This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/89DCCC087983CCF309AB03F388DFD612618A10BC.mft
File:                     89DCCC087983CCF309AB03F388DFD612618A10BC.mft (raw, json)
Hash identifier:          AGxMCJGswMmjuWCD1PXTf1LdDBSKMef3buuCPUNgwe0=
Subject key identifier:   F8:76:B3:9C:A1:87:04:9A:37:AD:26:99:7F:76:6E:0E:F0:30:26:61
Authority key identifier: 89:DC:CC:08:79:83:CC:F3:09:AB:03:F3:88:DF:D6:12:61:8A:10:BC
Certificate issuer:       /CN=89DCCC087983CCF309AB03F388DFD612618A10BC
Certificate serial:       77AAC5274FF273735C833E0E2ED01F9C737FEA16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89DCCC087983CCF309AB03F388DFD612618A10BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/89DCCC087983CCF309AB03F388DFD612618A10BC.mft
Manifest number:          55
Signing time:             Fri 19 Dec 2025 16:39:34 +0000
Manifest this update:     Fri 19 Dec 2025 16:34:34 +0000
Manifest next update:     Sat 20 Dec 2025 18:15:34 +0000
Files and hashes:         1: 323830343a323562303a3a2f33322d3336203d3e20323634323935.roa (hash: 6JFNis6CMMlRcOn/JP2hG4cErjjDFHI1FiBH7GfiLcc=)
                          2: 3133382e3132312e3131362e302f32322d3234203d3e20323634323935.roa (hash: IwmbqlRxvGJaLxRJRFKZh4xtvYzQKKvMF5BTmSlu89g=)
                          3: 89DCCC087983CCF309AB03F388DFD612618A10BC.crl (hash: 3ndJxeYGNEaGUHmswTAKCyQFWAr1c6hSWoHRs3eAz8Q=)
                          4: 3136382e3138312e3135322e302f32322d3234203d3e20323634323935.roa (hash: enA5gqxijJvyrQexiJtkq9Jp65o5Wz64+J9yGOE4DhM=)
                          5: 3137302e3234362e31362e302f32322d3234203d3e20323634323935.roa (hash: wVJ50g69tgJBhniEn3qHPivwTPWRxNwBQtD8dQ2M9YQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/89DCCC087983CCF309AB03F388DFD612618A10BC.crl
                          rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/89DCCC087983CCF309AB03F388DFD612618A10BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89DCCC087983CCF309AB03F388DFD612618A10BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 18:15:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:aa:c5:27:4f:f2:73:73:5c:83:3e:0e:2e:d0:1f:9c:73:7f:ea:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89DCCC087983CCF309AB03F388DFD612618A10BC
        Validity
            Not Before: Dec 19 16:34:34 2025 GMT
            Not After : Dec 20 18:15:34 2025 GMT
        Subject: CN=F876B39CA187049A37AD26997F766E0EF0302661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7c:fd:bc:b4:46:bc:09:88:16:b1:ac:ad:a4:
                    a6:86:a4:6a:cd:12:9e:8a:eb:66:83:ec:01:15:9b:
                    1a:a6:07:97:f5:ba:72:1f:c2:41:b1:12:c5:7a:e6:
                    19:2b:cc:eb:63:8c:24:08:cb:62:39:58:34:34:bc:
                    38:c9:83:4a:24:a9:e3:d5:1e:8f:a7:42:02:e0:e7:
                    88:3f:09:d7:d6:ac:59:d3:9a:bf:57:5c:05:47:c0:
                    e7:10:6a:5c:07:8c:8f:89:0e:f2:47:1f:18:d2:d9:
                    77:91:22:15:63:5f:74:9b:55:5b:e3:26:e6:3f:f8:
                    56:a1:02:01:2a:4a:29:6e:75:5e:32:0f:0a:e5:73:
                    73:f7:f1:62:79:9a:9f:b6:53:78:06:17:c0:61:52:
                    26:cb:7e:39:55:ce:d7:8a:28:05:10:79:f9:e0:17:
                    40:9c:f0:04:3d:c7:68:31:0d:81:f7:c0:f1:d9:ef:
                    44:32:b8:8b:8e:86:27:ca:b8:c4:11:d9:61:1b:5b:
                    17:be:b6:b9:84:1b:46:b3:47:4f:6b:13:69:2a:15:
