This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/08CF424E6FE1980B284A93E6736C3E8628D381CA.mft
File:                     08CF424E6FE1980B284A93E6736C3E8628D381CA.mft (raw, json)
Hash identifier:          IO3GRevTQcEqqMzGqDCL91jzfRJegjjaOuJrsMJE7aQ=
Subject key identifier:   21:06:DF:6A:21:A1:D2:8E:55:C4:4C:C1:26:EE:FB:0B:28:0C:ED:05
Authority key identifier: 08:CF:42:4E:6F:E1:98:0B:28:4A:93:E6:73:6C:3E:86:28:D3:81:CA
Certificate issuer:       /CN=08CF424E6FE1980B284A93E6736C3E8628D381CA
Certificate serial:       60718BF1359174C5D847DFCBDD48DADA6A3F675A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08CF424E6FE1980B284A93E6736C3E8628D381CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/08CF424E6FE1980B284A93E6736C3E8628D381CA.mft
Manifest number:          89
Signing time:             Sat 20 Dec 2025 04:13:50 +0000
Manifest this update:     Sat 20 Dec 2025 04:08:50 +0000
Manifest next update:     Sun 21 Dec 2025 05:56:50 +0000
Files and hashes:         1: 08CF424E6FE1980B284A93E6736C3E8628D381CA.crl (hash: U16mwDETdPHSiUow1UXsXr+wmGuCHIRb4f4KYSeYUio=)
                          2: 323830343a313735343a3a2f33322d3438203d3e20323633313337.roa (hash: 2pYNoB0nzMjsHVlF53HbQfxAIHIUNDTF1t94z66lpOQ=)
                          3: 3137372e39332e36342e302f32312d3234203d3e20323633313337.roa (hash: M/qY9z7KJ0sdMDhdS+zWWCVPkw7NbeXln4juApbMLok=)
                          4: 3136382e3232382e3139362e302f32322d3234203d3e20323633313337.roa (hash: tdHzWepgJjgudC2yhCBD8JneXIfij9C0XXUgfdzTwBM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/08CF424E6FE1980B284A93E6736C3E8628D381CA.crl
                          rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/08CF424E6FE1980B284A93E6736C3E8628D381CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08CF424E6FE1980B284A93E6736C3E8628D381CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 05:56:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:71:8b:f1:35:91:74:c5:d8:47:df:cb:dd:48:da:da:6a:3f:67:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08CF424E6FE1980B284A93E6736C3E8628D381CA
        Validity
            Not Before: Dec 20 04:08:50 2025 GMT
            Not After : Dec 21 05:56:50 2025 GMT
        Subject: CN=2106DF6A21A1D28E55C44CC126EEFB0B280CED05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7b:60:38:a5:ad:23:93:60:eb:71:db:6a:21:
                    75:ec:14:e7:8e:8d:cf:53:be:5e:d4:05:fb:a6:9c:
                    af:41:e3:db:13:3a:a5:c2:86:54:b0:63:76:dd:fd:
                    11:f9:86:e1:dd:0f:6d:5f:04:33:fc:9a:06:26:7d:
                    82:f4:a1:06:56:ea:d9:4f:60:b7:a2:a1:81:0b:50:
                    7b:25:7f:7a:d8:1b:93:a7:e4:1c:1e:cc:4f:39:85:
                    4b:81:54:60:c6:3b:cd:1c:46:70:10:be:19:e5:db:
                    ef:e4:0f:6c:0f:93:54:88:f2:8a:65:e0:fd:98:48:
                    b2:c8:d6:c6:a8:0f:48:f9:cf:df:90:eb:8b:bb:a4:
                    4d:85:61:a3:b0:f5:8a:92:5b:11:fe:a5:c5:e1:f8:
                    ff:c5:d7:32:82:b5:b0:9b:18:57:df:f2:e8:ae:c3:
                    0c:93:f3:68:1e:ef:c0:29:d9:dc:4d:02:03:0a:ee:
                    17:e7:c9:cc:ae:55:12:62:97:b7:fb:2f:69:5c:70:
                    bf:7d:56:e6:4f:4c:ca:09:ff:ee:e9:46:4f:8d:8d:
                    72:9d:be:b4:6f:af:38:dd:bb:50:97:ff:5d:c1:a8:
                    50:8e:fb:e6:2f:84:48:0c:90:23:61:f5:20:54:29:
                    0e:fe:4f:c5:3a:4e:92:97:5b:b0:ee:d1:35:28:20:
                    d9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:06:DF:6A:21:A1:D2:8E:55:C4:4C:C1:26:EE:FB:0B:28:0C:ED:05
            X509v3 Authority Key Identifier:
                keyid:08:CF:42:4E:6F:E1:98:0B:28:4A:93:E6:73:6C:3E:86:28:D3:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/08CF424E6FE1980B284A93E6736C3E8628D381CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08CF424E6FE1980B284A93E6736C3E8628D381CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/08CF424E6FE1980B284A93E6736C3E8628D381CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:c0:62:e9:be:ec:82:44:a2:eb:bc:2f:6a:02:3b:41:86:2a:
         72:52:61:41:52:34:38:e1:51:7f:af:fc:f3:b3:dc:f9:59:85:
         08:1c:43:45:db:b1:c8:2c:c7:dc:c5:93:3d:d9:7c:23:22:b1:
         24:1e:9a:a1:2e:73:a3:45:af:8a:7b:a0:7d:d6:72:52:ac:17:
         1a:a4:10:87:06:d8:7b:d1:18:bb:e5:13:5e:e0:a3:a3:1d:5e:
         e0:6d:56:89:aa:6c:60:04:03:18:3e:2e:a4:00:d2:f9:0d:46:
         49:52:4e:51:2f:ec:88:c4:41:d2:c3:fa:af:7f:fa:d3:4a:34:
         43:01:8d:02:fc:c1:23:69:41:d0:52:a5:45:05:9b:59:fd:1d:
         ad:5d:bf:d0:9d:c4:ea:d9:5e:16:51:f6:9d:1d:2f:39:be:68:
         f1:d1:d4:2c:f2:21:4d:bb:b0:b8:f0:f7:bd:ab:f4:a5:c0:9f:
         f6:e1:26:89:e4:41:26:9d:b3:1e:1c:19:95:33:c5:f4:3a:b0:
         83:ef:14:d5:9f:07:72:99:f0:81:58:08:ab:8d:71:65:ca:9a:
         fb:f6:f3:3d:82:38:bb:08:77:ce:d2:d7:76:db:67:ab:48:5c:
         3f:6b:aa:20:91:ea:53:3a:1c:ef:56:c0:c6:40:bc:79:63:64:
         2d:58:3f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 15:31:58 2025 by rpki-client