This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.mft
File:                     F0DB15D3F66BA725DE7E70733346C03C0E4D1408.mft (raw, json)
Hash identifier:          zWGpVV/XPCnWq6VyrK9AsD4kc61X5qqNmassLwXX8WE=
Subject key identifier:   0F:D2:78:1D:5C:5C:C0:4F:53:EE:6F:88:D1:D1:B6:3F:F4:C7:B2:81
Authority key identifier: F0:DB:15:D3:F6:6B:A7:25:DE:7E:70:73:33:46:C0:3C:0E:4D:14:08
Certificate issuer:       /CN=F0DB15D3F66BA725DE7E70733346C03C0E4D1408
Certificate serial:       413508BCF23414508D4D35CCB900A5E6385A6CC2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.mft
Manifest number:          025A
Signing time:             Tue 30 Dec 2025 09:14:36 +0000
Manifest this update:     Tue 30 Dec 2025 09:09:36 +0000
Manifest next update:     Wed 31 Dec 2025 10:41:36 +0000
Files and hashes:         1: 3133382e3230342e3138342e302f32332d3233203d3e20323633393037.roa (hash: EmuzZweEzcZy6bO4D8jrzuyXPuWr54G/xUXp0XQuCoc=)
                          2: 3133382e3230342e3138362e302f32342d3234203d3e20323633393037.roa (hash: ErjwRVssjzFtWoU9n5jewvIXlxD9QMGq0OTUg7Bpv4I=)
                          3: 323830343a323738383a3a2f33322d3332203d3e20323633393037.roa (hash: yJlTzFO8oOZiZG6cT7pts1W6MYNESiXFbFz1He7VnOs=)
                          4: 323830343a323738383a633030303a3a2f33342d3334203d3e20323633393037.roa (hash: EcCjD8J9qD6B+IoCyNzsKNtiz7CE78fLo0Gs+aSvawU=)
                          5: 3133382e3230342e3138362e302f32332d3233203d3e20323633393037.roa (hash: Vy2avViqP/0tiZogzluuUnbhPwhezsyOnRwSFhYsWLc=)
                          6: 323830343a323738383a383030303a3a2f33332d3333203d3e20323633393037.roa (hash: tGIaJnxP2dZ/Eyd58YKMliF9+6gMyq5rXt1v66+TWB4=)
                          7: 323830343a323738383a343030303a3a2f33342d3334203d3e20323633393037.roa (hash: Q3nHk6LWj9E7K1HfLIib8pBB+nBg5zEWO4Ys0nhYxao=)
                          8: 323830343a323738383a3a2f33332d3333203d3e20323633393037.roa (hash: RuZ38j8d/OgwK7uQyM1EqKNZDmp/JsX5cQZ1tkkRg/Q=)
                          9: 3133382e3230342e3138352e302f32342d3234203d3e20323633393037.roa (hash: peOXWtApHPvdshINXswwCSkP9CsS5SpVIsONgPFBxik=)
                          10: 3133382e3230342e3138342e302f32342d3234203d3e20323633393037.roa (hash: EIlppR4XaFpUhP7IvzQJ0/gzwztCYn1Zite23D0wzGg=)
                          11: 3133382e3230342e3138342e302f32322d3232203d3e20323633393037.roa (hash: 97bzsldJWLoYz+VIXMndWSMIeGG5K+1q2X5GqxYvjGI=)
                          12: 323830343a323738383a383030303a3a2f33342d3334203d3e20323633393037.roa (hash: z0tg7MXL6CmfrDQ+zfqCLVVqmLklFzTxASaGE5h1f9E=)
                          13: 3133382e3230342e3138372e302f32342d3234203d3e20323633393037.roa (hash: 3Qv1bTknO1Qcx9tt3w1b+XhqgPlRdHwCSFYcDh44RPs=)
                          14: F0DB15D3F66BA725DE7E70733346C03C0E4D1408.crl (hash: 24cGy7V2YFTS/j4dQh2Hpa/osEPWRgVBIKZfoXvJ1eQ=)
                          15: 323830343a323738383a3a2f33342d3334203d3e20323633393037.roa (hash: ezLvJquILrczh+0PY/D9E5dG/5wDROzF8ARzUe6vN5M=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.crl
