This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.mft
File:                     FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.mft (raw, json)
Hash identifier:          K9B8vg0OHCbSTlPV5sKCzJYjm8t8ucJYKhzgLzpSMS8=
Subject key identifier:   08:A6:FB:84:6F:D5:92:3B:85:BD:BF:76:EE:61:CD:8C:27:C4:F8:A6
Authority key identifier: FA:A2:0D:01:76:A8:E0:99:3E:B6:3C:7F:51:07:16:3B:BE:5D:BA:8F
Certificate issuer:       /CN=FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F
Certificate serial:       239D5C8D0ECC2C79A3DC1DE3C847DB2C789ED07E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.mft
Manifest number:          94
Signing time:             Sat 20 Dec 2025 00:26:56 +0000
Manifest this update:     Sat 20 Dec 2025 00:21:56 +0000
Manifest next update:     Sun 21 Dec 2025 01:25:56 +0000
Files and hashes:         1: 3137302e3234362e3136382e302f32322d3332203d3e20323633393633.roa (hash: 3hBRIGCUqb3DIjYAKZm9OcITGyCs0TuU0X+4zHfoRVQ=)
                          2: FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.crl (hash: 3B5KjwWpPjiVi0SU16OyAREr4SzZoFq8tw0MdNl+b0U=)
                          3: 3133382e3231392e3232302e302f32322d3332203d3e20323633393633.roa (hash: dgQenF0SOCgMjKxMC4O4DFcfxi1LaXIDVtj0og24Gxc=)
                          4: 323830343a323837383a3a2f33322d313238203d3e20323633393633.roa (hash: hpg9sOEi3xaCO9v17zpfUf72FMO/U8MEML8fvgpIA8Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.crl
                          rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 01:25:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:9d:5c:8d:0e:cc:2c:79:a3:dc:1d:e3:c8:47:db:2c:78:9e:d0:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F
        Validity
            Not Before: Dec 20 00:21:56 2025 GMT
            Not After : Dec 21 01:25:56 2025 GMT
        Subject: CN=08A6FB846FD5923B85BDBF76EE61CD8C27C4F8A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4d:6f:45:5e:f0:7e:f1:1b:21:6f:4f:9b:00:
                    da:35:09:0d:2f:2a:66:2b:51:f7:78:6d:c0:ea:11:
                    aa:5d:32:2b:a4:d7:8a:fb:e8:44:cf:0a:55:0b:71:
                    5e:a7:6a:38:f5:de:b0:23:06:65:08:2c:86:96:30:
                    31:a5:6c:72:7f:e7:f4:a7:dd:22:f4:22:bd:d8:d8:
                    ca:dd:b4:4a:fe:7d:e7:7f:ee:c3:c3:f2:86:fe:2f:
                    86:d9:a9:56:19:57:8b:65:58:cf:4b:61:16:e1:4a:
                    2e:af:bd:1b:c5:b7:a6:2e:a8:9f:40:7f:f9:9b:eb:
                    d3:04:be:ea:3f:32:47:04:19:e9:13:ab:28:3e:b3:
                    cb:15:c4:75:29:9c:fa:9c:d8:8b:23:3b:64:53:57:
                    57:ae:dc:6c:0d:78:74:a1:33:a3:20:c9:dc:56:69:
                    96:9e:d6:f0:d6:79:8f:18:db:ef:8a:38:4b:0f:42:
                    d5:ef:5c:f0:f9:02:83:ca:f7:c5:9c:70:43:5d:e8:
                    da:fc:c2:5f:69:21:3a:11:33:40:6e:52:22:f5:ff:
                    da:65:ab:b3:39:ac:48:21:bf:59:2e:ee:2c:1d:f9:
                    39:32:e2:32:70:b5:ff:39:d2:e6:fc:fd:6e:51:ed:
                    8e:bb:27:b0:1d:1e:99:05:a9:74:cb:64:dd:3a:9c:
                    81:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A6:FB:84:6F:D5:92:3B:85:BD:BF:76:EE:61:CD:8C:27:C4:F8:A6
            X509v3 Authority Key Identifier:
                keyid:FA:A2:0D:01:76:A8:E0:99:3E:B6:3C:7F:51:07:16:3B:BE:5D:BA:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:3d:ba:5e:7f:26:fa:45:f1:b8:a9:2c:69:30:55:39:d6:49:
         6e:b3:ca:b5:77:be:da:cb:32:07:14:b4:69:22:18:e1:da:10:
         4c:77:f3:88:02:03:d4:5a:65:b0:f1:15:5e:24:d9:db:19:13:
         d0:fc:b3:83:2e:8d:d5:ef:fa:d9:dd:57:e9:f3:d3:0b:63:d4:
         da:cc:0b:1b:c3:0a:91:51:9b:9b:11:35:b5:e1:64:e1:a6:75:
         1f:85:97:c9:b3:e6:6e:c9:04:ff:4a:cc:34:80:af:06:d7:f7:
         9d:59:f3:47:8e:1c:34:5d:6d:b2:71:e3:81:f1:57:82:94:bd:
         36:13:e4:1a:b5:4a:77:de:21:1a:85:88:c2:05:ca:a3:90:a8:
         cf:3e:e6:74:38:f9:da:8a:87:ac:91:86:68:77:85:89:ab:bc:
         98:b6:2c:fd:58:23:d2:c5:9e:f5:70:d7:44:ac:90:ee:cd:89:
         c6:56:24:bb:a5:a2:70:54:c2:8c:79:2b:66:b9:34:91:0f:02:
         51:00:41:59:76:ff:87:67:13:5d:76:35:91:88:bd:9e:6a:17:
         7b:e3:f0:2e:fb:b1:32:f5:73:01:62:9f:2d:c4:48:2a:14:f4:
         7b:c8:2c:b2:c9:24:24:f4:dc:3e:fa:82:7d:cb:84:fd:30:f9:
         d4:1a:74:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:48:48 2025 by rpki-client