This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft
File:                     D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft (raw, json)
Hash identifier:          wI9wrgTSfDAEZR8FCB+tKA+xEWhS4OlLtuQ9VITGRvE=
Subject key identifier:   D8:AE:C4:53:82:48:9B:A6:BC:21:A1:EF:58:36:C0:14:E4:A5:26:5B
Authority key identifier: D0:7D:3E:AC:7D:60:CA:B7:BE:84:1A:F5:2F:E5:BD:3B:E7:8D:B2:11
Certificate issuer:       /CN=D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211
Certificate serial:       4E8158D2FEECD83D9A513F17FD6A8B5FBBD61040
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft
Manifest number:          010F
Signing time:             Wed 24 Dec 2025 12:23:57 +0000
Manifest this update:     Wed 24 Dec 2025 12:18:57 +0000
Manifest next update:     Thu 25 Dec 2025 16:13:57 +0000
Files and hashes:         1: 323830343a386262633a3a2f33322d313238203d3e20323733373535.roa (hash: 3uQTnhhz7H1wtPzniSKTigXw3gRffdvQaJmnZ+hmrrA=)
                          2: D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.crl (hash: jMCzFy9wIseRina4m+Wyq6w276Qf/AIo4mTFi71P9Sg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.crl
                          rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 15:17:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:81:58:d2:fe:ec:d8:3d:9a:51:3f:17:fd:6a:8b:5f:bb:d6:10:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211
        Validity
            Not Before: Dec 24 12:18:57 2025 GMT
            Not After : Dec 25 16:13:57 2025 GMT
        Subject: CN=D8AEC45382489BA6BC21A1EF5836C014E4A5265B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:78:c8:3b:b7:4d:7e:74:2d:f1:37:ff:5a:d5:
                    9f:c5:92:1c:d8:cb:98:bf:68:7e:a6:da:e9:2f:61:
                    80:04:f3:0f:e6:b1:5a:5f:c6:84:f0:07:fa:41:5a:
                    20:09:5a:64:5e:f3:9a:b3:5d:c1:b3:20:0b:25:c6:
                    b5:fe:b6:56:95:ff:07:8a:ab:f2:8e:a5:48:46:b6:
                    37:4e:81:54:74:f2:a4:5a:e1:5e:89:1f:f4:fc:25:
                    f1:7e:13:04:09:18:24:a4:98:1e:4e:77:47:43:b1:
                    97:4f:61:a0:0a:68:84:55:1a:aa:4e:1d:3f:f3:99:
                    20:5d:d3:f6:a4:e0:b5:ca:90:9f:62:cd:7a:52:9e:
                    61:d2:db:9a:a9:71:8d:9c:40:15:91:cb:9c:eb:75:
                    fb:4f:16:9e:7b:3d:ab:93:31:a1:de:48:b1:09:1b:
                    08:11:90:c3:4b:06:5e:14:21:21:8c:5e:89:f1:2d:
                    c6:f3:33:65:e8:c8:11:6b:19:69:e3:c1:35:13:b8:
                    fa:9c:99:07:85:86:4d:d2:3c:10:ee:03:73:9a:0b:
                    ac:f2:42:ce:1f:b3:dc:10:a5:5a:fd:99:47:bb:85:
                    48:04:f0:c7:08:38:f7:cf:4a:12:bd:6c:fb:e9:81:
                    f7:ca:fb:ee:4c:44:df:01:07:4f:d1:db:6c:4c:55:
                    be:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AE:C4:53:82:48:9B:A6:BC:21:A1:EF:58:36:C0:14:E4:A5:26:5B
