This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft
File:                     06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft (raw, json)
Hash identifier:          30BnZEDv4KctkwRCvcUlfg8eXn4yi7vgeq+d/Hx8eYg=
Subject key identifier:   5E:2E:13:0A:6C:C9:53:41:DE:82:52:6A:3E:90:5F:96:45:A6:47:7A
Authority key identifier: 06:DB:D3:2E:86:5D:9D:08:FA:5C:98:2A:B7:CB:DA:4F:CB:22:62:E8
Certificate issuer:       /CN=06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8
Certificate serial:       38CE129455543FAEA02A8F773FFE9F814C6B2905
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft
Manifest number:          023D
Signing time:             Sun 21 Dec 2025 03:22:51 +0000
Manifest this update:     Sun 21 Dec 2025 03:17:51 +0000
Manifest next update:     Mon 22 Dec 2025 05:48:51 +0000
Files and hashes:         1: 3133382e3131372e3136342e302f32322d3234203d3e20323634353137.roa (hash: F2HvTqeq5FaHOhCgbB0cHi4fc5snAunjaRp1FpfCqEg=)
                          2: 06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.crl (hash: N0bFUE8zv2Y42Ha4Jsjt2InDGSJPvDmKOmizMRDHC4M=)
                          3: 3133322e3235352e3137322e302f32322d3234203d3e20323634353137.roa (hash: Z6gii11kXGa6D+1mie3MmLCB7Lu81yMqpingzMNYyTs=)
                          4: 323830343a323064633a3a2f33322d3438203d3e20323634353137.roa (hash: zktTgNIrnpj2jMbA9QGdo43g7zA2iuXC/N7Q9tS3gmM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.crl
                          rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 05:48:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ce:12:94:55:54:3f:ae:a0:2a:8f:77:3f:fe:9f:81:4c:6b:29:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8
        Validity
            Not Before: Dec 21 03:17:51 2025 GMT
            Not After : Dec 22 05:48:51 2025 GMT
        Subject: CN=5E2E130A6CC95341DE82526A3E905F9645A6477A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4e:6c:2a:1d:21:4c:75:3c:45:f9:e3:ba:38:
                    2b:7f:90:32:3a:16:ec:0c:eb:32:bb:1e:74:6c:3b:
                    0f:4f:b8:e7:07:33:00:9e:52:e1:d3:65:88:b4:88:
                    a4:e9:31:5a:f8:ab:bd:fd:44:ae:53:89:b0:99:7e:
                    40:d9:35:38:f9:2d:c1:2f:7f:98:70:d1:c6:83:a3:
                    e2:92:c3:dd:2b:ce:32:eb:27:c9:c0:55:ba:df:8f:
                    06:41:a4:99:d0:7c:88:f3:8f:d8:6f:60:aa:c6:5a:
                    bf:34:3b:29:ea:fe:24:61:84:8b:62:79:79:5d:db:
                    72:60:c9:3b:79:48:f9:f6:79:cf:c9:fc:1d:df:85:
                    70:80:f5:e8:76:14:5c:c5:dc:00:84:f7:ac:56:2c:
                    75:69:45:7b:0e:52:5e:6a:9d:21:13:cf:75:1e:78:
                    4f:eb:83:a2:2d:04:0b:b7:0a:38:29:00:59:a9:ce:
                    02:51:08:a6:80:9b:a2:12:c3:56:5c:ea:c7:d6:7b:
                    46:34:c8:ab:b0:94:74:e0:fd:23:00:56:da:55:56:
                    7b:5b:4e:82:da:25:bc:a2:35:01:06:29:82:71:90:
                    b8:9b:c3:c5:e5:1e:df:8f:f7:70:2f:95:2a:66:da:
                    ed:47:d4:02:f2:81:a3:21:ef:09:62:34:c5:a8:ef:
