This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/8CC525FDF72B816B66C1CE836CA937CE99A682E8.mft
File:                     8CC525FDF72B816B66C1CE836CA937CE99A682E8.mft (raw, json)
Hash identifier:          XE0ZFqUDDxwAhoy0z+ECUxssYWbY/NJQefCycfw2PKM=
Subject key identifier:   8B:B9:13:FF:C8:5C:4D:08:4B:E9:99:2A:75:3B:50:71:E6:1E:56:D7
Authority key identifier: 8C:C5:25:FD:F7:2B:81:6B:66:C1:CE:83:6C:A9:37:CE:99:A6:82:E8
Certificate issuer:       /CN=8CC525FDF72B816B66C1CE836CA937CE99A682E8
Certificate serial:       5AB6FF040E8103BC1B60731404A524407E7EEE1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CC525FDF72B816B66C1CE836CA937CE99A682E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/8CC525FDF72B816B66C1CE836CA937CE99A682E8.mft
Manifest number:          5E
Signing time:             Fri 19 Dec 2025 15:46:30 +0000
Manifest this update:     Fri 19 Dec 2025 15:41:30 +0000
Manifest next update:     Sat 20 Dec 2025 18:52:30 +0000
Files and hashes:         1: 323830343a393432383a3a2f33322d313238203d3e20323734383235.roa (hash: FzCAE8eUu2sdUtzU7IKkFBXrwi3x7JsqMdGSg0/OQCY=)
                          2: 8CC525FDF72B816B66C1CE836CA937CE99A682E8.crl (hash: JiynvTO+ymWjMK/5LZ/X6WYt18d7BwginHg1X1ow+No=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/8CC525FDF72B816B66C1CE836CA937CE99A682E8.crl
                          rsync://rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/8CC525FDF72B816B66C1CE836CA937CE99A682E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CC525FDF72B816B66C1CE836CA937CE99A682E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 18:52:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:b6:ff:04:0e:81:03:bc:1b:60:73:14:04:a5:24:40:7e:7e:ee:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CC525FDF72B816B66C1CE836CA937CE99A682E8
        Validity
            Not Before: Dec 19 15:41:30 2025 GMT
            Not After : Dec 20 18:52:30 2025 GMT
        Subject: CN=8BB913FFC85C4D084BE9992A753B5071E61E56D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:72:65:90:c2:4f:a9:3c:e5:d0:f9:63:b6:bf:
                    e4:3d:51:82:6f:33:ef:7a:71:68:26:29:f9:60:eb:
                    00:c1:11:cd:ad:c8:7f:5d:1d:18:86:e1:bb:2f:31:
                    cc:ab:28:c3:d5:47:b4:5d:7a:da:3e:ed:cd:9d:84:
                    14:9f:30:dd:87:91:5b:09:c3:c5:7d:45:0c:77:0c:
                    14:9e:20:76:d1:5f:6f:c9:1b:79:10:db:7e:f1:0a:
                    7e:a4:b1:2b:f3:a7:30:85:35:5d:4a:04:88:c9:4b:
                    eb:9a:f5:9f:bf:ba:02:e8:e3:ce:d6:3e:cf:7c:78:
                    58:ac:26:bd:20:09:31:40:33:67:13:cf:90:2c:6b:
                    45:f1:a7:a5:64:5b:14:13:ec:28:df:b9:63:ce:d9:
                    c9:84:9e:6a:e0:49:d7:3d:11:41:a1:43:3e:5b:a3:
                    9a:c8:05:8a:8c:36:69:bd:f8:6e:18:69:11:a0:60:
                    d6:a1:c0:a9:13:21:84:d8:37:8c:55:f5:8e:61:a4:
                    a0:35:51:c0:d1:af:12:d5:0d:0b:55:4a:92:ae:a5:
                    79:9a:a6:02:e3:4b:c7:c3:de:08:f9:77:30:df:01:
                    97:c1:cd:b0:ee:f9:88:44:8a:57:c7:f3:de:06:2e:
                    1d:e3:c9:a4:cb:ca:cc:21:69:e8:21:2e:e1:1e:00:
                    80:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B9:13:FF:C8:5C:4D:08:4B:E9:99:2A:75:3B:50:71:E6:1E:56:D7
            X509v3 Authority Key Identifier:
                keyid:8C:C5:25:FD:F7:2B:81:6B:66:C1:CE:83:6C:A9:37:CE:99:A6:82:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/8CC525FDF72B816B66C1CE836CA937CE99A682E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CC525FDF72B816B66C1CE836CA937CE99A682E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/8CC525FDF72B816B66C1CE836CA937CE99A682E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:95:39:b3:b4:6c:3b:7c:96:48:a8:8d:77:bc:20:1e:47:2d:
         1a:13:9e:74:88:c1:6d:c1:64:0a:3e:2c:0b:5c:44:cf:c6:2d:
         c4:6f:67:5a:e2:fb:28:87:d4:63:a3:cb:f1:97:67:ae:86:c7:
         84:c5:9a:f0:8e:25:df:8a:1f:0e:ad:2c:c9:82:b9:ff:ba:00:
         6e:6b:f7:53:0c:7e:55:38:34:c9:e4:3c:0b:68:57:de:e6:7a:
         97:85:2e:99:61:f9:98:b0:ad:1f:1d:2f:2a:a2:8f:c3:0c:0f:
         90:98:54:dc:70:27:b6:7f:bd:4e:b3:31:24:12:3a:fa:fe:7a:
         53:05:d3:25:8c:c8:ba:ff:d3:9d:17:39:b1:f1:42:46:bb:7c:
         a4:2c:e3:19:31:67:13:a4:a6:81:35:ec:e1:68:09:26:61:65:
         3a:b3:cd:aa:01:8c:b5:57:17:a1:c1:c4:40:3e:bb:49:53:3f:
         55:78:64:17:9c:98:84:d0:27:33:e2:f4:75:5c:f4:ad:10:d2:
         9b:76:7e:72:18:39:36:37:8f:50:0d:e0:4c:d7:94:a9:6f:37:
         25:5e:f2:80:5f:ee:0c:44:54:95:c8:00:52:f6:23:59:98:aa:
         e3:9a:82:87:8b:d1:b3:e8:09:36:eb:5a:e2:6f:4c:e2:67:0a:
         e5:1c:22:84
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWrb/BA6BA7wbYHMUBKUkQH5+7hswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOENDNTI1RkRGNzJCODE2QjY2QzFDRTgzNkNBOTM3Q0U5
OUE2ODJFODAeFw0yNTEyMTkxNTQxMzBaFw0yNTEyMjAxODUyMzBaMDMxMTAvBgNV
BAMTKDhCQjkxM0ZGQzg1QzREMDg0QkU5OTkyQTc1M0I1MDcxRTYxRTU2RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdcmWQwk+pPOXQ+WO2v+Q9UYJv
M+96cWgmKflg6wDBEc2tyH9dHRiG4bsvMcyrKMPVR7Rdeto+7c2dhBSfMN2HkVsJ
w8V9RQx3DBSeIHbRX2/JG3kQ237xCn6ksSvzpzCFNV1KBIjJS+ua9Z+/ugLo487W
Ps98eFisJr0gCTFAM2cTz5Asa0Xxp6VkWxQT7CjfuWPO2cmEnmrgSdc9EUGhQz5b
o5rIBYqMNmm9+G4YaRGgYNahwKkTIYTYN4xV9Y5hpKA1UcDRrxLVDQtVSpKupXma
pgLjS8fD3gj5dzDfAZfBzbDu+YhEilfH894GLh3jyaTLyswhaeghLuEeAICjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUi7kT/8hcTQhL6ZkqdTtQceYeVtcwHwYDVR0j
BBgwFoAUjMUl/fcrgWtmwc6DbKk3zpmmgugwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREIyZGVaWDc2YWlWcUhabndHYkwxUWhCNGlKdEY3Um5MRVVGTXRwdzJX
TjIvMC84Q0M1MjVGREY3MkI4MTZCNjZDMUNFODM2Q0E5MzdDRTk5QTY4MkU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDQzUyNUZERjcyQjgxNkI2
NkMxQ0U4MzZDQTkzN0NFOTlBNjgyRTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
REIyZGVaWDc2YWlWcUhabndHYkwxUWhCNGlKdEY3Um5MRVVGTXRwdzJXTjIvMC84
Q0M1MjVGREY3MkI4MTZCNjZDMUNFODM2Q0E5MzdDRTk5QTY4MkU4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmpU5s7RsO3yWSKiNd7wgHkctGhOedIjBbcFkCj4sC1xEz8YtxG9nWuL7KIfU
Y6PL8ZdnrobHhMWa8I4l34ofDq0syYK5/7oAbmv3Uwx+VTg0yeQ8C2hX3uZ6l4Uu
mWH5mLCtHx0vKqKPwwwPkJhU3HAntn+9TrMxJBI6+v56UwXTJYzIuv/TnRc5sfFC
Rrt8pCzjGTFnE6SmgTXs4WgJJmFlOrPNqgGMtVcXocHEQD67SVM/VXhkF5yYhNAn
M+L0dVz0rRDSm3Z+chg5NjePUA3gTNeUqW83JV7ygF/uDERUlcgAUvYjWZiq45qC
h4vRs+gJNuta4m9M4mcK5RwihA==
-----END CERTIFICATE-----
Generated at Sat Dec 20 06:14:03 2025 by rpki-client