This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2oYMq9NoN8M86iTM9oPpvNQLxQX8GEuPLsMNKyUFBhAe/1/76E18684CB0B1A079ED243908D2E3D3D2B78A1AF.mft
File:                     76E18684CB0B1A079ED243908D2E3D3D2B78A1AF.mft (raw, json)
Hash identifier:          Glp7WBODfPEBTDyYt9yfENTYjj6dSYBECVq2gGrlfw0=
Subject key identifier:   DA:E0:87:6D:63:DA:14:45:0B:21:4F:8F:8B:C9:FE:03:8B:5C:4C:74
Authority key identifier: 76:E1:86:84:CB:0B:1A:07:9E:D2:43:90:8D:2E:3D:3D:2B:78:A1:AF
Certificate issuer:       /CN=76E18684CB0B1A079ED243908D2E3D3D2B78A1AF
Certificate serial:       76381AEEEA97D156164D6017DDB1BBAA9D50E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E18684CB0B1A079ED243908D2E3D3D2B78A1AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oYMq9NoN8M86iTM9oPpvNQLxQX8GEuPLsMNKyUFBhAe/1/76E18684CB0B1A079ED243908D2E3D3D2B78A1AF.mft
Manifest number:          033B
Signing time:             Sun 21 Dec 2025 11:25:39 +0000
Manifest this update:     Sun 21 Dec 2025 11:20:39 +0000
Manifest next update:     Mon 22 Dec 2025 14:54:39 +0000
Files and hashes:         1: 323830343a363935383a3a2f33322d3438203d3e20323730323634.roa (hash: SR2W8h4SV/40VjilEKA/G/ccqoUTrXIpAajPwjzc3qw=)
                          2: 76E18684CB0B1A079ED243908D2E3D3D2B78A1AF.crl (hash: SS7t0HKd+maFSvBxDjq2lIJpnvOc44LbSTAwzxO6iPA=)
                          3: 3230302e3130382e3138302e302f32322d3234203d3e20323730323634.roa (hash: esiVIInGXQ5QZnISKPvp/sUojxHI61JmSN+fdzfgBWs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2oYMq9NoN8M86iTM9oPpvNQLxQX8GEuPLsMNKyUFBhAe/1/76E18684CB0B1A079ED243908D2E3D3D2B78A1AF.crl
                          rsync://rpki-repo.registro.br/repo/2oYMq9NoN8M86iTM9oPpvNQLxQX8GEuPLsMNKyUFBhAe/1/76E18684CB0B1A079ED243908D2E3D3D2B78A1AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E18684CB0B1A079ED243908D2E3D3D2B78A1AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 14:54:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:38:1a:ee:ea:97:d1:56:16:4d:60:17:dd:b1:bb:aa:9d:50:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76E18684CB0B1A079ED243908D2E3D3D2B78A1AF
        Validity
            Not Before: Dec 21 11:20:39 2025 GMT
            Not After : Dec 22 14:54:39 2025 GMT
        Subject: CN=DAE0876D63DA14450B214F8F8BC9FE038B5C4C74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3a:92:76:41:41:61:fc:e1:a6:54:2b:f2:2f:
                    aa:4b:f2:20:b1:aa:1a:b5:89:c7:84:4b:8a:e8:6e:
                    58:73:6f:2e:3f:8b:e4:bf:75:f0:ab:0d:62:b6:97:
                    1b:79:a5:96:d5:35:3a:dc:61:b2:36:2a:dd:61:b4:
                    bf:6c:fd:27:65:58:e0:30:f7:d3:c3:a1:d6:9f:b9:
                    21:36:04:63:58:39:51:17:b2:b0:8f:7b:d0:69:dd:
                    00:f3:6d:f5:9a:f5:39:0a:c2:63:bc:78:70:18:76:
                    19:ae:c7:b4:8f:17:fe:f3:6e:98:70:86:05:a2:04:
                    db:56:08:a2:8e:98:e0:1f:e6:35:6f:9c:75:d3:f4:
                    15:3f:ad:35:62:86:fa:91:6f:f6:eb:99:fe:7e:0b:
                    37:19:6a:07:8b:99:20:24:dd:ee:f2:8a:fc:fa:80:
                    5b:31:22:06:0f:5b:46:32:86:40:f8:1e:ab:0d:4f:
                    ac:65:a1:70:c7:01:49:c4:81:7b:79:9f:8e:b0:7c:
                    c4:0c:ed:2c:da:6d:47:b6:0d:b5:c0:20:e7:a5:7d:
                    97:ee:ad:fb:ba:d7:62:4f:71:3f:35:b8:b0:ea:58:
                    09:3d:39:5e:2a:ca:3e:97:34:23:35:de:7f:bc:07:
                    97:49:ee:57:bb:eb:d1:3a:9d:81:69:1f:ee:9e:7f:
                    89:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E0:87:6D:63:DA:14:45:0B:21:4F:8F:8B:C9:FE:03:8B:5C:4C:74
            X509v3 Authority Key Identifier:
                keyid:76:E1:86:84:CB:0B:1A:07:9E:D2:43:90:8D:2E:3D:3D:2B:78:A1:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oYMq9NoN8M86iTM9oPpvNQLxQX8GEuPLsMNKyUFBhAe/1/76E18684CB0B1A079ED243908D2E3D3D2B78A1AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E18684CB0B1A079ED243908D2E3D3D2B78A1AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oYMq9NoN8M86iTM9oPpvNQLxQX8GEuPLsMNKyUFBhAe/1/76E18684CB0B1A079ED243908D2E3D3D2B78A1AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:ba:ad:f1:88:0a:9a:93:e7:0c:74:58:10:8a:04:8a:fe:d3:
         80:7e:4a:78:9a:41:c0:df:d7:3a:a5:4f:81:9c:c7:ca:d3:c4:
         a6:12:a4:93:92:62:55:dc:1f:98:12:b1:ff:8c:4d:5b:28:55:
         b8:57:b5:19:a4:72:d9:c5:b2:74:2c:c6:ec:97:47:53:be:d2:
         e3:aa:d1:60:b8:2d:1c:54:ef:37:7d:27:57:7e:79:0b:f0:e3:
         d7:b3:5c:fa:64:75:c1:cc:87:d7:c5:e9:82:0c:03:fb:79:d5:
         19:67:b2:3d:28:48:dc:d4:cb:d9:cc:5e:a4:17:d1:65:a1:e5:
         e1:e3:b0:37:c9:e1:71:8f:81:b6:bf:9e:b3:a4:15:4b:0b:9c:
         f2:80:48:bf:e6:38:dc:34:9b:fd:9c:6e:ea:ab:b9:d3:01:e5:
         da:51:73:e4:12:61:64:d9:70:a9:7f:96:03:54:7d:20:57:24:
         86:44:3b:5d:66:ef:a9:75:ca:5b:52:cc:34:f3:6a:bd:c1:d9:
         8e:69:ff:b0:48:e6:73:50:1b:19:d9:46:0d:ac:5c:6e:32:aa:
         ad:fc:04:9d:8a:63:43:99:92:c8:05:37:ed:1d:cc:71:9a:43:
         97:72:d9:ad:b6:cc:6a:1b:25:07:6b:ed:92:81:cf:2c:c2:34:
         bb:57:11:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 17:31:20 2025 by rpki-client