                    dd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:2E:13:0A:6C:C9:53:41:DE:82:52:6A:3E:90:5F:96:45:A6:47:7A
            X509v3 Authority Key Identifier:
                keyid:06:DB:D3:2E:86:5D:9D:08:FA:5C:98:2A:B7:CB:DA:4F:CB:22:62:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:0f:0e:32:88:a2:b5:ae:fc:1d:4f:1c:68:b5:5f:f3:5c:a0:
         23:da:e4:ec:27:60:31:58:28:9a:ab:b6:d2:33:43:d0:c7:98:
         4b:b6:37:a6:22:45:69:97:96:d6:6e:f3:9d:7e:ee:f6:df:8e:
         f7:22:ff:8d:4d:01:86:8c:de:c4:b7:e7:cc:00:78:88:b7:eb:
         1e:ee:25:95:9e:a3:1d:e6:e4:c4:83:65:6a:04:74:6f:29:02:
         54:50:64:3a:3a:bc:6f:46:85:d7:a7:02:4e:8b:d5:8c:4d:69:
         d4:ee:ae:c9:04:16:3d:2e:68:6f:aa:ce:5f:64:38:db:4e:ef:
         c7:f2:d2:2f:af:68:e2:8e:48:1e:4d:0e:1f:8e:51:f1:cb:e8:
         3a:08:f7:c7:fc:7e:9a:9b:e1:30:c9:94:1b:ab:7e:ae:02:2d:
         a7:e2:7e:1d:2d:31:bf:d9:80:27:ac:3f:2c:38:84:1e:50:a6:
         cc:1c:21:b7:69:f4:1f:3f:2d:2e:ca:8d:ce:cb:30:e2:f2:ca:
         59:ac:e3:ff:54:12:08:58:74:11:22:36:6d:1b:3f:bd:ae:93:
         4d:19:92:e5:c9:84:6e:28:ed:eb:3d:b6:82:31:36:7c:3a:32:
         65:47:9b:dc:ba:7d:86:e0:d6:e8:c2:d1:68:03:55:67:87:86:
         c6:25:55:8b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOM4SlFVUP66gKo93P/6fgUxrKQUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDZEQkQzMkU4NjVEOUQwOEZBNUM5ODJBQjdDQkRBNEZD
QjIyNjJFODAeFw0yNTEyMjEwMzE3NTFaFw0yNTEyMjIwNTQ4NTFaMDMxMTAvBgNV
BAMTKDVFMkUxMzBBNkNDOTUzNDFERTgyNTI2QTNFOTA1Rjk2NDVBNjQ3N0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKTmwqHSFMdTxF+eO6OCt/kDI6
FuwM6zK7HnRsOw9PuOcHMwCeUuHTZYi0iKTpMVr4q739RK5TibCZfkDZNTj5LcEv
f5hw0caDo+KSw90rzjLrJ8nAVbrfjwZBpJnQfIjzj9hvYKrGWr80Oynq/iRhhIti
eXld23JgyTt5SPn2ec/J/B3fhXCA9eh2FFzF3ACE96xWLHVpRXsOUl5qnSETz3Ue
eE/rg6ItBAu3CjgpAFmpzgJRCKaAm6ISw1Zc6sfWe0Y0yKuwlHTg/SMAVtpVVntb
ToLaJbyiNQEGKYJxkLibw8XlHt+P93AvlSpm2u1H1ALygaMh7wliNMWo793lAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUXi4TCmzJU0HeglJqPpBflkWmR3owHwYDVR0j
BBgwFoAUBtvTLoZdnQj6XJgqt8vaT8siYugwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdud1gybUFndFlZM1lvcmFkc0Ztb1NWWDRuamZ6bzVkVHFobzhtZzhl
UkwvMC8wNkRCRDMyRTg2NUQ5RDA4RkE1Qzk4MkFCN0NCREE0RkNCMjI2MkU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2REJEMzJFODY1RDlEMDhG
QTVDOTgyQUI3Q0JEQTRGQ0IyMjYyRTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NEdud1gybUFndFlZM1lvcmFkc0Ztb1NWWDRuamZ6bzVkVHFobzhtZzhlUkwvMC8w
NkRCRDMyRTg2NUQ5RDA4RkE1Qzk4MkFCN0NCREE0RkNCMjI2MkU4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhg8OMoiita78HU8caLVf81ygI9rk7CdgMVgomqu20jND0MeYS7Y3piJFaZeW
1m7znX7u9t+O9yL/jU0BhozexLfnzAB4iLfrHu4llZ6jHebkxINlagR0bykCVFBk
Ojq8b0aF16cCTovVjE1p1O6uyQQWPS5ob6rOX2Q4207vx/LSL69o4o5IHk0OH45R
8cvoOgj3x/x+mpvhMMmUG6t+rgItp+J+HS0xv9mAJ6w/LDiEHlCmzBwht2n0Hz8t
LsqNzssw4vLKWazj/1QSCFh0ESI2bRs/va6TTRmS5cmEbijt6z22gjE2fDoyZUeb
3Lp9huDW6MLRaANVZ4eGxiVViw==
-----END CERTIFICATE-----
Generated at Sun Dec 21 19:45:56 2025 by rpki-client