This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.mft
File:                     EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.mft (raw, json)
Hash identifier:          cInwC76bD5NRFVN9JOKcp5x5cHEyNW+d8ZEFir3Kzcc=
Subject key identifier:   C9:25:E9:7C:AD:E2:12:79:2E:61:D3:E4:7D:8D:DF:05:B2:DB:BE:10
Authority key identifier: EC:3A:9B:6C:1F:6A:69:44:9C:A2:1F:D7:80:F4:F8:01:F6:CE:6B:06
Certificate issuer:       /CN=EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06
Certificate serial:       53C728D0A7B796BE9D31752F2F81B9BCC057EA3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.mft
Manifest number:          016E
Signing time:             Sat 20 Dec 2025 22:46:01 +0000
Manifest this update:     Sat 20 Dec 2025 22:41:01 +0000
Manifest next update:     Sun 21 Dec 2025 23:33:01 +0000
Files and hashes:         1: 3230312e3133312e3130362e302f32342d3234203d3e20323731353733.roa (hash: qEEGnNXOgVLxsBmaHjZoeEIwIlOS5rZuaildH5CuVeg=)
                          2: 3230302e302e3137392e302f32342d3234203d3e20323731353733.roa (hash: aglHitQCJNgIY3C7Tlxv80IWetc3uLwgBi5NAsxzjh8=)
                          3: 323830343a376461303a3a2f33322d3332203d3e20323731353733.roa (hash: 2S5jPVpDtF/c3KX+7YrkDsURbXg6ohRU2xrGg9VcEpU=)
                          4: EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.crl (hash: rrfePh4J6gvy907sSsIzsaLFSlXQ0R9UDr7/RhOxWJM=)
                          5: 3230302e362e3133342e302f32332d3233203d3e20323731353733.roa (hash: S7mn+aIRKkfCkrEGNSaEpbEn+9QE2IZk2jlyPQPYAu4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.crl
                          rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 23:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c7:28:d0:a7:b7:96:be:9d:31:75:2f:2f:81:b9:bc:c0:57:ea:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06
        Validity
            Not Before: Dec 20 22:41:01 2025 GMT
            Not After : Dec 21 23:33:01 2025 GMT
        Subject: CN=C925E97CADE212792E61D3E47D8DDF05B2DBBE10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:35:6f:fe:64:91:f2:c2:ed:27:1d:5d:51:bb:
                    c0:61:20:c9:ed:dd:9a:fa:9c:57:b5:be:b3:2e:ed:
                    f8:20:d8:fa:88:57:4e:b7:e7:0c:ae:dd:e9:7e:33:
                    c4:c5:c7:c1:32:0c:f9:c4:16:35:12:56:c5:66:51:
                    25:39:db:a7:b5:71:19:7f:79:65:ea:42:5f:d2:ca:
                    53:f2:17:c5:ba:8c:20:c1:62:79:f0:8e:56:9e:3c:
                    d4:91:16:74:92:54:c8:bb:92:3a:17:81:43:18:79:
                    9a:1c:71:93:98:18:df:a7:ff:61:9e:73:50:6f:5c:
                    88:24:b3:a9:fe:bf:4b:f7:95:f9:49:1d:a5:ca:83:
                    6a:cc:d1:13:90:bf:aa:c1:10:4d:56:6b:0a:54:ff:
                    8e:a9:00:4d:13:7d:7c:18:de:b8:51:d7:29:c1:a5:
                    57:4e:ea:14:7c:4f:2e:eb:ea:e4:e4:71:c0:58:81:
                    ae:66:1c:45:d4:e7:82:b1:93:8f:b1:72:10:30:13:
                    1b:21:e9:c3:5b:02:22:e0:d0:a7:77:df:ee:40:46:
                    17:80:c6:35:cb:8b:9f:1b:81:7c:11:65:64:ed:37:
                    4a:8d:06:51:5d:bd:de:3a:14:26:43:4d:52:e6:46:
                    39:ab:46:ac:6f:c6:a6:20:e7:33:9d:57:75:01:72:
                    0a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:25:E9:7C:AD:E2:12:79:2E:61:D3:E4:7D:8D:DF:05:B2:DB:BE:10
            X509v3 Authority Key Identifier:
                keyid:EC:3A:9B:6C:1F:6A:69:44:9C:A2:1F:D7:80:F4:F8:01:F6:CE:6B:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:66:12:c6:26:66:f0:0e:c8:f8:d6:05:59:b7:55:d7:5d:1d:
         97:88:10:e7:7d:81:f3:44:6c:08:d0:43:21:28:e7:a6:78:49:
         ff:2c:c0:e5:8e:1c:b5:ca:bf:3d:80:87:ef:9a:61:c4:00:57:
         bf:d7:8f:5d:08:99:9f:52:20:0e:ce:2f:b3:61:db:ca:27:db:
         ef:0c:2c:d4:d2:90:5f:ea:6b:68:18:e0:b1:66:e2:e4:5e:30:
         16:9c:dd:1a:50:9f:70:38:ff:0f:e4:81:6f:d6:71:68:84:d6:
         70:f1:d4:93:af:cc:03:82:75:78:76:69:26:2d:4b:61:11:7b:
         fb:d5:be:e5:b7:6d:3d:64:12:52:1d:04:63:d9:66:d9:fe:26:
         5b:7a:94:59:ba:6e:25:ff:a1:96:21:7c:5f:f3:ad:17:86:34:
         d0:f3:c0:61:bc:03:9e:66:74:44:32:b3:2c:42:19:24:cc:24:
         8f:67:24:be:0d:70:d1:59:f4:c6:c9:9f:50:c7:ea:3c:fb:5b:
         72:e0:bc:c9:00:2a:69:72:26:af:b5:75:5c:4b:a3:03:6f:dd:
         a6:e0:e5:c3:2d:9d:4a:48:ec:be:b9:dd:a7:5c:88:a8:74:5a:
         6c:d7:e1:ca:39:dc:cc:e2:06:1a:65:c2:e4:26:cc:a3:3b:31:
         24:20:f2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 12:13:44 2025 by rpki-client