This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.mft
File:                     0667C1E975614C995A6FB737132548928E943717.mft (raw, json)
Hash identifier:          gK/7y5T5uxUrpyqyp9ezu1vNCoETwLOBcoOyCXrEZXQ=
Subject key identifier:   D0:7C:F9:60:AE:51:EA:F6:0F:BE:5C:05:40:96:D6:95:46:5D:A1:B8
Authority key identifier: 06:67:C1:E9:75:61:4C:99:5A:6F:B7:37:13:25:48:92:8E:94:37:17
Certificate issuer:       /CN=0667C1E975614C995A6FB737132548928E943717
Certificate serial:       3C8010F095CD8528E246DFB10E63667B5C60E12E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.mft
Manifest number:          0345
Signing time:             Tue 16 Dec 2025 17:36:56 +0000
Manifest this update:     Tue 16 Dec 2025 17:31:56 +0000
Manifest next update:     Wed 17 Dec 2025 21:15:56 +0000
Files and hashes:         1: 3138372e3131312e3131322e302f32322d3232203d3e20323731363830.roa (hash: UDc2a11lMXoutrxkVXHv9/P2ZCVJhAIP/APUwqyFI+Y=)
                          2: 3138372e3131312e3131322e302f32332d3233203d3e20323731363830.roa (hash: JVu8beyHKjU9ufH+KvindaEB+yOIp4s8pyXSuRmYUGk=)
                          3: 3138372e3131312e3131342e302f32342d3234203d3e20323731363830.roa (hash: jOaa9Y6B1wldYTqunC0ifArH1I/MagZETYt4EwF5yq0=)
                          4: 3138372e3131312e3131332e302f32342d3234203d3e20323731363830.roa (hash: nrOdqZOfY5Nbn0thVXtoyCD/xS8FjidLJDZuWGGR5DE=)
                          5: 323830343a376635303a3a2f33322d3332203d3e20323731363830.roa (hash: 8mwojufcPep+splbZMuv38KNaQbe2kXCGWx7hQgtXxA=)
                          6: 3138372e3131312e3131352e302f32342d3234203d3e20323731363830.roa (hash: oIInCdgaGC3oZ63SvbkLHxdHc1iFO02Y1xvdWzEcFSI=)
                          7: 0667C1E975614C995A6FB737132548928E943717.crl (hash: DktIn8TObfLA8uZZKeM5EjMhEIM2Go4xxsPQiI2YP5c=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.crl
                          rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Dec 2025 21:15:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:80:10:f0:95:cd:85:28:e2:46:df:b1:0e:63:66:7b:5c:60:e1:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0667C1E975614C995A6FB737132548928E943717
        Validity
            Not Before: Dec 16 17:31:56 2025 GMT
            Not After : Dec 17 21:15:56 2025 GMT
        Subject: CN=D07CF960AE51EAF60FBE5C054096D695465DA1B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6c:56:4d:03:36:c0:c6:1a:d1:b6:5b:b2:3a:
                    f8:53:dc:3d:aa:06:4f:c8:dd:6a:cc:47:bc:23:e4:
                    c6:85:c1:37:1e:53:96:99:07:c4:c0:27:88:1d:52:
                    f0:4d:f2:88:24:c3:48:8b:40:5a:cf:a5:4f:83:a0:
                    64:1e:ef:47:30:7d:86:da:e2:87:e2:d0:27:53:ab:
                    5d:f4:76:a4:3b:06:80:15:b6:62:3e:e0:86:9b:45:
                    13:d5:f7:ad:8a:c1:83:cd:35:7f:e4:d8:3f:51:4b:
                    52:39:fe:22:bb:ff:1d:c2:33:6a:6d:21:eb:df:41:
                    90:67:97:50:09:fe:ad:c9:ae:81:f5:8c:0a:15:09:
                    c9:c3:7f:48:52:9b:a2:ad:f6:60:e0:6d:e9:07:92:
                    f6:22:bb:13:33:b0:8b:45:ae:66:0a:6a:be:95:7e:
                    87:5a:ab:44:6c:c7:ce:d7:19:af:11:0e:b7:f0:1f:
                    25:24:5d:ff:25:f1:f7:53:44:dd:e4:31:03:81:ac:
