This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.mft
File:                     CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.mft (raw, json)
Hash identifier:          uYNAqRr4V1jxzYp2qccQX0NoBm94K2tUIU2odb6da04=
Subject key identifier:   9B:CC:A1:E2:19:B4:74:DB:51:DB:38:70:65:9D:88:8E:11:C5:3E:B7
Authority key identifier: CC:1E:CC:FA:C7:A6:BB:A6:B9:3A:63:2D:D1:C6:10:06:86:34:4B:D8
Certificate issuer:       /CN=CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8
Certificate serial:       733EEE4184641FD28A0F55B2F4D406336B8E6B70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.mft
Manifest number:          0342
Signing time:             Sat 20 Dec 2025 20:04:42 +0000
Manifest this update:     Sat 20 Dec 2025 19:59:42 +0000
Manifest next update:     Sun 21 Dec 2025 23:11:42 +0000
Files and hashes:         1: 34352e3137352e3138382e302f32322d3234203d3e20323638333233.roa (hash: RwLUdDz13N/BmIqzrNwzh4q3hMjilT4WEIqV6/ghBbw=)
                          2: 3137372e3132352e3138342e302f32322d3234203d3e20323638333233.roa (hash: BBaYc4m/1X68USip6UBSVWqTl8KexxRRSsfkcn7bYR4=)
                          3: 3137372e3132352e3138382e302f32322d3234203d3e20323638333233.roa (hash: Dwz0bJkd5wJgXd0c0J0wgruQvnaKO5QdfcivsmcT6R8=)
                          4: 3137372e35332e3132382e302f32312d3234203d3e20323638333233.roa (hash: sdu5+bfodftuulEa9fVD7+XKZZ87v1ITtxwVWjLNRxo=)
                          5: 34352e3233382e3131362e302f32322d3234203d3e20323638333233.roa (hash: JTBq8flR+nhyM/Li4g0y3q+ctvT+oBBg+FwjLBO+xgo=)
                          6: 323830343a346636303a3a2f33322d313238203d3e20323638333233.roa (hash: kMEsIsALKKeUQ/kyS9ZYrQhiwDhIgH0vQDcsl0N86gQ=)
                          7: CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.crl (hash: WstkyH39gHZOOK8LX5n6dHXRxjM4mY5u0bTSJqF3IbI=)
                          8: 3139322e3134312e3139362e302f32322d3234203d3e20323638333233.roa (hash: aSLP+VQ2QnTk1424KJet/utalthKp4HIvlfM1VbIxkA=)
                          9: 3230302e392e3136302e302f32322d3234203d3e20323638333233.roa (hash: OUfn275w0xXP56S/hYJpQv1yTT+DWCPdZUZdc5TZ6Mw=)
                          10: 3230312e3135382e34302e302f32312d3234203d3e20323638333233.roa (hash: 2A4rDuLRFWXAJlapuXpN/E4CaofZs0b0umVtQA4SiGw=)
                          11: 3138372e34352e34382e302f32302d3234203d3e20323638333233.roa (hash: kyNjMzQuGSLsCNXU3CfYinPy8FMhKv4uvylDcPGReeo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.crl
                          rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 23:11:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:3e:ee:41:84:64:1f:d2:8a:0f:55:b2:f4:d4:06:33:6b:8e:6b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8
        Validity
            Not Before: Dec 20 19:59:42 2025 GMT
            Not After : Dec 21 23:11:42 2025 GMT
        Subject: CN=9BCCA1E219B474DB51DB3870659D888E11C53EB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bc:4d:a3:6b:e0:8b:b0:f5:b6:70:5b:1d:97:
                    a3:43:be:92:75:6c:48:cb:6d:26:03:d3:6b:94:9a:
                    91:88:18:30:ec:83:4e:3a:b7:dd:9d:25:70:59:1e:
                    b6:19:20:4f:77:f1:c3:c5:40:e6:de:18:ef:eb:42:
                    af:16:59:ec:97:ee:7a:6a:26:7c:90:54:be:21:f4:
                    bb:13:92:66:56:0a:fe:ed:20:a0:f5:ba:75:9b:27:
                    ef:c0:f2:0a:b3:ce:fe:45:e1:68:ab:d1:f1:4e:59:
                    2f:d7:ba:2d:f0:e4:46:f3:53:ac:1e:12:e3:31:77:
                    00:44:e5:6c:94:e4:94:55:c3:e2:f9:71:70:e8:63:
                    64:a0:56:aa:f3:9b:78:da:a1:bd:86:07:25:e5:02:
                    a3:dc:64:45:be:24:3d:92:4e:9f:92:81:e0:55:41:
                    9d:cf:e2:ee:fb:73:15:ef:da:f0:09:66:3e:b4:81:
                    9f:2e:cc:95:04:02:37:89:bd:de:8f:1f:f2:23:ec:
                    55:43:f4:86:75:22:82:f3:f8:19:54:a9:44:89:ab:
                    2f:7f:bc:ba:cc:f5:f5:70:5b:fe:ea:77:2d:29:a7:
                    44:be:03:4a:fe:02:f0:4c:85:eb:41:64:2d:2d:60:
                    9c:8c:01:80:b9:57:bf:45:8f:2f:0d:c7:9d:91:10:
                    81:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:CC:A1:E2:19:B4:74:DB:51:DB:38:70:65:9D:88:8E:11:C5:3E:B7
            X509v3 Authority Key Identifier:
                keyid:CC:1E:CC:FA:C7:A6:BB:A6:B9:3A:63:2D:D1:C6:10:06:86:34:4B:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:67:b4:31:ac:8b:bd:ec:fc:33:c9:6e:e4:18:30:61:87:e9:
         26:e6:5b:2b:a4:4f:98:0d:0a:40:82:b7:b2:17:77:41:4f:d5:
         c2:f5:7e:ce:51:12:1c:bf:3b:38:48:c9:18:19:bb:9b:1a:18:
         86:95:a7:eb:87:6c:7f:40:3c:f8:f7:89:16:0a:80:6d:cb:51:
         7a:15:fb:b4:52:37:f0:01:d3:62:d0:61:bc:8f:04:1f:f5:5a:
         b0:3a:4e:80:ef:d0:b1:bc:e9:d1:2f:2b:b2:3a:37:5b:9e:5b:
         6e:f4:0e:8d:7f:78:e7:78:84:72:a5:cd:c4:d5:6e:59:a9:cc:
         46:17:c1:81:c4:5f:f5:9a:7d:2b:f8:6b:75:ad:91:ab:ee:cb:
         01:ff:92:b4:92:1a:5c:12:68:b7:70:b2:ba:8a:77:b4:2d:ef:
         b6:ad:9f:56:af:b2:d7:9b:77:6b:77:a8:6b:36:d2:42:f4:29:
         28:9a:15:85:5e:19:6e:52:01:0e:67:e2:3d:f9:e8:cb:52:3e:
         0d:f6:9e:25:fa:97:08:72:d0:f9:6b:8e:f0:b7:e2:a8:7c:f2:
         db:4f:cf:6b:64:ec:7a:15:1a:18:1c:bc:3c:66:07:ef:61:0f:
         01:62:f2:64:08:f2:e0:f7:7c:6f:70:07:1b:2f:1b:97:7c:1d:
         28:91:aa:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 10:36:45 2025 by rpki-client