This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/963A564A40CD8C84E5D11B9970B53BA3A441CF46.mft
File:                     963A564A40CD8C84E5D11B9970B53BA3A441CF46.mft (raw, json)
Hash identifier:          UkF3RzyslMaw5h5nb3+g650nfKN/lD8OWbS4ohOgDvw=
Subject key identifier:   6C:C2:0E:B7:F9:B8:BE:C7:05:AE:A1:23:84:C2:C8:80:2E:49:0D:73
Authority key identifier: 96:3A:56:4A:40:CD:8C:84:E5:D1:1B:99:70:B5:3B:A3:A4:41:CF:46
Certificate issuer:       /CN=963A564A40CD8C84E5D11B9970B53BA3A441CF46
Certificate serial:       43C1B7E0C31AC5CDC2703D259A895AC956895481
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/963A564A40CD8C84E5D11B9970B53BA3A441CF46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/963A564A40CD8C84E5D11B9970B53BA3A441CF46.mft
Manifest number:          018D
Signing time:             Tue 23 Dec 2025 02:46:59 +0000
Manifest this update:     Tue 23 Dec 2025 02:41:59 +0000
Manifest next update:     Wed 24 Dec 2025 05:37:59 +0000
Files and hashes:         1: 3137302e37382e302e302f32342d3234203d3e20323635343931.roa (hash: 3p+Y+TikOdCstGy1vdl+Af3YzY2n2W1HYEt/ORjN2P0=)
                          2: 3137302e37382e302e302f32332d3233203d3e20323635343931.roa (hash: bnIZl/x7B7ddxK7nu+EgdBU0M/wgxevJM2lT/VBya+8=)
                          3: 3137302e37382e302e302f32322d3232203d3e20323635343931.roa (hash: 3hvwKWXC0MK8sfcQbi3+7gGMkjbros8AtYaECWVsBcY=)
                          4: 323830343a333466343a383030303a3a2f33332d3333203d3e20323635343931.roa (hash: Bf178m77YabFltwawRymycznqjLZ1SnTY128jd9/dxA=)
                          5: 3137302e37382e312e302f32342d3234203d3e20323635343931.roa (hash: u5l5b/DUIQNoyX3rL5AnHAvqSpFTmlNQO8h4UCnNKBY=)
                          6: 3137302e37382e322e302f32332d3233203d3e20323635343931.roa (hash: OcBBDf2/tFN+bReGdOJBt9sSQtBMR0ynZM9zUpuZOn8=)
                          7: 323830343a333466343a343030303a3a2f33342d3334203d3e20323635343931.roa (hash: k1DnTGt4ZZQXUhz9PInX6dTfhUrewqDZSmrkLlrFT5g=)
                          8: 963A564A40CD8C84E5D11B9970B53BA3A441CF46.crl (hash: PH16IB+hBqV1IVhfud/4HgxJDqUy1Y5Idg6K3KPdCFU=)
                          9: 3137302e37382e332e302f32342d3234203d3e20323635343931.roa (hash: fQpvCfCQEXMayEvkeZOFz80hGU3ZFCZSxjgMlKagf/4=)
                          10: 3137302e37382e322e302f32342d3234203d3e20323635343931.roa (hash: mteE8qov3ZFm1o9xNX4M5kHl8SDbcESuAQDet1wNuqU=)
                          11: 323830343a333466343a3a2f33322d3332203d3e20323635343931.roa (hash: ls2cE4GO8ycNrvpSlbK3TTN0M/405inSaZhx91gM3eA=)
                          12: 323830343a333466343a383030303a3a2f33342d3334203d3e20323635343931.roa (hash: GTwt3YduDnOj+eDFBZ2onN74ROcC/QgjuDWSJMtkuwg=)
                          13: 323830343a333466343a3a2f33342d3334203d3e20323635343931.roa (hash: MJPVoW/iS+c8xVCWJJFU1xgC+ZvnSLS5tiAUj8w+4pU=)
                          14: 323830343a333466343a3a2f33332d3333203d3e20323635343931.roa (hash: SRxvhr2xcmNoIC59sS+mUASuRE4j/0w17hB70qAVYO0=)
                          15: 323830343a333466343a633030303a3a2f33342d3334203d3e20323635343931.roa (hash: gJY1ZyTJ2t6n8ZiBVCKDZh2kD2KUUW3IOzsMiTULGTk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/963A564A40CD8C84E5D11B9970B53BA3A441CF46.crl