                    9e:fe:b0:66:dc:be:49:1c:49:b0:e8:33:11:49:b9:
                    65:8e:d3:0e:05:05:39:db:e7:0b:10:ef:27:42:dd:
                    fb:30:b7:15:62:fe:76:27:84:27:82:16:9c:a1:0b:
                    55:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:76:B3:9C:A1:87:04:9A:37:AD:26:99:7F:76:6E:0E:F0:30:26:61
            X509v3 Authority Key Identifier:
                keyid:89:DC:CC:08:79:83:CC:F3:09:AB:03:F3:88:DF:D6:12:61:8A:10:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/89DCCC087983CCF309AB03F388DFD612618A10BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89DCCC087983CCF309AB03F388DFD612618A10BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/89DCCC087983CCF309AB03F388DFD612618A10BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:e6:bc:bc:75:de:5e:85:ae:a5:82:f9:58:55:52:34:a6:a6:
         85:81:cb:af:79:20:64:a5:b2:04:9e:5f:d1:a7:96:74:a6:2e:
         e9:e9:02:c2:ba:df:4c:c2:c1:d9:7f:3f:24:b5:02:a1:56:17:
         e2:fc:8f:f4:95:a8:2b:14:69:7d:79:b4:e8:07:15:81:f9:5a:
         59:62:1d:df:a9:00:b0:9d:3f:cf:75:d3:96:49:90:0b:69:d0:
         d1:47:ee:5f:8c:7c:41:b0:82:a7:9d:a2:2c:8e:8d:2c:3e:43:
         a2:3a:c2:93:25:02:6d:2a:eb:fa:7e:36:42:a6:62:70:39:a4:
         ba:70:fc:40:aa:4c:af:c2:e1:b9:18:62:30:bb:85:ec:32:e9:
         21:7e:37:ba:ce:75:2f:db:70:af:9a:6a:c0:36:43:7c:63:b7:
         cc:0b:88:87:ed:10:ef:75:1c:e1:fc:8a:e9:7b:84:ec:9b:96:
         9d:e7:d1:d7:ab:ee:a2:4f:83:de:4f:37:76:53:1b:c7:92:0f:
         c3:58:46:70:cb:29:01:47:e2:01:36:d2:f9:45:ba:c7:2a:af:
         3e:d6:54:9f:a2:a7:8e:ff:2f:25:b2:d7:13:87:12:20:ed:7a:
         6d:8f:87:7d:ef:90:47:95:96:7f:05:8f:73:1d:21:c9:6e:08:
         73:b9:42:02
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUd6rFJ0/yc3Ncgz4OLtAfnHN/6hYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlEQ0NDMDg3OTgzQ0NGMzA5QUIwM0YzODhERkQ2MTI2
MThBMTBCQzAeFw0yNTEyMTkxNjM0MzRaFw0yNTEyMjAxODE1MzRaMDMxMTAvBgNV
BAMTKEY4NzZCMzlDQTE4NzA0OUEzN0FEMjY5OTdGNzY2RTBFRjAzMDI2NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdfP28tEa8CYgWsaytpKaGpGrN
Ep6K62aD7AEVmxqmB5f1unIfwkGxEsV65hkrzOtjjCQIy2I5WDQ0vDjJg0okqePV
Ho+nQgLg54g/CdfWrFnTmr9XXAVHwOcQalwHjI+JDvJHHxjS2XeRIhVjX3SbVVvj
JuY/+FahAgEqSiludV4yDwrlc3P38WJ5mp+2U3gGF8BhUibLfjlVzteKKAUQefng
F0Cc8AQ9x2gxDYH3wPHZ70QyuIuOhifKuMQR2WEbWxe+trmEG0azR09rE2kqFZ7+
sGbcvkkcSbDoMxFJuWWO0w4FBTnb5wsQ7ydC3fswtxVi/nYnhCeCFpyhC1WZAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU+HaznKGHBJo3rSaZf3ZuDvAwJmEwHwYDVR0j
BBgwFoAUidzMCHmDzPMJqwPziN/WEmGKELwwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9ybjRYb0htTlpuZ25kR2JGb0RBOUc3WDV0WkxjU2hEY3ZOTjN0NUI0UXh3
LzAvODlEQ0NDMDg3OTgzQ0NGMzA5QUIwM0YzODhERkQ2MTI2MThBMTBCQy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84OURDQ0MwODc5ODNDQ0YzMDlB
QjAzRjM4OERGRDYxMjYxOEExMEJDLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3Ju
NFhvSG1OWm5nbmRHYkZvREE5RzdYNXRaTGNTaERjdk5OM3Q1QjRReHcvMC84OURD
Q0MwODc5ODNDQ0YzMDlBQjAzRjM4OERGRDYxMjYxOEExMEJDLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
jua8vHXeXoWupYL5WFVSNKamhYHLr3kgZKWyBJ5f0aeWdKYu6ekCwrrfTMLB2X8/
JLUCoVYX4vyP9JWoKxRpfXm06AcVgflaWWId36kAsJ0/z3XTlkmQC2nQ0UfuX4x8
QbCCp52iLI6NLD5DojrCkyUCbSrr+n42QqZicDmkunD8QKpMr8LhuRhiMLuF7DLp
IX43us51L9twr5pqwDZDfGO3zAuIh+0Q73Uc4fyK6XuE7JuWnefR16vuok+D3k83
dlMbx5IPw1hGcMspAUfiATbS+UW6xyqvPtZUn6Knjv8vJbLXE4cSIO16bY+Hfe+Q
R5WWfwWPcx0hyW4Ic7lCAg==
-----END CERTIFICATE-----