This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.mft
File:                     6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.mft (raw, json)
Hash identifier:          85GyQlKL6B9hBcwRjzA+CDA4Pr/Rj78ts2DdAysHi9E=
Subject key identifier:   A4:6A:8E:B5:48:95:93:88:56:EF:21:1C:58:53:1E:71:43:82:55:35
Authority key identifier: 6F:34:AD:D4:B9:F7:BD:1B:2A:72:2E:1E:11:B9:51:FC:7A:CA:20:ED
Certificate issuer:       /CN=6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED
Certificate serial:       71295D2A9BF4E200201B17E850437D3F49AA52CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.mft
Manifest number:          034F
Signing time:             Thu 18 Dec 2025 10:39:24 +0000
Manifest this update:     Thu 18 Dec 2025 10:34:24 +0000
Manifest next update:     Fri 19 Dec 2025 11:14:24 +0000
Files and hashes:         1: 3137302e3234342e3138312e302f32342d3234203d3e20323636353036.roa (hash: xECio/rCjQtfA05Eh2ffTwyoda3AAGKbqBik74jZLMg=)
                          2: 3137302e3234342e3138302e302f32342d3234203d3e20323636353036.roa (hash: OQ8PkfVKPCnufoVA58qBUG46IarIrnKwaq4lLtwG0/c=)
                          3: 3137302e3234342e3138322e302f32342d3234203d3e20323636353036.roa (hash: EmMUpw/YHanIL2ibfVm9wxTuMJNTX0Z7O8ftqoz/TJo=)
                          4: 6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.crl (hash: wMDADmYiFfw3E4mfWLtsUpj3OCtEBWuu6KiMG3YVJn8=)
                          5: 323830343a333864633a3a2f33322d3332203d3e20323636353036.roa (hash: mg0IynqWDo14J6sqAJVXGNjAGDSn5KggylwjVpJ9ffQ=)
                          6: 3137302e3234342e3138332e302f32342d3234203d3e20323636353036.roa (hash: w9yAdO6LDVf7qK7XicDLQeFvj6JOLTPSnGK75HVUxrM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.crl
                          rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 11:14:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:29:5d:2a:9b:f4:e2:00:20:1b:17:e8:50:43:7d:3f:49:aa:52:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED
        Validity
            Not Before: Dec 18 10:34:24 2025 GMT
            Not After : Dec 19 11:14:24 2025 GMT
        Subject: CN=A46A8EB54895938856EF211C58531E7143825535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:33:88:43:bb:57:76:89:4b:6d:cb:51:0e:44:
                    eb:69:e6:c1:5e:04:ac:b8:da:94:3f:67:8c:f0:25:
                    47:6f:6c:7b:47:cd:da:f3:10:62:17:a4:2d:61:ae:
                    a0:56:04:28:9a:14:7c:51:6b:c3:25:a8:32:57:1b:
                    ee:26:71:d8:2b:54:b5:8d:ce:ba:58:81:8a:61:0d:
                    1a:cb:46:5e:0f:24:da:29:f0:b6:a8:1b:a1:49:27:
                    08:16:08:19:7b:91:3d:51:f4:4f:0a:93:33:d9:4e:
                    b8:38:57:bf:4e:91:f7:e1:72:30:83:02:8a:de:4a:
                    d3:ce:c9:fa:82:8e:a3:8d:33:36:5f:21:ae:63:24:
                    b2:cc:07:3f:cc:0e:5b:95:a8:a9:4a:d3:38:2f:45:
                    0f:20:a9:c3:5d:fa:e0:af:f3:dc:7e:b9:98:e3:2a:
                    b2:f7:1e:43:a3:8d:39:93:bf:29:37:21:a1:65:08:
                    80:6a:7a:80:33:7e:d9:27:49:0d:3f:cb:e9:8d:4a:
                    d9:23:a0:5b:0c:e3:cf:65:a6:15:9d:66:0d:74:d1:
