This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/1/136589E651A12B3538E17F7856FB523F01EC591F.mft
File:                     136589E651A12B3538E17F7856FB523F01EC591F.mft (raw, json)
Hash identifier:          vvI2Tdk2RcQrDvPC28ruam28YFuHCVL2+dkNVRCPShA=
Subject key identifier:   22:B9:E7:8E:23:9C:54:5F:B4:3E:C0:86:EE:29:BF:EA:F2:FF:20:47
Authority key identifier: 13:65:89:E6:51:A1:2B:35:38:E1:7F:78:56:FB:52:3F:01:EC:59:1F
Certificate issuer:       /CN=136589E651A12B3538E17F7856FB523F01EC591F
Certificate serial:       0B09314BDE5847CB68D3E68543C2C10AB94C571C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/136589E651A12B3538E17F7856FB523F01EC591F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/1/136589E651A12B3538E17F7856FB523F01EC591F.mft
Manifest number:          033F
Signing time:             Sun 28 Dec 2025 16:58:13 +0000
Manifest this update:     Sun 28 Dec 2025 16:53:13 +0000
Manifest next update:     Mon 29 Dec 2025 19:02:13 +0000
Files and hashes:         1: 3137372e32322e34382e302f32302d3234203d3e203532393533.roa (hash: /GXca2EfqUMJv9r49qm97J+22ilUM6/lXNmYfCJXIH0=)
                          2: 323830343a356463303a3a2f33322d3438203d3e203532393533.roa (hash: Xq0IXjQsaxEFe/mF7uhfhxOIcPaWDzZyKYvPngBz+QY=)
                          3: 136589E651A12B3538E17F7856FB523F01EC591F.crl (hash: C3cVJH7AnJv/lZ/W+g+RxtBAKzdLYEzMcJztNuNu3F0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/1/136589E651A12B3538E17F7856FB523F01EC591F.crl
                          rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/1/136589E651A12B3538E17F7856FB523F01EC591F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/136589E651A12B3538E17F7856FB523F01EC591F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 29 Dec 2025 19:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:09:31:4b:de:58:47:cb:68:d3:e6:85:43:c2:c1:0a:b9:4c:57:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=136589E651A12B3538E17F7856FB523F01EC591F
        Validity
            Not Before: Dec 28 16:53:13 2025 GMT
            Not After : Dec 29 19:02:13 2025 GMT
        Subject: CN=22B9E78E239C545FB43EC086EE29BFEAF2FF2047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:07:c2:85:b8:d6:57:63:5f:a4:e8:3c:d1:c7:
                    13:31:22:06:9c:4e:69:04:1c:2f:c4:6b:c1:f6:3b:
                    37:c7:05:ba:62:89:77:e6:97:2e:61:42:29:b3:fb:
                    c5:9e:bd:01:d4:ab:d4:76:85:e9:0f:d1:c5:7d:7a:
                    f3:1b:0a:bc:49:16:fb:b1:ac:fc:f8:1c:b3:88:63:
                    16:8f:fb:fd:3d:f7:83:01:bf:e2:1e:ad:bf:56:33:
                    5a:91:80:4c:d5:bf:1b:87:d3:67:e2:90:91:e3:4c:
                    e0:5f:aa:3d:29:63:25:32:35:a6:8d:10:46:fd:cb:
                    b7:53:fc:e9:8a:96:cd:9d:65:c4:11:29:0a:16:4c:
                    9c:aa:64:26:9b:d4:1a:b6:34:6a:f9:63:f1:4a:ae:
                    55:e7:ba:1e:67:50:58:02:cb:80:2c:fa:a6:45:18:
                    b7:bd:80:4e:94:5d:bf:86:1c:89:6b:01:2b:2d:3c:
                    ec:8b:aa:15:bc:98:e5:cf:c5:4d:fb:1b:bc:a4:32:
                    75:02:62:b9:fa:7a:fc:d5:3c:19:3b:23:17:93:c5:
                    1f:07:9e:07:e3:9d:8c:f3:b8:07:96:ec:11:84:cc:
                    12:4c:90:cf:75:9a:63:70:be:b4:dc:df:7d:3c:44:
                    c5:31:2f:5a:16:90:ea:2c:b8:7a:bb:f9:5f:0e:6f:
                    9f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B9:E7:8E:23:9C:54:5F:B4:3E:C0:86:EE:29:BF:EA:F2:FF:20:47
            X509v3 Authority Key Identifier:
                keyid:13:65:89:E6:51:A1:2B:35:38:E1:7F:78:56:FB:52:3F:01:EC:59:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/1/136589E651A12B3538E17F7856FB523F01EC591F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/136589E651A12B3538E17F7856FB523F01EC591F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/1/136589E651A12B3538E17F7856FB523F01EC591F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:21:4c:4d:14:a5:d8:f5:42:ea:a4:0d:7c:45:6e:8f:de:10:
         35:c8:ac:01:d8:04:67:c7:01:8c:ad:5c:2e:23:b9:25:13:3e:
         5b:ee:98:94:fa:09:1f:9c:47:3b:b7:86:11:0e:ac:1b:70:51:
         20:6f:6b:28:61:14:b3:6e:06:f2:df:bb:8d:6a:05:bd:f0:e1:
         f1:85:21:18:63:e9:70:19:3e:08:b0:af:9f:d6:30:dc:5e:b1:
         5c:23:c8:a1:65:ca:a1:98:5c:b4:21:f3:36:d5:d1:9d:ee:60:
         80:0b:3a:e5:c0:c8:29:40:4f:9a:f5:ab:b8:33:1e:a9:5e:f6:
         8c:db:83:30:cf:2b:d9:4b:06:05:2f:7b:c3:92:fb:56:b1:23:
         1d:59:d8:7d:1b:ea:37:dd:d6:d7:d7:c0:c6:71:53:1e:2f:3f:
         ec:fa:fa:1a:59:d3:44:ae:36:f1:e4:1a:09:c2:a8:43:cd:6f:
         ce:5f:8b:9b:07:04:f4:34:b3:4b:3b:15:e2:5b:06:72:71:c0:
         88:e5:1b:ce:6c:1c:ed:36:ff:39:e0:46:33:3c:b7:f5:7a:ea:
         17:f5:d6:5d:9d:ea:41:73:f0:d3:91:0b:e4:19:64:77:4b:40:
         0a:e2:af:50:e0:53:b7:2a:a4:7b:9c:2d:2b:11:a0:8e:6e:a3:
         e1:cc:5d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----