This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.mft
File:                     9A88287F0DA67C74CC2430138C9E699A8D9BC30C.mft (raw, json)
Hash identifier:          aUObQjorcB9T6quJTBGzGxlmULRJ/f9dG6Q+xnj0Jzs=
Subject key identifier:   7C:22:81:75:3A:57:02:92:AB:6A:41:93:24:2F:FD:C8:1C:9C:3D:D9
Authority key identifier: 9A:88:28:7F:0D:A6:7C:74:CC:24:30:13:8C:9E:69:9A:8D:9B:C3:0C
Certificate issuer:       /CN=9A88287F0DA67C74CC2430138C9E699A8D9BC30C
Certificate serial:       6A78CC9EED1ADE1B51817840D91C4E9239C81048
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.mft
Manifest number:          0345
Signing time:             Mon 22 Dec 2025 10:31:11 +0000
Manifest this update:     Mon 22 Dec 2025 10:26:11 +0000
Manifest next update:     Tue 23 Dec 2025 12:43:11 +0000
Files and hashes:         1: 3137372e3135342e32302e302f32322d3332203d3e20323632343734.roa (hash: H4KK/IfCeQYkBhQvfas6h5MTpKMxJTrKibFC05W8fuY=)
                          2: 9A88287F0DA67C74CC2430138C9E699A8D9BC30C.crl (hash: qbmXKDMzngPNhEiO/n2rpuFJvIrxTF162La1hhqxJB8=)
                          3: 323830343a3464633a3a2f33322d313238203d3e20323632343734.roa (hash: tLinHUpDx5XtKM/wXIJIMXEa7cIJplW8c1o8b2SFJ1U=)
                          4: 3137372e35332e3136382e302f32312d3332203d3e20323632343734.roa (hash: aGKmgf4Q37YTxb2naQ2Aw7TO+rtm4/O1Gt+ec54VYCM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.crl
                          rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 12:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:78:cc:9e:ed:1a:de:1b:51:81:78:40:d9:1c:4e:92:39:c8:10:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A88287F0DA67C74CC2430138C9E699A8D9BC30C
        Validity
            Not Before: Dec 22 10:26:11 2025 GMT
            Not After : Dec 23 12:43:11 2025 GMT
        Subject: CN=7C2281753A570292AB6A4193242FFDC81C9C3DD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:23:94:15:10:ba:39:41:a0:56:9e:61:f6:6b:
                    70:1e:99:e2:51:e9:fa:f9:87:5d:d0:f0:ee:14:97:
                    24:e4:67:33:0c:54:7a:e0:62:4b:8c:94:ad:f5:92:
                    0b:bd:86:8e:ef:bf:5c:62:41:35:f9:82:2c:15:8b:
                    c4:8a:a0:9e:36:4b:5f:95:1e:ff:79:5a:d2:db:94:
                    c1:88:3e:b2:8e:29:ee:ae:f3:27:8c:ef:3e:55:d1:
                    ad:fb:7f:21:22:04:e9:fc:32:58:9a:6b:b8:9d:28:
                    6a:8e:57:c9:26:a8:6c:a5:98:2f:3e:a5:55:89:cd:
                    11:f6:42:16:1c:01:8f:36:75:70:29:50:cc:db:e5:
                    87:86:f6:34:3f:39:58:f0:ab:c5:2d:4c:02:9c:4e:
                    30:cb:4a:73:78:5a:d1:bf:04:b6:4c:2c:7c:9f:6b:
                    9e:79:c6:ca:27:d7:dd:82:46:00:4d:2a:de:0d:91:
                    84:cb:74:eb:e0:26:e1:13:e4:69:60:e7:91:42:df:
                    b0:bd:d0:00:42:69:17:85:f3:03:4c:24:bf:2a:f3:
                    23:5d:8e:13:da:61:0a:f1:51:d4:da:ba:d0:9f:0f:
                    95:72:ea:ea:c5:de:3e:42:58:a5:71:f0:28:58:aa:
                    d7:b4:0c:b3:32:06:25:9c:e5:ec:e6:a3:06:0d:a3:
