This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft
File:                     89F33609E2B118C8ED9A105548D2D01FD6E38729.mft (raw, json)
Hash identifier:          SI++RXCwSmzDR5xLeZtczDb/61aeehWT9taS/HkGIno=
Subject key identifier:   68:49:15:3E:39:F7:6A:56:C1:6D:48:38:2C:EC:82:01:48:70:F6:12
Authority key identifier: 89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29
Certificate issuer:       /CN=89F33609E2B118C8ED9A105548D2D01FD6E38729
Certificate serial:       56B6F25F5DA17A8889E58CE730B59488DDBBFF62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft
Manifest number:          034A
Signing time:             Sun 28 Dec 2025 02:55:44 +0000
Manifest this update:     Sun 28 Dec 2025 02:50:44 +0000
Manifest next update:     Mon 29 Dec 2025 04:11:44 +0000
Files and hashes:         1: 3137302e3234342e3231362e302f32322d3234203d3e20323633343936.roa (hash: 91gQ1OFtC7i3YwbFOdgAOt94iN2xUARUXKGh62+Ssos=)
                          2: 3139312e3234332e35362e302f32312d3234203d3e20323633343936.roa (hash: bMO8E7JDP414YIw6qvyG05VpeLGja7y87JGV9snRtok=)
                          3: 89F33609E2B118C8ED9A105548D2D01FD6E38729.crl (hash: 1rtdQHQcEzbiGWBPqBalsBgdlHJEg9uMTCELj1MoCLQ=)
                          4: 323830343a313263303a3a2f33322d3438203d3e20323633343936.roa (hash: yCRnKe7Cfo4f5weE5YMpi/ZO3/1Psrg+aJlLbswl12Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl
                          rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 29 Dec 2025 04:11:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b6:f2:5f:5d:a1:7a:88:89:e5:8c:e7:30:b5:94:88:dd:bb:ff:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89F33609E2B118C8ED9A105548D2D01FD6E38729
        Validity
            Not Before: Dec 28 02:50:44 2025 GMT
            Not After : Dec 29 04:11:44 2025 GMT
        Subject: CN=6849153E39F76A56C16D48382CEC82014870F612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:3d:ef:92:b5:11:f8:b6:30:bd:5f:0a:a0:ac:
                    b8:69:0a:8c:25:97:f5:38:c0:9e:22:ea:42:f1:a1:
                    f3:3d:c6:9f:ee:11:1f:e7:ae:0a:6e:54:18:f1:b3:
                    0c:6c:67:ab:f1:06:79:74:c4:0a:5b:96:da:4f:38:
                    bb:55:2e:da:1f:29:2f:c0:74:d7:1c:9a:19:12:61:
                    97:3f:ee:e7:fc:e2:62:0d:1f:d9:ae:f0:24:fb:7b:
                    16:d1:88:88:51:e0:9e:fe:34:88:1e:ad:02:03:80:
                    07:40:f2:3d:52:0a:9c:f4:56:25:6d:49:ae:55:c9:
                    95:28:e4:19:0d:4c:b0:9b:74:12:b9:d2:43:1e:81:
                    a3:c6:15:29:ae:7a:35:de:15:ee:04:bc:98:b1:a8:
                    a8:9b:d7:03:a9:cd:7e:73:86:5c:c1:22:12:85:e2:
                    bb:07:22:1a:78:0f:05:ca:a8:ae:31:38:15:83:1b:
                    5e:c3:4c:e4:ce:60:92:5b:d4:36:fa:33:99:e2:9a:
                    e6:3b:67:1d:98:4d:cf:57:02:e8:90:9a:ec:84:a2:
                    af:80:a0:6f:f3:37:4c:64:b5:2c:1d:0b:45:74:1d:
                    e5:bf:c5:07:17:9b:d6:53:2d:bb:18:3c:39:a2:e1:
                    7d:4b:41:9f:35:dc:10:f5:f0:de:81:3d:76:82:ad:
                    a3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:49:15:3E:39:F7:6A:56:C1:6D:48:38:2C:EC:82:01:48:70:F6:12
            X509v3 Authority Key Identifier:
                keyid:89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:f5:54:b0:3d:35:61:fb:fe:1b:9b:26:33:2d:7c:a9:4b:86:
         ec:81:a0:79:33:65:56:54:5a:33:c3:3d:b8:ee:7a:1c:d4:d7:
         e0:e3:22:10:86:e8:6b:b9:11:1d:a4:1e:de:f1:b4:8a:e4:51:
         b3:99:61:a2:39:30:ff:63:1a:25:86:45:4f:44:b0:ad:d6:eb:
         1d:45:3e:1c:ac:e5:62:6b:00:36:cc:45:be:45:41:79:fe:96:
         34:ce:ad:07:5a:f1:70:de:6b:c5:4d:7b:f9:0c:77:c7:64:e2:
         6a:6e:20:9e:7a:59:98:7f:b4:fe:15:cc:2d:2a:88:04:fe:bc:
         50:c2:5c:31:19:a5:db:7b:6d:2a:90:28:53:28:ad:6c:63:08:
         b8:6e:75:ea:7d:96:2c:ca:cb:4b:44:44:d8:96:6c:73:db:d1:
         7a:b6:6b:ef:d5:64:15:c7:86:35:2f:c8:d3:cc:18:d3:15:d7:
         9d:3b:5f:93:6c:04:42:b0:88:c6:6a:89:99:30:d7:f1:ce:2a:
         a8:b5:5c:1f:da:83:b4:fb:ef:21:44:3f:2c:aa:5b:85:02:5a:
         10:0b:45:5b:5e:c4:60:47:6d:3f:c2:25:c6:39:db:8d:7f:4b:
         82:c0:49:be:c6:bd:8d:5a:d9:3c:8b:fd:b8:fc:51:e9:0d:1e:
         57:a7:c1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 12:43:39 2025 by rpki-client