This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.mft
File:                     870F31E28EB6835FE94CC62D908989A74790CB3E.mft (raw, json)
Hash identifier:          3YhblQ+GBtKKYAbmuUnClv9aDPCJTlcUKO0qmP93Jwk=
Subject key identifier:   1B:B2:0B:90:23:31:55:FA:D6:4B:FF:56:A3:57:C8:C5:16:09:6A:0D
Authority key identifier: 87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E
Certificate issuer:       /CN=870F31E28EB6835FE94CC62D908989A74790CB3E
Certificate serial:       735D3F54276AEAF0404079AEE1788F2CFC87A579
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.mft
Manifest number:          025B
Signing time:             Mon 22 Dec 2025 03:26:07 +0000
Manifest this update:     Mon 22 Dec 2025 03:21:07 +0000
Manifest next update:     Tue 23 Dec 2025 06:46:07 +0000
Files and hashes:         1: 323830343a316634633a3a2f33322d3332203d3e20323639313735.roa (hash: Zrl/t/CMRhMJlCJGEvYyyQxqG05mwxaiQ+WPmetvHt0=)
                          2: 34352e3138312e39322e302f32342d3234203d3e20323639313735.roa (hash: ANsqWHqth14ZWKODZ5h13kA4N5vTPS+XeK2sHhiZcN4=)
                          3: 323830343a316634633a383830303a3a2f34302d3430203d3e20323639313735.roa (hash: cZv95fqT4WVmVWL5fZBzG9QtTPZkgO1mHfqYD17bn2o=)
                          4: 34352e3138312e39352e302f32342d3234203d3e20323639313735.roa (hash: SjygtQFX22/FzomoPm31DbIGuBaLegb3vlo+p8ol3kw=)
                          5: 870F31E28EB6835FE94CC62D908989A74790CB3E.crl (hash: ZwLwXWU6e6rPBtjDor44mj4haPFfRM2My+1ZmH7df3k=)
                          6: 323830343a316634633a3830303a3a2f34302d3430203d3e20323639313735.roa (hash: AW2SfCc6zppvhHGz6SxG9DIIA2feooPiuJKyfHRkQok=)
                          7: 323830343a316634633a3a2f33332d3333203d3e20323639313735.roa (hash: nrLcdhwzAmvO6ibCtQJvEg23/gOBP1skqF42jqAB/Pk=)
                          8: 34352e3138312e39342e302f32342d3234203d3e20323639313735.roa (hash: CXIDOR7yXoIvJpJwI2DuU5HPQsWtPSKvCxc/9OxSzO8=)
                          9: 34352e3138312e39332e302f32342d3234203d3e20323639313735.roa (hash: gFrYbJL+2Y5QMbfE6C6ev2LCgb6PQ39OBse13sF/VNw=)
                          10: 34352e3138312e39342e302f32332d3233203d3e20323639313735.roa (hash: AQKmRMUbP7dpEjKQSp2/eA0XZS9vIsTmmcXu4ES+Ow4=)
                          11: 34352e3138312e39322e302f32332d3233203d3e20323639313735.roa (hash: dqMFDwllRbXNj0HgnZ/mn//9Jbe7fnbUwvXuamJrf1o=)
                          12: 323830343a316634633a383030303a3a2f33332d3333203d3e20323639313735.roa (hash: du2RqbrUq8a6d9I0RbUhkw5MuzDLs85TgscUZ10vLUw=)
                          13: 34352e3138312e39322e302f32322d3232203d3e20323639313735.roa (hash: TUNJcvytMLym4XrCjOg+yV6aZ4/obpZkSFF3B+O1fDs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.crl
