This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/F9cTRCzPZicfnZtWKAmRceaFEX2XZTbSDjuJEARW53mc/0/718FD7745122924B2C0447ECC4439A2FA495E189.mft
File:                     718FD7745122924B2C0447ECC4439A2FA495E189.mft (raw, json)
Hash identifier:          v2PeuUg+eO0xdCyejK2N0VEeBByIk70VBf1szotINQE=
Subject key identifier:   E4:9B:CC:A5:AF:0E:70:1C:62:CA:A4:A4:3A:95:75:30:17:22:30:AA
Authority key identifier: 71:8F:D7:74:51:22:92:4B:2C:04:47:EC:C4:43:9A:2F:A4:95:E1:89
Certificate issuer:       /CN=718FD7745122924B2C0447ECC4439A2FA495E189
Certificate serial:       4030171822284918520B92F93594F19DA9CB6E20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/718FD7745122924B2C0447ECC4439A2FA495E189.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9cTRCzPZicfnZtWKAmRceaFEX2XZTbSDjuJEARW53mc/0/718FD7745122924B2C0447ECC4439A2FA495E189.mft
Manifest number:          0209
Signing time:             Sat 20 Dec 2025 23:25:40 +0000
Manifest this update:     Sat 20 Dec 2025 23:20:40 +0000
Manifest next update:     Mon 22 Dec 2025 00:49:40 +0000
Files and hashes:         1: 323830343a313234383a3a2f33322d3438203d3e20323633343637.roa (hash: s/YBVzH4cQZZ/23hMNgYQETISCzg20HSp/YyBMI18M8=)
                          2: 718FD7745122924B2C0447ECC4439A2FA495E189.crl (hash: xG9XKicFCpd3bfYbl2gW8y9Q8dyoMJ9KUc0BbPq/P/g=)
                          3: 3137372e3232312e3234302e302f32302d3234203d3e20323633343637.roa (hash: BC/1otNSjgR9IvzL0TMK6BPFn4Vfy0rgaPJAkXJZHVc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F9cTRCzPZicfnZtWKAmRceaFEX2XZTbSDjuJEARW53mc/0/718FD7745122924B2C0447ECC4439A2FA495E189.crl
                          rsync://rpki-repo.registro.br/repo/F9cTRCzPZicfnZtWKAmRceaFEX2XZTbSDjuJEARW53mc/0/718FD7745122924B2C0447ECC4439A2FA495E189.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/718FD7745122924B2C0447ECC4439A2FA495E189.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 00:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:30:17:18:22:28:49:18:52:0b:92:f9:35:94:f1:9d:a9:cb:6e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718FD7745122924B2C0447ECC4439A2FA495E189
        Validity
            Not Before: Dec 20 23:20:40 2025 GMT
            Not After : Dec 22 00:49:40 2025 GMT
        Subject: CN=E49BCCA5AF0E701C62CAA4A43A957530172230AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:af:5a:74:70:2b:1b:7e:7a:19:4f:15:db:f1:
                    b3:99:36:5e:1a:28:52:f4:06:47:7f:ea:b0:49:69:
                    6c:2c:db:61:df:f2:48:9c:b9:71:d2:51:11:9f:2d:
                    de:f3:82:d3:3c:d5:4b:01:6e:cd:4b:3d:3b:3b:fa:
                    43:a6:d9:00:b7:65:98:e3:6d:0f:9b:37:d4:bf:98:
                    6b:a4:05:84:f4:2d:a2:1e:c0:70:35:52:d5:3a:3a:
                    da:3e:92:65:55:b4:2d:e0:0b:f1:8f:65:45:cb:73:
                    a1:57:e0:a2:9c:04:2a:36:1d:92:fe:3d:aa:8a:31:
                    d2:99:68:c2:8a:e6:04:02:b7:7a:a1:05:c5:61:10:
                    22:3c:92:b7:86:35:ce:27:d3:3d:16:b7:84:8a:d2:
                    94:2b:89:f4:5b:c9:9b:94:4b:8c:bc:36:94:25:3c:
                    e2:da:a4:f2:a9:1a:f4:87:2a:29:a4:25:e7:40:42:
                    f7:67:cd:e3:20:b6:20:f7:7d:bf:2e:d5:30:c4:2d:
                    d9:73:b1:8a:f8:d7:76:f4:e2:a2:0b:e1:5d:7c:15:
                    a1:74:9e:17:e1:f6:ba:15:0d:c3:fb:fd:97:26:12:
                    ca:54:f1:81:83:d7:52:d5:15:99:25:eb:47:e4:ee:
                    f5:94:5a:d6:7e:92:55:b2:f6:ee:6a:bb:cc:98:0d:
                    c7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:9B:CC:A5:AF:0E:70:1C:62:CA:A4:A4:3A:95:75:30:17:22:30:AA
            X509v3 Authority Key Identifier:
                keyid:71:8F:D7:74:51:22:92:4B:2C:04:47:EC:C4:43:9A:2F:A4:95:E1:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9cTRCzPZicfnZtWKAmRceaFEX2XZTbSDjuJEARW53mc/0/718FD7745122924B2C0447ECC4439A2FA495E189.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/718FD7745122924B2C0447ECC4439A2FA495E189.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9cTRCzPZicfnZtWKAmRceaFEX2XZTbSDjuJEARW53mc/0/718FD7745122924B2C0447ECC4439A2FA495E189.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:ac:9b:bb:18:5f:89:77:1c:8c:cd:53:17:9f:1a:bb:14:5a:
         14:db:35:46:c4:7d:28:c6:3a:e2:37:d9:c3:81:dd:61:fc:e6:
         89:af:45:11:d8:dc:cf:55:4f:83:2e:f5:26:89:ca:8e:47:3d:
         32:0d:fa:1e:28:d2:42:8f:b1:80:f8:b2:09:cd:e6:3a:72:2d:
         11:a0:1c:4a:8d:0e:d7:84:5c:b0:a4:b8:6a:e3:73:bf:d9:9d:
         81:20:17:1b:42:e3:22:9b:a0:b4:29:5d:4a:bd:7d:4e:3f:44:
         a2:bd:d1:88:13:8f:c9:63:cb:39:bb:46:c5:0c:f4:55:07:de:
         b2:a0:09:40:f9:89:0a:c1:2c:8a:29:93:23:dd:dc:a1:01:3c:
         d4:d9:6f:78:00:1e:6c:fb:53:fe:af:d7:69:6a:5e:6c:3a:9c:
         2a:59:13:47:1d:cd:0f:18:27:c7:63:5f:d7:ab:91:92:7f:5d:
         fc:d7:dc:7e:97:ba:3c:92:8e:19:7b:cd:19:58:51:90:d4:9d:
         2d:30:ae:d2:d3:23:95:f6:2a:27:ae:57:71:43:5e:3c:ab:0d:
         e6:28:a3:7f:52:4d:5d:de:b6:d4:35:3f:17:20:6b:9d:56:18:
         e6:f6:b1:3e:31:38:6b:ea:13:b2:d7:2d:2b:5d:67:6c:60:83:
         13:0d:6f:54
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQDAXGCIoSRhSC5L5NZTxnanLbiAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE4RkQ3NzQ1MTIyOTI0QjJDMDQ0N0VDQzQ0MzlBMkZB
NDk1RTE4OTAeFw0yNTEyMjAyMzIwNDBaFw0yNTEyMjIwMDQ5NDBaMDMxMTAvBgNV
BAMTKEU0OUJDQ0E1QUYwRTcwMUM2MkNBQTRBNDNBOTU3NTMwMTcyMjMwQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdr1p0cCsbfnoZTxXb8bOZNl4a
KFL0Bkd/6rBJaWws22Hf8kicuXHSURGfLd7zgtM81UsBbs1LPTs7+kOm2QC3ZZjj
bQ+bN9S/mGukBYT0LaIewHA1UtU6Oto+kmVVtC3gC/GPZUXLc6FX4KKcBCo2HZL+
PaqKMdKZaMKK5gQCt3qhBcVhECI8kreGNc4n0z0Wt4SK0pQrifRbyZuUS4y8NpQl
POLapPKpGvSHKimkJedAQvdnzeMgtiD3fb8u1TDELdlzsYr413b04qIL4V18FaF0
nhfh9roVDcP7/ZcmEspU8YGD11LVFZkl60fk7vWUWtZ+klWy9u5qu8yYDcf5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU5JvMpa8OcBxiyqSkOpV1MBciMKowHwYDVR0j
BBgwFoAUcY/XdFEikkssBEfsxEOaL6SV4YkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjljVFJDelBaaWNmblp0V0tBbVJjZWFGRVgyWFpUYlNEanVKRUFSVzUz
bWMvMC83MThGRDc3NDUxMjI5MjRCMkMwNDQ3RUNDNDQzOUEyRkE0OTVFMTg5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxOEZENzc0NTEyMjkyNEIy
QzA0NDdFQ0M0NDM5QTJGQTQ5NUUxODkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RjljVFJDelBaaWNmblp0V0tBbVJjZWFGRVgyWFpUYlNEanVKRUFSVzUzbWMvMC83
MThGRDc3NDUxMjI5MjRCMkMwNDQ3RUNDNDQzOUEyRkE0OTVFMTg5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAd6ybuxhfiXccjM1TF58auxRaFNs1RsR9KMY64jfZw4HdYfzmia9FEdjcz1VP
gy71JonKjkc9Mg36HijSQo+xgPiyCc3mOnItEaAcSo0O14RcsKS4auNzv9mdgSAX
G0LjIpugtCldSr19Tj9Eor3RiBOPyWPLObtGxQz0VQfesqAJQPmJCsEsiimTI93c
oQE81NlveAAebPtT/q/XaWpebDqcKlkTRx3NDxgnx2Nf16uRkn9d/Nfcfpe6PJKO
GXvNGVhRkNSdLTCu0tMjlfYqJ65XcUNePKsN5iijf1JNXd621DU/FyBrnVYY5vax
PjE4a+oTstctK11nbGCDEw1vVA==
-----END CERTIFICATE-----