This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.mft
File:                     CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.mft (raw, json)
Hash identifier:          WKR5aRyGEhbjif00elavTVUbUkKNpydDXHOncNGH5rU=
Subject key identifier:   16:85:A2:CE:20:37:02:93:B3:3C:8A:3B:89:4F:8A:58:ED:2B:40:66
Authority key identifier: CB:CD:6C:54:C2:AC:7A:F2:B0:CE:1B:67:2F:5C:D2:74:C0:17:95:1D
Certificate issuer:       /CN=CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D
Certificate serial:       2686001CAE3E12C445695C53281A932BB69B0E1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.mft
Manifest number:          0122
Signing time:             Fri 19 Dec 2025 20:26:49 +0000
Manifest this update:     Fri 19 Dec 2025 20:21:49 +0000
Manifest next update:     Sat 20 Dec 2025 21:48:49 +0000
Files and hashes:         1: 34352e3137322e39362e302f32322d3234203d3e20323731323533.roa (hash: rTC/gTT60746fE/p9fdkgPaXlGesIZj5KkmlOE1e4Fo=)
                          2: 3133312e3235352e35362e302f32322d3234203d3e20323731323533.roa (hash: uU+/csjT2NVQbIjnMFhPC8+dLWEEVAp/0FwA71AGAfg=)
                          3: CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.crl (hash: 8ss+hlfGB/6SbUvy0JrKiH9yNs9iY3r7txjHxCBalWo=)
                          4: 34352e3138302e31362e302f32322d3234203d3e20323731323533.roa (hash: Nf+xU4blwD0X0As5SResq4LdKOlUrjeZB1DEmIYQBKE=)
                          5: 3136342e3136332e3139322e302f32322d3234203d3e20323731323533.roa (hash: Ql0iF5+L4dTD64DGYvCGzGkD3jGu1jUv08rhoiafxWk=)
                          6: 323830343a373839383a3a2f33322d3438203d3e20323731323533.roa (hash: xW+fvQFNMFekLO82/E1nb9mF3MD5AQJ7vbCnI5uk25M=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.crl
                          rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 21:48:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:86:00:1c:ae:3e:12:c4:45:69:5c:53:28:1a:93:2b:b6:9b:0e:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D
        Validity
            Not Before: Dec 19 20:21:49 2025 GMT
            Not After : Dec 20 21:48:49 2025 GMT
        Subject: CN=1685A2CE20370293B33C8A3B894F8A58ED2B4066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9e:a8:58:cf:08:86:99:42:02:f8:59:96:c4:
                    9e:c7:4a:e7:0e:c7:21:9e:2e:4a:97:88:ed:7f:e7:
                    c8:6b:69:d1:1a:00:e6:17:12:8e:3e:e6:cc:5c:2c:
                    51:85:67:29:14:69:f2:bc:8d:a5:2c:6a:55:41:66:
                    b8:67:21:74:a7:e6:b2:83:7a:8a:f1:4d:69:72:3f:
                    d1:73:d9:aa:b2:22:74:97:86:c3:27:c5:ba:e6:3c:
                    a2:22:a6:14:8e:97:89:b4:d4:e2:6c:a8:88:44:ff:
                    6a:cb:e3:3f:a3:98:17:72:f7:b4:09:f9:a5:1f:eb:
                    f9:8a:74:40:2a:ae:c0:bd:4d:54:9d:00:6e:03:7f:
                    c9:05:1a:78:c9:69:5f:af:e2:07:db:f8:41:c1:1f:
                    bc:da:e3:f9:e6:93:4d:40:ae:0d:3a:a1:0a:71:97:
                    1e:39:76:df:3c:d7:72:c8:1f:46:7b:1c:6b:5e:31:
                    dd:00:d4:22:25:c8:cc:24:89:2c:1f:9c:1f:4d:af:
                    5a:d9:c7:73:dd:89:02:66:8b:65:b3:fb:c2:7b:39:
                    2b:08:da:bb:b6:b5:04:dc:ef:c9:bc:51:58:f0:4d:
                    65:f9:f7:c3:c7:aa:71:37:83:96:5e:b3:19:e9:b2:
                    79:d0:78:37:ca:8c:23:b3:41:ad:c9:44:75:6e:b2:
                    16:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:85:A2:CE:20:37:02:93:B3:3C:8A:3B:89:4F:8A:58:ED:2B:40:66
            X509v3 Authority Key Identifier:
                keyid:CB:CD:6C:54:C2:AC:7A:F2:B0:CE:1B:67:2F:5C:D2:74:C0:17:95:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:d0:50:35:b8:98:59:af:dc:be:43:26:ff:83:cf:59:22:50:
         da:73:06:b2:4d:b3:5c:cc:82:1c:c1:a2:73:77:f2:26:f7:28:
         0d:16:f8:12:9f:8f:93:b1:10:cf:6f:85:0d:78:81:c3:b1:fa:
         65:b4:50:c0:30:6a:bf:5a:c1:0a:b1:f7:bb:05:15:d9:d0:6a:
         b7:df:9f:62:a3:fb:56:44:68:d0:3c:a8:9e:c4:17:51:50:ae:
         a1:0d:9a:3b:ca:68:1f:88:de:aa:ea:5b:cf:d6:2e:b3:b2:80:
         a3:ed:51:0a:3c:2a:59:e3:1a:19:dd:dc:7d:08:3b:b9:0c:6c:
         14:72:b0:78:58:bd:29:af:d7:5d:32:89:b8:4f:b7:7e:3e:23:
         9b:43:31:d6:eb:c9:41:92:65:d5:87:52:62:b8:19:e7:49:7c:
         80:8f:63:b3:e0:68:f4:a2:32:40:97:da:9a:ca:a9:b0:81:78:
         f1:28:e6:41:e4:99:79:7f:e0:04:f3:95:60:80:a0:94:cf:6a:
         b6:92:33:59:13:ca:97:8c:d7:a8:8c:80:fb:34:63:92:29:d2:
         5c:ae:64:ef:f2:24:29:85:e3:75:af:97:b9:5e:66:25:32:e9:
         89:b1:8a:ad:ab:94:b4:67:e3:80:15:02:7f:fc:59:a0:24:d3:
         9b:d8:e6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:23:37 2025 by rpki-client