This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CTo7EoHYMuqfLAdkgBoj7BeuNknmSowvKkzBMP3qV7cH/0/1F8731E7DAEAB5D2F1ED5C39CDF0319DE9FB6D2A.mft
File:                     1F8731E7DAEAB5D2F1ED5C39CDF0319DE9FB6D2A.mft (raw, json)
Hash identifier:          juZJCF0RRGZI9oBp6oG1794N/I+KXdyO6kv2DpFbQxo=
Subject key identifier:   52:AF:92:97:42:1F:19:14:BE:EE:6A:CC:6E:FE:74:53:FA:4A:59:60
Authority key identifier: 1F:87:31:E7:DA:EA:B5:D2:F1:ED:5C:39:CD:F0:31:9D:E9:FB:6D:2A
Certificate issuer:       /CN=1F8731E7DAEAB5D2F1ED5C39CDF0319DE9FB6D2A
Certificate serial:       219399C20B96CDAB38B96FFA00E59F52EE1F741F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F8731E7DAEAB5D2F1ED5C39CDF0319DE9FB6D2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CTo7EoHYMuqfLAdkgBoj7BeuNknmSowvKkzBMP3qV7cH/0/1F8731E7DAEAB5D2F1ED5C39CDF0319DE9FB6D2A.mft
Manifest number:          0129
Signing time:             Sun 28 Dec 2025 23:13:14 +0000
Manifest this update:     Sun 28 Dec 2025 23:08:14 +0000
Manifest next update:     Tue 30 Dec 2025 02:57:14 +0000
Files and hashes:         1: 1F8731E7DAEAB5D2F1ED5C39CDF0319DE9FB6D2A.crl (hash: /ohNzMvONsBIUzztN7iRoiFxvFFmGJHO7GNnA+qLfk4=)
                          2: 3230312e3231362e3131362e302f32322d3332203d3e20323730333033.roa (hash: U7UdLEedyHiWq1TaYqcmwi4pmNhRzMnuGXRZuIE9c5c=)
                          3: 323830343a363966383a3a2f33322d313238203d3e20323730333033.roa (hash: cXbTN6ayHnkUiFsYLgqDsqyMsgibvcm9VMdF10NLtT4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CTo7EoHYMuqfLAdkgBoj7BeuNknmSowvKkzBMP3qV7cH/0/1F8731E7DAEAB5D2F1ED5C39CDF0319DE9FB6D2A.crl
                          rsync://rpki-repo.registro.br/repo/CTo7EoHYMuqfLAdkgBoj7BeuNknmSowvKkzBMP3qV7cH/0/1F8731E7DAEAB5D2F1ED5C39CDF0319DE9FB6D2A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F8731E7DAEAB5D2F1ED5C39CDF0319DE9FB6D2A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 30 Dec 2025 02:57:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:93:99:c2:0b:96:cd:ab:38:b9:6f:fa:00:e5:9f:52:ee:1f:74:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F8731E7DAEAB5D2F1ED5C39CDF0319DE9FB6D2A
        Validity
            Not Before: Dec 28 23:08:14 2025 GMT
            Not After : Dec 30 02:57:14 2025 GMT
        Subject: CN=52AF9297421F1914BEEE6ACC6EFE7453FA4A5960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:03:cc:53:af:bb:e7:ba:c2:85:ec:28:1d:01:
                    92:0b:b9:69:d5:86:74:d0:57:80:1f:57:9d:7e:51:
                    87:b5:11:2c:ec:2e:43:27:bc:8c:5a:1f:3c:1a:20:
                    a1:14:49:cf:d3:b5:b2:3a:3e:58:29:fc:c9:00:78:
                    fc:63:e5:3b:95:a8:8d:b9:56:dd:aa:bb:7c:94:e4:
                    f8:9b:e3:8d:4c:ce:00:34:eb:1a:fa:f2:83:92:0a:
                    99:ce:ac:f6:a5:f5:1d:1d:cd:ee:0f:37:ff:a3:2f:
                    1b:82:7b:ba:57:d5:6c:32:ad:29:f0:b7:c9:7d:a7:
                    38:21:2e:00:fc:08:75:12:2c:b5:f6:a6:c9:2d:c2:
                    f5:db:a1:d7:ea:4e:96:71:30:26:ee:35:32:4e:70:
                    16:bc:39:4d:97:93:9a:06:78:ec:f7:37:a0:0c:d0:
                    df:6d:d4:57:6c:68:39:1c:4c:0c:42:f3:15:83:08:
                    b6:c8:f8:fa:f3:f1:d1:0a:5f:aa:ec:7e:24:d8:db:
                    01:7f:9f:93:84:1d:58:07:9d:8a:70:7d:81:34:b6:
                    d4:8a:0f:1e:51:ee:7c:f8:31:15:f5:b4:6e:49:1a:
                    bb:8a:96:f6:5c:19:10:67:a6:77:08:bf:b4:77:3a:
