This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.mft
File:                     CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.mft (raw, json)
Hash identifier:          PbWOJ26Qs+GmhlioFipY1llVdkCCpN+YcC/HTzRpvvw=
Subject key identifier:   40:D2:3B:4E:39:77:15:B3:FA:30:99:FF:F3:63:79:3F:68:10:2F:55
Authority key identifier: CA:FB:3F:D5:BF:98:78:D8:18:3A:B3:AD:06:18:B5:AE:D2:3F:DC:F4
Certificate issuer:       /CN=CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4
Certificate serial:       677DCD2FFC9D189F2D52640143D17AE63AA86B0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.mft
Manifest number:          19
Signing time:             Tue 16 Dec 2025 07:59:32 +0000
Manifest this update:     Tue 16 Dec 2025 07:54:32 +0000
Manifest next update:     Wed 17 Dec 2025 08:42:32 +0000
Files and hashes:         1: 323830343a363366633a3a2f33322d3332203d3e20323639333936.roa (hash: MF6p37v2tgM05fGi90XZYc1EpUb1DUMPbHLr0xQOPXk=)
                          2: CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.crl (hash: tUGLJNEj0DeX/bvCdNC7l2IpOnUketumskFXs+DJqa8=)
                          3: 34352e3138342e3131342e302f32332d3233203d3e20323639333936.roa (hash: 9Ll9SlYhCe9s5J3AdmUJk/u5EYDWZrDBERmYkJ4XipI=)
                          4: AS269396.asa (hash: +lvkoxSMzs1JHWJbLvyknolUlvRr2j0KrvzDmZSEQg4=)
                          5: 34352e3138342e3131322e302f32322d3232203d3e20323639333936.roa (hash: 3yG2D2Cfamxvd/q8Sa5jAkhfU7jkrZ8jyqentjpklb4=)
                          6: 323830343a363366633a383030303a3a2f33332d3333203d3e20323639333936.roa (hash: Jx2HoGTpTEOFYaF0AGEQVcHJKWD+iwmHMigicirolok=)
                          7: 34352e3138342e3131322e302f32332d3233203d3e20323639333936.roa (hash: SXfhTYQUUmxM0nOskdW9HWgudVdDt2GtsWPbeyqYdg8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.crl
                          rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Dec 2025 08:28:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:7d:cd:2f:fc:9d:18:9f:2d:52:64:01:43:d1:7a:e6:3a:a8:6b:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4
        Validity
            Not Before: Dec 16 07:54:32 2025 GMT
            Not After : Dec 17 08:42:32 2025 GMT
        Subject: CN=40D23B4E397715B3FA3099FFF363793F68102F55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4a:52:44:6e:51:b6:05:c4:cf:a7:21:86:d9:
                    7b:e3:90:aa:0e:36:78:e7:3d:1c:26:a3:93:e9:fd:
                    c1:7d:46:e2:eb:75:48:9a:82:11:49:96:29:7a:b3:
                    6b:6b:49:a1:81:06:f9:42:dc:90:1b:0b:7e:10:f2:
                    59:40:ce:03:a6:b5:27:25:76:06:a4:6f:53:56:bb:
                    ea:a0:c4:b5:5f:4a:26:9a:f1:ef:4c:ad:46:f7:58:
                    59:15:a6:c3:98:59:75:b4:a6:b1:a3:27:5d:cf:51:
                    4f:db:31:3b:cf:87:c5:b4:09:63:b4:23:99:a0:14:
                    1d:08:67:02:f8:5a:b7:1f:a6:0c:79:04:5f:6d:45:
                    37:37:1f:88:5d:b7:df:87:5a:39:8d:82:21:fd:d4:
                    c6:5c:31:fa:34:91:79:b7:4b:02:3e:3e:d6:76:2b:
                    22:dc:8e:28:91:83:61:19:9f:b3:0b:ee:d3:fd:9d:
                    5d:c9:0f:d0:36:d0:0a:41:9f:3c:8d:ba:9e:6c:94:
                    29:28:85:5d:fa:7a:0f:2f:38:02:71:63:75:77:57:
