This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.mft
File:                     1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.mft (raw, json)
Hash identifier:          wn+2CQkCA37PYjZhqK9BU2Hk40qHuTs3Xhc5fqGVPBY=
Subject key identifier:   E5:CB:8F:C5:3A:93:42:8F:A1:28:67:CF:9C:11:A9:70:5B:FD:CE:C8
Authority key identifier: 1C:E1:AC:D1:F8:52:9B:05:4D:A7:8D:1B:59:74:B8:D5:E8:46:FA:35
Certificate issuer:       /CN=1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35
Certificate serial:       7F832341D706871ABE2C7C275A907CF097F47950
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.mft
Manifest number:          31
Signing time:             Mon 15 Dec 2025 23:13:26 +0000
Manifest this update:     Mon 15 Dec 2025 23:08:26 +0000
Manifest next update:     Wed 17 Dec 2025 02:22:26 +0000
Files and hashes:         1: 3137372e39332e38302e302f32312d3332203d3e20323633313432.roa (hash: JyZfkIOLq33nnCJFS0DfBN/aauusqE3Y9f6Bn1ZJobI=)
                          2: 1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.crl (hash: xjuySuTzgJIOk3zhmVwnzRdXCExyOWtj2R4l/ObKrSU=)
                          3: 323830343a313736303a3a2f33322d313238203d3e20323633313432.roa (hash: cHMEH3okxWfwROJpehpqXokpVfIavyGmq4FX80L1Gbw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.crl
                          rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Dec 2025 02:22:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:83:23:41:d7:06:87:1a:be:2c:7c:27:5a:90:7c:f0:97:f4:79:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35
        Validity
            Not Before: Dec 15 23:08:26 2025 GMT
            Not After : Dec 17 02:22:26 2025 GMT
        Subject: CN=E5CB8FC53A93428FA12867CF9C11A9705BFDCEC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:50:97:7b:f5:09:ea:96:96:4a:1d:31:94:11:
                    c0:f9:c6:b4:e6:16:24:1e:98:ac:cc:9c:2a:fd:d9:
                    42:0e:a4:a2:a4:8b:d6:b4:27:fc:ad:42:10:f8:8d:
                    45:ca:8e:86:5c:0c:32:be:b6:04:6b:cc:d1:19:c9:
                    70:e6:60:e0:24:ae:67:be:0b:28:9e:20:e7:15:95:
                    68:2d:99:30:72:1f:a6:13:50:d8:ab:32:00:48:bc:
                    19:91:e4:a3:ad:9b:98:d2:43:ee:41:6f:60:6e:08:
                    8e:23:77:e6:4b:77:e0:c7:dc:10:b5:90:95:1c:6d:
                    6f:0c:9d:4c:d7:88:ca:3f:c3:8c:ec:2b:2a:c3:d8:
                    dd:ba:f4:82:dc:ab:10:89:f2:f2:20:8c:1b:80:db:
                    8c:0a:9d:b0:83:5c:d6:92:da:9c:44:74:d0:62:4e:
                    9e:0c:e2:18:c3:df:17:fc:9e:55:65:cb:33:e6:ef:
                    4e:26:2c:3a:27:05:0d:dd:42:0e:3b:36:1b:00:98:
                    ca:35:f9:a0:cc:0d:c1:ba:e0:e7:88:05:c1:b2:06:
                    18:06:92:3d:d4:02:50:89:ce:28:40:c1:a0:a2:62:
                    ea:dd:0d:75:e7:0b:85:94:b0:e0:41:8a:89:7e:33:
                    bf:c3:25:f1:e9:42:29:fa:b0:f0:33:4c:94:d0:53:
                    7a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:CB:8F:C5:3A:93:42:8F:A1:28:67:CF:9C:11:A9:70:5B:FD:CE:C8
            X509v3 Authority Key Identifier:
                keyid:1C:E1:AC:D1:F8:52:9B:05:4D:A7:8D:1B:59:74:B8:D5:E8:46:FA:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:4f:13:c8:dd:38:10:79:32:76:63:c9:da:8f:14:8f:10:1a:
         a4:d7:4b:07:9d:97:8e:3a:62:16:a2:c3:af:b3:c6:63:87:7b:
         3c:af:fd:e9:1f:a5:60:b4:d4:12:da:83:59:c5:6d:86:5c:a5:
         a6:df:46:62:76:91:d2:ba:f3:0e:30:b4:16:5c:8d:27:a8:a3:
         b6:35:70:9e:0a:37:ac:40:7b:50:d5:53:e9:e5:a5:62:61:ea:
         5d:77:29:02:6e:1c:2b:09:62:c6:74:6f:cd:78:be:d0:57:4c:
         85:f0:30:97:99:c9:0b:2f:29:76:36:e3:cc:40:3e:83:c7:2c:
         9f:a8:a0:d9:e2:a2:ca:41:90:3c:65:de:19:31:a4:33:fd:73:
         13:13:47:97:96:19:c3:72:1d:82:cd:d6:59:73:bb:78:33:20:
         92:30:f4:8a:d0:52:98:93:ab:2d:26:0e:89:19:09:f8:c2:6f:
         a4:c5:85:c4:d7:7d:0a:fe:fe:51:32:a6:5f:87:d3:57:e7:ea:
         23:bc:a0:e4:16:a6:fb:b8:6c:f9:b9:a7:5a:62:6a:0f:8b:85:
         74:39:11:9a:63:61:6e:50:98:b9:ed:2b:95:93:23:37:5d:46:
         8a:6e:3c:f1:b1:58:8c:7b:5f:9c:a8:85:9b:f6:f9:5f:28:9d:
         c3:61:3b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 11:46:37 2025 by rpki-client