This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft
File:                     AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft (raw, json)
Hash identifier:          1PxbTgjBtsdq95jnFeuuuVsi/TdZWvxWRafuyixLaMY=
Subject key identifier:   1C:07:6B:DD:4E:6B:9F:84:29:AB:46:7B:8A:44:35:2F:EB:ED:60:12
Authority key identifier: AA:6F:86:A0:5F:D9:F7:D9:AB:E9:E8:E9:5B:24:6A:4C:FE:2C:9E:1A
Certificate issuer:       /CN=AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A
Certificate serial:       3447FE61B9E0516A110D7687087445DBF779FE01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft
Manifest number:          0343
Signing time:             Sun 21 Dec 2025 21:05:09 +0000
Manifest this update:     Sun 21 Dec 2025 21:00:09 +0000
Manifest next update:     Tue 23 Dec 2025 00:42:09 +0000
Files and hashes:         1: 323830343a346563343a3a2f33322d3438203d3e20323638323831.roa (hash: ee5l23fWTv1/lWAMo2GfCZn3RRz28vPRce7gjAH3vSM=)
                          2: 34352e3233372e3134302e302f32322d3234203d3e20323638323831.roa (hash: 741FE6q+LhbUbEXCT3YEJH9sL+8gSKDI67qh5Q3QkQ4=)
                          3: AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl (hash: iqHo998K8U+LfEhDVqcti9/cESvtDEkal4Wa3eFrL3s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl
                          rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 00:42:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:47:fe:61:b9:e0:51:6a:11:0d:76:87:08:74:45:db:f7:79:fe:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A
        Validity
            Not Before: Dec 21 21:00:09 2025 GMT
            Not After : Dec 23 00:42:09 2025 GMT
        Subject: CN=1C076BDD4E6B9F8429AB467B8A44352FEBED6012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c7:68:aa:ca:65:80:18:9b:97:f3:94:52:e4:
                    1e:0a:9b:2a:c3:38:b7:18:49:35:ed:ed:a6:af:02:
                    d9:6c:e6:fe:15:e2:7f:4a:3d:57:7a:4f:a1:25:d6:
                    d8:88:68:aa:68:fe:fd:89:e4:d7:55:0a:df:b3:98:
                    a5:f3:24:4a:ef:fd:23:70:92:76:d9:12:c3:0c:5f:
                    d7:4c:99:d4:44:3d:8a:ea:6c:1a:73:e4:d5:db:67:
                    a3:0a:ba:e1:4e:ed:e1:9f:57:2f:40:6e:54:e9:70:
                    18:a7:eb:ac:70:fa:11:29:b2:49:bb:e6:a7:8a:77:
                    8f:75:01:0f:49:ec:96:fa:dd:6f:7c:fe:37:f9:0d:
                    f5:f4:f1:7e:de:b9:66:2a:a6:a7:fc:26:b0:62:b1:
                    a6:e4:7a:50:62:ec:00:c8:37:48:0c:ab:74:80:98:
                    21:03:a1:eb:4c:64:3a:59:cd:c1:66:c1:f0:e7:e3:
                    37:dd:52:64:41:e5:f7:f4:58:fd:49:3f:a7:fa:0c:
                    43:e6:ba:7f:e6:c2:37:6e:f3:cb:65:34:84:ae:ff:
                    2d:4a:c7:da:51:c4:f2:e3:8b:2c:2d:72:5b:53:52:
                    2f:e0:7e:ea:10:bf:83:d6:f3:bd:40:ce:b2:35:6e:
                    6f:94:f5:a9:3d:fc:cb:1d:2f:7f:06:5d:a2:2a:f1:
                    98:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:07:6B:DD:4E:6B:9F:84:29:AB:46:7B:8A:44:35:2F:EB:ED:60:12
            X509v3 Authority Key Identifier:
                keyid:AA:6F:86:A0:5F:D9:F7:D9:AB:E9:E8:E9:5B:24:6A:4C:FE:2C:9E:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:12:3a:44:fe:58:27:a5:ae:1d:ba:14:00:bc:8e:f7:9c:2e:
         8c:14:36:a7:64:c0:b9:2d:f5:6c:ad:ef:80:95:a4:9c:c5:57:
         83:ce:55:52:ba:39:61:40:e3:1b:9d:1e:b8:09:4d:b1:b7:5a:
         4a:e3:34:f9:c3:b4:e6:d4:c9:57:6b:7e:0a:58:d2:64:61:e9:
         e9:ee:ee:35:49:f9:6c:ed:2b:5f:38:e1:3f:3a:42:7a:ad:dd:
         3e:16:f9:0a:6f:b0:f6:6c:75:31:25:db:25:7f:36:23:8b:67:
         40:9a:d8:95:5d:21:69:87:8b:c9:bc:b1:a6:b0:ca:7f:64:78:
         70:a6:9a:fc:f4:21:8e:bb:ee:60:d5:db:ed:d9:3d:a1:07:3f:
         73:78:20:e7:0b:91:50:72:bc:d2:49:98:09:78:29:22:12:e4:
         22:41:a0:8f:a2:67:75:37:11:b6:bd:3c:20:07:36:f7:13:59:
         6a:54:84:6d:1a:36:9b:d4:ef:9b:a4:6a:56:5c:05:23:15:ee:
         cd:ac:38:a5:3f:90:7d:89:93:b3:2a:c7:bb:09:7f:c4:fd:a9:
         35:60:72:cc:5a:1d:18:11:1e:3b:d3:3e:6a:3e:93:5a:6b:a3:
         3e:2d:7c:98:52:fd:55:e0:1d:a9:44:f1:e1:5f:62:f1:72:10:
         cb:ad:6d:60
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNEf+YbngUWoRDXaHCHRF2/d5/gEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUE2Rjg2QTA1RkQ5RjdEOUFCRTlFOEU5NUIyNDZBNENG
RTJDOUUxQTAeFw0yNTEyMjEyMTAwMDlaFw0yNTEyMjMwMDQyMDlaMDMxMTAvBgNV
BAMTKDFDMDc2QkRENEU2QjlGODQyOUFCNDY3QjhBNDQzNTJGRUJFRDYwMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNx2iqymWAGJuX85RS5B4KmyrD
OLcYSTXt7aavAtls5v4V4n9KPVd6T6El1tiIaKpo/v2J5NdVCt+zmKXzJErv/SNw
knbZEsMMX9dMmdREPYrqbBpz5NXbZ6MKuuFO7eGfVy9AblTpcBin66xw+hEpskm7
5qeKd491AQ9J7Jb63W98/jf5DfX08X7euWYqpqf8JrBisabkelBi7ADIN0gMq3SA
mCEDoetMZDpZzcFmwfDn4zfdUmRB5ff0WP1JP6f6DEPmun/mwjdu88tlNISu/y1K
x9pRxPLjiywtcltTUi/gfuoQv4PW871AzrI1bm+U9ak9/MsdL38GXaIq8ZixAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUHAdr3U5rn4Qpq0Z7ikQ1L+vtYBIwHwYDVR0j
BBgwFoAUqm+GoF/Z99mr6ejpWyRqTP4snhowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDg4VWRIVVRzQjdVYlVtRFZ2eUhKdFBYNTkzaXJ0ZXJYekRKa1NFZ2c0
NUQvMS9BQTZGODZBMDVGRDlGN0Q5QUJFOUU4RTk1QjI0NkE0Q0ZFMkM5RTFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBNkY4NkEwNUZEOUY3RDlB
QkU5RThFOTVCMjQ2QTRDRkUyQzlFMUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SDg4VWRIVVRzQjdVYlVtRFZ2eUhKdFBYNTkzaXJ0ZXJYekRKa1NFZ2c0NUQvMS9B
QTZGODZBMDVGRDlGN0Q5QUJFOUU4RTk1QjI0NkE0Q0ZFMkM5RTFBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHhI6RP5YJ6WuHboUALyO95wujBQ2p2TAuS31bK3vgJWknMVXg85VUro5YUDj
G50euAlNsbdaSuM0+cO05tTJV2t+CljSZGHp6e7uNUn5bO0rXzjhPzpCeq3dPhb5
Cm+w9mx1MSXbJX82I4tnQJrYlV0haYeLybyxprDKf2R4cKaa/PQhjrvuYNXb7dk9
oQc/c3gg5wuRUHK80kmYCXgpIhLkIkGgj6JndTcRtr08IAc29xNZalSEbRo2m9Tv
m6RqVlwFIxXuzaw4pT+QfYmTsyrHuwl/xP2pNWByzFodGBEeO9M+aj6TWmujPi18
mFL9VeAdqUTx4V9i8XIQy61tYA==
-----END CERTIFICATE-----
Generated at Mon Dec 22 11:35:00 2025 by rpki-client