This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft
File:                     ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft (raw, json)
Hash identifier:          RhubnCAqwqWP2vSJ1fMGoWvMs3Z77WwZW5MXEEL3La0=
Subject key identifier:   B3:46:30:2C:3E:09:21:65:50:C4:C8:01:33:D0:41:92:35:2A:D2:E8
Authority key identifier: AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D
Certificate issuer:       /CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
Certificate serial:       4D67325C614079C128D3282BA9C3FC06E76100A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft
Manifest number:          034E
Signing time:             Sat 20 Dec 2025 08:28:50 +0000
Manifest this update:     Sat 20 Dec 2025 08:23:50 +0000
Manifest next update:     Sun 21 Dec 2025 09:20:50 +0000
Files and hashes:         1: 34352e36352e3232302e302f32322d3234203d3e2033333536.roa (hash: dvS242K1P5rfv1OZRochVJr2gdCVE0YeATLaOsdgA6k=)
                          2: 323830343a336439303a3a2f33322d3438203d3e20323636353339.roa (hash: x6VNtV4ozQq6MxJ5N63q7B16Gfy4nJWVWTksz+Uj+30=)
                          3: 323830343a336439303a3a2f33322d3438203d3e2033333536.roa (hash: 0px9Lv1h7cxoSy8j5wudsGRlY6Kz+2CKHSBfVhfTFkw=)
                          4: 3137372e3230302e33322e302f32302d3234203d3e20323636353339.roa (hash: MPUf4RUd2N54twk8LH4KH+geWPZ8QRgWxi2pB9yPM8U=)
                          5: 3137372e3232332e33322e302f32302d3234203d3e20313938393439.roa (hash: q7gxLcVZHTIQtHYOqS49U6Nt1U0hpo/XvCwttq1QjJ8=)
                          6: 323830343a336439303a3a2f33322d3438203d3e20323033.roa (hash: AQPHdJljAdhG/wYm9Kot+1Yr85ejt19heQzyn2Qy5Ok=)
                          7: 34352e36352e3232302e302f32322d3234203d3e20323032.roa (hash: EUR7GzFQIh4+jSMjrVmtA4e+ZAoGf+CFRWmkwFMVmWU=)
                          8: 34352e36352e3232302e302f32322d3234203d3e20313938393439.roa (hash: Eg8wizHyBV36tEMIqHeuEAio3682XC4xlx1HHWrzu0o=)
                          9: 3137372e3232332e33322e302f32302d3234203d3e20323636353339.roa (hash: 9rNjQfR82W+oS90D8d3ALwDPX0Y2XfhUQX8gBYC9pwI=)
                          10: 34352e36352e3232302e302f32322d3234203d3e20323033.roa (hash: cxO6IIL9FYl/S1JcP9ekX/bKJPpyhULDj81eVK4QpIQ=)
                          11: 323830343a336439303a3a2f33322d3438203d3e20323032.roa (hash: WpFnDTmY8zk59PrfyxW6Djzy0QYg50QAK1Hv57G5E+A=)
                          12: 34352e36352e3232302e302f32322d3234203d3e20323636353339.roa (hash: j5xWu/EVFW9ukhAiwi1QRme12gZvEGiS4HhsB66VLnM=)
                          13: ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl (hash: Rmhpx9R/nR8SGfHDRNyNAyvdOS6yPqkWMd2FdpMdmSw=)
                          14: 3137372e3230302e33322e302f32302d3234203d3e20313938393439.roa (hash: ZCEedq7v4nOYaNjdamWUc9nfmq4PawRZdQcZLNQ3Gow=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl
                          rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 09:20:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:67:32:5c:61:40:79:c1:28:d3:28:2b:a9:c3:fc:06:e7:61:00:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
        Validity
            Not Before: Dec 20 08:23:50 2025 GMT
            Not After : Dec 21 09:20:50 2025 GMT
        Subject: CN=B346302C3E09216550C4C80133D04192352AD2E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:eb:dc:29:f8:3b:1c:36:41:66:d0:ff:9a:17:
                    40:27:ad:0b:1f:86:5f:d0:3e:93:a5:93:9c:f4:0a:
                    7a:df:4c:67:54:4f:65:c4:e0:07:3b:6e:44:e1:f2:
                    d3:60:81:72:18:7b:83:26:17:07:69:f6:f0:23:be:
                    ab:13:9a:61:f0:a4:f0:47:95:34:c4:e0:69:25:e4:
                    bd:b3:4f:15:fd:2c:a8:7f:cf:81:4c:45:e5:13:6e:
                    85:b5:47:1a:c4:69:ce:1d:2a:a4:19:14:c0:a1:6d:
                    fb:ba:a3:a4:90:01:a3:58:04:1e:91:71:99:73:5d:
                    2d:2a:98:f7:6e:36:52:6d:a3:66:12:ed:10:67:56:
                    94:e6:da:96:b6:8c:3a:e4:36:81:60:2b:de:9d:6d:
                    6b:75:4e:ca:ac:d4:21:d9:91:b7:f7:f9:94:fb:33:
                    f6:22:8e:8e:46:18:8c:48:52:fa:5d:2b:dc:1a:bf:
                    5b:98:32:42:ce:87:2f:99:46:db:33:e9:8f:e5:b3:
                    43:e5:c7:03:5e:36:3b:80:a9:90:e8:a1:47:a3:69:
                    bd:6b:03:6a:b4:79:e3:73:42:93:ac:3b:ef:04:3e:
                    ca:d1:e6:0a:9d:03:bc:7d:60:2b:7a:77:ae:d7:c3:
                    23:9a:46:f1:52:3a:80:46:9b:4a:e6:aa:e6:7e:5b:
                    2a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:46:30:2C:3E:09:21:65:50:C4:C8:01:33:D0:41:92:35:2A:D2:E8
            X509v3 Authority Key Identifier:
                keyid:AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:32:cf:14:97:80:ec:6c:07:3f:db:33:da:5d:43:3f:2b:93:
         74:4d:e0:54:48:ec:ae:60:78:f6:d0:1a:d9:48:90:35:bb:a7:
         e1:16:17:ec:ad:7b:19:61:80:d8:e0:21:4f:be:f0:fb:96:52:
         9a:d0:b4:fd:33:ed:42:66:12:05:8b:92:e6:7a:c6:77:d6:c3:
         85:4c:1e:fc:81:e0:a0:99:6c:da:1d:ba:50:de:b4:0b:a5:a8:
         44:2f:81:97:5a:26:2f:63:13:2f:b0:b6:0e:9f:82:c9:a5:f5:
         5b:0c:74:f9:e6:cc:a9:47:5a:ae:a4:c7:7b:40:5b:50:cd:d8:
         89:22:08:f4:c6:bc:20:cf:4d:ca:c9:1f:5b:2d:4d:93:60:46:
         c1:a1:f0:e1:2e:4f:4c:1a:62:c8:01:8f:32:d4:0e:a1:f9:2f:
         5e:30:d8:3b:d1:5d:d5:c6:31:81:c4:fb:33:b1:0c:f8:c3:77:
         cb:06:6f:2f:6a:83:e8:cc:a8:11:9c:fe:ac:18:73:06:9f:3c:
         c2:f8:41:32:5c:b3:01:1f:7d:08:06:8b:54:f5:34:a4:74:92:
         c2:39:7b:ae:c2:04:5c:fa:fe:25:c8:c5:16:a7:c8:83:66:d0:
         ac:2c:c6:7b:70:1c:7e:30:1d:1a:90:6d:9b:90:2e:10:6e:1e:
         b5:ca:91:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 10:03:25 2025 by rpki-client