This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.mft
File:                     27703D671AE6A9B45D2221CB442F8C340216A354.mft (raw, json)
Hash identifier:          iBKvGyL60Kq95UN1H288VZxyLlZsU9N6PqtejrQ6o70=
Subject key identifier:   7D:95:09:CD:D9:56:A6:BF:81:33:70:80:98:B3:AB:5B:BE:FA:49:54
Authority key identifier: 27:70:3D:67:1A:E6:A9:B4:5D:22:21:CB:44:2F:8C:34:02:16:A3:54
Certificate issuer:       /CN=27703D671AE6A9B45D2221CB442F8C340216A354
Certificate serial:       6E96DBDE14852186DA0B1A8CF65C19713ACB7141
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.mft
Manifest number:          02C7
Signing time:             Sat 20 Dec 2025 08:14:18 +0000
Manifest this update:     Sat 20 Dec 2025 08:09:18 +0000
Manifest next update:     Sun 21 Dec 2025 09:27:18 +0000
Files and hashes:         1: 3136382e39302e3139342e302f32342d3234203d3e20323635323831.roa (hash: fGDxes0tl7nSTJA6RONVGXktPVKvRrrL5n6BSHW7Q60=)
                          2: 3136382e39302e3139322e302f32342d3234203d3e20323635323831.roa (hash: IdsmlnUIH4r8p18vC5CqYfDqzhec7kfm76eomhB+HYY=)
                          3: 3136382e39302e3139322e302f32332d3233203d3e20323635323831.roa (hash: 1e3JcsuuS25QC+4B4RA3FFzkqjtQycbqNo021EWU33o=)
                          4: 27703D671AE6A9B45D2221CB442F8C340216A354.crl (hash: VCopPITVW1nQuQiMfbIM+Jb7cKfJvTtwRT+vsPfNaa8=)
                          5: 323830343a326436633a3a2f33322d3332203d3e20323635323831.roa (hash: xiPPfby3vjvws7ufFaHsotsYGl24/n3VAs+6mR5KQew=)
                          6: 3136382e39302e3139352e302f32342d3234203d3e20323635323831.roa (hash: KB/zrTx0YANgVAsh59FaM3Zpm7Df/anyHlTatA1Qf90=)
                          7: 3136382e39302e3139332e302f32342d3234203d3e20323635323831.roa (hash: IAaVQ+/TCH4zNzwSm9cewgIAV164mrU9z2ZUbA7SAIc=)
                          8: 323830343a326436633a3a2f33332d3333203d3e20323635323831.roa (hash: 2Rr2G1VvmRIlgxXs5A3dxrFG+34LF9NB4ItG/kUqeUA=)
                          9: 323830343a326436633a383030303a3a2f33332d3333203d3e20323635323831.roa (hash: h5V63SbIJgaXMECGURn4WQ0dPdPCTahfUcE79snoetw=)
                          10: 3136382e39302e3139342e302f32332d3233203d3e20323635323831.roa (hash: h5bCNVW0pSGirvyYTKNfPnsZyk0ub/scmuMA+jBfObA=)
                          11: 3136382e39302e3139322e302f32322d3232203d3e20323635323831.roa (hash: HfaPHBwMYNwE/IacUsz6F8tLkOAWsRTJdIZRD+n/o0M=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.crl
                          rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 09:27:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:96:db:de:14:85:21:86:da:0b:1a:8c:f6:5c:19:71:3a:cb:71:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27703D671AE6A9B45D2221CB442F8C340216A354
        Validity
            Not Before: Dec 20 08:09:18 2025 GMT
            Not After : Dec 21 09:27:18 2025 GMT
        Subject: CN=7D9509CDD956A6BF8133708098B3AB5BBEFA4954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:13:8e:8e:03:d3:e7:d7:71:c6:b8:c1:7e:3e:
                    05:77:16:85:a4:6e:8e:16:e9:04:ad:8d:ee:35:5a:
                    6e:eb:f4:e2:11:49:10:60:16:12:a7:87:9c:42:8e:
                    7b:8c:93:04:8a:44:d4:a1:ee:b5:5a:27:ec:1c:38:
                    a1:cf:1b:72:0a:11:f4:34:8f:8b:62:ab:fb:7b:bb:
                    7c:ff:27:1c:06:05:47:12:c6:22:5e:22:eb:91:bc:
                    78:a6:c7:b0:24:63:cc:f0:30:21:34:3b:61:45:5e:
                    7f:2f:a3:29:cf:ea:16:d1:66:f0:e1:4d:9d:cd:bc:
                    f8:4d:b5:0b:dd:93:dd:ea:4e:bc:07:ac:cf:a1:6a:
