3e20323633383931.roa (hash: 5qYxf8RXkN8h2eEpN2bZTKCxHdo3reMiK56wr54VAQM=)
                          11: 3137302e37382e3136302e302f32322d3232203d3e20323633383931.roa (hash: HpEEDz0SGmZuCTiB2WRYUvaYO0gVRzUCdu5824wi6Ew=)
                          12: 3133382e3230342e34382e302f32332d3233203d3e20323633383931.roa (hash: zbCbYNA/Sv7aeTAlT2UCgGMCCpHHDrdhHwaAb6T7RlA=)
                          13: 3137302e37382e3136322e302f32342d3234203d3e20323633383931.roa (hash: HDx54wdTXW76T09og51BV5Z57Cx2GSP0rNDysCobcg4=)
                          14: 3133382e3230342e34382e302f32342d3234203d3e20323633383931.roa (hash: R241NIE5eErEAQdwLYr0SIplvpzgtNrTTFwlfX2dXfY=)
                          15: 323830343a323734383a343030303a3a2f33342d3334203d3e20323633383931.roa (hash: /1pYXUGiJNlzcrDlu+7hGgbwVbBdHLvZnAiIEDJ3mgY=)
                          16: 3133382e3230342e35312e302f32342d3234203d3e20323633383931.roa (hash: 2R2Rf6MPjaw0vHm+MKMheF1N2EcLNQp7FDpH/+osnZs=)
                          17: 323830343a323734383a383030303a3a2f33342d3334203d3e20323633383931.roa (hash: M5gd/5b8yphWCNw+C9KUG3jIlSUAJO8pUTrE9dAxLXI=)
                          18: 323830343a323734383a633030303a3a2f33342d3334203d3e20323633383931.roa (hash: FVJlg76zsiFIfRzwHjWJZAiSFiMl0j2j2H/CwENa5OQ=)
                          19: 3137302e37382e3136312e302f32342d3234203d3e20323633383931.roa (hash: hTxBNdPsHdR1pRLMbwfTzlRUFGvMXwjPrS7ZVuQLTBI=)
                          20: 3133382e3230342e35302e302f32332d3233203d3e20323633383931.roa (hash: 87P4ZthL45ryd5ao/4BROx3S+QtsOjAMhagAkYjLUrs=)
                          21: 3137302e37382e3136302e302f32342d3234203d3e20323633383931.roa (hash: YSeBPg2lex9h3YRA+gBpl4SonB4GrQPdQMUbhsffoPg=)
                          22: 3133382e3230342e34382e302f32322d3232203d3e20323633383931.roa (hash: I7xu8XqiplgU4PCcvipFhnLFR9uYEyMAQwYnkk8pujw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl
                          rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 31 Dec 2025 15:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:94:4d:74:2b:50:20:d4:fa:9f:ba:6c:42:09:c1:9a:7f:1b:61:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
        Validity
            Not Before: Dec 30 14:51:02 2025 GMT
            Not After : Dec 31 15:46:02 2025 GMT
        Subject: CN=C4A91F8D9AC783DBD2E65FFC04EADF3F20D24090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:40:ec:92:da:04:c0:a2:c4:5e:a1:3c:64:96:
                    62:c7:03:8e:3a:b3:0c:2d:9b:b4:e6:24:9a:93:75:
                    10:c7:5d:3e:69:44:3c:9b:1f:16:de:e2:50:38:c3:
                    aa:e9:75:f4:a1:48:23:4e:d7:d4:f4:6f:9b:57:de:
                    1d:3f:d9:26:2c:a8:0c:21:0c:04:3c:78:1c:83:d9:
                    c5:88:17:a9:d6:62:3a:ec:e5:89:05:98:df:7e:f0:
                    10:31:33:4b:5a:20:30:05:a4:82:d5:29:33:4f:99:
                    3a:20:be:b1:37:65:50:d1:bf:67:3b:2b:00:da:8c:
                    67:77:1a:45:c4:94:6a:9e:98:32:e7:9a:68:60:1a:
                    99:0a:80:82:fb:74:d7:05:d7:80:85:5f:f6:9c:2e:
                    c1:25:a4:f6:6a:5e:82:39:2b:dc:29:5c:e5:ca:15:
                    7d:a0:de:5a:50:0c:d7:4d:43:2b:bd:ec:86:5e:71:
                    45:bb:17:f8:80:2f:6c:98:db:24:2b:10:d0:b8:e9:
