This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft
File:                     98525FF70BD67C78C36BE3190E3463098E95DF2C.mft (raw, json)
Hash identifier:          Tu5rrt/eranAikTzIxielUtKozpM2I2wK+gDWB4Uo98=
Subject key identifier:   97:CC:75:E7:D2:3B:70:F4:47:95:90:30:BF:63:AF:30:DD:FA:1C:B3
Authority key identifier: 98:52:5F:F7:0B:D6:7C:78:C3:6B:E3:19:0E:34:63:09:8E:95:DF:2C
Certificate issuer:       /CN=98525FF70BD67C78C36BE3190E3463098E95DF2C
Certificate serial:       265B89970EDAE60E20FF968A4F90549D4585CB63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft
Manifest number:          0342
Signing time:             Sat 20 Dec 2025 10:13:12 +0000
Manifest this update:     Sat 20 Dec 2025 10:08:12 +0000
Manifest next update:     Sun 21 Dec 2025 10:45:12 +0000
Files and hashes:         1: 323830343a333966633a3a2f33322d3438203d3e20323636303633.roa (hash: uZx6MKqpTg13sIPZCAlz9trqbeJwgRlXEg00ldqRU1M=)
                          2: 34352e342e3130342e302f32322d3234203d3e20323636303633.roa (hash: YqZ3SJPT6Xcqs9peUTXMNxMHIB0EzaAQ68UaAdgZNVs=)
                          3: 98525FF70BD67C78C36BE3190E3463098E95DF2C.crl (hash: qnBH4Ns76Q3Nb/TjCWTO4WOFunIPsbeT64MpQ7fLuY4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.crl
                          rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 10:45:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:5b:89:97:0e:da:e6:0e:20:ff:96:8a:4f:90:54:9d:45:85:cb:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98525FF70BD67C78C36BE3190E3463098E95DF2C
        Validity
            Not Before: Dec 20 10:08:12 2025 GMT
            Not After : Dec 21 10:45:12 2025 GMT
        Subject: CN=97CC75E7D23B70F447959030BF63AF30DDFA1CB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:52:86:4f:d8:cd:b4:13:fa:36:5c:e6:1f:40:
                    27:15:cd:e2:2c:00:98:0c:f7:01:dc:c9:63:a0:9d:
                    a1:49:c8:00:d1:aa:38:49:21:51:92:63:62:2c:91:
                    23:ca:ce:82:ea:5b:e7:58:81:ea:03:16:1d:3c:57:
                    ab:d3:d2:87:66:ef:2a:7b:a4:7b:f4:ad:1d:bd:41:
                    98:b6:5e:9f:7e:dc:f9:2e:92:b3:bf:51:8a:ce:17:
                    f0:1a:bf:a5:70:45:0c:a4:42:11:e9:63:b0:cd:6a:
                    6a:5f:82:a8:c5:99:7e:59:b4:7d:56:9a:cb:92:55:
                    ed:7e:76:b7:d3:df:74:73:2b:ab:bb:b2:a4:8a:93:
                    b0:3f:9d:73:53:3e:ca:ae:59:21:81:a0:cc:41:59:
                    21:c1:ac:fb:a9:0f:26:7b:76:2c:0b:3d:68:1c:c4:
                    b8:1d:1e:a9:18:e4:22:ce:85:39:a3:f4:8d:73:3a:
                    18:1d:b1:9f:f5:26:0c:7c:c1:67:e0:19:11:ec:dc:
                    61:68:5e:25:2e:d1:fb:63:d7:3c:25:55:39:22:ef:
                    03:7d:c3:2b:c0:88:97:85:7c:b6:37:42:af:00:12:
                    ca:4f:46:3c:80:2b:3d:76:26:40:c3:a2:10:f0:ae:
                    52:4d:e2:bc:c7:c6:c4:cc:f6:20:d6:80:d6:cb:49:
                    4d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:CC:75:E7:D2:3B:70:F4:47:95:90:30:BF:63:AF:30:DD:FA:1C:B3
            X509v3 Authority Key Identifier:
                keyid:98:52:5F:F7:0B:D6:7C:78:C3:6B:E3:19:0E:34:63:09:8E:95:DF:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:bb:f3:af:77:7b:ee:50:2a:c1:a0:e2:75:86:aa:3f:5a:f1:
         8a:d5:8c:ef:a3:43:d5:38:f6:ff:f4:36:d4:08:27:07:d0:88:
         cc:7d:da:4d:94:e7:1b:1d:76:50:4f:99:ea:72:44:21:2d:e2:
         a7:ab:1a:6f:43:6a:f6:a8:1f:b4:4e:55:82:91:a9:73:98:5c:
         aa:b7:ec:1f:a0:24:db:98:86:1b:08:81:05:01:f1:0d:50:4f:
         2f:63:64:4e:69:c1:5b:9f:9f:05:f7:13:b8:15:ec:21:3c:c5:
         b9:c9:a7:5d:f7:38:ef:48:f5:4f:3c:e6:5e:60:ee:a7:01:f5:
         7f:e3:d9:ad:79:c0:79:93:18:71:10:17:e3:6d:91:65:55:d8:
         f4:d1:94:1c:97:2d:ba:c5:6a:90:ac:8b:7d:71:a1:fc:7a:15:
         d3:d1:1c:68:32:84:21:39:1b:41:67:26:d6:cc:47:c0:2f:33:
         a2:df:42:79:5e:b1:95:53:dd:7a:f2:3e:97:93:86:0c:75:79:
         38:08:a9:39:98:08:6a:99:76:ad:66:97:6f:6e:ca:ce:61:97:
         17:d9:68:c8:72:1f:72:4b:00:be:39:da:8d:68:aa:95:4c:b3:
         32:2a:c6:d7:ab:1b:40:c8:85:42:dd:5b:06:ef:e9:6c:ea:7f:
         5d:b0:85:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 01:34:46 2025 by rpki-client