This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.mft
File:                     F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.mft (raw, json)
Hash identifier:          dO+hWhYar06b+EKp/EdQJgMcV3aiZSCicKrAOv2aZbM=
Subject key identifier:   AE:07:61:58:DF:FE:0B:46:DC:5D:55:E3:6B:C0:B3:B3:C2:21:DF:76
Authority key identifier: F2:7F:97:DD:E3:2D:8C:91:FD:89:D5:F3:01:08:BB:0E:32:19:4A:D9
Certificate issuer:       /CN=F27F97DDE32D8C91FD89D5F30108BB0E32194AD9
Certificate serial:       09496A2D0EC53ED956D01ED2520AA1415FC8B095
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.mft
Manifest number:          0252
Signing time:             Tue 30 Dec 2025 14:58:56 +0000
Manifest this update:     Tue 30 Dec 2025 14:53:56 +0000
Manifest next update:     Wed 31 Dec 2025 18:02:56 +0000
Files and hashes:         1: 34352e3138392e34342e302f32322d3332203d3e20323639353737.roa (hash: WZx5i/TW0m/ZYOZTy094vtIw4be/X8WNFuv/13kVI4w=)
                          2: 323830343a363662343a3a2f33322d313238203d3e20323639353737.roa (hash: Kvzrs8ZGvCTsx4wa7o8g/NIevIqAhzkXLfkOF1bJnr8=)
                          3: F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.crl (hash: VStw6rF6XzMRjUrgxxqvTLeDHH9AO8Vfq5o8OwEiBEo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.crl
                          rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 31 Dec 2025 18:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:49:6a:2d:0e:c5:3e:d9:56:d0:1e:d2:52:0a:a1:41:5f:c8:b0:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F27F97DDE32D8C91FD89D5F30108BB0E32194AD9
        Validity
            Not Before: Dec 30 14:53:56 2025 GMT
            Not After : Dec 31 18:02:56 2025 GMT
        Subject: CN=AE076158DFFE0B46DC5D55E36BC0B3B3C221DF76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:96:34:6d:6c:79:59:35:e4:6a:9e:24:d8:33:
                    fa:20:4c:4a:58:eb:92:4d:40:65:79:2e:3b:f4:2f:
                    d1:b1:75:a2:c9:a7:fa:94:f4:14:f0:cd:90:d8:81:
                    b8:9b:07:f3:1e:ce:1c:a0:bc:b3:df:6a:af:ac:25:
                    1c:cf:17:d9:d8:63:dd:fa:ed:dc:a1:99:f4:d7:67:
                    93:b7:18:e7:80:9b:01:aa:9c:64:9e:ee:3a:02:f7:
                    b6:b3:4c:99:a9:f2:17:df:0f:56:80:f5:15:60:04:
                    84:ad:33:a9:6a:38:ec:05:5a:8e:ac:bb:d4:a3:f9:
                    d6:c9:e4:63:6a:1d:f5:a0:ee:9f:0d:98:9b:05:18:
                    b5:9b:db:ce:a0:04:0d:2d:70:b2:a5:53:f9:b5:59:
                    ba:a0:66:ef:5f:0e:8f:22:7c:9b:8c:c8:00:33:5b:
                    38:9d:09:f6:23:69:11:71:8a:09:b3:de:57:04:1c:
                    61:43:b4:91:fc:1d:09:49:79:06:04:67:b6:c7:b4:
                    40:cb:03:88:f2:f1:71:47:a3:c4:e3:1b:f6:e9:0f:
                    82:74:50:f1:b5:99:2f:90:9e:dc:c8:0d:62:68:3f:
                    4e:42:a1:41:b9:b5:04:36:8c:fd:6c:93:38:06:e5:
                    ef:49:33:4f:19:1a:23:39:f4:ea:63:a9:a9:c5:aa:
                    b9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:07:61:58:DF:FE:0B:46:DC:5D:55:E3:6B:C0:B3:B3:C2:21:DF:76
            X509v3 Authority Key Identifier:
                keyid:F2:7F:97:DD:E3:2D:8C:91:FD:89:D5:F3:01:08:BB:0E:32:19:4A:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:83:52:dc:4f:82:70:9c:db:2c:13:b0:31:bc:67:7d:42:8a:
         5d:87:b2:df:e9:b0:24:70:72:35:28:ee:31:48:cb:6e:91:6f:
         b9:50:27:9c:a2:83:59:1e:ee:ba:a4:b0:ed:d2:99:95:d8:09:
         66:c4:e6:f5:75:a6:c7:16:8f:6a:91:56:29:50:7a:b8:c2:7d:
         88:fa:ec:86:5c:1e:7c:3b:36:d1:e1:52:31:a2:51:7b:9b:44:
         7b:bb:8c:98:6f:5f:a9:7d:36:b0:6d:95:b5:d2:6e:78:8f:18:
         d0:c8:58:11:02:cc:35:b7:3f:20:76:74:02:2e:cf:66:11:b3:
         57:78:8f:9c:0b:f5:f1:55:df:98:f0:95:60:3a:7e:97:f0:d5:
         c3:04:9b:f9:3a:52:44:55:b9:5a:6a:1f:b5:16:e5:71:99:3e:
         b5:b3:a4:96:27:ea:e1:c8:2c:c1:b9:07:c2:4a:ad:36:b7:41:
         7e:ba:78:ef:4d:2c:d3:b9:ac:41:e3:5e:8f:e3:eb:db:58:4e:
         62:ae:22:a5:5a:a2:16:ef:d9:1d:2a:51:11:99:1f:f2:40:30:
         26:68:1b:09:bc:53:54:cc:74:64:1d:05:ac:31:19:85:e9:47:
         c6:74:77:b6:b3:2b:64:8c:af:22:94:a6:d5:f7:07:58:3b:d2:
         9e:f3:ca:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 07:09:13 2025 by rpki-client