This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.mft
File:                     0E88601104C6C43AC785175C29585EFD06974620.mft (raw, json)
Hash identifier:          R2wWz1UCKQ0Rh9ntYphiTPJmv4sUQ29cwl+pVVujDjU=
Subject key identifier:   EE:21:AF:CA:3E:0D:03:AF:06:7A:3C:F4:34:AD:24:A5:51:39:2E:B2
Authority key identifier: 0E:88:60:11:04:C6:C4:3A:C7:85:17:5C:29:58:5E:FD:06:97:46:20
Certificate issuer:       /CN=0E88601104C6C43AC785175C29585EFD06974620
Certificate serial:       2FC8DE3D3ADACD8AE8DC12F89015DBB8DB259DD9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.mft
Manifest number:          0342
Signing time:             Fri 19 Dec 2025 04:53:24 +0000
Manifest this update:     Fri 19 Dec 2025 04:48:24 +0000
Manifest next update:     Sat 20 Dec 2025 08:38:24 +0000
Files and hashes:         1: 3133382e33362e3234302e302f32322d3232203d3e20323634353839.roa (hash: K84lfU1RhnRjpWwWFsC7fGV98rOEFsh1J68jGmxtvhs=)
                          2: 3133382e33362e3234332e302f32342d3234203d3e20323634353839.roa (hash: hv9ftqmNpaONsGT5S5w3yZVByFa4B+kPyKFdUqLXgGQ=)
                          3: 3133382e33362e3234312e302f32342d3234203d3e20323634353839.roa (hash: CTrQciMDxx8vgbFdw9ZhtXbFV9uTg7+xiXebGL4IcBw=)
                          4: 323830343a323231303a3a2f34382d3438203d3e20323634353839.roa (hash: RUPXGYFc3N0ZWFTODpHDk21IQfK7JmFqCdhx/1Ka6tk=)
                          5: 0E88601104C6C43AC785175C29585EFD06974620.crl (hash: 9Z9lpBi8L3Qgf2rvL2XR3jXc4Rp4949filphsf0jw5s=)
                          6: 323830343a323231303a3a2f33322d3332203d3e20323634353839.roa (hash: 5dX02pKTmcG5vMsy47XWvGYRUU8FZoy/F9zypLxTMYI=)
                          7: 3133382e33362e3234302e302f32332d3233203d3e20323634353839.roa (hash: +3XDDjbpUjZYS64iae7bMObO4htNGF2MzhF9x1grRfk=)
                          8: 3134332e3230322e3232392e302f32342d3234203d3e20323634353839.roa (hash: y048Dkkeefar+0HYkpGi1CGqcQN+18HgNGctlkgGRm4=)
                          9: 323830343a323231303a633030303a3a2f33342d3334203d3e20323634353839.roa (hash: 7DSHhb4g6HFGRhAKFHMHVvfJLvJKpVU7GdrA+yuW66M=)
                          10: 323830343a323231303a383030303a3a2f33332d3333203d3e20323634353839.roa (hash: z0PK89XPf7iScPDW5/s/N6ven+AoHLN0gyU8EK0vNeo=)
                          11: 3133382e33362e3234302e302f32342d3234203d3e20323634353839.roa (hash: DZqiSTx+V0teLhKuCpOTCGoIK1Uvk9SRjn8+zZJSwZY=)
                          12: 323830343a323231303a3a2f33342d3334203d3e20323634353839.roa (hash: BuY3JAd+I4GQ4Isw/fBgvSFhIYsLCQ++juQp2KHBFd8=)
                          13: 323830343a323231303a343030303a3a2f33342d3334203d3e20323634353839.roa (hash: aB1z7sY/Fwrtj5JKVGNz/9ciptRcynh6JYuqsnxTzUk=)
                          14: 323830343a323231303a383030303a3a2f33342d3334203d3e20323634353839.roa (hash: PX+wwIOc1ieID9iSMRg+d7nEgrl4+4INLeP2emGG/78=)
                          15: 3134332e3230322e3233312e302f32342d3234203d3e20323634353839.roa (hash: 0zrk0rMnYzWSYDq46FuTI0iv0jDwmBnxoaItP+eRn6M=)
                          16: 3134332e3230322e3232382e302f32342d3234203d3e20323634353839.roa (hash: ZGO5v9LUDQZRjXsn+ndJFWRwUxJYLrzNBAFMDafI0gA=)
                          17: 323830343a323231303a3a2f33332d3333203d3e20323634353839.roa (hash: JVP81+cv0YHuMm/kO22QIUMeE8hiF/fIBv9LFC46orI=)
                          18: 3133382e33362e3234322e302f32342d3234203d3e20323634353839.roa (hash: +9KcEL6OAPO2Fq7ZbMshlfBSAjbcWsvCmPPRoUp5LKE=)
