This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.mft
File:                     464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.mft (raw, json)
Hash identifier:          h0SsspO676nuKlYj8YQv+e0TA6/UOcAb139xHUkENOU=
Subject key identifier:   09:B7:15:0A:88:70:CC:6A:27:CB:AF:81:A0:76:15:5A:9D:E4:26:CD
Authority key identifier: 46:4F:7E:BA:13:C4:3D:1F:B8:EA:CC:BC:C0:D4:2E:9A:28:BC:5E:AC
Certificate issuer:       /CN=464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC
Certificate serial:       5E81830E58DCD08610807FCFDD4CE7059388E84F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.mft
Manifest number:          0282
Signing time:             Tue 23 Dec 2025 07:07:23 +0000
Manifest this update:     Tue 23 Dec 2025 07:02:23 +0000
Manifest next update:     Wed 24 Dec 2025 10:46:23 +0000
Files and hashes:         1: 3133382e302e3133352e302f32342d3234203d3e20323634353437.roa (hash: 3GfF9/keOxONrG5saKxKuNHrqS76c3fizCCjgZkOCfQ=)
                          2: 3133382e302e3133342e302f32342d3234203d3e20323634353437.roa (hash: ub3127nINXdd7UFefVY5GyGeQcGpGogscwyR3hZ93r8=)
                          3: 3133382e302e3133322e302f32342d3234203d3e20323734343936.roa (hash: KFo2ZtlqsRivadS0HDQhD75b2YUP2ok5fPQa03DRNmY=)
                          4: 464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.crl (hash: uWdJljSHpvofrmQjoz/E7wsvugou7OJabibu2Y5GKyI=)
                          5: 3133382e302e3133332e302f32342d3234203d3e20323634353437.roa (hash: 3QkfsMAW0YM7thc1QPP42f7BDjhYc4NpI8swwL1V3iM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.crl
                          rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 09:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:81:83:0e:58:dc:d0:86:10:80:7f:cf:dd:4c:e7:05:93:88:e8:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC
        Validity
            Not Before: Dec 23 07:02:23 2025 GMT
            Not After : Dec 24 10:46:23 2025 GMT
        Subject: CN=09B7150A8870CC6A27CBAF81A076155A9DE426CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cf:76:d1:8e:45:e1:fc:77:6e:c9:11:eb:d2:
                    d7:41:f8:4e:29:01:75:2d:32:74:6b:13:9f:d4:a3:
                    d3:23:25:72:7b:c9:21:c0:06:5a:66:36:21:eb:bb:
                    1d:32:46:5c:7f:0e:00:12:44:bb:9a:c1:80:58:50:
                    e5:c0:81:09:86:26:d1:29:be:6a:4e:93:83:f0:f5:
                    d9:12:2d:ae:a2:3a:54:4c:94:fb:4f:fc:af:bd:80:
                    c2:93:17:b8:ba:70:87:bf:15:f1:3d:89:ad:f0:b3:
                    cb:0c:10:d8:39:f8:45:b0:da:1d:d9:5d:5e:21:a2:
                    80:29:ae:0b:8c:f0:4a:a0:06:dc:f2:2d:f4:f0:74:
                    83:37:de:db:20:b9:a7:56:03:d5:99:60:c6:e0:b2:
                    4d:26:8a:f0:fa:cc:e7:94:cb:ee:6b:92:f0:64:48:
                    58:93:79:dd:45:8e:2f:b4:f5:96:4c:f1:0d:50:a5:
                    6a:6c:24:62:dd:d7:5c:3c:ec:cb:c5:b6:be:f3:22:
                    54:0e:70:57:3e:a2:d3:09:8a:bf:1e:71:3e:bf:01:
                    6e:ec:da:58:23:91:d9:55:b7:56:c2:5d:90:8a:5e:
                    24:10:c8:1d:b3:75:6a:f9:2b:57:82:3d:f4:da:7e:
                    48:ce:67:0b:8e:da:85:f8:a9:7f:fb:a0:13:7e:2e:
                    3d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B7:15:0A:88:70:CC:6A:27:CB:AF:81:A0:76:15:5A:9D:E4:26:CD
            X509v3 Authority Key Identifier:
                keyid:46:4F:7E:BA:13:C4:3D:1F:B8:EA:CC:BC:C0:D4:2E:9A:28:BC:5E:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:db:ca:52:c8:95:59:b9:7f:77:7b:d7:bd:11:81:a8:df:3e:
         5d:7b:66:f2:00:f0:7d:96:dd:3c:5b:24:6d:1a:4b:23:35:0d:
         9d:f4:99:0b:96:74:7a:bc:65:70:c1:99:40:dd:78:cf:2e:cc:
         e4:9f:86:9a:b3:72:02:69:10:04:2e:fa:ad:6d:94:ec:75:57:
         32:f4:24:3b:bf:19:f2:56:05:cc:1d:20:e3:af:c4:9c:a8:9e:
         2d:b7:b4:d0:cd:ce:6a:ee:a0:1c:13:a9:0b:ef:50:3d:f4:e6:
         c3:1a:62:29:23:77:25:0b:65:14:fa:97:d7:b6:e4:e8:30:98:
         aa:24:0c:3c:48:1c:dd:9b:b4:68:f0:fb:e9:d8:ca:b4:64:b4:
         07:2e:57:85:65:84:7e:69:9d:be:92:13:90:ff:ab:33:a5:07:
         cc:14:2a:25:ba:fd:d1:dc:b1:94:fc:2f:c7:57:0b:40:4d:df:
         96:fc:c6:5c:6a:ab:4e:31:08:39:ae:9d:77:76:5e:35:13:8b:
         af:7a:0b:97:05:58:41:0e:e1:9d:56:51:e2:61:40:56:d4:0e:
         90:c8:be:96:bd:ce:ad:4c:08:bc:cf:f9:aa:ab:5a:69:54:4c:
         11:ae:e4:f0:2c:52:9e:13:0a:f2:c1:6f:55:7c:a0:5d:47:85:
         54:59:f5:76
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXoGDDljc0IYQgH/P3UznBZOI6E8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDY0RjdFQkExM0M0M0QxRkI4RUFDQ0JDQzBENDJFOUEy
OEJDNUVBQzAeFw0yNTEyMjMwNzAyMjNaFw0yNTEyMjQxMDQ2MjNaMDMxMTAvBgNV
BAMTKDA5QjcxNTBBODg3MENDNkEyN0NCQUY4MUEwNzYxNTVBOURFNDI2Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKz3bRjkXh/HduyRHr0tdB+E4p
AXUtMnRrE5/Uo9MjJXJ7ySHABlpmNiHrux0yRlx/DgASRLuawYBYUOXAgQmGJtEp
vmpOk4Pw9dkSLa6iOlRMlPtP/K+9gMKTF7i6cIe/FfE9ia3ws8sMENg5+EWw2h3Z
XV4hooAprguM8EqgBtzyLfTwdIM33tsguadWA9WZYMbgsk0mivD6zOeUy+5rkvBk
SFiTed1Fji+09ZZM8Q1QpWpsJGLd11w87MvFtr7zIlQOcFc+otMJir8ecT6/AW7s
2lgjkdlVt1bCXZCKXiQQyB2zdWr5K1eCPfTafkjOZwuO2oX4qX/7oBN+Lj2rAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUCbcVCohwzGony6+BoHYVWp3kJs0wHwYDVR0j
BBgwFoAURk9+uhPEPR+46sy8wNQumii8XqwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmtLZEhtY3huRkxOSkJMTDRtTkpiUzMxVVY2d2ZIbWlRZjJRNmJFcENL
bzIvMC80NjRGN0VCQTEzQzQzRDFGQjhFQUNDQkNDMEQ0MkU5QTI4QkM1RUFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ2NEY3RUJBMTNDNDNEMUZC
OEVBQ0NCQ0MwRDQyRTlBMjhCQzVFQUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NmtLZEhtY3huRkxOSkJMTDRtTkpiUzMxVVY2d2ZIbWlRZjJRNmJFcENLbzIvMC80
NjRGN0VCQTEzQzQzRDFGQjhFQUNDQkNDMEQ0MkU5QTI4QkM1RUFDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAG9vKUsiVWbl/d3vXvRGBqN8+XXtm8gDwfZbdPFskbRpLIzUNnfSZC5Z0erxl
cMGZQN14zy7M5J+GmrNyAmkQBC76rW2U7HVXMvQkO78Z8lYFzB0g46/EnKieLbe0
0M3Oau6gHBOpC+9QPfTmwxpiKSN3JQtlFPqX17bk6DCYqiQMPEgc3Zu0aPD76djK
tGS0By5XhWWEfmmdvpITkP+rM6UHzBQqJbr90dyxlPwvx1cLQE3flvzGXGqrTjEI
Oa6dd3ZeNROLr3oLlwVYQQ7hnVZR4mFAVtQOkMi+lr3OrUwIvM/5qqtaaVRMEa7k
8CxSnhMK8sFvVXygXUeFVFn1dg==
-----END CERTIFICATE-----
Generated at Tue Dec 23 09:40:14 2025 by rpki-client