                    37:a3:3a:bf:2a:24:00:c9:4d:77:21:b1:e7:ca:0c:
                    ec:cd:78:9c:ec:8f:73:6b:ee:d4:7f:30:86:65:cc:
                    3b:0e:0b:47:13:eb:20:56:a0:10:c6:3e:4f:9b:04:
                    1a:f3:21:63:7c:25:12:1e:14:a1:62:13:29:0a:53:
                    a3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7C:F9:60:AE:51:EA:F6:0F:BE:5C:05:40:96:D6:95:46:5D:A1:B8
            X509v3 Authority Key Identifier:
                keyid:06:67:C1:E9:75:61:4C:99:5A:6F:B7:37:13:25:48:92:8E:94:37:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:7a:5e:7a:aa:45:a1:01:89:0a:4e:42:b6:9e:a1:c5:22:da:
         28:16:ac:fa:a3:9a:6c:86:03:7a:0e:a5:89:a0:5d:49:64:ad:
         76:e8:8a:7c:55:34:81:3b:2c:31:d1:90:61:45:e1:0e:82:bd:
         f0:e5:40:50:3e:67:2d:2f:f2:d5:a3:7a:40:5f:de:32:37:bd:
         39:12:86:aa:8c:4b:60:4a:21:bc:82:14:34:9b:e3:f4:33:b3:
         a9:7e:66:81:fb:03:aa:73:b9:16:34:c0:36:bb:0f:10:40:10:
         aa:c2:a8:60:f2:52:92:e9:3d:48:fe:ee:08:dc:74:90:92:e9:
         b6:73:ad:4e:ad:ef:3c:ff:d8:66:68:2e:98:2b:d4:01:db:04:
         25:e6:ee:8e:e1:12:39:5d:ea:f2:bb:48:44:3e:c9:bc:81:ee:
         10:98:6e:56:32:67:f7:7e:bf:e0:03:b4:62:df:46:c6:fd:79:
         51:7d:1a:43:df:1e:4d:58:8c:ac:52:e7:cf:7d:5a:85:e1:1b:
         69:b7:c1:ef:5f:f2:12:72:38:5a:f5:9b:86:52:9f:e7:bd:b7:
         21:e5:c6:18:2a:58:54:81:03:5d:f5:ec:52:01:85:cb:09:89:
         32:2c:bc:21:44:98:e4:92:48:45:60:0b:bb:06:78:0e:49:b9:
         eb:a2:92:41
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPIAQ8JXNhSjiRt+xDmNme1xg4S4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDY2N0MxRTk3NTYxNEM5OTVBNkZCNzM3MTMyNTQ4OTI4
RTk0MzcxNzAeFw0yNTEyMTYxNzMxNTZaFw0yNTEyMTcyMTE1NTZaMDMxMTAvBgNV
BAMTKEQwN0NGOTYwQUU1MUVBRjYwRkJFNUMwNTQwOTZENjk1NDY1REExQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfbFZNAzbAxhrRtluyOvhT3D2q
Bk/I3WrMR7wj5MaFwTceU5aZB8TAJ4gdUvBN8ogkw0iLQFrPpU+DoGQe70cwfYba
4ofi0CdTq130dqQ7BoAVtmI+4IabRRPV962KwYPNNX/k2D9RS1I5/iK7/x3CM2pt
IevfQZBnl1AJ/q3JroH1jAoVCcnDf0hSm6Kt9mDgbekHkvYiuxMzsItFrmYKar6V
fodaq0Rsx87XGa8RDrfwHyUkXf8l8fdTRN3kMQOBrDejOr8qJADJTXchsefKDOzN
eJzsj3Nr7tR/MIZlzDsOC0cT6yBWoBDGPk+bBBrzIWN8JRIeFKFiEykKU6MVAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU0Hz5YK5R6vYPvlwFQJbWlUZdobgwHwYDVR0j
BBgwFoAUBmfB6XVhTJlab7c3EyVIko6UNxcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjNtUm5zSm4xUzFUQmhxeWRZRE5CcFZ4S0E5ZDJQd3pTUjJNV0xabnpj
YTIvMS8wNjY3QzFFOTc1NjE0Qzk5NUE2RkI3MzcxMzI1NDg5MjhFOTQzNzE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2NjdDMUU5NzU2MTRDOTk1
QTZGQjczNzEzMjU0ODkyOEU5NDM3MTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MjNtUm5zSm4xUzFUQmhxeWRZRE5CcFZ4S0E5ZDJQd3pTUjJNV0xabnpjYTIvMS8w
NjY3QzFFOTc1NjE0Qzk5NUE2RkI3MzcxMzI1NDg5MjhFOTQzNzE3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArnpeeqpFoQGJCk5Ctp6hxSLaKBas+qOabIYDeg6liaBdSWStduiKfFU0gTss
MdGQYUXhDoK98OVAUD5nLS/y1aN6QF/eMje9ORKGqoxLYEohvIIUNJvj9DOzqX5m
gfsDqnO5FjTANrsPEEAQqsKoYPJSkuk9SP7uCNx0kJLptnOtTq3vPP/YZmgumCvU
AdsEJebujuESOV3q8rtIRD7JvIHuEJhuVjJn936/4AO0Yt9Gxv15UX0aQ98eTViM
rFLnz31aheEbabfB71/yEnI4WvWbhlKf5723IeXGGCpYVIEDXfXsUgGFywmJMiy8
IUSY5JJIRWALuwZ4Dkm566KSQQ==
-----END CERTIFICATE-----
Generated at Tue Dec 16 22:52:38 2025 by rpki-client