This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft
File:                     E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft (raw, json)
Hash identifier:          +fDpFszQvbEIZGYTvyTb4c2rJ9/BvDA7BVN9+8Bb3KI=
Subject key identifier:   C6:EF:61:5D:93:3A:3D:D8:34:01:BD:F4:B1:7A:9E:BC:46:DA:89:5B
Authority key identifier: E7:08:AB:F0:39:B1:FF:20:F9:DE:5F:F6:CE:1D:E3:DC:BB:AF:D6:B4
Certificate issuer:       /CN=E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4
Certificate serial:       3F5F0980403EA83E34FA6A8039F99A5A4ECB98C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft
Manifest number:          0344
Signing time:             Tue 23 Dec 2025 03:55:40 +0000
Manifest this update:     Tue 23 Dec 2025 03:50:40 +0000
Manifest next update:     Wed 24 Dec 2025 06:04:40 +0000
Files and hashes:         1: 34352e3138332e3138302e302f32322d3234203d3e20323639333337.roa (hash: ht/LU548z0DQ9qyd/CXKzpoxrH9NqeBOqRLrPd+T36Y=)
                          2: 323830343a363331343a3a2f33322d3438203d3e20323639333337.roa (hash: 8rIADCc1IMBXHDjsfVNZY3xX+m3yox+H7e16XbvP0l4=)
                          3: E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.crl (hash: Dq5vH1lQv/X1EXKVgPK9bLJrUJ3XcEZOGbLanchXPxQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.crl
                          rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 06:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:5f:09:80:40:3e:a8:3e:34:fa:6a:80:39:f9:9a:5a:4e:cb:98:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4
        Validity
            Not Before: Dec 23 03:50:40 2025 GMT
            Not After : Dec 24 06:04:40 2025 GMT
        Subject: CN=C6EF615D933A3DD83401BDF4B17A9EBC46DA895B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2f:7f:bf:ff:44:cd:31:99:5d:c5:b5:86:1f:
                    d4:cd:83:72:ec:7a:5f:ef:ba:fe:2d:78:8b:11:86:
                    b3:06:34:6e:52:f1:25:e5:c4:2c:29:99:7e:0c:dc:
                    41:0f:20:ff:80:a4:8e:5e:7e:61:0a:cd:0b:92:23:
                    53:08:65:3d:69:22:54:9b:5f:d3:2f:da:ad:69:bb:
                    f2:24:cf:c1:7b:25:0b:5a:f7:b3:25:44:2f:4c:99:
                    76:fa:d6:62:98:f3:03:c9:f7:d3:33:55:75:8d:45:
                    6e:a8:ee:cf:9c:fc:bc:70:4e:8a:6c:e1:13:6d:1a:
                    11:2f:ef:ec:24:69:84:bc:1a:3b:d2:b6:d8:5d:e8:
                    1d:35:a9:56:26:47:d3:7a:0d:a6:0a:d9:01:91:02:
                    4f:22:3e:fb:a2:1b:77:cd:fb:0d:9a:0f:b9:14:f6:
                    7d:5e:f3:54:c7:e3:22:46:2d:27:89:98:ad:25:ea:
                    7f:71:91:e3:e6:5a:90:09:f9:ba:08:0f:71:96:c8:
                    9a:7a:27:57:ed:7a:f7:31:28:da:da:ad:7d:e0:a6:
                    80:8f:d3:97:75:c8:50:1a:97:a8:12:b1:d6:c2:d9:
                    a5:4b:16:da:c2:56:72:cf:cb:9e:d7:0a:7c:86:95:
                    94:17:fd:76:19:cb:86:18:49:9b:09:bc:a4:8a:23:
                    74:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:EF:61:5D:93:3A:3D:D8:34:01:BD:F4:B1:7A:9E:BC:46:DA:89:5B
            X509v3 Authority Key Identifier:
                keyid:E7:08:AB:F0:39:B1:FF:20:F9:DE:5F:F6:CE:1D:E3:DC:BB:AF:D6:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c9:2c:4c:b6:97:d2:0f:c2:f8:b2:ef:dd:ef:2b:79:c6:32:
         9e:8b:9d:96:ad:ed:85:0f:a0:af:7d:2c:a5:17:c1:22:02:96:
         06:62:60:d8:d1:cf:09:62:c1:2c:39:b2:12:4e:7d:d4:06:29:
         68:4a:c9:21:e5:23:3d:f8:0a:a5:38:bc:d5:e2:9a:d0:5c:1f:
         9f:aa:08:f5:8a:d0:9e:b3:13:f3:18:26:7c:ce:57:0a:40:a3:
         e6:ae:b1:ce:af:e6:9c:e7:c4:33:ef:80:84:24:0d:f6:68:bb:
         76:0d:45:bc:cf:dc:96:3e:d5:87:bf:95:ca:c6:0c:7e:d3:e0:
         7e:df:87:39:a4:25:78:37:0a:9d:03:97:37:55:07:d7:d2:3f:
         1c:63:2f:f4:54:14:05:c8:06:e0:20:bf:6d:2d:31:3c:c5:67:
         e0:d3:d7:82:4b:d0:c2:dc:43:0a:f3:d3:40:8c:cd:61:21:14:
         f2:d3:95:e8:89:28:5d:95:fe:a8:42:3b:78:ef:2a:31:1d:b3:
         34:08:b8:cd:2e:49:5d:06:f4:aa:77:83:ee:e2:cf:ad:bf:c9:
         4d:e7:24:15:4b:98:44:04:bd:17:20:8e:b6:24:f7:19:c2:cc:
         2b:64:ca:f3:39:71:1e:28:3f:3a:fa:5d:8a:14:39:8b:10:0d:
         89:3d:ac:03
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUP18JgEA+qD40+mqAOfmaWk7LmMgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTcwOEFCRjAzOUIxRkYyMEY5REU1RkY2Q0UxREUzRENC
QkFGRDZCNDAeFw0yNTEyMjMwMzUwNDBaFw0yNTEyMjQwNjA0NDBaMDMxMTAvBgNV
BAMTKEM2RUY2MTVEOTMzQTNERDgzNDAxQkRGNEIxN0E5RUJDNDZEQTg5NUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhL3+//0TNMZldxbWGH9TNg3Ls
el/vuv4teIsRhrMGNG5S8SXlxCwpmX4M3EEPIP+ApI5efmEKzQuSI1MIZT1pIlSb
X9Mv2q1pu/Ikz8F7JQta97MlRC9MmXb61mKY8wPJ99MzVXWNRW6o7s+c/LxwTops
4RNtGhEv7+wkaYS8GjvStthd6B01qVYmR9N6DaYK2QGRAk8iPvuiG3fN+w2aD7kU
9n1e81TH4yJGLSeJmK0l6n9xkePmWpAJ+boID3GWyJp6J1ftevcxKNrarX3gpoCP
05d1yFAal6gSsdbC2aVLFtrCVnLPy57XCnyGlZQX/XYZy4YYSZsJvKSKI3SJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUxu9hXZM6Pdg0Ab30sXqevEbaiVswHwYDVR0j
BBgwFoAU5wir8Dmx/yD53l/2zh3j3Luv1rQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0g0NmE5dFJGdFZSNWJaRkthalZlZTlZNzV2cDQ0QzZhMzRMMVlzblVq
SEUvMS9FNzA4QUJGMDM5QjFGRjIwRjlERTVGRjZDRTFERTNEQ0JCQUZENkI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3MDhBQkYwMzlCMUZGMjBG
OURFNUZGNkNFMURFM0RDQkJBRkQ2QjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q0g0NmE5dFJGdFZSNWJaRkthalZlZTlZNzV2cDQ0QzZhMzRMMVlzblVqSEUvMS9F
NzA4QUJGMDM5QjFGRjIwRjlERTVGRjZDRTFERTNEQ0JCQUZENkI0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGcksTLaX0g/C+LLv3e8recYynoudlq3thQ+gr30spRfBIgKWBmJg2NHPCWLB
LDmyEk591AYpaErJIeUjPfgKpTi81eKa0Fwfn6oI9YrQnrMT8xgmfM5XCkCj5q6x
zq/mnOfEM++AhCQN9mi7dg1FvM/clj7Vh7+VysYMftPgft+HOaQleDcKnQOXN1UH
19I/HGMv9FQUBcgG4CC/bS0xPMVn4NPXgkvQwtxDCvPTQIzNYSEU8tOV6IkoXZX+
qEI7eO8qMR2zNAi4zS5JXQb0qneD7uLPrb/JTeckFUuYRAS9FyCOtiT3GcLMK2TK
8zlxHig/OvpdihQ5ixANiT2sAw==
-----END CERTIFICATE-----
Generated at Tue Dec 23 09:13:50 2025 by rpki-client