                          rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 06:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:5d:3f:54:27:6a:ea:f0:40:40:79:ae:e1:78:8f:2c:fc:87:a5:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870F31E28EB6835FE94CC62D908989A74790CB3E
        Validity
            Not Before: Dec 22 03:21:07 2025 GMT
            Not After : Dec 23 06:46:07 2025 GMT
        Subject: CN=1BB20B90233155FAD64BFF56A357C8C516096A0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ae:92:08:b3:16:de:48:ec:3f:32:9d:4f:50:
                    90:fe:1a:d7:2b:0b:a0:2c:31:3d:15:93:bb:a7:54:
                    1e:06:32:ff:ad:4d:f6:e1:f3:67:b6:50:92:db:5e:
                    86:b7:e9:e6:3b:92:bd:99:dc:8c:0c:f3:0e:81:b5:
                    a5:98:b2:48:ab:2b:39:87:94:06:57:b8:8a:86:86:
                    e7:82:36:f7:69:4f:70:1b:9e:a6:6a:8e:ba:37:84:
                    c2:58:d6:2d:59:0c:0a:21:fb:db:8e:e0:a4:e1:eb:
                    97:86:7f:31:b0:33:64:4b:57:58:ad:9d:e0:d3:db:
                    30:f6:57:16:2a:b1:46:86:19:c2:99:b9:ab:c9:80:
                    31:19:f3:90:3d:78:c8:c6:9b:77:4d:35:1a:58:62:
                    c8:5e:1a:93:f2:ba:69:8d:04:ef:69:ef:ff:36:fc:
                    22:bd:51:0b:fa:50:ad:81:54:f5:8a:e0:c8:a8:06:
                    54:e4:5f:b9:b6:1b:d3:81:0e:56:ca:61:d5:4b:cd:
                    1e:11:5d:24:99:d5:19:fa:73:d8:6e:a9:f1:b0:87:
                    9e:b9:f6:b3:90:7e:fe:2c:7c:f8:1d:94:ff:b2:a8:
                    29:f3:d0:07:d5:19:4a:3e:31:7b:cb:7a:f5:75:f6:
                    93:3f:f8:e7:06:f0:12:06:35:3f:be:29:41:ed:2b:
                    08:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B2:0B:90:23:31:55:FA:D6:4B:FF:56:A3:57:C8:C5:16:09:6A:0D
            X509v3 Authority Key Identifier:
                keyid:87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:08:ab:59:f0:d2:f4:33:31:03:87:c4:be:1c:6d:8b:ef:e8:
         5b:6e:12:b6:55:1f:33:5f:05:d2:5b:b9:c5:80:47:56:f5:7d:
         96:37:ba:a6:61:c2:26:d5:b3:ca:72:42:a1:9e:ca:d0:96:4d:
         b6:16:56:dd:09:20:22:a6:68:9f:1a:bf:9a:50:5f:74:7c:02:
         d8:a8:fc:39:35:60:92:f0:79:53:57:bc:2e:19:92:31:d3:86:
         b6:d5:28:b6:98:06:df:0a:5f:11:7a:1e:a2:c0:de:40:1b:66:
         01:f1:58:36:03:3f:5d:1d:f0:f2:6d:fe:b7:2c:37:1a:2e:88:
         1a:d2:a4:f2:4c:7e:8a:fd:23:98:03:2f:a8:d2:5e:c0:f9:ad:
         bd:a3:ef:4c:92:66:1c:cf:93:55:98:8b:9f:6d:8e:4b:00:22:
         7a:a3:fb:01:35:05:9a:fd:7d:8b:16:a4:a6:56:ed:12:ae:f1:
         08:e7:bb:d5:1c:ee:20:2a:9d:96:8a:83:16:db:7d:82:87:37:
         ba:84:94:e8:77:af:b7:7c:4e:48:ae:0a:c0:a2:48:1a:7d:dd:
         26:96:80:6a:14:80:b6:b2:5c:8f:8d:be:7c:24:88:40:76:e4:
         a3:8f:91:26:a2:6a:f7:ea:c1:51:77:be:31:53:7d:7b:6c:d9:
         0e:20:6e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 11:35:11 2025 by rpki-client