This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0/11B16D6BE6D33E3F2C4A900D8F26CFFEE6126FBB.mft
File:                     11B16D6BE6D33E3F2C4A900D8F26CFFEE6126FBB.mft (raw, json)
Hash identifier:          c8rGuOrIFOfUV9rVWPauas0rp9bEjIxqSluOeQEStlI=
Subject key identifier:   AA:F7:06:B2:18:76:80:D5:2D:E2:34:2C:29:59:F9:71:19:8D:B4:AC
Authority key identifier: 11:B1:6D:6B:E6:D3:3E:3F:2C:4A:90:0D:8F:26:CF:FE:E6:12:6F:BB
Certificate issuer:       /CN=11B16D6BE6D33E3F2C4A900D8F26CFFEE6126FBB
Certificate serial:       7534009046C89719F2A9EC815460854371D2512F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11B16D6BE6D33E3F2C4A900D8F26CFFEE6126FBB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0/11B16D6BE6D33E3F2C4A900D8F26CFFEE6126FBB.mft
Manifest number:          0256
Signing time:             Mon 22 Dec 2025 08:23:05 +0000
Manifest this update:     Mon 22 Dec 2025 08:18:05 +0000
Manifest next update:     Tue 23 Dec 2025 09:30:05 +0000
Files and hashes:         1: 11B16D6BE6D33E3F2C4A900D8F26CFFEE6126FBB.crl (hash: nRsuw+ICtW1Q7bkaSU/dj1PMROeXqsyB0Uc2ky1xN4E=)
                          2: 3136372e3235302e3132382e302f32322d3234203d3e20323635323436.roa (hash: vEpVHjPoJyD3d/+A39aktl+bol9QiKAklSpPBcpN2Y0=)
                          3: 323830343a326364343a3a2f33322d3438203d3e20323635323436.roa (hash: wnAZfYWvW7E/luQ1lTlcWQFoqzNjiZhawLviGgpLdTM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0/11B16D6BE6D33E3F2C4A900D8F26CFFEE6126FBB.crl
                          rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0/11B16D6BE6D33E3F2C4A900D8F26CFFEE6126FBB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11B16D6BE6D33E3F2C4A900D8F26CFFEE6126FBB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 09:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:34:00:90:46:c8:97:19:f2:a9:ec:81:54:60:85:43:71:d2:51:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11B16D6BE6D33E3F2C4A900D8F26CFFEE6126FBB
        Validity
            Not Before: Dec 22 08:18:05 2025 GMT
            Not After : Dec 23 09:30:05 2025 GMT
        Subject: CN=AAF706B2187680D52DE2342C2959F971198DB4AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:77:9f:89:81:3e:d5:e9:34:9c:04:c0:eb:33:
                    72:d6:48:fc:56:fb:3d:f7:69:7d:3b:59:3c:0e:59:
                    48:42:79:b5:65:4d:3b:e6:c9:ca:23:55:22:a8:11:
                    e4:81:ba:55:a1:a7:db:d7:d5:7a:47:1b:c7:23:0b:
                    ab:e4:27:4c:d5:11:7a:16:2a:9b:f9:23:69:c1:90:
                    da:92:51:71:01:77:f0:f9:a8:91:3f:7b:a9:1b:ce:
                    13:ff:7b:31:e8:fc:6e:c2:39:e2:cd:07:0d:62:4a:
                    f8:35:43:db:34:08:d3:40:69:a4:3f:ce:f6:19:48:
                    de:41:e4:b0:89:70:33:e0:b9:15:ce:36:07:bc:8a:
                    fd:1d:61:22:58:0b:66:db:2f:ff:5e:5d:f3:5a:f7:
                    8c:8d:9d:01:8d:96:c3:38:4d:e1:c9:41:42:32:c0:
                    51:a1:89:ef:c6:14:4f:c9:70:31:97:29:43:85:6f:
                    d3:90:25:68:68:0f:90:8b:f6:e8:a0:77:95:e6:f2:
                    6c:48:f6:26:67:94:c3:8c:a9:cc:b2:e3:b1:ee:57:
                    65:3b:49:5c:94:ae:6a:f2:20:91:d5:ce:c7:25:55:
                    66:8b:a7:b4:35:52:32:86:7e:fd:c4:0a:0d:f2:bb:
                    54:ed:05:a2:42:b7:1d:aa:d7:a9:ab:ea:70:3c:55:
                    90:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F7:06:B2:18:76:80:D5:2D:E2:34:2C:29:59:F9:71:19:8D:B4:AC
            X509v3 Authority Key Identifier:
                keyid:11:B1:6D:6B:E6:D3:3E:3F:2C:4A:90:0D:8F:26:CF:FE:E6:12:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0/11B16D6BE6D33E3F2C4A900D8F26CFFEE6126FBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11B16D6BE6D33E3F2C4A900D8F26CFFEE6126FBB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0/11B16D6BE6D33E3F2C4A900D8F26CFFEE6126FBB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:a7:28:38:a5:db:ba:bb:3c:c1:a5:22:9d:80:46:ed:3f:17:
         e5:1e:13:1c:bb:8f:a0:c9:ab:6a:dc:3b:74:7c:cc:bf:c2:95:
         4b:eb:55:b7:19:1b:28:ed:72:52:7f:ac:0b:f1:9f:4b:ae:3e:
         ff:cf:55:b3:03:62:94:22:f8:b8:54:06:b6:ab:c7:13:21:a6:
         2e:c4:7a:d4:c3:ae:65:66:c0:d2:cf:fa:6d:f4:9d:c0:2c:9f:
         11:fc:17:6a:6e:fc:6b:d5:a3:f1:67:be:88:09:fc:83:97:57:
         58:cc:6c:76:92:ee:da:f4:c7:d0:a5:28:f7:40:d9:60:f0:8a:
         b0:28:88:19:c8:c5:73:c1:4d:af:b5:8b:d2:b9:1c:fd:cc:c1:
         61:44:14:51:f8:fa:be:34:bd:a8:22:17:fb:21:33:50:ab:57:
         88:7f:f9:70:2d:54:c1:6d:e1:e6:69:a5:c0:94:90:cf:c9:e9:
         f5:69:b3:24:02:ca:3f:0f:88:07:90:e0:37:42:00:96:2f:ae:
         66:a2:0f:31:ab:d1:bd:26:3e:25:a9:ed:e4:6f:f1:26:67:81:
         9f:86:38:3b:1c:ce:e9:ba:2f:ba:3e:39:c9:61:31:e2:53:37:
         41:98:fd:57:18:2a:3c:3a:d6:e6:bf:91:62:ef:2e:8c:4d:84:
         98:df:1a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 19:10:23 2025 by rpki-client