                    98:bf:77:28:06:8d:68:07:fc:7e:6e:da:1c:ef:ec:
                    e6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AF:92:97:42:1F:19:14:BE:EE:6A:CC:6E:FE:74:53:FA:4A:59:60
            X509v3 Authority Key Identifier:
                keyid:1F:87:31:E7:DA:EA:B5:D2:F1:ED:5C:39:CD:F0:31:9D:E9:FB:6D:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CTo7EoHYMuqfLAdkgBoj7BeuNknmSowvKkzBMP3qV7cH/0/1F8731E7DAEAB5D2F1ED5C39CDF0319DE9FB6D2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F8731E7DAEAB5D2F1ED5C39CDF0319DE9FB6D2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTo7EoHYMuqfLAdkgBoj7BeuNknmSowvKkzBMP3qV7cH/0/1F8731E7DAEAB5D2F1ED5C39CDF0319DE9FB6D2A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:a1:d2:e6:c9:37:4a:70:29:8e:53:c2:b2:01:d2:b8:bb:ae:
         a8:bc:86:d7:98:22:8f:f0:ad:58:d5:e7:a9:35:6b:3f:70:91:
         76:31:e0:78:14:4f:18:fb:ea:84:e9:dd:39:82:bb:23:bb:37:
         cb:66:fa:8d:67:16:f5:85:36:b9:87:b4:f0:a1:c7:89:9e:a2:
         1f:94:a3:1d:d0:7f:43:cf:63:6f:94:b6:ac:2f:90:16:6a:e0:
         cd:5d:ef:20:4c:13:e2:c1:db:8a:c8:3f:37:66:20:0a:5b:9b:
         17:da:aa:e5:5d:73:0b:30:05:ee:1e:73:7b:b2:8c:8e:81:d6:
         c1:8c:bd:81:c9:8c:0d:4d:99:a9:ea:37:de:91:34:fd:62:82:
         cf:52:c6:40:30:c9:eb:87:9d:7e:c8:99:97:d2:15:c5:91:cb:
         61:46:dc:f1:a8:2c:91:d1:76:d5:c8:19:69:c5:33:97:0f:4a:
         e8:78:49:cd:9b:de:ec:b9:b6:66:1a:2d:3c:11:8f:3c:7b:a0:
         2a:58:81:10:49:63:45:19:33:99:8e:34:5c:b6:c5:e5:84:dc:
         c0:34:ba:78:59:8d:e0:b5:09:25:5f:56:2e:20:52:4e:17:b8:
         b9:0b:a3:79:c2:7e:d8:53:3a:e4:33:6d:bd:8c:e9:86:2c:b0:
         55:82:bb:a3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIZOZwguWzas4uW/6AOWfUu4fdB8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY4NzMxRTdEQUVBQjVEMkYxRUQ1QzM5Q0RGMDMxOURF
OUZCNkQyQTAeFw0yNTEyMjgyMzA4MTRaFw0yNTEyMzAwMjU3MTRaMDMxMTAvBgNV
BAMTKDUyQUY5Mjk3NDIxRjE5MTRCRUVFNkFDQzZFRkU3NDUzRkE0QTU5NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwA8xTr7vnusKF7CgdAZILuWnV
hnTQV4AfV51+UYe1ESzsLkMnvIxaHzwaIKEUSc/TtbI6Plgp/MkAePxj5TuVqI25
Vt2qu3yU5Pib441MzgA06xr68oOSCpnOrPal9R0dze4PN/+jLxuCe7pX1WwyrSnw
t8l9pzghLgD8CHUSLLX2psktwvXbodfqTpZxMCbuNTJOcBa8OU2Xk5oGeOz3N6AM
0N9t1FdsaDkcTAxC8xWDCLbI+Prz8dEKX6rsfiTY2wF/n5OEHVgHnYpwfYE0ttSK
Dx5R7nz4MRX1tG5JGruKlvZcGRBnpncIv7R3Opi/dygGjWgH/H5u2hzv7ObPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUUq+Sl0IfGRS+7mrMbv50U/pKWWAwHwYDVR0j
BBgwFoAUH4cx59rqtdLx7Vw5zfAxnen7bSowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1RvN0VvSFlNdXFmTEFka2dCb2o3QmV1TmtubVNvd3ZLa3pCTVAzcVY3
Y0gvMC8xRjg3MzFFN0RBRUFCNUQyRjFFRDVDMzlDREYwMzE5REU5RkI2RDJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGODczMUU3REFFQUI1RDJG
MUVENUMzOUNERjAzMTlERTlGQjZEMkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q1RvN0VvSFlNdXFmTEFka2dCb2o3QmV1TmtubVNvd3ZLa3pCTVAzcVY3Y0gvMC8x
Rjg3MzFFN0RBRUFCNUQyRjFFRDVDMzlDREYwMzE5REU5RkI2RDJBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAw6HS5sk3SnApjlPCsgHSuLuuqLyG15gij/CtWNXnqTVrP3CRdjHgeBRPGPvq
hOndOYK7I7s3y2b6jWcW9YU2uYe08KHHiZ6iH5SjHdB/Q89jb5S2rC+QFmrgzV3v
IEwT4sHbisg/N2YgClubF9qq5V1zCzAF7h5ze7KMjoHWwYy9gcmMDU2Zqeo33pE0
/WKCz1LGQDDJ64edfsiZl9IVxZHLYUbc8agskdF21cgZacUzlw9K6HhJzZve7Lm2
ZhotPBGPPHugKliBEEljRRkzmY40XLbF5YTcwDS6eFmN4LUJJV9WLiBSThe4uQuj
ecJ+2FM65DNtvYzphiywVYK7ow==
-----END CERTIFICATE-----
Generated at Mon Dec 29 16:46:23 2025 by rpki-client