This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.mft
File:                     E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.mft (raw, json)
Hash identifier:          sedDEKUCo16GQmBfHXxDNFo236DZnN7K1lo9+lxmsxs=
Subject key identifier:   88:BD:63:4B:AA:4C:82:1F:AB:CF:18:C5:C7:70:DA:38:04:BD:07:15
Authority key identifier: E1:BB:FD:E5:A7:EB:A9:69:95:77:93:A5:D2:A2:93:42:8D:4D:7B:B9
Certificate issuer:       /CN=E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9
Certificate serial:       35629A4DE0C6A03DE774F826CF5130C2CA1FF316
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.mft
Manifest number:          0332
Signing time:             Tue 23 Dec 2025 16:11:09 +0000
Manifest this update:     Tue 23 Dec 2025 16:06:09 +0000
Manifest next update:     Wed 24 Dec 2025 19:39:09 +0000
Files and hashes:         1: 323830343a323264343a3a2f33322d3438203d3e20323634313235.roa (hash: A353h4nPQV5mug8PsxdBSNnozUQ5PiKI50pWLOozO7M=)
                          2: E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.crl (hash: 0VJmZaSGCTxr0WPv/52Dgm6HgLiZbGu5g99n1Me7hSU=)
                          3: 3133382e39342e34342e302f32322d3234203d3e20323634313235.roa (hash: /NNSuwtSTAZex6aVtEcltvfx1O5f3eY00+oED5jPTmA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.crl
                          rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 19:39:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:62:9a:4d:e0:c6:a0:3d:e7:74:f8:26:cf:51:30:c2:ca:1f:f3:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9
        Validity
            Not Before: Dec 23 16:06:09 2025 GMT
            Not After : Dec 24 19:39:09 2025 GMT
        Subject: CN=88BD634BAA4C821FABCF18C5C770DA3804BD0715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:69:a1:c7:f6:9e:2c:fc:67:08:48:35:ae:0a:
                    d1:98:27:06:a3:ff:3d:de:ab:70:ad:4e:c7:4e:3a:
                    61:b3:b2:95:2d:1d:b0:bd:16:04:64:15:a2:5a:31:
                    83:73:db:28:8d:27:7e:f0:b6:aa:36:52:6b:81:95:
                    d7:03:8a:05:7f:24:6a:e8:35:0d:68:62:d9:cb:66:
                    89:b2:d9:fd:f3:67:eb:e7:2d:a5:cc:8e:0a:56:f7:
                    d8:fe:91:4c:da:b9:f1:80:7e:cb:c5:46:9e:96:2b:
                    b8:6b:ad:36:b8:bf:21:49:cc:1a:79:4c:bf:b1:4d:
                    e9:7c:db:e8:8e:f4:2a:ae:e5:f1:97:7b:04:b2:0f:
                    99:f2:a5:10:d9:a9:1b:87:83:df:f7:4f:94:74:9a:
                    20:9d:70:c0:bd:9f:16:db:8d:de:f7:e8:dd:b4:09:
                    fb:d4:dc:ea:78:b9:db:5e:15:3d:32:eb:28:12:96:
                    29:71:98:05:ea:2b:5b:13:ac:17:8a:ad:ae:35:cf:
                    ad:c3:4b:7e:4a:b1:ea:93:ed:50:45:fb:79:6e:e1:
                    34:06:e0:01:05:77:92:fe:d0:fd:aa:2a:22:61:ee:
                    39:47:3c:1a:b2:b5:e2:af:bf:d1:ef:3a:af:bd:55:
                    01:fd:73:8b:54:df:ad:82:f2:e0:80:df:8a:2c:45:
                    79:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:BD:63:4B:AA:4C:82:1F:AB:CF:18:C5:C7:70:DA:38:04:BD:07:15
            X509v3 Authority Key Identifier:
                keyid:E1:BB:FD:E5:A7:EB:A9:69:95:77:93:A5:D2:A2:93:42:8D:4D:7B:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:1e:ff:4c:f1:ff:0a:1c:d4:33:ed:4d:62:3a:2b:ec:8e:4b:
         11:9e:7d:e3:eb:38:93:8d:fa:81:03:32:42:ea:b2:4e:87:00:
         58:f3:e9:e3:45:97:b2:07:9c:e4:e3:54:1a:f9:00:ba:de:38:
         32:7d:ce:f6:61:7b:40:bc:59:15:0c:0c:54:c8:75:b0:05:c7:
         66:be:07:2e:f2:9a:e3:5e:e7:27:ad:c3:da:93:b0:37:71:99:
         b6:92:9d:0f:41:f3:87:34:32:2e:34:38:17:03:a2:14:ac:9f:
         4a:90:94:02:46:7d:38:c6:84:68:85:1e:90:96:8b:b1:72:0e:
         34:85:ab:82:80:af:6b:c5:2d:32:d6:f8:1b:d9:41:6e:c3:2f:
         f7:0b:82:2d:35:a7:b8:5c:36:bf:37:0f:bb:df:22:49:b9:8f:
         d0:93:11:d6:58:f0:9a:fc:91:8f:6e:48:95:b3:c0:14:c3:a3:
         79:b8:71:33:f5:db:32:2e:82:73:c3:23:04:9e:92:51:69:96:
         b1:fc:e7:d5:e8:89:3c:41:61:3c:2a:60:d3:38:a5:5a:2a:85:
         f7:3e:a9:69:d2:95:f3:bc:44:9d:02:de:85:2d:e4:3e:78:2b:
         4d:af:82:f9:72:3c:c5:e9:67:19:14:a5:d3:2e:51:4c:0c:0f:
         88:5d:70:a0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNWKaTeDGoD3ndPgmz1Ewwsof8xYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTFCQkZERTVBN0VCQTk2OTk1Nzc5M0E1RDJBMjkzNDI4
RDREN0JCOTAeFw0yNTEyMjMxNjA2MDlaFw0yNTEyMjQxOTM5MDlaMDMxMTAvBgNV
BAMTKDg4QkQ2MzRCQUE0QzgyMUZBQkNGMThDNUM3NzBEQTM4MDRCRDA3MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuaaHH9p4s/GcISDWuCtGYJwaj
/z3eq3CtTsdOOmGzspUtHbC9FgRkFaJaMYNz2yiNJ37wtqo2UmuBldcDigV/JGro
NQ1oYtnLZomy2f3zZ+vnLaXMjgpW99j+kUzaufGAfsvFRp6WK7hrrTa4vyFJzBp5
TL+xTel82+iO9Cqu5fGXewSyD5nypRDZqRuHg9/3T5R0miCdcMC9nxbbjd736N20
CfvU3Op4udteFT0y6ygSlilxmAXqK1sTrBeKra41z63DS35KseqT7VBF+3lu4TQG
4AEFd5L+0P2qKiJh7jlHPBqyteKvv9HvOq+9VQH9c4tU362C8uCA34osRXkpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUiL1jS6pMgh+rzxjFx3DaOAS9BxUwHwYDVR0j
BBgwFoAU4bv95afrqWmVd5Ol0qKTQo1Ne7kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnNURzIxb0hvZExRcXVyVjFoNldoaE51Sm9ZQ3VSa0xBS3ZxTlFtbWZH
Z0UvMC9FMUJCRkRFNUE3RUJBOTY5OTU3NzkzQTVEMkEyOTM0MjhENEQ3QkI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UxQkJGREU1QTdFQkE5Njk5
NTc3OTNBNUQyQTI5MzQyOEQ0RDdCQjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NnNURzIxb0hvZExRcXVyVjFoNldoaE51Sm9ZQ3VSa0xBS3ZxTlFtbWZHZ0UvMC9F
MUJCRkRFNUE3RUJBOTY5OTU3NzkzQTVEMkEyOTM0MjhENEQ3QkI5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsR7/TPH/ChzUM+1NYjor7I5LEZ594+s4k436gQMyQuqyTocAWPPp40WXsgec
5ONUGvkAut44Mn3O9mF7QLxZFQwMVMh1sAXHZr4HLvKa417nJ63D2pOwN3GZtpKd
D0HzhzQyLjQ4FwOiFKyfSpCUAkZ9OMaEaIUekJaLsXIONIWrgoCva8UtMtb4G9lB
bsMv9wuCLTWnuFw2vzcPu98iSbmP0JMR1ljwmvyRj25IlbPAFMOjebhxM/XbMi6C
c8MjBJ6SUWmWsfzn1eiJPEFhPCpg0zilWiqF9z6padKV87xEnQLehS3kPngrTa+C
+XI8xelnGRSl0y5RTAwPiF1woA==
-----END CERTIFICATE-----
Generated at Tue Dec 23 17:45:51 2025 by rpki-client