                    79:42:1c:f1:4c:5c:42:1f:72:94:c3:61:ed:6a:97:
                    a1:39:a9:fe:6f:d8:c9:e2:54:10:b9:82:10:40:7d:
                    fc:3f:d1:52:8e:8f:6a:ca:ef:db:25:42:ca:5d:21:
                    19:9e:67:27:a5:7f:3c:3f:f8:2a:9c:76:1f:44:ff:
                    8f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A9:1F:8D:9A:C7:83:DB:D2:E6:5F:FC:04:EA:DF:3F:20:D2:40:90
            X509v3 Authority Key Identifier:
                keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:46:e9:9a:e8:5a:d0:77:7a:0c:35:b2:45:d3:51:0a:e4:bd:
         3d:77:bb:00:9d:ef:e7:77:d3:5e:dc:2c:33:d2:a7:44:32:3b:
         8e:ad:29:3f:ae:e8:41:76:20:06:25:f0:12:3f:e9:91:96:9b:
         49:a3:2c:1a:2e:45:c8:b9:b9:54:67:9b:cf:cc:ab:20:43:33:
         a7:18:04:50:9b:18:6c:49:2f:fe:56:d8:37:10:f8:a4:fa:a4:
         c0:37:2d:bf:fd:ab:57:cd:c8:b5:36:57:04:41:1a:e8:58:ce:
         0b:50:32:9f:d4:e0:98:36:62:e0:35:86:47:ee:b2:25:d7:20:
         0b:2d:32:69:ec:32:81:c5:88:16:99:fe:cc:62:f6:1d:b2:94:
         f0:25:1e:a7:57:99:0f:75:1a:fd:35:19:35:8a:cc:59:0f:8f:
         2f:35:48:1d:1b:54:65:ee:b3:de:f3:33:19:36:43:46:2f:90:
         3f:b2:4a:89:3c:8e:06:8c:be:80:22:44:ad:56:ec:9f:88:75:
         12:6c:21:74:12:b7:4c:13:5b:f6:59:bb:80:b9:fd:a7:54:52:
         8f:20:ee:63:ea:87:ab:0b:71:0f:27:33:1e:b1:b4:a6:f3:38:
         2c:00:c5:fb:e7:e2:19:fd:be:c2:85:08:4f:71:e7:07:84:1b:
         a3:a5:c5:92
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTJRNdCtQINT6n7psQgnBmn8bYbIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFFOTRFMUU4REVDMUI4MkE5QjJGRDEzODExNTQ5NkYx
QjAyRjM5MDAeFw0yNTEyMzAxNDUxMDJaFw0yNTEyMzExNTQ2MDJaMDMxMTAvBgNV
BAMTKEM0QTkxRjhEOUFDNzgzREJEMkU2NUZGQzA0RUFERjNGMjBEMjQwOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMQOyS2gTAosReoTxklmLHA446
swwtm7TmJJqTdRDHXT5pRDybHxbe4lA4w6rpdfShSCNO19T0b5tX3h0/2SYsqAwh
DAQ8eByD2cWIF6nWYjrs5YkFmN9+8BAxM0taIDAFpILVKTNPmTogvrE3ZVDRv2c7
KwDajGd3GkXElGqemDLnmmhgGpkKgIL7dNcF14CFX/acLsElpPZqXoI5K9wpXOXK
FX2g3lpQDNdNQyu97IZecUW7F/iAL2yY2yQrENC46XlCHPFMXEIfcpTDYe1ql6E5
qf5v2MniVBC5ghBAffw/0VKOj2rK79slQspdIRmeZyelfzw/+Cqcdh9E/4/PAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUxKkfjZrHg9vS5l/8BOrfPyDSQJAwHwYDVR0j
BBgwFoAUIelOHo3sG4Kpsv0TgRVJbxsC85AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlFnQWQyZTZKNGZtdVdGaFg3bVVZd3doczFjR3g1WDNRb1dGYXdCRWVV
NFovMC8yMUU5NEUxRThERUMxQjgyQTlCMkZEMTM4MTE1NDk2RjFCMDJGMzkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRTk0RTFFOERFQzFCODJB
OUIyRkQxMzgxMTU0OTZGMUIwMkYzOTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QlFnQWQyZTZKNGZtdVdGaFg3bVVZd3doczFjR3g1WDNRb1dGYXdCRWVVNFovMC8y
MUU5NEUxRThERUMxQjgyQTlCMkZEMTM4MTE1NDk2RjFCMDJGMzkwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAI0bpmuha0Hd6DDWyRdNRCuS9PXe7AJ3v53fTXtwsM9KnRDI7jq0pP67oQXYg
BiXwEj/pkZabSaMsGi5FyLm5VGebz8yrIEMzpxgEUJsYbEkv/lbYNxD4pPqkwDct
v/2rV83ItTZXBEEa6FjOC1Ayn9TgmDZi4DWGR+6yJdcgCy0yaewygcWIFpn+zGL2
HbKU8CUep1eZD3Ua/TUZNYrMWQ+PLzVIHRtUZe6z3vMzGTZDRi+QP7JKiTyOBoy+
gCJErVbsn4h1EmwhdBK3TBNb9lm7gLn9p1RSjyDuY+qHqwtxDyczHrG0pvM4LADF
++fiGf2+woUIT3HnB4Qbo6XFkg==
-----END CERTIFICATE-----
Generated at Wed Dec 31 03:45:56 2025 by rpki-client