This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft
File:                     8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft (raw, json)
Hash identifier:          Iemo/K+h4JfE/ncpspzDSAs6L+ZihFCyvcxy4/aT7FA=
Subject key identifier:   42:C5:4A:FB:C4:AC:1E:89:B9:66:70:D9:17:5B:40:69:EB:B7:4D:1B
Authority key identifier: 8C:CB:AD:4C:CA:17:0E:31:C6:A6:E2:2B:17:2F:88:4B:22:4E:3C:49
Certificate issuer:       /CN=8CCBAD4CCA170E31C6A6E22B172F884B224E3C49
Certificate serial:       045AD40155FE8657614C9C725D936510C9D38B20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft
Manifest number:          02D0
Signing time:             Fri 19 Dec 2025 17:31:26 +0000
Manifest this update:     Fri 19 Dec 2025 17:26:26 +0000
Manifest next update:     Sat 20 Dec 2025 18:36:26 +0000
Files and hashes:         1: 323830343a373762633a3a2f33322d313238203d3e20323731313936.roa (hash: 4yngCd7rMrm1N5h7XLUwcr/v6nWiYlH0k6Z0RNslBIQ=)
                          2: 8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.crl (hash: A3a78W0pyJVURXfE86eaTKQxsUe5iLQDL6VVPySvhx4=)
                          3: 3137392e34392e3133322e302f32322d3332203d3e20323731313936.roa (hash: /02W0MeQbHpyCAaZLSENooDm7Q6/cQG4TZ0qLVZ3ol0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.crl
                          rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 18:36:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:5a:d4:01:55:fe:86:57:61:4c:9c:72:5d:93:65:10:c9:d3:8b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CCBAD4CCA170E31C6A6E22B172F884B224E3C49
        Validity
            Not Before: Dec 19 17:26:26 2025 GMT
            Not After : Dec 20 18:36:26 2025 GMT
        Subject: CN=42C54AFBC4AC1E89B96670D9175B4069EBB74D1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:74:6e:ba:47:c6:e1:cc:8c:68:22:9a:9a:89:
                    dd:54:34:6b:a0:67:ff:ea:f4:f7:01:e9:06:c7:01:
                    3d:be:8e:88:cc:df:4e:55:e2:4e:e6:2b:ff:b8:ad:
                    76:7e:1c:a6:d2:34:77:27:63:e1:14:10:86:8f:f8:
                    56:24:1b:29:fd:c7:39:73:97:59:65:a8:5e:8f:9e:
                    0d:ee:8d:79:6b:a7:c7:e2:92:64:bf:13:89:fd:c8:
                    d2:95:5a:89:e4:a7:5b:26:e9:eb:a1:ad:2f:af:35:
                    4c:c8:18:de:cc:88:d4:07:da:e1:64:36:5d:c6:a2:
                    3a:94:91:56:62:63:c4:62:48:ef:69:a5:2a:3e:b0:
                    67:e5:a7:e0:54:0b:b4:96:e2:22:38:b1:d2:28:0d:
                    6f:ff:17:7d:30:90:f6:89:a4:da:ee:dc:84:7d:7d:
                    6e:f6:69:6c:82:a4:24:9b:65:e4:c8:27:f3:13:bf:
                    94:43:2d:41:dd:99:b6:1b:06:13:55:31:eb:3b:46:
                    ea:9b:03:a3:d2:21:16:42:ee:48:66:fe:8c:06:51:
                    98:fc:38:fd:f0:c4:2d:7a:ef:65:08:18:46:4b:c9:
                    3d:26:31:7b:d4:3b:b6:b1:66:60:b1:98:a1:01:df:
                    a2:85:5a:6c:8c:a1:d8:88:aa:17:58:c8:b3:4a:bc:
                    70:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C5:4A:FB:C4:AC:1E:89:B9:66:70:D9:17:5B:40:69:EB:B7:4D:1B
            X509v3 Authority Key Identifier:
                keyid:8C:CB:AD:4C:CA:17:0E:31:C6:A6:E2:2B:17:2F:88:4B:22:4E:3C:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:e3:e6:8b:66:e0:ba:4c:d1:2c:d5:a6:62:20:41:20:8e:1f:
         19:da:74:91:5c:d0:40:91:e6:0f:88:00:1b:a1:45:ee:7d:a4:
         02:f6:6b:cb:39:59:51:a9:a5:50:f7:04:3f:6e:a3:82:1e:34:
         41:7f:1f:e6:4d:77:42:52:31:13:24:a2:d8:49:d1:92:7b:16:
         b1:d5:ed:30:eb:38:40:8c:82:5d:16:09:f5:0d:fa:91:28:31:
         5a:4d:4a:67:d5:04:43:1e:c5:25:eb:25:6d:bb:be:1f:c7:7a:
         23:fa:26:ad:77:ec:7a:7d:66:cc:94:31:2b:aa:e8:00:9a:11:
         39:8d:e3:94:3f:c4:64:f1:32:8e:db:f2:4e:30:ea:2b:80:68:
         31:09:35:2b:12:1c:62:65:4d:a1:ad:71:97:00:d2:f2:12:2d:
         34:06:43:cd:24:24:ac:31:9b:79:94:6b:de:bb:aa:5e:88:f3:
         26:73:07:65:5b:f3:72:c9:43:dd:cf:fc:c4:85:89:d5:8b:59:
         f7:87:6b:e9:47:4d:82:c3:ce:70:f5:ee:f1:a2:a9:14:12:a7:
         c7:ff:99:6f:11:fe:8c:d8:eb:18:e5:3f:90:de:f3:3d:ed:e0:
         69:31:6f:f4:c8:b1:9f:92:f3:f9:9e:8f:9d:d2:b8:ef:1a:02:
         55:2b:e0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 08:13:42 2025 by rpki-client