This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.mft
File:                     8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.mft (raw, json)
Hash identifier:          tpmACc0oo7rgGWVdF0QUwlV7mYwBNtsurrlfNnXdNy8=
Subject key identifier:   99:EC:F1:FE:4C:77:8C:43:34:0C:03:BE:8B:98:B1:0F:0C:E8:DD:15
Authority key identifier: 8B:8B:4E:1F:32:9B:88:F7:0D:E3:5D:A3:30:FC:1F:9C:A2:B9:20:84
Certificate issuer:       /CN=8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084
Certificate serial:       1B3428A5834CEAA4D217E98DC8D3DE87ACBAF057
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.mft
Manifest number:          034F
Signing time:             Tue 30 Dec 2025 16:00:08 +0000
Manifest this update:     Tue 30 Dec 2025 15:55:08 +0000
Manifest next update:     Wed 31 Dec 2025 18:44:08 +0000
Files and hashes:         1: 3133382e3132312e33362e302f32322d3332203d3e20323731363233.roa (hash: 0aM/hZZShDJsW9ewKI93DVkiHc2tzvTtFjiHy0/zhVU=)
                          2: 323830343a376536633a3a2f33322d313238203d3e20323731363233.roa (hash: dMeIzUUgXYMifee7yUy6Z7Qqcq81KQpEhu3ht6d+GPM=)
                          3: 8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.crl (hash: OM1he2WsJx9K1Lh7xVCtf6uEi6LQJ0loCqiBE0coNaw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.crl
                          rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 31 Dec 2025 18:44:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:34:28:a5:83:4c:ea:a4:d2:17:e9:8d:c8:d3:de:87:ac:ba:f0:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084
        Validity
            Not Before: Dec 30 15:55:08 2025 GMT
            Not After : Dec 31 18:44:08 2025 GMT
        Subject: CN=99ECF1FE4C778C43340C03BE8B98B10F0CE8DD15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cf:d3:05:cf:ff:ae:bc:28:ab:4e:01:b4:6b:
                    be:27:64:d8:fc:b7:5e:f0:48:d0:6d:03:03:f5:77:
                    ba:b5:4e:8c:d4:fa:9e:46:e7:d1:0d:46:9d:a6:4e:
                    cb:7a:a3:a9:99:e0:3d:3b:94:99:d3:29:d8:bd:73:
                    ee:d9:0a:a4:92:09:45:e3:c4:f7:0a:87:b6:ac:53:
                    f1:55:af:53:96:2e:25:87:bb:0d:80:a3:f6:0f:9f:
                    be:2d:97:1b:69:08:2b:d3:df:54:7b:71:22:0a:15:
                    1f:d5:1b:f8:5c:e7:ad:00:0f:eb:9f:38:31:57:51:
                    61:b1:dd:a5:ae:ea:ee:6d:c5:35:81:68:80:72:90:
                    9a:5c:b8:e1:f2:81:8f:3c:63:6a:6e:aa:d5:99:8b:
                    a6:86:bd:de:d5:94:71:4b:90:a2:f6:8a:30:62:ba:
                    28:71:de:b8:f2:c4:c3:cd:bb:84:4a:e5:84:40:a7:
                    26:cc:16:ed:d7:fc:9e:fe:54:b6:ed:0c:10:22:0f:
                    20:b6:1e:db:33:a9:77:29:54:57:ad:b1:b5:ff:7e:
                    b1:27:8a:ef:01:cc:e6:93:33:ad:e8:94:78:46:7c:
                    b1:61:6a:d8:0f:b9:cc:31:a5:6c:77:73:c1:0f:2e:
                    c0:f0:92:88:0f:72:88:19:0d:d1:15:86:7a:bb:97:
                    d5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EC:F1:FE:4C:77:8C:43:34:0C:03:BE:8B:98:B1:0F:0C:E8:DD:15
            X509v3 Authority Key Identifier:
                keyid:8B:8B:4E:1F:32:9B:88:F7:0D:E3:5D:A3:30:FC:1F:9C:A2:B9:20:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:eb:47:3c:dd:fb:41:48:16:61:24:ba:2a:4e:c0:29:0b:9f:
         41:92:a8:f4:f9:4f:f4:1e:4d:bc:64:e6:41:af:32:f0:db:c4:
         69:a9:a3:c4:74:36:2b:a8:86:3f:1a:db:4d:29:da:c9:94:7d:
         8c:6a:be:6e:57:8f:99:22:0c:0b:47:56:80:4e:d8:e7:c7:11:
         4c:69:34:ea:11:5c:1d:bb:88:a5:93:e8:1b:9b:df:5b:ae:64:
         15:34:50:9d:5f:e7:52:25:7f:a3:39:db:94:0c:6f:e5:3b:81:
         13:65:5d:9b:7a:1f:b1:ec:c8:2d:d7:5c:f4:ed:d3:b5:44:5e:
         9f:b2:98:0c:f1:e4:59:bd:fc:3c:bd:c7:be:ed:26:72:5c:05:
         df:9a:e2:6a:e9:f5:43:46:e8:0d:b6:33:dc:9f:de:34:2c:38:
         08:69:7f:bd:20:d0:83:3f:77:76:d0:97:c7:ec:09:e8:bc:7e:
         8c:7b:b1:59:ea:5c:1c:0c:d8:47:46:f1:1b:a4:cf:2e:6a:9b:
         88:38:76:88:5a:e2:69:c3:84:14:10:81:62:99:79:27:86:2b:
         ae:c2:56:6f:29:78:b8:7f:80:59:d7:a2:d4:43:d0:22:c0:93:
         31:59:f2:04:2e:38:7a:c0:25:7b:3f:f6:8b:d6:22:03:a9:b5:
         dc:94:9a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 08:19:34 2025 by rpki-client