                          rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 31 Dec 2025 10:41:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:35:08:bc:f2:34:14:50:8d:4d:35:cc:b9:00:a5:e6:38:5a:6c:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0DB15D3F66BA725DE7E70733346C03C0E4D1408
        Validity
            Not Before: Dec 30 09:09:36 2025 GMT
            Not After : Dec 31 10:41:36 2025 GMT
        Subject: CN=0FD2781D5C5CC04F53EE6F88D1D1B63FF4C7B281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5b:7a:57:a1:32:79:a9:ac:58:90:66:c6:ec:
                    2a:31:9c:3b:60:26:40:da:cf:87:a4:af:92:ba:3b:
                    da:69:94:bf:91:06:0f:ad:9e:6d:2d:a5:58:9e:96:
                    75:2c:7c:f0:a4:a6:e0:df:a1:58:fc:bb:1c:85:43:
                    5a:db:b5:ef:1d:b1:7c:5f:83:3e:28:b5:fb:7c:f1:
                    aa:9a:b7:71:71:c9:f2:af:1f:1d:bf:30:72:38:90:
                    ad:2c:dd:09:5f:40:42:1f:5b:e5:c5:9b:c4:fd:2d:
                    52:da:d2:f3:bf:e0:8d:34:f7:1b:ef:be:90:f1:e1:
                    5d:34:d6:8b:b7:ab:e7:0c:fa:9f:01:0d:07:6d:d7:
                    f8:ee:43:6a:a1:e6:d6:cc:c1:59:ab:7b:3d:fe:db:
                    cf:97:3a:a2:dc:26:68:d1:d1:c7:58:7c:f9:99:c5:
                    76:de:b1:12:5c:04:12:e2:43:b7:90:62:fe:47:61:
                    a8:d0:3c:71:82:c5:03:b5:2f:0b:70:d1:1f:44:65:
                    9f:4c:5f:38:78:df:f1:4f:16:f5:9c:8e:c3:88:2b:
                    68:ba:f8:80:21:89:2f:bb:a8:64:e8:21:91:a7:fa:
                    5a:87:c0:31:42:02:09:13:fe:cc:83:78:c8:b6:bb:
                    27:41:99:0d:cd:cc:cd:d6:ed:f6:0f:3c:34:58:fd:
                    70:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D2:78:1D:5C:5C:C0:4F:53:EE:6F:88:D1:D1:B6:3F:F4:C7:B2:81
            X509v3 Authority Key Identifier:
                keyid:F0:DB:15:D3:F6:6B:A7:25:DE:7E:70:73:33:46:C0:3C:0E:4D:14:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:24:2f:fc:2e:63:50:a9:08:c3:77:8a:96:4f:1e:04:57:02:
         67:60:0b:0d:75:92:e8:17:0c:9d:94:9f:48:c7:e8:e2:ef:73:
         12:f4:a6:73:fb:ab:f3:f9:50:79:fe:46:c2:83:65:8c:48:cf:
         00:23:47:8c:f9:f2:1e:d8:95:3e:9d:0f:b8:98:c1:56:dd:c0:
         05:4b:f9:dc:a8:3f:52:7c:56:5e:6d:00:25:d0:2b:d1:fa:7d:
         d3:83:61:7c:54:e1:29:3a:10:7b:3a:26:4a:a7:9d:19:5f:14:
         2e:cd:d6:33:b4:2b:fc:d8:62:9e:81:ce:b1:32:8a:ba:da:99:
         5e:c2:4e:28:7b:c3:25:3b:66:d1:50:b9:a5:cc:4d:0f:c6:a5:
         62:c8:6f:66:a5:b2:46:70:09:da:3b:96:df:f2:d5:66:1f:15:
         54:46:05:7d:84:1e:57:5d:4d:62:16:b1:bb:4d:18:2d:4d:db:
         57:ce:43:cd:ef:8b:bd:cd:c7:0c:d0:45:0c:28:11:32:a2:b5:
         78:e9:42:b0:0c:19:51:41:c4:7f:f9:78:0d:e6:26:71:7e:d2:
         b8:3e:e0:c1:b3:26:60:69:82:4c:a6:8c:05:fb:d1:91:5c:86:
         cc:78:1f:f1:21:d5:a0:d7:a0:39:76:99:2a:a8:c6:dc:53:e1:
         0a:89:ff:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 10:35:21 2025 by rpki-client