                          19: 3134332e3230322e3233302e302f32342d3234203d3e20323634353839.roa (hash: jF7P3JPghc/AEXiuXRrOdlHXfUjf3+C7Tg5FIpeRjPI=)
                          20: 3134332e3230322e3232382e302f32332d3233203d3e20323634353839.roa (hash: zBeuDG3RpGHHGbRjcO/FJ0TSzmfYg8s/84qoaut7x10=)
                          21: 3133382e33362e3234322e302f32332d3233203d3e20323634353839.roa (hash: 8pt7YXEiXIfFxJCTJdqDqmkT8OgmhItP2tM+ZcM2c14=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.crl
                          rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 08:38:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c8:de:3d:3a:da:cd:8a:e8:dc:12:f8:90:15:db:b8:db:25:9d:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E88601104C6C43AC785175C29585EFD06974620
        Validity
            Not Before: Dec 19 04:48:24 2025 GMT
            Not After : Dec 20 08:38:24 2025 GMT
        Subject: CN=EE21AFCA3E0D03AF067A3CF434AD24A551392EB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5c:4b:1c:82:4a:7d:81:73:93:f8:c4:6c:7e:
                    8f:7f:c4:c5:49:69:e7:4e:32:0f:17:e0:35:38:09:
                    a3:6d:05:ec:a9:59:f8:f9:5e:b3:60:b2:88:16:5f:
                    fb:9d:23:da:60:1a:3c:3c:19:56:2e:ec:1b:f5:09:
                    4f:c0:43:13:74:75:ed:f0:e7:33:41:2a:92:f7:a4:
                    d0:0a:e2:65:0d:35:16:ce:2c:75:2b:1f:ad:7b:b9:
                    8d:19:03:17:43:37:66:96:c7:33:6b:29:b5:d8:0b:
                    eb:bf:34:8a:91:5f:40:58:85:a7:5a:b2:6e:8e:46:
                    16:5e:dd:9a:a2:1f:17:e9:de:3c:18:1d:0c:cd:6a:
                    6a:a5:56:6c:f4:a4:6c:9b:98:af:e7:91:04:6e:e8:
                    56:37:b2:34:84:c4:71:30:05:27:b0:27:d4:8b:ce:
                    ad:57:8a:d1:ec:9f:d3:68:de:2f:0b:e8:86:aa:f9:
                    f5:df:ca:09:89:6f:61:d6:46:4a:ed:69:fa:a9:47:
                    39:fa:85:df:8f:fa:a9:1f:28:a7:07:44:dd:f9:84:
                    f8:9b:57:f9:e1:1c:fc:97:32:2a:d8:8c:e3:28:1b:
                    ec:42:67:a8:5a:f5:ed:64:1c:d9:22:9e:00:0b:1d:
                    72:c0:60:7a:5a:23:bc:e7:ab:15:d8:d9:6a:9c:86:
                    57:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:21:AF:CA:3E:0D:03:AF:06:7A:3C:F4:34:AD:24:A5:51:39:2E:B2
            X509v3 Authority Key Identifier:
                keyid:0E:88:60:11:04:C6:C4:3A:C7:85:17:5C:29:58:5E:FD:06:97:46:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:f5:da:65:57:a8:4f:10:ff:59:95:d4:d6:96:67:75:34:3c:
         18:b6:3b:5c:d7:bc:8a:ee:d2:cc:ff:cf:8f:ca:10:40:e4:44:
         f9:68:e7:d6:ce:da:1c:e5:de:ef:e7:12:6f:08:bf:ad:f3:15:
         14:ec:b9:31:1c:a3:85:b6:23:4a:09:91:d4:86:75:74:38:58:
         55:03:fd:b0:fe:10:ee:f3:f9:74:b8:50:a6:9c:48:e2:ca:71:
         04:58:f5:b7:74:54:ce:f9:46:71:9e:8e:5b:ed:d8:ec:0c:18:
         74:61:53:1b:54:17:3b:38:c4:84:d4:7b:94:aa:37:ed:23:d1:
         29:ec:f2:76:27:81:90:2b:97:d7:1f:37:b3:b3:73:24:84:43:
         ae:88:05:32:08:d3:23:b7:b0:1a:a8:79:33:29:f4:01:50:74:
         91:dc:88:dc:7b:2d:7d:32:e8:67:e8:17:c1:f3:c4:7a:c6:14:
         43:39:85:36:0f:b9:af:34:0d:1f:e5:5f:d1:67:24:ea:3f:67:
         a7:cf:ac:3d:18:d7:71:42:9f:f5:a1:89:95:28:9d:a0:59:41:
         cd:da:78:7e:0c:11:67:3e:10:c6:71:1b:48:eb:f2:34:50:1f:
         cc:6e:eb:90:9a:b5:ba:c4:f2:14:63:ba:93:b2:ab:00:d2:82:
         0a:3c:af:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:23:17 2025 by rpki-client