                          rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/963A564A40CD8C84E5D11B9970B53BA3A441CF46.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/963A564A40CD8C84E5D11B9970B53BA3A441CF46.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 05:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:c1:b7:e0:c3:1a:c5:cd:c2:70:3d:25:9a:89:5a:c9:56:89:54:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=963A564A40CD8C84E5D11B9970B53BA3A441CF46
        Validity
            Not Before: Dec 23 02:41:59 2025 GMT
            Not After : Dec 24 05:37:59 2025 GMT
        Subject: CN=6CC20EB7F9B8BEC705AEA12384C2C8802E490D73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:19:90:43:8e:21:e4:b2:98:4e:30:b3:5e:ef:
                    d9:e9:84:56:aa:bd:fc:4b:44:f9:c2:fa:5e:3d:96:
                    af:a8:e0:31:f8:e0:28:ab:29:29:25:83:77:11:ff:
                    99:f6:ce:1c:6d:3e:4d:be:be:83:66:e9:7e:37:14:
                    37:3b:90:42:2e:a3:6a:94:ab:04:21:79:ab:5e:30:
                    2f:33:b8:7e:a8:f0:7a:11:0c:b3:77:9a:76:6a:a4:
                    9e:5c:e8:43:c2:65:22:ff:2b:d7:0b:b9:47:f5:fd:
                    e1:7c:5f:4b:4f:d0:24:ba:ed:a0:5a:03:bf:9b:17:
                    2a:e6:16:b9:87:8a:1f:c5:17:86:58:b7:89:1c:ad:
                    30:5c:52:07:76:5f:e8:91:eb:fb:05:2e:65:a5:98:
                    99:99:e6:12:16:a0:f0:0a:e0:d9:67:36:49:43:b9:
                    0e:72:79:76:e8:de:c6:23:6b:62:08:d7:80:95:4d:
                    37:1e:e8:13:b2:91:a4:0c:ca:c3:37:f7:9f:b0:09:
                    61:9e:d5:a0:ce:06:cb:1c:f8:8b:44:39:22:ee:50:
                    cc:16:21:24:ab:c7:3a:aa:5f:30:41:b6:34:29:d2:
                    0c:43:ad:f1:7c:05:e2:09:44:32:73:e3:8b:64:4c:
                    ee:68:53:dd:fe:52:6b:5f:77:be:e4:46:00:34:89:
                    4a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C2:0E:B7:F9:B8:BE:C7:05:AE:A1:23:84:C2:C8:80:2E:49:0D:73
            X509v3 Authority Key Identifier:
                keyid:96:3A:56:4A:40:CD:8C:84:E5:D1:1B:99:70:B5:3B:A3:A4:41:CF:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/963A564A40CD8C84E5D11B9970B53BA3A441CF46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/963A564A40CD8C84E5D11B9970B53BA3A441CF46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/963A564A40CD8C84E5D11B9970B53BA3A441CF46.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:a9:fe:05:03:b4:8a:80:a0:84:02:1b:c7:71:78:ad:0f:d2:
         8d:60:fc:7a:43:02:20:c7:b3:2e:9c:f6:84:a8:32:df:37:d5:
         e0:6c:9a:60:6d:3a:ba:54:78:b9:91:64:d4:40:06:20:84:29:
         98:5f:f2:62:4e:f1:19:26:b7:7a:80:49:c8:21:38:0c:8f:0e:
         5d:0a:d3:94:17:5a:ed:f3:71:b9:ab:14:5e:85:31:bd:ed:3b:
         fc:23:60:db:22:60:58:11:87:13:33:ae:0a:8c:ae:cd:d2:f5:
         4b:ef:a7:46:de:76:f0:19:58:c0:7d:09:11:24:ae:53:68:af:
         2a:e0:6e:6a:b8:3f:37:d3:3b:6f:64:8a:c1:1a:45:36:ca:43:
         69:30:cc:be:1f:ab:44:3e:0d:b1:36:6a:e8:97:c3:4a:e4:7f:
         56:81:1b:3f:ef:9e:c6:d5:17:25:42:6a:16:47:bb:c4:77:d0:
         5e:87:5d:10:14:c2:2e:ee:07:8a:01:f7:05:ac:00:17:1f:cf:
         61:36:62:f8:53:14:6f:58:e3:81:0a:fd:cb:a7:7f:34:2e:bd:
         95:61:b4:16:2f:c9:56:bc:80:25:46:7c:1e:be:10:cf:67:0f:
         db:d3:f5:c7:66:ba:a9:0a:5c:14:2d:b0:50:04:7d:d7:01:38:
         f5:0a:12:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 06:39:51 2025 by rpki-client