This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.mft
File:                     30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.mft (raw, json)
Hash identifier:          Gpxd2x9ReSjzE/40/DmOarYf6NWBi/jq37BFaUaV384=
Subject key identifier:   56:01:D3:C0:3A:3F:8D:F6:99:F6:5C:FD:9B:3C:14:00:11:A4:EB:15
Authority key identifier: 30:15:7C:EF:EE:BD:0C:7D:8A:29:EC:E4:A2:43:43:27:73:2F:FD:F6
Certificate issuer:       /CN=30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6
Certificate serial:       6009FAA09FFD8D544D74D400FBDA4CB239548769
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.mft
Manifest number:          020D
Signing time:             Sat 20 Dec 2025 06:29:35 +0000
Manifest this update:     Sat 20 Dec 2025 06:24:35 +0000
Manifest next update:     Sun 21 Dec 2025 08:20:35 +0000
Files and hashes:         1: 3139312e3234322e3234382e302f32312d3234203d3e20323633343836.roa (hash: glCLFbOxW2PCoRYdk4hxxyDsKYKPG8LjGydPR561h5I=)
                          2: 323830343a313239383a633030303a3a2f33342d3438203d3e20323633343836.roa (hash: 2qmrHaxk6Rv/luAiYpuIkARCcKBzgZsTcrcKH7VvjVM=)
                          3: 30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.crl (hash: 7uuvqYlsuZl0AAA/CjGOXeG9wgmxLcA7mgvxvwsvOVM=)
                          4: 3137302e37392e3132382e302f32322d3234203d3e20323633343836.roa (hash: 9x6AeTnaxlFJN3EpyCOL1htkgeBO61dQPorErDQL9FI=)
                          5: 323830343a313239383a3a2f33352d3438203d3e20323633343836.roa (hash: GeXN8AfUeZtZ6LJw4jHk7bMzBmH35tLmH0QHbZSaChY=)
                          6: 323830343a313239383a343030303a3a2f33352d3438203d3e20323633343836.roa (hash: /odm13J0Q0QBMhPTX/VMZh0ff32AD8dQ47t3ooxA/Dc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.crl
                          rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 08:20:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:09:fa:a0:9f:fd:8d:54:4d:74:d4:00:fb:da:4c:b2:39:54:87:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6
        Validity
            Not Before: Dec 20 06:24:35 2025 GMT
            Not After : Dec 21 08:20:35 2025 GMT
        Subject: CN=5601D3C03A3F8DF699F65CFD9B3C140011A4EB15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:69:47:e6:80:64:69:ae:4c:84:dd:31:6c:14:
                    3f:57:ce:96:27:83:28:b5:65:97:28:67:b5:2f:57:
                    22:6f:9f:2b:f6:47:f9:62:c4:e5:51:73:14:b5:8e:
                    30:1e:c2:14:00:e7:08:86:b2:6e:65:2d:f9:1d:75:
                    1c:99:d5:4b:93:68:04:ac:74:cd:97:fc:98:5e:50:
                    ac:f5:87:c4:d8:6d:5c:8f:f5:05:2d:43:82:7e:8d:
                    51:00:3f:f0:00:7d:36:5b:92:07:f6:15:e9:f0:fd:
                    99:dc:ee:57:45:76:b0:52:9d:c1:3f:c6:96:b2:25:
                    33:e5:6f:25:05:26:c9:f8:03:71:8c:be:d6:76:79:
                    85:17:d6:6b:bd:8f:4d:9f:88:24:5d:f2:44:16:6d:
                    94:5d:32:67:6a:f4:37:6b:cd:13:24:5f:4b:8a:fa:
                    bb:d0:31:69:bb:b8:f8:ab:6a:d5:7d:07:07:fb:00:
                    b1:de:e3:bc:c4:be:fa:0f:a7:d7:8b:63:ec:13:94:
                    c0:64:47:d0:98:cb:d1:a2:a1:58:1e:ca:6d:ef:d0:
                    e3:9e:6a:16:59:db:a2:3b:3a:38:33:65:bd:74:19:
                    25:8c:b5:30:c8:5d:66:82:3f:2a:88:af:64:47:b8:
                    54:4f:6c:1e:f8:34:e5:f4:01:7a:75:1b:19:c3:56:
                    ca:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:01:D3:C0:3A:3F:8D:F6:99:F6:5C:FD:9B:3C:14:00:11:A4:EB:15
            X509v3 Authority Key Identifier:
                keyid:30:15:7C:EF:EE:BD:0C:7D:8A:29:EC:E4:A2:43:43:27:73:2F:FD:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:09:fd:b5:49:d2:a1:a2:d2:25:18:15:a6:b3:0f:2c:06:c2:
         98:65:98:4c:dc:31:e9:b4:8c:fa:4d:b7:cf:6e:0a:6c:eb:f0:
         71:bd:01:ac:df:72:8a:7a:94:74:62:0b:9f:bc:81:73:b6:9e:
         95:3c:15:32:16:e3:09:fe:48:9e:5a:cf:36:97:3b:0d:0e:19:
         fc:04:b0:12:fd:45:46:c5:d5:0d:73:b2:fd:93:8c:33:c6:2b:
         d8:ba:73:87:12:fe:47:62:e1:e9:10:63:ec:b5:d3:ec:9a:0e:
         73:8a:6f:d8:5d:47:50:92:56:bd:84:d2:ac:41:f5:00:f8:1c:
         40:19:20:06:a1:2c:79:d7:30:31:d9:69:eb:d4:52:82:c2:de:
         ab:2d:e1:38:5a:ad:6d:44:cb:8b:3f:3e:42:1e:7b:16:71:05:
         fd:67:14:7e:85:49:35:25:c9:42:39:f7:b3:6c:2c:b9:14:56:
         37:c5:a9:82:f3:60:75:92:81:13:a2:14:97:52:2c:56:a5:fd:
         5d:50:ad:92:bf:71:65:ea:e4:90:99:13:ca:22:dc:08:6d:a4:
         0d:ee:b7:60:f4:44:ee:f3:51:51:e2:3a:a5:ef:d4:8d:89:5e:
         60:b9:cb:94:18:53:b5:b3:d9:21:54:6b:71:0c:cc:7e:40:fd:
         93:e2:8d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:47:42 2025 by rpki-client