                    3e:94:8a:03:65:00:27:bf:bd:33:2a:30:6b:d5:80:
                    5f:88:f6:57:81:3c:4c:9e:a9:d7:5e:62:65:64:db:
                    a6:1d:5f:60:17:51:4b:e4:79:c7:52:ba:58:64:db:
                    b9:b4:53:63:77:a6:51:14:e7:6a:7b:af:ce:b1:4c:
                    dd:e9:c1:2e:8f:ee:ea:17:6b:07:1c:ac:22:0e:29:
                    ae:85:8c:1b:9f:91:7a:f4:36:b0:e7:7d:04:4d:74:
                    67:26:dc:9b:30:b3:a4:31:3a:0d:69:b8:63:bc:ad:
                    2e:38:cb:62:3b:00:ce:9b:e5:54:bb:7d:57:b1:fe:
                    75:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:95:09:CD:D9:56:A6:BF:81:33:70:80:98:B3:AB:5B:BE:FA:49:54
            X509v3 Authority Key Identifier:
                keyid:27:70:3D:67:1A:E6:A9:B4:5D:22:21:CB:44:2F:8C:34:02:16:A3:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:46:8f:7e:23:8f:95:7f:f3:e7:73:ef:96:f9:ac:f2:6d:3e:
         6b:89:0b:be:79:8f:94:d5:32:16:1e:0f:bc:65:cd:e0:5a:fc:
         a2:c2:a9:cd:68:51:58:58:96:dc:51:db:0e:61:e5:4d:d4:42:
         09:9e:c9:d5:9a:2d:3e:b2:2d:ac:10:fc:78:ae:30:60:3a:7e:
         b4:f4:0e:75:97:6e:ba:e2:79:c1:5d:9f:41:d5:e1:6a:e9:99:
         cd:41:8c:8d:93:93:62:ec:ff:fb:69:1d:f9:39:89:25:81:30:
         f3:fb:9d:59:d8:0a:40:2d:68:ee:ba:c5:91:82:a4:80:4f:a2:
         75:9a:2c:19:b8:1a:e7:35:0e:92:e5:e9:b1:33:11:d6:2b:06:
         c8:32:48:19:3a:b2:a7:41:bf:13:01:b7:d3:2a:77:e4:41:90:
         08:fd:43:81:40:85:e1:64:0a:11:9c:c9:c0:02:63:3a:7e:7a:
         f4:bf:1c:aa:19:94:2e:9c:91:cf:a2:93:42:8b:fe:e2:f5:55:
         36:a0:ed:6f:6b:0c:07:0b:5c:ae:f0:f3:a3:9b:1c:aa:91:8f:
         84:57:78:0f:26:56:4a:fa:b1:fe:7b:29:c4:ad:02:96:8c:52:
         66:84:19:21:0e:27:35:02:47:4a:e2:6d:76:4d:be:f7:a0:6f:
         9b:16:72:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUbpbb3hSFIYbaCxqM9lwZcTrLcUEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjc3MDNENjcxQUU2QTlCNDVEMjIyMUNCNDQyRjhDMzQw
MjE2QTM1NDAeFw0yNTEyMjAwODA5MThaFw0yNTEyMjEwOTI3MThaMDMxMTAvBgNV
BAMTKDdEOTUwOUNERDk1NkE2QkY4MTMzNzA4MDk4QjNBQjVCQkVGQTQ5NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaE46OA9Pn13HGuMF+PgV3FoWk
bo4W6QStje41Wm7r9OIRSRBgFhKnh5xCjnuMkwSKRNSh7rVaJ+wcOKHPG3IKEfQ0
j4tiq/t7u3z/JxwGBUcSxiJeIuuRvHimx7AkY8zwMCE0O2FFXn8voynP6hbRZvDh
TZ3NvPhNtQvdk93qTrwHrM+haj6UigNlACe/vTMqMGvVgF+I9leBPEyeqddeYmVk
26YdX2AXUUvkecdSulhk27m0U2N3plEU52p7r86xTN3pwS6P7uoXawccrCIOKa6F
jBufkXr0NrDnfQRNdGcm3Jsws6QxOg1puGO8rS44y2I7AM6b5VS7fVex/nUpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUfZUJzdlWpr+BM3CAmLOrW776SVQwHwYDVR0j
BBgwFoAUJ3A9ZxrmqbRdIiHLRC+MNAIWo1QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmZOd3JFUlhucFN4TEt1QnU2c2p0NGU0cVBvQ3dqV2txRTZzcFZ1NmpO
M0YvMC8yNzcwM0Q2NzFBRTZBOUI0NUQyMjIxQ0I0NDJGOEMzNDAyMTZBMzU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI3NzAzRDY3MUFFNkE5QjQ1
RDIyMjFDQjQ0MkY4QzM0MDIxNkEzNTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MmZOd3JFUlhucFN4TEt1QnU2c2p0NGU0cVBvQ3dqV2txRTZzcFZ1NmpOM0YvMC8y
NzcwM0Q2NzFBRTZBOUI0NUQyMjIxQ0I0NDJGOEMzNDAyMTZBMzU0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtkaPfiOPlX/z53Pvlvms8m0+a4kLvnmPlNUyFh4PvGXN4Fr8osKpzWhRWFiW
3FHbDmHlTdRCCZ7J1ZotPrItrBD8eK4wYDp+tPQOdZduuuJ5wV2fQdXhaumZzUGM
jZOTYuz/+2kd+TmJJYEw8/udWdgKQC1o7rrFkYKkgE+idZosGbga5zUOkuXpsTMR
1isGyDJIGTqyp0G/EwG30yp35EGQCP1DgUCF4WQKEZzJwAJjOn569L8cqhmULpyR
z6KTQov+4vVVNqDtb2sMBwtcrvDzo5scqpGPhFd4DyZWSvqx/nspxK0CloxSZoQZ
IQ4nNQJHSuJtdk2+96BvmxZyiQ==
-----END CERTIFICATE-----
Generated at Sat Dec 20 09:38:08 2025 by rpki-client