This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/088FDBB1B4836269897C88564BFDA8CC6E837086.mft
File:                     088FDBB1B4836269897C88564BFDA8CC6E837086.mft (raw, json)
Hash identifier:          D1h1ZnXulNEP9T7GhcJaQLaQ+o5wmQasgzaOIqHYhWA=
Subject key identifier:   A5:F9:F7:7D:6D:38:D6:A0:63:EA:73:F6:16:AF:78:5E:77:D9:15:00
Authority key identifier: 08:8F:DB:B1:B4:83:62:69:89:7C:88:56:4B:FD:A8:CC:6E:83:70:86
Certificate issuer:       /CN=088FDBB1B4836269897C88564BFDA8CC6E837086
Certificate serial:       0AC047B99D033E554362AB79255177A9FBC2AC37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FDBB1B4836269897C88564BFDA8CC6E837086.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/088FDBB1B4836269897C88564BFDA8CC6E837086.mft
Manifest number:          015A
Signing time:             Sun 28 Dec 2025 09:43:23 +0000
Manifest this update:     Sun 28 Dec 2025 09:38:23 +0000
Manifest next update:     Mon 29 Dec 2025 10:06:23 +0000
Files and hashes:         1: 3133382e3132322e34302e302f32322d3232203d3e20323634333136.roa (hash: u/j5Z1ZtfsOqpn88Ombvsr2xmebnzBPfptJuqBfP/2g=)
                          2: 088FDBB1B4836269897C88564BFDA8CC6E837086.crl (hash: dI44vSZ4AvRxer+cIGTLTDkH/KRSCiRJCif6DU7W29k=)
                          3: 3136382e3132312e3231362e302f32322d3232203d3e20323634333136.roa (hash: HU/C0vg/9pQ4TR3nhv8AeqGff/zFHp/Pviu8wJA8DLE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/088FDBB1B4836269897C88564BFDA8CC6E837086.crl
                          rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/088FDBB1B4836269897C88564BFDA8CC6E837086.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FDBB1B4836269897C88564BFDA8CC6E837086.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 29 Dec 2025 10:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:c0:47:b9:9d:03:3e:55:43:62:ab:79:25:51:77:a9:fb:c2:ac:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088FDBB1B4836269897C88564BFDA8CC6E837086
        Validity
            Not Before: Dec 28 09:38:23 2025 GMT
            Not After : Dec 29 10:06:23 2025 GMT
        Subject: CN=A5F9F77D6D38D6A063EA73F616AF785E77D91500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f9:cd:b7:bb:0b:5d:ae:95:61:7d:3a:6e:21:
                    c7:98:66:82:aa:38:84:b7:14:66:c5:f1:4f:80:82:
                    ac:a3:9a:47:3a:f2:e5:80:bc:a4:73:61:9b:6a:2d:
                    40:f6:49:b5:a3:87:03:9c:4a:89:57:08:94:4e:aa:
                    7d:ec:a8:87:b8:d6:61:6a:29:c6:9a:f1:1b:25:25:
                    23:65:60:c0:0c:29:c2:ed:aa:dd:ee:8d:65:3b:7c:
                    a1:97:03:19:9a:b8:b6:36:cf:e4:6e:b7:0d:10:50:
                    da:af:eb:ea:83:a3:b5:31:69:15:4f:d1:7f:07:87:
                    95:8d:1e:04:44:ff:ca:34:57:d5:4b:fe:5b:c2:2f:
                    81:4f:8c:f0:81:ba:51:d7:68:7f:42:3c:9b:30:8f:
                    4a:f5:db:ae:c8:2d:93:84:4b:f3:24:21:c2:2d:1c:
                    b3:38:76:ad:6a:79:67:ad:d1:c3:06:64:6c:f6:63:
                    5d:4c:f9:8b:ea:51:96:b4:fc:01:2b:f2:6a:8a:f4:
                    01:18:f7:25:17:a5:5c:aa:be:78:f0:16:ba:9a:85:
                    87:42:98:df:88:b7:05:f0:fa:ed:e8:78:66:92:55:
                    3a:05:7b:92:4e:b2:a1:ea:0c:7f:c6:f0:39:11:fe:
                    65:b9:8a:30:7a:c7:8f:d1:30:5a:e5:40:62:30:d8:
                    ad:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F9:F7:7D:6D:38:D6:A0:63:EA:73:F6:16:AF:78:5E:77:D9:15:00
            X509v3 Authority Key Identifier:
                keyid:08:8F:DB:B1:B4:83:62:69:89:7C:88:56:4B:FD:A8:CC:6E:83:70:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/088FDBB1B4836269897C88564BFDA8CC6E837086.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FDBB1B4836269897C88564BFDA8CC6E837086.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/088FDBB1B4836269897C88564BFDA8CC6E837086.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:b0:4b:42:e0:c3:03:eb:db:df:ab:76:54:b7:10:a4:5c:62:
         79:f2:4d:10:09:e5:3e:d1:57:c0:a6:0d:e9:8b:63:5f:12:1e:
         5e:a7:04:83:4e:e5:fc:81:7c:9c:22:25:cc:aa:2c:eb:23:54:
         e3:22:6c:6a:16:27:94:62:ce:3c:e6:43:88:38:51:3e:71:3a:
         0d:75:82:72:df:71:88:40:ea:e5:51:12:bd:39:92:7c:b4:94:
         e1:4e:4d:d4:a5:0c:e1:46:88:ad:f6:ff:26:ae:6e:8f:f2:25:
         0f:67:62:be:5c:5e:27:f0:d0:37:44:56:11:d1:6e:5a:b6:21:
         77:88:34:97:36:99:e6:a5:18:c4:3a:65:cd:be:87:a0:81:6a:
         08:2f:fc:32:59:72:b0:78:9a:b0:45:b5:f9:ba:8a:21:ce:1a:
         f0:04:49:87:37:b2:d1:d4:85:5b:6b:46:0e:8d:d2:1f:68:31:
         fb:15:0b:84:1e:97:f6:6c:9b:b7:c0:b9:83:33:8a:b4:b5:c8:
         75:2e:32:2c:d3:6a:7c:d9:f7:7e:09:f5:a5:b7:6d:83:1c:c3:
         7f:46:bd:19:16:2f:ec:b4:53:cd:79:31:47:be:8f:6b:f6:88:
         7f:0c:51:da:7a:36:2d:90:9e:cd:40:38:ee:a2:5e:62:8e:b8:
         28:dc:b9:36
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCsBHuZ0DPlVDYqt5JVF3qfvCrDcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4RkRCQjFCNDgzNjI2OTg5N0M4ODU2NEJGREE4Q0M2
RTgzNzA4NjAeFw0yNTEyMjgwOTM4MjNaFw0yNTEyMjkxMDA2MjNaMDMxMTAvBgNV
BAMTKEE1RjlGNzdENkQzOEQ2QTA2M0VBNzNGNjE2QUY3ODVFNzdEOTE1MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1+c23uwtdrpVhfTpuIceYZoKq
OIS3FGbF8U+Agqyjmkc68uWAvKRzYZtqLUD2SbWjhwOcSolXCJROqn3sqIe41mFq
Kcaa8RslJSNlYMAMKcLtqt3ujWU7fKGXAxmauLY2z+Rutw0QUNqv6+qDo7UxaRVP
0X8Hh5WNHgRE/8o0V9VL/lvCL4FPjPCBulHXaH9CPJswj0r1267ILZOES/MkIcIt
HLM4dq1qeWet0cMGZGz2Y11M+YvqUZa0/AEr8mqK9AEY9yUXpVyqvnjwFrqahYdC
mN+ItwXw+u3oeGaSVToFe5JOsqHqDH/G8DkR/mW5ijB6x4/RMFrlQGIw2K2XAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUpfn3fW041qBj6nP2Fq94XnfZFQAwHwYDVR0j
BBgwFoAUCI/bsbSDYmmJfIhWS/2ozG6DcIYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTJCS2I2ZXRVUVR3SEVYSkJQODJES1NiOE1TelBKUDRKU3d3WnNuSzY1
cm0vMC8wODhGREJCMUI0ODM2MjY5ODk3Qzg4NTY0QkZEQThDQzZFODM3MDg2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4OEZEQkIxQjQ4MzYyNjk4
OTdDODg1NjRCRkRBOENDNkU4MzcwODYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RTJCS2I2ZXRVUVR3SEVYSkJQODJES1NiOE1TelBKUDRKU3d3WnNuSzY1cm0vMC8w
ODhGREJCMUI0ODM2MjY5ODk3Qzg4NTY0QkZEQThDQzZFODM3MDg2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcbBLQuDDA+vb36t2VLcQpFxiefJNEAnlPtFXwKYN6YtjXxIeXqcEg07l/IF8
nCIlzKos6yNU4yJsahYnlGLOPOZDiDhRPnE6DXWCct9xiEDq5VESvTmSfLSU4U5N
1KUM4UaIrfb/Jq5uj/IlD2divlxeJ/DQN0RWEdFuWrYhd4g0lzaZ5qUYxDplzb6H
oIFqCC/8MllysHiasEW1+bqKIc4a8ARJhzey0dSFW2tGDo3SH2gx+xULhB6X9myb
t8C5gzOKtLXIdS4yLNNqfNn3fgn1pbdtgxzDf0a9GRYv7LRTzXkxR76Pa/aIfwxR
2no2LZCezUA47qJeYo64KNy5Ng==
-----END CERTIFICATE-----
Generated at Sun Dec 28 20:28:51 2025 by rpki-client