                    81:ce:19:1c:f0:18:a9:25:ed:8d:c6:a0:31:0b:f3:
                    23:cc:4a:b6:45:e2:96:20:72:ba:22:01:f6:f8:4a:
                    74:8f:b6:8b:89:5a:7e:95:e7:e1:30:7b:41:79:9d:
                    e0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D2:3B:4E:39:77:15:B3:FA:30:99:FF:F3:63:79:3F:68:10:2F:55
            X509v3 Authority Key Identifier:
                keyid:CA:FB:3F:D5:BF:98:78:D8:18:3A:B3:AD:06:18:B5:AE:D2:3F:DC:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:17:12:11:5d:45:2b:da:4f:40:a8:56:a9:55:f5:19:f6:ac:
         f3:37:60:cc:09:0b:23:c4:e2:a3:a9:02:77:fa:8c:a7:02:72:
         16:80:03:ab:74:fc:8e:08:32:9f:4b:93:2a:3c:6a:2d:e5:0a:
         80:34:d5:c6:0a:b9:47:5a:05:b7:9e:c9:73:79:93:22:86:eb:
         46:93:ff:2d:ec:88:89:bf:ce:e1:0b:18:7a:b9:c4:35:42:9c:
         e4:65:a2:64:32:ca:c4:de:74:a1:a9:17:d1:bd:3c:ce:1b:30:
         28:89:91:7e:e2:75:ef:10:7c:b1:9b:51:f5:27:17:69:24:9e:
         ab:bf:bc:b7:29:b2:92:de:c5:48:ed:75:71:4a:bf:52:69:0a:
         16:90:83:cc:6b:62:fe:40:bb:63:a2:04:42:62:69:cc:ae:07:
         fb:86:35:41:99:bf:76:b8:cc:09:c5:2f:a7:65:14:67:b5:b2:
         0a:b4:86:9c:b8:90:b9:49:27:44:1e:78:87:cc:43:c8:96:3b:
         90:36:90:08:ac:84:c0:68:fb:47:50:23:aa:7f:38:06:dd:9d:
         a2:29:0c:d5:9d:93:4d:95:39:13:d7:0c:9b:ff:26:ae:80:f9:
         44:23:f4:40:f3:53:41:54:c7:04:22:aa:5a:f1:35:53:63:40:
         9e:85:79:82
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZ33NL/ydGJ8tUmQBQ9F65jqoaw0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FGQjNGRDVCRjk4NzhEODE4M0FCM0FEMDYxOEI1QUVE
MjNGRENGNDAeFw0yNTEyMTYwNzU0MzJaFw0yNTEyMTcwODQyMzJaMDMxMTAvBgNV
BAMTKDQwRDIzQjRFMzk3NzE1QjNGQTMwOTlGRkYzNjM3OTNGNjgxMDJGNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDASlJEblG2BcTPpyGG2XvjkKoO
NnjnPRwmo5Pp/cF9RuLrdUiaghFJlil6s2trSaGBBvlC3JAbC34Q8llAzgOmtScl
dgakb1NWu+qgxLVfSiaa8e9MrUb3WFkVpsOYWXW0prGjJ13PUU/bMTvPh8W0CWO0
I5mgFB0IZwL4Wrcfpgx5BF9tRTc3H4hdt9+HWjmNgiH91MZcMfo0kXm3SwI+PtZ2
KyLcjiiRg2EZn7ML7tP9nV3JD9A20ApBnzyNup5slCkohV36eg8vOAJxY3V3V4HO
GRzwGKkl7Y3GoDEL8yPMSrZF4pYgcroiAfb4SnSPtouJWn6V5+Ewe0F5neABAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUQNI7Tjl3FbP6MJn/82N5P2gQL1UwHwYDVR0j
BBgwFoAUyvs/1b+YeNgYOrOtBhi1rtI/3PQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTc1RUFoc2lIdGgyWVQ5R1ZpTGlzMW5CZTY2QWVjUFlRZGIxU0p5NEtK
alYvMC9DQUZCM0ZENUJGOTg3OEQ4MTgzQUIzQUQwNjE4QjVBRUQyM0ZEQ0Y0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBRkIzRkQ1QkY5ODc4RDgx
ODNBQjNBRDA2MThCNUFFRDIzRkRDRjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RTc1RUFoc2lIdGgyWVQ5R1ZpTGlzMW5CZTY2QWVjUFlRZGIxU0p5NEtKalYvMC9D
QUZCM0ZENUJGOTg3OEQ4MTgzQUIzQUQwNjE4QjVBRUQyM0ZEQ0Y0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjRcSEV1FK9pPQKhWqVX1Gfas8zdgzAkLI8Tio6kCd/qMpwJyFoADq3T8jggy
n0uTKjxqLeUKgDTVxgq5R1oFt57Jc3mTIobrRpP/LeyIib/O4QsYernENUKc5GWi
ZDLKxN50oakX0b08zhswKImRfuJ17xB8sZtR9ScXaSSeq7+8tymykt7FSO11cUq/
UmkKFpCDzGti/kC7Y6IEQmJpzK4H+4Y1QZm/drjMCcUvp2UUZ7WyCrSGnLiQuUkn
RB54h8xDyJY7kDaQCKyEwGj7R1Ajqn84Bt2doikM1Z2TTZU5E9cMm/8mroD5RCP0
QPNTQVTHBCKqWvE1U2NAnoV5gg==
-----END CERTIFICATE-----
Generated at Tue Dec 16 09:38:06 2025 by rpki-client