This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.mft
File:                     8F4C8CA3FDA8BF306949F8978F69041FE55BA994.mft (raw, json)
Hash identifier:          2hHejN3Lhej9fo2cPiJ1qAziRDU98fjsuKi6xzAJ/Vo=
Subject key identifier:   E5:DC:A6:17:F3:49:4F:E0:03:A4:32:FB:63:9A:5B:0B:E6:75:87:7F
Authority key identifier: 8F:4C:8C:A3:FD:A8:BF:30:69:49:F8:97:8F:69:04:1F:E5:5B:A9:94
Certificate issuer:       /CN=8F4C8CA3FDA8BF306949F8978F69041FE55BA994
Certificate serial:       0E11A49EBF9B9D2DF2E8DE6A1761B6350E5DC10A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.mft
Manifest number:          2E
Signing time:             Tue 16 Dec 2025 01:58:21 +0000
Manifest this update:     Tue 16 Dec 2025 01:53:21 +0000
Manifest next update:     Wed 17 Dec 2025 02:29:21 +0000
Files and hashes:         1: 323830343a373863303a3a2f33322d3332203d3e20323731323633.roa (hash: tH083W2mbuvxIYkpuiCHf0maj5FH8hVwfI3NmzxecOg=)
                          2: 8F4C8CA3FDA8BF306949F8978F69041FE55BA994.crl (hash: QQeBS0IBN8C/NCOUjNFTL3ETGgPTIp9UGeFcl3H0SPw=)
                          3: 3137372e38352e31302e302f32342d3234203d3e20323731323633.roa (hash: LKfai9OZTFCl04VmCLWnvJdSdPICsz5k6/PI4sSkmnA=)
                          4: 3137372e38352e382e302f32322d3232203d3e20323731323633.roa (hash: 1I9m2fUf9gQilzK/92MSjbd6eOb2/M7YEGAbTr8KTYs=)
                          5: 3137372e38352e392e302f32342d3234203d3e20323731323633.roa (hash: /0T78rqQobVja0DtJ8HTQAWJNYgm+gpT1gfJ9unfuSY=)
                          6: 3137372e38352e382e302f32342d3234203d3e20323731323633.roa (hash: Ju72G5NPWzwFHCe9aM3r7rJQ+Ry+URdIWNHRW2JyXz0=)
                          7: 3137372e38352e31312e302f32342d3234203d3e20323731323633.roa (hash: hUbthIaEtw9HFHw6obRsM2wDiMQWDo4OVWiLGBu5clg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.crl
                          rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Dec 2025 02:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:11:a4:9e:bf:9b:9d:2d:f2:e8:de:6a:17:61:b6:35:0e:5d:c1:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F4C8CA3FDA8BF306949F8978F69041FE55BA994
        Validity
            Not Before: Dec 16 01:53:21 2025 GMT
            Not After : Dec 17 02:29:21 2025 GMT
        Subject: CN=E5DCA617F3494FE003A432FB639A5B0BE675877F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:20:c6:8a:8a:a0:18:b6:ed:44:c2:ee:05:75:
                    b7:99:54:6c:7c:3b:92:9a:26:8b:86:9a:a3:ba:3c:
                    b4:69:97:80:d5:71:a3:ca:5f:ad:2c:f4:d0:5b:55:
                    f2:63:6a:1f:04:07:89:c0:32:09:af:0e:75:de:8d:
                    54:27:1e:52:d4:af:2f:9a:58:16:61:70:63:65:af:
                    a7:3e:2c:ca:45:05:4e:59:b9:23:c4:48:08:40:5d:
                    26:af:86:75:a4:92:98:ff:04:6d:53:88:85:cb:37:
                    33:94:66:7d:49:40:71:f4:51:f4:58:a2:a0:91:f3:
                    99:44:c0:ee:ac:2e:ab:73:00:7d:a1:2e:c5:ba:ce:
                    0f:dc:2f:15:c1:09:a1:6a:28:25:1a:fa:41:30:e8:
                    3f:d9:2b:54:40:5f:95:30:48:31:37:47:b4:91:13:
                    4a:42:d1:af:07:5c:31:9c:dd:b5:1d:21:f4:da:ec:
                    c9:31:dc:17:fd:9d:12:be:49:eb:b7:75:50:7c:e4:
                    26:23:06:25:7c:e5:d3:b1:bb:0c:49:f1:54:4b:56:
                    32:5d:62:e9:59:c8:33:ff:53:b2:7b:af:86:4c:3b:
                    11:69:cc:1d:eb:74:e5:be:76:76:ff:90:68:5d:3a:
                    f7:a3:2b:1f:35:d2:fe:50:74:d4:cc:00:28:fa:4c:
                    e4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:DC:A6:17:F3:49:4F:E0:03:A4:32:FB:63:9A:5B:0B:E6:75:87:7F
            X509v3 Authority Key Identifier:
                keyid:8F:4C:8C:A3:FD:A8:BF:30:69:49:F8:97:8F:69:04:1F:E5:5B:A9:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:20:69:89:4e:40:40:50:45:54:60:92:a0:70:a7:ad:a1:7f:
         5d:f8:8e:fc:70:b3:ab:61:b1:8e:74:49:79:bd:04:e2:2a:32:
         c9:36:db:e7:4a:60:93:c0:6e:4a:d2:5d:97:65:cc:36:da:f0:
         6e:69:cf:63:1d:4b:14:81:11:4a:e0:d1:8f:cd:6f:f8:59:9b:
         a9:5e:55:28:4a:f9:44:15:4b:ba:fc:fa:3d:6d:1e:04:b6:4b:
         88:65:d4:95:aa:e6:57:56:10:18:dd:73:9f:c5:50:75:66:83:
         c4:76:07:b3:c6:53:46:1b:1f:5c:08:9b:e6:f9:2f:3f:8e:50:
         95:c9:9f:b9:7c:38:9a:f4:aa:97:77:67:bc:c8:d2:87:8e:20:
         93:27:2d:95:ee:4a:fb:20:9c:9f:e3:27:b4:06:d8:a7:41:e7:
         31:70:5f:5d:6a:a8:a5:ae:34:78:ec:7a:ea:d2:ae:b1:d3:63:
         e4:99:1f:97:d8:80:82:72:e9:8a:55:99:25:c6:52:23:30:0b:
         ef:3b:50:a8:c9:a2:33:1a:d8:77:26:55:18:2f:8c:f8:12:b2:
         6b:bf:63:4a:00:8d:10:17:b1:83:40:30:a3:71:53:77:38:80:
         65:35:11:fe:16:d5:05:a6:ef:c1:98:8d:af:a1:b5:83:7d:b0:
         f7:93:d7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 19:42:58 2025 by rpki-client