                    24:c0:cd:47:d8:8e:64:b1:36:38:bb:60:28:ea:85:
                    f8:ba:22:75:ad:2f:31:a7:ff:b7:a8:37:43:4b:ee:
                    6c:b7:7e:0b:64:35:90:9c:fd:b4:3b:ed:5c:e1:fb:
                    a9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:6A:8E:B5:48:95:93:88:56:EF:21:1C:58:53:1E:71:43:82:55:35
            X509v3 Authority Key Identifier:
                keyid:6F:34:AD:D4:B9:F7:BD:1B:2A:72:2E:1E:11:B9:51:FC:7A:CA:20:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:da:12:9c:bc:f9:9a:c3:69:67:1c:c4:fc:34:1c:da:c7:73:
         75:b2:1b:b5:aa:14:c7:8a:85:6d:77:17:87:ea:16:55:c3:58:
         5d:fe:63:e6:0d:09:0d:02:82:10:19:1b:de:ee:5c:6c:36:ba:
         83:e6:14:b6:3b:7a:48:a0:6b:07:f9:e2:4c:86:27:b0:0d:f3:
         d9:7d:5f:5e:e8:14:a6:72:92:55:55:44:54:bd:d4:3f:ab:b3:
         90:7a:e1:e1:65:9c:7b:8c:2f:63:e1:c4:72:e0:fb:34:7a:f4:
         20:0e:46:91:33:e8:39:26:a1:c9:f6:8b:b9:4f:e5:bd:cc:70:
         2e:73:3d:6a:8a:85:2c:27:65:69:78:d1:d6:9d:b3:42:34:cb:
         50:a1:64:d8:2e:55:d2:20:84:69:bc:98:a1:9f:53:50:1e:1e:
         43:38:3b:7b:e1:bc:ac:6e:e4:75:b7:86:e2:96:8f:5a:69:18:
         9d:cd:5f:c5:12:0c:7e:8d:e8:2c:3f:6c:6a:03:db:3a:2b:fd:
         02:1e:a7:bc:23:05:e2:cf:50:cc:27:3b:9f:99:5e:9a:c1:04:
         ff:4c:27:34:2c:b6:0e:22:2a:cc:5f:b1:0d:87:37:e0:41:19:
         ee:75:ac:b2:e4:6b:b7:7e:de:ee:e9:c6:ce:ab:3b:54:83:71:
         9c:17:5e:6b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcSldKpv04gAgGxfoUEN9P0mqUs4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkYzNEFERDRCOUY3QkQxQjJBNzIyRTFFMTFCOTUxRkM3
QUNBMjBFRDAeFw0yNTEyMTgxMDM0MjRaFw0yNTEyMTkxMTE0MjRaMDMxMTAvBgNV
BAMTKEE0NkE4RUI1NDg5NTkzODg1NkVGMjExQzU4NTMxRTcxNDM4MjU1MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtM4hDu1d2iUtty1EOROtp5sFe
BKy42pQ/Z4zwJUdvbHtHzdrzEGIXpC1hrqBWBCiaFHxRa8MlqDJXG+4mcdgrVLWN
zrpYgYphDRrLRl4PJNop8LaoG6FJJwgWCBl7kT1R9E8KkzPZTrg4V79OkffhcjCD
AoreStPOyfqCjqONMzZfIa5jJLLMBz/MDluVqKlK0zgvRQ8gqcNd+uCv89x+uZjj
KrL3HkOjjTmTvyk3IaFlCIBqeoAzftknSQ0/y+mNStkjoFsM489lphWdZg100STA
zUfYjmSxNji7YCjqhfi6InWtLzGn/7eoN0NL7my3fgtkNZCc/bQ77Vzh+6nfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUpGqOtUiVk4hW7yEcWFMecUOCVTUwHwYDVR0j
BBgwFoAUbzSt1Ln3vRsqci4eEblR/HrKIO0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnRGdWtrcXh0d1FVUG53d3c2U1pkekJaSDZOeGl4QTU4azFER0VQbzhy
NnQvMS82RjM0QURENEI5RjdCRDFCMkE3MjJFMUUxMUI5NTFGQzdBQ0EyMEVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGMzRBREQ0QjlGN0JEMUIy
QTcyMkUxRTExQjk1MUZDN0FDQTIwRUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MnRGdWtrcXh0d1FVUG53d3c2U1pkekJaSDZOeGl4QTU4azFER0VQbzhyNnQvMS82
RjM0QURENEI5RjdCRDFCMkE3MjJFMUUxMUI5NTFGQzdBQ0EyMEVELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAY9oSnLz5msNpZxzE/DQc2sdzdbIbtaoUx4qFbXcXh+oWVcNYXf5j5g0JDQKC
EBkb3u5cbDa6g+YUtjt6SKBrB/niTIYnsA3z2X1fXugUpnKSVVVEVL3UP6uzkHrh
4WWce4wvY+HEcuD7NHr0IA5GkTPoOSahyfaLuU/lvcxwLnM9aoqFLCdlaXjR1p2z
QjTLUKFk2C5V0iCEabyYoZ9TUB4eQzg7e+G8rG7kdbeG4paPWmkYnc1fxRIMfo3o
LD9sagPbOiv9Ah6nvCMF4s9QzCc7n5lemsEE/0wnNCy2DiIqzF+xDYc34EEZ7nWs
suRrt37e7unGzqs7VINxnBdeaw==
-----END CERTIFICATE-----
Generated at Thu Dec 18 18:56:46 2025 by rpki-client