This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/8472ED54B788162A1C8624B94DB27D75F93FC1EE.mft
File:                     8472ED54B788162A1C8624B94DB27D75F93FC1EE.mft (raw, json)
Hash identifier:          MXJ4BDWiaPs2Vi8mGuu7Hvh0LBy7JhybauEr92pxNPg=
Subject key identifier:   B2:75:99:02:EF:45:AD:0C:C3:5B:5D:1C:15:F8:A4:81:37:87:E9:1E
Authority key identifier: 84:72:ED:54:B7:88:16:2A:1C:86:24:B9:4D:B2:7D:75:F9:3F:C1:EE
Certificate issuer:       /CN=8472ED54B788162A1C8624B94DB27D75F93FC1EE
Certificate serial:       34A439DD4C7528B71C811029E71D0D9FEA69051E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8472ED54B788162A1C8624B94DB27D75F93FC1EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/8472ED54B788162A1C8624B94DB27D75F93FC1EE.mft
Manifest number:          01A8
Signing time:             Sun 28 Dec 2025 08:31:46 +0000
Manifest this update:     Sun 28 Dec 2025 08:26:46 +0000
Manifest next update:     Mon 29 Dec 2025 09:23:46 +0000
Files and hashes:         1: 323830343a353762303a3a2f33322d313238203d3e20323638303830.roa (hash: CFPBnj3EvE+lsQQOYsMIJqDxNxjw6BVblmWnNO38t00=)
                          2: 34352e3136392e342e302f32322d3332203d3e20323638303830.roa (hash: lXIva/FmRzPc3dMx95dHIcJMlu0gin2uVYLawNNRhhM=)
                          3: 8472ED54B788162A1C8624B94DB27D75F93FC1EE.crl (hash: t5adsYgZBXg2h5RoYIIfqFPKla8dR/0nN9SttXztnX0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/8472ED54B788162A1C8624B94DB27D75F93FC1EE.crl
                          rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/8472ED54B788162A1C8624B94DB27D75F93FC1EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8472ED54B788162A1C8624B94DB27D75F93FC1EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 29 Dec 2025 09:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a4:39:dd:4c:75:28:b7:1c:81:10:29:e7:1d:0d:9f:ea:69:05:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8472ED54B788162A1C8624B94DB27D75F93FC1EE
        Validity
            Not Before: Dec 28 08:26:46 2025 GMT
            Not After : Dec 29 09:23:46 2025 GMT
        Subject: CN=B2759902EF45AD0CC35B5D1C15F8A4813787E91E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:67:a3:35:60:f9:c5:1c:12:9c:1f:7e:33:41:
                    27:f9:d2:54:f9:3f:d8:bb:4e:e5:ee:89:8c:4f:6e:
                    18:b7:cc:08:8b:e0:a0:21:03:5d:22:fc:98:77:7d:
                    0e:96:27:0e:9d:ee:75:7d:16:ba:fa:7b:43:e1:f8:
                    5f:1b:1c:d2:a5:e1:c8:13:10:e9:01:fe:9d:d0:06:
                    51:fc:78:3e:cc:3a:e5:52:5e:0b:d0:eb:24:ab:1b:
                    d1:d9:b1:6d:9f:c9:dd:a4:22:1b:7d:dc:52:5e:81:
                    03:1a:1f:7b:e1:7c:3f:20:87:1c:1d:ab:9c:44:01:
                    71:0c:85:78:3b:e3:a6:eb:83:a5:f2:1c:1a:34:b0:
                    4f:72:4b:72:32:6d:36:d7:90:2c:b5:90:b6:6b:75:
                    c1:ae:01:31:04:63:5e:85:00:db:68:fb:6b:35:a7:
                    82:12:f2:68:04:95:b3:b0:76:ab:e9:4f:8b:ab:ca:
                    c9:85:ff:cb:34:db:5b:9b:b3:78:da:a4:1b:ed:12:
                    48:fb:20:ae:e4:6c:7f:32:5b:76:3a:96:ea:e0:37:
                    a0:35:5b:87:21:94:62:dd:86:74:91:ec:70:80:8f:
                    a5:44:77:4a:0f:f9:01:06:16:94:b4:ff:e3:47:cb:
                    d3:9e:97:83:e0:41:7c:90:15:21:27:66:ce:c3:69:
                    21:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:75:99:02:EF:45:AD:0C:C3:5B:5D:1C:15:F8:A4:81:37:87:E9:1E
            X509v3 Authority Key Identifier:
                keyid:84:72:ED:54:B7:88:16:2A:1C:86:24:B9:4D:B2:7D:75:F9:3F:C1:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/8472ED54B788162A1C8624B94DB27D75F93FC1EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8472ED54B788162A1C8624B94DB27D75F93FC1EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/8472ED54B788162A1C8624B94DB27D75F93FC1EE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:8a:29:bf:37:d6:fa:ac:84:2f:85:94:c5:54:c5:d6:3c:3d:
         5b:3c:c1:9b:c7:7f:70:c3:c0:f3:2e:88:58:4a:a7:2b:aa:1d:
         a3:aa:dd:03:fb:3b:45:51:e7:1e:30:06:3f:52:c1:f3:ad:44:
         d4:33:55:ce:77:fa:bd:4d:46:ba:e1:b4:98:7b:6e:81:48:17:
         e7:53:50:4c:eb:6b:10:32:27:c3:e7:90:ca:2a:01:65:0e:f6:
         59:cd:b8:be:4d:68:80:b6:6e:f2:fd:4a:6a:e4:7d:4d:28:aa:
         0e:c2:fc:8e:26:c3:59:ce:44:67:19:9b:84:b6:51:b5:3e:68:
         bf:4f:74:b8:06:73:17:8e:a4:e6:e1:5f:96:59:2e:97:41:d6:
         b2:11:36:93:a9:a5:6f:f7:0f:37:82:11:ed:f3:15:bd:bf:02:
         ae:dc:5d:ba:e1:3f:23:57:a4:96:c6:6c:be:d0:e1:ae:36:34:
         27:da:f0:22:08:f2:ee:a5:37:a2:b5:f3:a5:3d:0b:27:1c:de:
         48:76:31:c9:25:c8:66:c3:b8:22:a8:b3:b5:9f:56:79:45:3e:
         a5:85:a9:cb:13:99:ab:dc:97:da:65:c3:39:fa:d7:1c:f0:1b:
         b7:6c:31:b2:f0:ad:20:a7:1e:6e:a4:db:10:2a:2d:36:cf:b9:
         b6:3c:7c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 20:32:23 2025 by rpki-client