This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.mft
File:                     8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.mft (raw, json)
Hash identifier:          /1lytBlddseyL/fhiWI125Gu6olsgSKeWPGy/Pn9RvA=
Subject key identifier:   EF:D2:29:FD:55:84:53:63:89:B7:5B:86:99:AA:D7:57:DE:53:70:04
Authority key identifier: 8B:89:FD:11:7F:F5:2A:01:99:DB:C5:00:2C:1B:C7:D4:4E:20:4A:D2
Certificate issuer:       /CN=8B89FD117FF52A0199DBC5002C1BC7D44E204AD2
Certificate serial:       0AA2DAE24E03F4E64B8BBB2D79A509D318E3D765
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.mft
Manifest number:          BC
Signing time:             Wed 24 Dec 2025 08:49:34 +0000
Manifest this update:     Wed 24 Dec 2025 08:44:34 +0000
Manifest next update:     Thu 25 Dec 2025 10:55:34 +0000
Files and hashes:         1: 34352e3233352e3133322e302f32322d3234203d3e20323637343232.roa (hash: fwixdrQWEPst8s+eVaUhnE8mUnCaPHjzEVa6AGdzW3U=)
                          2: 8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.crl (hash: 9qbtLb02E+a9GSmytb6Cor+H8mcVOFyN8thFA9yGDgA=)
                          3: 323830343a346434633a3a2f33322d3438203d3e20323637343232.roa (hash: TSp4pb28CDc3CmgAqNWTUzj2tUUPyBdgJJeYPfOIRjg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.crl
                          rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 10:55:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:a2:da:e2:4e:03:f4:e6:4b:8b:bb:2d:79:a5:09:d3:18:e3:d7:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B89FD117FF52A0199DBC5002C1BC7D44E204AD2
        Validity
            Not Before: Dec 24 08:44:34 2025 GMT
            Not After : Dec 25 10:55:34 2025 GMT
        Subject: CN=EFD229FD5584536389B75B8699AAD757DE537004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f1:69:f1:1f:5f:a0:e2:17:90:5f:14:64:8f:
                    4c:34:63:aa:26:1f:f6:4f:0b:24:e9:3c:d1:43:ca:
                    f3:a4:8d:24:60:39:17:5e:a3:d9:6d:1f:3a:7e:7a:
                    36:01:ef:8e:ea:c8:1b:13:db:8a:93:49:a5:dc:03:
                    ca:6b:e4:77:78:ce:27:e1:3c:f4:fb:ef:2f:50:d4:
                    de:03:32:f3:e0:90:c6:27:f9:fe:df:1b:9e:af:eb:
                    c1:9b:b1:e4:fb:fe:1d:c4:61:11:f3:6c:e0:cb:e1:
                    36:19:1c:01:5e:aa:fe:7e:90:4c:f7:0e:3c:dc:bc:
                    6f:03:01:50:0b:dd:84:d2:06:03:2f:51:25:74:d6:
                    a2:03:ef:eb:03:38:d5:bf:9f:d0:7f:23:17:aa:62:
                    6a:d1:43:28:f1:03:fc:35:29:14:07:b8:eb:2e:e3:
                    c1:1e:ca:6b:86:64:12:eb:aa:0c:76:81:78:c9:e4:
                    81:3c:c8:73:a0:cb:9f:9d:e6:1b:01:84:de:05:33:
                    f9:a1:d9:84:b9:b7:21:58:a0:7f:40:66:21:31:cd:
                    11:5b:4c:16:b5:fd:c4:5a:ef:11:b8:ea:f6:2d:92:
                    fd:95:61:f8:09:8c:7c:76:6a:9e:5b:96:d7:e9:69:
                    fd:a4:29:fe:cf:b0:7a:a6:89:70:0a:71:30:be:51:
                    ec:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D2:29:FD:55:84:53:63:89:B7:5B:86:99:AA:D7:57:DE:53:70:04
            X509v3 Authority Key Identifier:
                keyid:8B:89:FD:11:7F:F5:2A:01:99:DB:C5:00:2C:1B:C7:D4:4E:20:4A:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:49:26:f0:42:41:3b:39:4a:90:7e:66:24:05:c1:eb:14:8d:
         e7:19:1a:cb:ba:bd:14:a0:b8:5a:47:f9:3b:f4:8b:2e:74:be:
         69:4b:e2:35:45:55:c4:00:49:30:15:bc:83:19:60:bf:bc:9b:
         bd:a1:6e:7d:d6:6f:ee:47:cc:e0:aa:4f:93:6d:29:96:18:93:
         d2:cc:43:b0:0b:e0:ac:39:ab:28:d2:8e:ea:df:77:f5:b3:56:
         8c:fb:12:45:32:98:3d:4a:8f:28:27:d5:5b:a1:99:55:1b:f8:
         13:b4:b4:bc:39:b6:01:91:fc:45:1a:0a:91:8d:52:12:5f:e2:
         d5:ae:c7:97:46:80:6e:b2:67:26:a4:cd:8e:4e:66:64:e7:77:
         7b:41:52:b1:93:f5:70:c2:c9:39:48:44:a8:a8:f7:a4:9c:2c:
         d8:40:37:d3:c9:86:59:68:c7:5b:c2:49:79:16:2f:ad:f5:1a:
         b4:4d:39:e7:9f:db:e0:9e:97:d9:9d:99:e5:8a:79:7b:14:ff:
         b4:f8:61:ee:ff:5f:87:dc:24:fc:97:95:04:96:cf:b1:eb:a9:
         03:00:66:16:84:59:ec:48:b6:8e:93:52:58:49:f3:29:d1:c3:
         f3:35:91:df:18:4a:28:eb:af:41:a9:f6:bd:7f:0b:a1:6c:91:
         83:80:b7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:26:42 2025 by rpki-client