This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GBRK9pHuBPJrBUUoo4U2hs1QYtJuMS7GZTNYimSLXYiL/0/87DB2D42F6AA2757F3821F45CED8747B0B68A929.mft
File:                     87DB2D42F6AA2757F3821F45CED8747B0B68A929.mft (raw, json)
Hash identifier:          0wXTRFC5ctRy54X+uC/FXJv4FMsPkq5/sTFegDzL7x0=
Subject key identifier:   7B:A0:DB:E2:C5:FD:5A:17:70:6F:B7:9E:14:67:41:6D:FB:2B:9F:1D
Authority key identifier: 87:DB:2D:42:F6:AA:27:57:F3:82:1F:45:CE:D8:74:7B:0B:68:A9:29
Certificate issuer:       /CN=87DB2D42F6AA2757F3821F45CED8747B0B68A929
Certificate serial:       11D96CCBF7DB6B60B80AAE683A9ABEA8F5E45D28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87DB2D42F6AA2757F3821F45CED8747B0B68A929.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBRK9pHuBPJrBUUoo4U2hs1QYtJuMS7GZTNYimSLXYiL/0/87DB2D42F6AA2757F3821F45CED8747B0B68A929.mft
Manifest number:          0344
Signing time:             Wed 31 Dec 2025 17:46:40 +0000
Manifest this update:     Wed 31 Dec 2025 17:41:40 +0000
Manifest next update:     Thu 01 Jan 2026 18:20:40 +0000
Files and hashes:         1: 87DB2D42F6AA2757F3821F45CED8747B0B68A929.crl (hash: 0HRsioicsCLdfCgBYUbKWcS9zpUzh5R6Tv9c4JoLE+g=)
                          2: 323830343a386639343a3a2f33322d3430203d3e20323733343939.roa (hash: dRrkcU6DKtPX/khP0O/WGga3UHvPMwxgO8xn/K1yGVk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBRK9pHuBPJrBUUoo4U2hs1QYtJuMS7GZTNYimSLXYiL/0/87DB2D42F6AA2757F3821F45CED8747B0B68A929.crl
                          rsync://rpki-repo.registro.br/repo/GBRK9pHuBPJrBUUoo4U2hs1QYtJuMS7GZTNYimSLXYiL/0/87DB2D42F6AA2757F3821F45CED8747B0B68A929.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87DB2D42F6AA2757F3821F45CED8747B0B68A929.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 Jan 2026 18:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:d9:6c:cb:f7:db:6b:60:b8:0a:ae:68:3a:9a:be:a8:f5:e4:5d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87DB2D42F6AA2757F3821F45CED8747B0B68A929
        Validity
            Not Before: Dec 31 17:41:40 2025 GMT
            Not After : Jan  1 18:20:40 2026 GMT
        Subject: CN=7BA0DBE2C5FD5A17706FB79E1467416DFB2B9F1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:a4:04:25:d0:9a:1c:57:51:26:b6:8c:aa:48:
                    8f:a2:7c:64:f4:44:c1:4b:3f:40:97:a6:63:b5:41:
                    c7:da:e3:a4:fc:3f:bb:38:2b:26:53:b2:54:4e:d0:
                    c7:b6:d1:71:77:18:cf:71:a2:3c:76:b8:ef:24:de:
                    69:14:ea:d1:02:45:3c:a9:01:88:76:a7:d8:5f:93:
                    60:e7:a3:90:e3:3c:1d:b0:49:e8:b6:94:f6:93:7e:
                    ff:40:ef:59:c7:7a:a7:e8:c1:31:ec:85:30:bc:5d:
                    5b:3b:d0:94:fe:ff:1a:93:88:d2:66:bb:13:2c:a3:
                    02:20:e7:35:4b:4e:97:18:c6:ee:22:1e:2c:1b:c3:
                    a9:8b:b6:46:62:d7:fd:f8:54:a4:7b:45:07:56:d0:
                    df:5e:02:d9:94:2c:ed:bc:ef:96:47:25:ba:ee:3e:
                    e5:7d:df:e1:7f:9a:66:db:6b:3f:ef:ed:b6:22:a2:
                    d2:50:5b:8f:b0:fc:9c:6b:9c:6c:b5:b8:98:80:4a:
                    4f:65:0c:7b:c6:22:ae:34:58:83:e6:fc:71:2f:95:
                    c3:e9:4b:bb:28:4d:9a:5d:e4:6a:ae:85:63:e3:5f:
                    45:ea:ac:2f:93:02:4a:96:da:c7:8c:d5:c4:e4:74:
                    8e:ac:79:b4:45:af:f8:e5:3a:ae:6f:6f:a6:47:da:
                    3c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A0:DB:E2:C5:FD:5A:17:70:6F:B7:9E:14:67:41:6D:FB:2B:9F:1D
            X509v3 Authority Key Identifier:
                keyid:87:DB:2D:42:F6:AA:27:57:F3:82:1F:45:CE:D8:74:7B:0B:68:A9:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBRK9pHuBPJrBUUoo4U2hs1QYtJuMS7GZTNYimSLXYiL/0/87DB2D42F6AA2757F3821F45CED8747B0B68A929.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87DB2D42F6AA2757F3821F45CED8747B0B68A929.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBRK9pHuBPJrBUUoo4U2hs1QYtJuMS7GZTNYimSLXYiL/0/87DB2D42F6AA2757F3821F45CED8747B0B68A929.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:e5:c8:f2:db:5f:ae:44:46:1d:a5:ec:2a:b2:94:8e:49:c1:
         4b:27:54:b9:a0:98:c5:9e:40:08:ac:0a:e7:7b:3f:74:0f:64:
         47:6e:fa:55:c8:10:6b:74:15:44:2c:b6:7f:e0:7c:3f:d6:fa:
         27:f4:92:86:6b:76:d8:87:86:09:8b:ce:f3:dd:31:56:9e:b9:
         66:a0:31:f3:8b:90:3b:e0:f6:43:b4:e8:e6:0d:fa:cd:96:1c:
         e7:9c:e9:10:bb:64:1c:70:67:01:20:c0:33:80:5b:a9:79:ea:
         01:73:b5:06:7e:45:ac:3d:52:15:f2:12:a5:6b:7e:18:65:b9:
         d0:e2:41:a1:1d:f5:25:2e:b4:ec:7c:a7:36:c6:65:36:b3:4a:
         1b:dd:0d:e5:29:13:a0:98:bf:b5:d8:d9:43:9a:20:14:af:fd:
         7c:b3:39:95:44:6b:23:89:15:c8:e3:58:18:49:dd:0f:e0:b4:
         b2:f2:e9:46:e6:f8:64:1e:61:30:d1:2a:1d:12:6d:58:8c:6e:
         07:8a:7b:11:f1:5a:22:0f:8e:ab:e0:c9:89:a1:d6:9d:c3:ec:
         91:50:af:81:c3:4e:be:7f:a3:2a:ec:8e:2a:a2:71:b9:ea:2b:
         34:99:09:49:f5:f4:1f:82:2d:b9:b8:e6:f2:10:40:ed:43:39:
         8f:cd:8b:3d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEdlsy/fba2C4Cq5oOpq+qPXkXSgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdEQjJENDJGNkFBMjc1N0YzODIxRjQ1Q0VEODc0N0Iw
QjY4QTkyOTAeFw0yNTEyMzExNzQxNDBaFw0yNjAxMDExODIwNDBaMDMxMTAvBgNV
BAMTKDdCQTBEQkUyQzVGRDVBMTc3MDZGQjc5RTE0Njc0MTZERkIyQjlGMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6pAQl0JocV1EmtoyqSI+ifGT0
RMFLP0CXpmO1Qcfa46T8P7s4KyZTslRO0Me20XF3GM9xojx2uO8k3mkU6tECRTyp
AYh2p9hfk2Dno5DjPB2wSei2lPaTfv9A71nHeqfowTHshTC8XVs70JT+/xqTiNJm
uxMsowIg5zVLTpcYxu4iHiwbw6mLtkZi1/34VKR7RQdW0N9eAtmULO2875ZHJbru
PuV93+F/mmbbaz/v7bYiotJQW4+w/JxrnGy1uJiASk9lDHvGIq40WIPm/HEvlcPp
S7soTZpd5GquhWPjX0XqrC+TAkqW2seM1cTkdI6sebRFr/jlOq5vb6ZH2jwrAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUe6Db4sX9Whdwb7eeFGdBbfsrnx0wHwYDVR0j
BBgwFoAUh9stQvaqJ1fzgh9Fzth0ewtoqSkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0JSSzlwSHVCUEpyQlVVb280VTJoczFRWXRKdU1TN0daVE5ZaW1TTFhZ
aUwvMC84N0RCMkQ0MkY2QUEyNzU3RjM4MjFGNDVDRUQ4NzQ3QjBCNjhBOTI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3REIyRDQyRjZBQTI3NTdG
MzgyMUY0NUNFRDg3NDdCMEI2OEE5MjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R0JSSzlwSHVCUEpyQlVVb280VTJoczFRWXRKdU1TN0daVE5ZaW1TTFhZaUwvMC84
N0RCMkQ0MkY2QUEyNzU3RjM4MjFGNDVDRUQ4NzQ3QjBCNjhBOTI5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAB+XI8ttfrkRGHaXsKrKUjknBSydUuaCYxZ5ACKwK53s/dA9kR276VcgQa3QV
RCy2f+B8P9b6J/SShmt22IeGCYvO890xVp65ZqAx84uQO+D2Q7To5g36zZYc55zp
ELtkHHBnASDAM4BbqXnqAXO1Bn5FrD1SFfISpWt+GGW50OJBoR31JS607HynNsZl
NrNKG90N5SkToJi/tdjZQ5ogFK/9fLM5lURrI4kVyONYGEndD+C0svLpRub4ZB5h
MNEqHRJtWIxuB4p7EfFaIg+Oq+DJiaHWncPskVCvgcNOvn+jKuyOKqJxueorNJkJ
SfX0H4Itubjm8hBA7UM5j82LPQ==
-----END CERTIFICATE-----
Generated at Thu Jan 1 01:05:23 2026 by rpki-client