This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.mft
File:                     085A4379FC02066399A7BABE986F2B930711F0E0.mft (raw, json)
Hash identifier:          1iJvIWJ39vR3F4SeyiwNYBR4oyJbDyaqu7QoC/dKrRk=
Subject key identifier:   75:67:7E:25:4A:E8:EC:08:A8:48:E3:C2:09:96:E5:D6:2B:0E:6A:8D
Authority key identifier: 08:5A:43:79:FC:02:06:63:99:A7:BA:BE:98:6F:2B:93:07:11:F0:E0
Certificate issuer:       /CN=085A4379FC02066399A7BABE986F2B930711F0E0
Certificate serial:       5004370E239ABA324E3BE299EB2813638251C245
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085A4379FC02066399A7BABE986F2B930711F0E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.mft
Manifest number:          0195
Signing time:             Sat 20 Dec 2025 03:06:17 +0000
Manifest this update:     Sat 20 Dec 2025 03:01:17 +0000
Manifest next update:     Sun 21 Dec 2025 04:17:17 +0000
Files and hashes:         1: 3136302e31392e3234342e302f32322d3332203d3e20323636313638.roa (hash: +xOfTPOyg3oZBW1SRivjN46hBESQU5WWrM4vrLYmFGA=)
                          2: 085A4379FC02066399A7BABE986F2B930711F0E0.crl (hash: KoNwe0KW0pm/udP5eGUVuZWOLYDVR5zQ0ND31SjWirY=)
                          3: 323830343a336262633a3a2f33322d313238203d3e20323636313638.roa (hash: OyHPZjFM6nE6jESktIZHb4U9fXKswqrOu5Gkjq9t1u4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.crl
                          rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085A4379FC02066399A7BABE986F2B930711F0E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 04:17:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:04:37:0e:23:9a:ba:32:4e:3b:e2:99:eb:28:13:63:82:51:c2:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=085A4379FC02066399A7BABE986F2B930711F0E0
        Validity
            Not Before: Dec 20 03:01:17 2025 GMT
            Not After : Dec 21 04:17:17 2025 GMT
        Subject: CN=75677E254AE8EC08A848E3C20996E5D62B0E6A8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f9:f5:d5:56:94:6f:14:49:af:5d:54:16:2a:
                    2b:2e:0c:fe:7c:0f:42:bc:fd:fd:4e:70:4d:48:72:
                    c4:3b:67:06:fd:4c:19:11:a3:c1:2a:de:44:ea:30:
                    43:ca:23:d3:7c:d8:00:ad:91:e0:ac:fb:00:d6:8a:
                    6a:eb:af:8f:6b:9f:6f:24:7c:d4:9b:60:78:02:b5:
                    e7:7a:2d:79:e4:4c:66:23:93:d5:bc:f3:85:25:ab:
                    dc:39:4e:ff:e0:c8:9e:de:2c:d8:da:a8:91:ee:ad:
                    be:86:71:86:45:2f:30:50:41:f0:9d:29:96:99:e0:
                    21:8a:8d:7b:92:97:b4:f8:74:d6:11:54:77:d2:e1:
                    60:af:e1:db:55:22:23:74:be:eb:f5:56:37:01:72:
                    25:26:2d:6e:13:01:70:0a:5e:6a:fc:ba:14:0a:0f:
                    e0:4a:55:8b:f2:49:80:44:ff:5d:c0:0d:7d:1d:74:
                    f4:d9:47:2a:c2:b6:c8:d9:c5:0f:89:23:c6:21:51:
                    f7:39:3e:59:7f:d1:96:f2:e6:ac:3e:89:a9:89:a9:
                    ae:83:73:27:6b:1c:cd:7d:8b:7b:5c:9a:0d:84:e4:
                    b7:c9:70:30:2b:95:9a:c7:c4:6a:81:5a:35:5c:df:
                    04:b2:86:7c:e5:85:a2:a5:6e:a7:9d:6b:e8:60:1b:
                    b6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:67:7E:25:4A:E8:EC:08:A8:48:E3:C2:09:96:E5:D6:2B:0E:6A:8D
            X509v3 Authority Key Identifier:
                keyid:08:5A:43:79:FC:02:06:63:99:A7:BA:BE:98:6F:2B:93:07:11:F0:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085A4379FC02066399A7BABE986F2B930711F0E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:c9:26:27:26:03:5b:44:9f:57:89:1a:d0:51:0f:17:3c:a4:
         bc:5a:6d:b4:30:bd:d1:86:66:6c:2c:24:0b:e9:2d:62:ab:69:
         03:10:c4:58:d4:aa:a6:38:1b:79:f1:21:63:8c:07:15:f0:f1:
         df:f7:c1:d3:92:93:41:f1:ea:bc:0c:05:51:b2:de:6c:98:93:
         c4:cd:b6:1f:c2:00:65:da:09:76:a6:7d:f7:4e:e4:d9:56:66:
         e9:9f:40:96:36:0f:81:59:5f:85:d3:ce:8f:d3:70:fa:a8:c4:
         ac:a2:ca:c9:f0:1b:02:ce:10:87:b1:a4:da:4b:78:2d:6d:3f:
         d3:40:52:22:2b:ed:26:b5:91:cf:87:ee:26:d0:26:d3:f5:61:
         8b:a0:13:29:fe:39:41:4b:5a:c7:63:be:0d:2e:f8:79:5f:7c:
         fd:30:08:b6:4f:82:c6:5b:4c:61:0e:f0:f7:94:b7:38:9f:b4:
         aa:bf:9e:6f:cb:fc:08:82:14:c7:36:5a:09:f9:f3:c7:5c:ad:
         11:bf:03:ba:9d:0e:87:be:35:f9:44:3b:eb:b8:a9:30:86:6d:
         8a:0d:5c:59:6c:78:c9:0a:5b:0f:9c:3e:e4:64:38:60:5b:e3:
         25:65:ec:de:b3:89:de:b8:2e:6d:0d:ca:b6:b4:76:de:46:34:
         06:95:dc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:04:00 2025 by rpki-client