This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.mft
File:                     FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.mft (raw, json)
Hash identifier:          aqZPSUzoCiA20C3aF6+XHa6tepBaSZt9Zt3scgAIQYc=
Subject key identifier:   69:66:4C:5A:BE:84:49:63:12:D3:2F:5D:CD:26:03:65:74:C1:31:64
Authority key identifier: FF:4A:CB:08:28:10:1F:FD:6F:91:BF:BC:FB:F0:5E:E9:8F:2F:99:22
Certificate issuer:       /CN=FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922
Certificate serial:       4D55EC26131E4EBA204576BAFA75ADC1BFE4633D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.mft
Manifest number:          021D
Signing time:             Tue 30 Dec 2025 10:23:06 +0000
Manifest this update:     Tue 30 Dec 2025 10:18:06 +0000
Manifest next update:     Wed 31 Dec 2025 12:12:06 +0000
Files and hashes:         1: 323830343a343034383a343130303a3a2f34342d3434203d3e20323635393439.roa (hash: g8l0/tSjcKhIaUC0SlVVhkO3pLYOBU75RScol8wWaJ8=)
                          2: 323830343a343034383a343139303a3a2f34342d3434203d3e20323635393439.roa (hash: mFBvQ9U6S9ziGHYVsmFoKj+ZF8wnQ9qJb6vsgKrGp8c=)
                          3: FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.crl (hash: 5/cGUNQS6L78BHQeZNbEWL2ZEAZ7QOrpZVu7hr81obc=)
                          4: 323830343a343034383a343138303a3a2f34342d3434203d3e20323635393439.roa (hash: 8pRzyt9oKL936Lq1pXfOXg0CrOSFWQSd7jQBgXRtGTs=)
                          5: 3136342e3136332e39362e302f32322d3234203d3e20323635393439.roa (hash: jw85MTe3oGlWpAv3CMkQxdk6lbR+gevHpittCauTbjo=)
                          6: 323830343a343034383a343131303a3a2f34342d3434203d3e20323635393439.roa (hash: hB6GZrapWVT+nZyDAtSBayPQVOJQA3CPhxdpm15MnK0=)
                          7: 323830343a343034383a3a2f33322d3332203d3e20323635393439.roa (hash: PJVFr/8LbXIOpb6FEWfNrqUpXzqDkNqYCUBShsnPL+U=)
                          8: 323830343a343034383a633030303a3a2f34382d3438203d3e20323635393439.roa (hash: yNWsDSXI0ojc83gWzcz/ezCfrNQSleAUCqeINfZRGUI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.crl
                          rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 31 Dec 2025 12:12:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:55:ec:26:13:1e:4e:ba:20:45:76:ba:fa:75:ad:c1:bf:e4:63:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922
        Validity
            Not Before: Dec 30 10:18:06 2025 GMT
            Not After : Dec 31 12:12:06 2025 GMT
        Subject: CN=69664C5ABE84496312D32F5DCD26036574C13164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ab:ee:e0:96:15:86:e6:25:df:61:16:1a:5c:
                    71:c1:57:dc:9d:be:4c:9a:d3:14:74:cc:5b:6a:33:
                    31:e2:80:62:ed:78:f0:e1:53:f2:20:e3:88:87:ff:
                    31:02:0b:c2:ac:05:53:81:a6:0a:06:3b:70:25:1c:
                    0b:66:1a:8b:0d:e3:44:f4:d8:63:57:51:7b:98:a2:
                    19:44:36:51:6f:17:8a:3b:c1:15:c6:e6:68:e1:56:
                    45:e8:a7:7f:60:bd:b9:78:8c:d3:74:2d:2b:6d:6f:
                    e4:fc:ab:a7:de:5e:f3:48:e5:75:38:31:f7:55:2f:
                    1e:ec:12:2d:12:e5:3a:2c:66:a6:3b:03:a8:6e:7e:
                    78:75:b7:ae:93:65:05:e7:64:b1:75:64:fe:29:c7:
                    09:e4:e6:49:58:3b:17:6e:99:23:a3:3d:e2:7c:37:
                    e8:4a:e8:f2:53:0e:0c:17:86:7e:1f:fe:60:c8:53:
                    97:60:4c:4d:43:82:bb:5a:77:52:29:27:b4:f7:f4:
                    c1:9a:46:9a:e9:68:51:84:5f:58:d7:02:30:a8:61:
                    39:7d:4f:7c:4c:81:a0:10:b4:b5:59:e4:26:f0:07:
                    54:c8:d7:cb:5c:39:b9:e3:e5:1d:19:3f:72:66:4f:
                    38:e1:d1:39:10:ea:05:3d:a1:95:b8:be:cf:50:ae:
                    89:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:66:4C:5A:BE:84:49:63:12:D3:2F:5D:CD:26:03:65:74:C1:31:64
            X509v3 Authority Key Identifier:
                keyid:FF:4A:CB:08:28:10:1F:FD:6F:91:BF:BC:FB:F0:5E:E9:8F:2F:99:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:6e:1d:95:22:5e:14:a9:9f:a0:ed:35:a5:fe:62:18:c9:2b:
         df:bd:3b:9d:40:c1:38:b3:9b:1d:4d:a2:1f:53:c5:48:78:05:
         a6:21:92:44:0e:10:61:96:3d:0d:08:6e:39:f1:19:04:9e:b1:
         55:f6:d7:98:3f:a2:b7:a9:10:c1:60:8a:74:3b:bb:72:a4:d8:
         43:3a:c1:aa:19:7c:0e:7e:66:30:fa:98:5f:af:27:df:17:b9:
         e1:21:0a:07:5b:c5:44:9f:d6:98:6d:c6:82:93:e4:93:d2:a5:
         3e:98:27:6a:05:af:82:2f:49:b3:6f:90:1f:97:b9:41:ee:71:
         c9:eb:d3:c8:36:00:9d:f7:85:89:54:3b:a8:aa:02:e9:c0:22:
         05:85:8e:56:c3:c4:1a:34:d8:2b:3d:f3:85:e9:be:cf:ea:fc:
         6a:fd:60:29:81:b1:e8:ff:55:4b:a6:4a:bc:60:cf:74:4c:f9:
         c9:b1:82:3b:ce:a3:81:5e:d5:b5:d8:df:c7:61:f9:89:76:e2:
         21:7e:73:00:22:04:e4:30:6f:b5:f1:2e:76:dd:8a:b7:05:50:
         b6:a8:3b:0f:80:29:5e:13:a8:6f:21:7e:a5:04:98:d7:43:21:
         e8:33:d5:8b:b9:67:c7:fc:8f:14:bc:83:a8:3f:98:3d:21:52:
         96:07:e2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 18:44:08 2025 by rpki-client