            X509v3 Authority Key Identifier:
                keyid:D0:7D:3E:AC:7D:60:CA:B7:BE:84:1A:F5:2F:E5:BD:3B:E7:8D:B2:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ec:71:71:bc:dd:74:dc:33:6f:91:8d:38:d8:39:63:64:75:
         ae:fa:73:21:91:28:b4:7b:9d:65:aa:57:6f:6c:4c:98:86:cd:
         a9:e2:d3:4f:f9:cf:a2:27:d2:44:b6:1f:0d:b7:62:83:4a:52:
         aa:c4:98:c4:a7:c2:9d:0b:3f:b4:40:e0:0c:b6:c7:b4:ae:2a:
         33:0a:36:e5:03:21:58:dd:42:7a:2f:a7:26:c7:54:99:41:96:
         c2:9c:4e:e7:bd:94:f5:bf:61:e1:fc:c8:f5:00:e3:de:36:fb:
         62:32:d3:49:c6:86:0b:15:b1:c7:d1:f5:15:17:32:cb:c7:db:
         bf:1d:8b:31:25:9c:2c:c9:2d:a2:36:92:c7:54:72:40:db:40:
         3d:f2:9a:a0:70:db:3c:dc:ac:e1:d3:dc:de:7b:c6:ae:11:ba:
         32:14:5c:38:97:d2:94:63:e0:b1:4a:24:a2:f3:01:af:7e:53:
         90:13:ae:2e:e9:b6:00:ab:da:1a:f2:34:f6:ac:f6:28:b5:fe:
         ac:d1:17:e4:28:30:39:5b:47:34:01:60:dd:eb:1c:c4:ab:70:
         48:08:1c:8e:24:91:25:19:da:df:67:49:ba:96:b7:6e:92:1f:
         d0:4a:5d:21:a8:47:93:d4:15:6e:48:13:c8:45:cb:2b:e4:91:
         3c:76:a0:d7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUToFY0v7s2D2aUT8X/WqLX7vWEEAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA3RDNFQUM3RDYwQ0FCN0JFODQxQUY1MkZFNUJEM0JF
NzhEQjIxMTAeFw0yNTEyMjQxMjE4NTdaFw0yNTEyMjUxNjEzNTdaMDMxMTAvBgNV
BAMTKEQ4QUVDNDUzODI0ODlCQTZCQzIxQTFFRjU4MzZDMDE0RTRBNTI2NUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDweMg7t01+dC3xN/9a1Z/FkhzY
y5i/aH6m2ukvYYAE8w/msVpfxoTwB/pBWiAJWmRe85qzXcGzIAslxrX+tlaV/weK
q/KOpUhGtjdOgVR08qRa4V6JH/T8JfF+EwQJGCSkmB5Od0dDsZdPYaAKaIRVGqpO
HT/zmSBd0/ak4LXKkJ9izXpSnmHS25qpcY2cQBWRy5zrdftPFp57PauTMaHeSLEJ
GwgRkMNLBl4UISGMXonxLcbzM2XoyBFrGWnjwTUTuPqcmQeFhk3SPBDuA3OaC6zy
Qs4fs9wQpVr9mUe7hUgE8McIOPfPShK9bPvpgffK++5MRN8BB0/R22xMVb7vAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU2K7EU4JIm6a8IaHvWDbAFOSlJlswHwYDVR0j
BBgwFoAU0H0+rH1gyre+hBr1L+W9O+eNshEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODZoa2llbWhEd2VQMUwxcGtQNzhMdUIyVVRUWWZFNnIzRVpQTGJ3M2ZR
eDMvMC9EMDdEM0VBQzdENjBDQUI3QkU4NDFBRjUyRkU1QkQzQkU3OERCMjExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwN0QzRUFDN0Q2MENBQjdC
RTg0MUFGNTJGRTVCRDNCRTc4REIyMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
ODZoa2llbWhEd2VQMUwxcGtQNzhMdUIyVVRUWWZFNnIzRVpQTGJ3M2ZReDMvMC9E
MDdEM0VBQzdENjBDQUI3QkU4NDFBRjUyRkU1QkQzQkU3OERCMjExLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEOxxcbzddNwzb5GNONg5Y2R1rvpzIZEotHudZapXb2xMmIbNqeLTT/nPoifS
RLYfDbdig0pSqsSYxKfCnQs/tEDgDLbHtK4qMwo25QMhWN1Cei+nJsdUmUGWwpxO
572U9b9h4fzI9QDj3jb7YjLTScaGCxWxx9H1FRcyy8fbvx2LMSWcLMktojaSx1Ry
QNtAPfKaoHDbPNys4dPc3nvGrhG6MhRcOJfSlGPgsUokovMBr35TkBOuLum2AKva
GvI09qz2KLX+rNEX5CgwOVtHNAFg3escxKtwSAgcjiSRJRna32dJupa3bpIf0Epd
IahHk9QVbkgTyEXLK+SRPHag1w==
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:17:49 2025 by rpki-client