                    a4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:22:81:75:3A:57:02:92:AB:6A:41:93:24:2F:FD:C8:1C:9C:3D:D9
            X509v3 Authority Key Identifier:
                keyid:9A:88:28:7F:0D:A6:7C:74:CC:24:30:13:8C:9E:69:9A:8D:9B:C3:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:5a:1b:d3:5f:18:44:dc:a5:e1:df:70:b3:8b:29:35:c9:85:
         8b:78:ed:23:0d:f6:2e:73:28:4e:37:f1:27:b1:98:35:97:98:
         c6:21:91:c9:01:cd:80:45:f8:dd:e1:dc:02:61:1e:43:76:e7:
         63:ca:12:67:38:37:78:fb:e2:10:c0:57:b8:23:75:79:66:b7:
         c3:af:91:6c:fe:00:1f:15:5d:ee:09:40:80:6d:c3:f9:1f:39:
         dd:b2:c9:bb:84:b5:68:0e:99:c6:f5:a7:85:4e:47:66:c7:26:
         f3:f8:91:7b:b2:7b:f0:2b:ed:58:dc:3b:80:2c:d2:5d:6e:2f:
         a0:41:5a:8f:5f:e0:13:7a:80:67:e6:df:3d:6d:3b:e2:17:92:
         bc:9b:f9:66:80:c1:5b:69:3d:ec:5d:a3:17:dc:5a:ec:31:f2:
         e4:71:ba:15:da:b5:a8:f5:aa:b8:74:79:10:65:89:ee:c5:0f:
         12:c0:a4:19:b0:f1:ca:32:1e:77:91:14:6b:6e:f4:02:21:e5:
         9c:c0:42:2d:07:cd:6e:4b:b5:3f:03:ed:1f:c2:de:65:85:a9:
         8f:39:ae:09:81:c0:4d:ee:1c:fa:b7:c4:cb:00:cb:bc:6e:d8:
         4f:19:1c:96:55:9b:34:cb:e2:c2:a7:2e:99:62:44:6c:60:af:
         ea:2f:7e:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUanjMnu0a3htRgXhA2RxOkjnIEEgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE4ODI4N0YwREE2N0M3NENDMjQzMDEzOEM5RTY5OUE4
RDlCQzMwQzAeFw0yNTEyMjIxMDI2MTFaFw0yNTEyMjMxMjQzMTFaMDMxMTAvBgNV
BAMTKDdDMjI4MTc1M0E1NzAyOTJBQjZBNDE5MzI0MkZGREM4MUM5QzNERDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgI5QVELo5QaBWnmH2a3AemeJR
6fr5h13Q8O4UlyTkZzMMVHrgYkuMlK31kgu9ho7vv1xiQTX5giwVi8SKoJ42S1+V
Hv95WtLblMGIPrKOKe6u8yeM7z5V0a37fyEiBOn8Mliaa7idKGqOV8kmqGylmC8+
pVWJzRH2QhYcAY82dXApUMzb5YeG9jQ/OVjwq8UtTAKcTjDLSnN4WtG/BLZMLHyf
a555xson192CRgBNKt4NkYTLdOvgJuET5Glg55FC37C90ABCaReF8wNMJL8q8yNd
jhPaYQrxUdTautCfD5Vy6urF3j5CWKVx8ChYqte0DLMyBiWc5ezmowYNo6T/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUfCKBdTpXApKrakGTJC/9yBycPdkwHwYDVR0j
BBgwFoAUmogofw2mfHTMJDATjJ5pmo2bwwwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMld3dkRHYkdUQWlUZFFwdUoyVXNoNDh6SEJDNXdXOUtvUnM4a3RDOGtD
eFQvMS85QTg4Mjg3RjBEQTY3Qzc0Q0MyNDMwMTM4QzlFNjk5QThEOUJDMzBDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBODgyODdGMERBNjdDNzRD
QzI0MzAxMzhDOUU2OTlBOEQ5QkMzMEMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Mld3dkRHYkdUQWlUZFFwdUoyVXNoNDh6SEJDNXdXOUtvUnM4a3RDOGtDeFQvMS85
QTg4Mjg3RjBEQTY3Qzc0Q0MyNDMwMTM4QzlFNjk5QThEOUJDMzBDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQVob018YRNyl4d9ws4spNcmFi3jtIw32LnMoTjfxJ7GYNZeYxiGRyQHNgEX4
3eHcAmEeQ3bnY8oSZzg3ePviEMBXuCN1eWa3w6+RbP4AHxVd7glAgG3D+R853bLJ
u4S1aA6ZxvWnhU5HZscm8/iRe7J78CvtWNw7gCzSXW4voEFaj1/gE3qAZ+bfPW07
4heSvJv5ZoDBW2k97F2jF9xa7DHy5HG6Fdq1qPWquHR5EGWJ7sUPEsCkGbDxyjIe
d5EUa270AiHlnMBCLQfNbku1PwPtH8LeZYWpjzmuCYHATe4c+rfEywDLvG7YTxkc
llWbNMviwqcumWJEbGCv6i9+0g==
-----END CERTIFICATE-----
Generated at Tue Dec 23 05:01:49 2025 by rpki-client