This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.mft
File:                     6CCF865AC90751CCEF5EF29C83DA400ECDC00353.mft (raw, json)
Hash identifier:          0U+PSkYi8m2oF0zynP1M70epMP28FVyRG9jLYPzV0c8=
Subject key identifier:   98:C4:39:76:DF:B6:C1:B4:65:47:A9:CD:73:D1:ED:9C:23:BE:1B:C3
Authority key identifier: 6C:CF:86:5A:C9:07:51:CC:EF:5E:F2:9C:83:DA:40:0E:CD:C0:03:53
Certificate issuer:       /CN=6CCF865AC90751CCEF5EF29C83DA400ECDC00353
Certificate serial:       2A3A1CCB59C32FA6ED763E2D1E34F32AA533361F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.mft
Manifest number:          016A
Signing time:             Wed 17 Dec 2025 19:49:21 +0000
Manifest this update:     Wed 17 Dec 2025 19:44:21 +0000
Manifest next update:     Thu 18 Dec 2025 23:41:21 +0000
Files and hashes:         1: 6CCF865AC90751CCEF5EF29C83DA400ECDC00353.crl (hash: +atAxJEqL/Qa+A65whYkFUudy3oASiJrNaZ/o/yI6H4=)
                          2: 323830343a333334343a3a2f33322d313238203d3e20323635333835.roa (hash: /Q/JaZ+icLikHWHv6dzvxz7VzZzgz++sE7gytxv6cx0=)
                          3: 3137302e3235342e3234382e302f32322d3332203d3e20323635333835.roa (hash: hBgzZnxmEBmYRTuvlGTuu4nN28d1lzU1d0fXQNp/cp8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.crl
                          rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Dec 2025 23:41:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:3a:1c:cb:59:c3:2f:a6:ed:76:3e:2d:1e:34:f3:2a:a5:33:36:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CCF865AC90751CCEF5EF29C83DA400ECDC00353
        Validity
            Not Before: Dec 17 19:44:21 2025 GMT
            Not After : Dec 18 23:41:21 2025 GMT
        Subject: CN=98C43976DFB6C1B46547A9CD73D1ED9C23BE1BC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8c:34:54:70:8e:77:20:91:1b:03:75:08:32:
                    e9:b1:5d:b2:fd:bb:89:6b:85:ff:97:f7:52:8c:63:
                    4a:cb:91:08:62:dc:9e:bd:d9:d9:28:4d:35:43:f5:
                    c0:79:ba:04:3d:42:14:59:a6:65:59:23:3a:65:a2:
                    df:4b:d0:64:fd:55:d9:79:7c:b0:2a:2a:8c:1b:f8:
                    43:3a:26:0e:14:d8:a9:08:a5:10:ba:72:a3:65:1f:
                    b9:f6:32:55:17:30:89:0d:7d:ce:fd:dd:13:f8:ee:
                    37:ca:0c:d9:43:f8:05:65:ce:09:3c:68:cd:d0:82:
                    50:e0:85:64:53:5e:5e:48:2c:ca:5e:78:d2:31:e8:
                    ad:fc:80:93:f8:61:03:d8:ad:db:70:8a:1c:54:78:
                    78:e5:9f:f6:14:3b:fd:19:4a:b0:05:9b:32:67:0a:
                    d6:65:47:6d:7f:36:ea:78:6b:a9:ec:1b:79:cc:da:
                    1e:97:c7:94:af:35:8c:b0:67:41:b4:80:6a:29:75:
                    13:71:d3:3d:aa:4c:bf:72:d5:98:77:5b:54:8f:91:
                    ff:61:a8:70:dd:49:1c:06:a6:fb:84:dd:cf:81:97:
                    d2:57:dc:34:72:20:02:f7:13:60:52:b4:2d:f5:c6:
                    af:52:56:c5:b4:78:f4:4c:ac:8f:4d:e5:27:a1:7f:
                    41:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C4:39:76:DF:B6:C1:B4:65:47:A9:CD:73:D1:ED:9C:23:BE:1B:C3
            X509v3 Authority Key Identifier:
                keyid:6C:CF:86:5A:C9:07:51:CC:EF:5E:F2:9C:83:DA:40:0E:CD:C0:03:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:67:29:b3:b5:39:f1:72:ce:7f:91:f9:aa:16:80:62:5a:bb:
         5c:b6:c6:20:9c:23:42:1b:43:d9:cd:27:b8:c1:5f:25:31:30:
         c6:d2:9e:44:4e:6d:d2:d9:3f:f5:63:1c:19:a2:f2:bd:74:0e:
         f3:21:df:c7:57:e1:98:cd:80:b9:2a:08:76:b0:fa:24:83:27:
         cf:a7:5a:ee:df:44:ab:2d:3d:4f:60:45:0d:c4:3e:8a:21:e3:
         7a:07:2a:d9:bb:ef:d3:c2:f2:09:a1:97:72:c2:4d:6f:a1:0a:
         78:b7:cd:80:1e:23:89:ff:f2:ac:e8:91:8a:cb:47:86:9e:8e:
         ae:d1:42:f3:3d:f5:7f:60:31:d0:a5:8a:84:b6:e4:e9:5d:98:
         f5:a7:5f:6f:9a:59:6d:57:75:46:9b:fc:aa:69:9c:bc:fb:9a:
         60:47:0c:2f:97:c3:73:e0:8b:19:44:78:36:96:3e:42:1b:8f:
         f4:52:e6:3e:e9:b6:41:c3:37:da:3b:37:19:ad:b0:88:67:0b:
         0b:d5:dd:50:77:ca:8a:5c:4f:bb:43:b3:db:5e:82:38:bc:6d:
         b5:08:09:c4:36:38:fe:de:90:54:f2:0a:2c:e3:0b:20:70:cd:
         31:90:1c:e3:8c:38:6f:22:f2:84:a8:a0:fd:55:e2:5f:5d:e1:
         19:92:41:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 13:22:55 2025 by rpki-client