This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.mft
File:                     24C90100868CC7E5E4ADB4222503286F7BF449AA.mft (raw, json)
Hash identifier:          7OEaSMn9ckiINQTit1kPJLnwnPp73H6UbBkmesaTZnM=
Subject key identifier:   97:53:20:5E:58:68:90:01:F7:07:BA:FD:C8:F1:17:B1:51:9B:E0:FF
Authority key identifier: 24:C9:01:00:86:8C:C7:E5:E4:AD:B4:22:25:03:28:6F:7B:F4:49:AA
Certificate issuer:       /CN=24C90100868CC7E5E4ADB4222503286F7BF449AA
Certificate serial:       3BF3D0D61AB84485D0253D38621C788777B0A3F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.mft
Manifest number:          0335
Signing time:             Mon 22 Dec 2025 21:13:59 +0000
Manifest this update:     Mon 22 Dec 2025 21:08:59 +0000
Manifest next update:     Wed 24 Dec 2025 00:31:59 +0000
Files and hashes:         1: 323830343a346231343a3a2f33322d3336203d3e20323637323832.roa (hash: YepoO3AKHh52C+NKLMnz+2byTie+Z3SUdV9FD/LaTiw=)
                          2: 34352e3233322e3138302e302f32322d3234203d3e20323637323832.roa (hash: XbMvb0sHDqh6I8tw7R7pOeSgv0NogUeRGWr0SWQ5A0I=)
                          3: 24C90100868CC7E5E4ADB4222503286F7BF449AA.crl (hash: Z8jYzvQ02MEfpuD27YG5JSh9MF7BhUypMVoldaO1foo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.crl
                          rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 00:31:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f3:d0:d6:1a:b8:44:85:d0:25:3d:38:62:1c:78:87:77:b0:a3:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24C90100868CC7E5E4ADB4222503286F7BF449AA
        Validity
            Not Before: Dec 22 21:08:59 2025 GMT
            Not After : Dec 24 00:31:59 2025 GMT
        Subject: CN=9753205E58689001F707BAFDC8F117B1519BE0FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5c:ad:55:85:56:13:45:16:bc:0e:ae:30:be:
                    32:86:69:e5:a3:f3:ae:7c:5e:3c:4b:36:a4:0f:88:
                    67:85:92:b8:0a:fc:82:3d:f2:95:9d:52:96:16:c0:
                    17:72:c3:42:03:9e:46:a3:20:f2:7b:96:fb:e2:b2:
                    ee:dc:c1:e5:44:b7:13:a6:bc:ff:fd:59:10:d5:af:
                    d5:d6:a2:39:8e:1f:0d:c8:f3:9e:c6:c5:5c:59:b3:
                    01:64:f8:19:5f:90:78:d4:d6:15:eb:3c:02:49:3b:
                    38:e2:56:68:12:c5:8c:64:f1:05:c9:17:3c:2d:a4:
                    d5:28:81:d3:35:66:42:42:88:84:84:b2:86:3f:f6:
                    41:38:a5:e1:ca:0d:86:f9:2b:21:31:28:97:84:1e:
                    6c:a6:2f:5c:e2:5e:89:ef:bf:6b:8c:e3:15:09:b8:
                    3d:7b:66:42:73:d9:b5:e8:c2:45:b7:bf:c1:ae:83:
                    4c:bb:ac:3f:2e:4c:4a:98:fd:5a:a7:f7:2f:b6:bc:
                    59:79:43:7a:0b:0e:3d:43:72:62:d1:f5:56:43:1c:
                    e3:26:68:f8:8f:9d:b7:fe:a9:37:9c:e2:a1:54:e4:
                    35:be:e1:42:59:84:26:4b:9a:08:f4:25:d7:06:86:
                    e2:22:1e:1b:7e:33:5f:91:5b:07:83:ba:75:63:18:
                    0f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:53:20:5E:58:68:90:01:F7:07:BA:FD:C8:F1:17:B1:51:9B:E0:FF
            X509v3 Authority Key Identifier:
                keyid:24:C9:01:00:86:8C:C7:E5:E4:AD:B4:22:25:03:28:6F:7B:F4:49:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f5:9b:4f:a9:c9:5e:9d:e2:21:18:45:c0:67:7d:5c:d0:66:
         1a:02:90:4f:7c:c3:00:ce:df:b7:f1:69:f1:69:26:88:b7:88:
         d8:b3:4b:da:64:f6:02:8d:54:92:18:2a:ae:9f:03:c2:34:a4:
         02:f5:26:d0:5c:31:50:cc:1c:63:79:e6:6f:51:bb:98:a2:86:
         3b:7b:d5:88:11:85:a8:6f:9f:2b:fd:43:46:bb:47:5a:22:5a:
         9c:2f:7b:6d:7b:03:e6:54:f1:b4:ea:4f:d4:43:3b:5b:af:ce:
         b8:57:8e:53:66:56:7d:e4:ee:7a:3c:08:36:22:18:9f:81:20:
         8f:d2:7a:78:74:59:b6:91:74:e1:76:ae:91:04:ce:62:8a:41:
         85:82:a7:80:f1:68:40:64:e6:09:26:9f:56:6c:d3:11:d8:a5:
         2c:73:6c:fe:16:a7:69:f6:f6:56:60:f5:6b:da:57:dd:ff:a1:
         82:bf:63:f4:db:f2:68:59:68:ba:83:6d:70:0b:b2:e4:75:5f:
         c9:b0:18:98:8e:7c:12:0f:65:9d:dd:6a:d0:4f:06:77:16:32:
         aa:2e:16:54:e6:f2:c9:40:42:10:30:d9:22:88:6e:fb:7d:b3:
         8f:e6:d6:a6:23:35:f2:f8:b5:2b:fd:54:d9:c1:a2:44:59:1a:
         1a:36:7e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 02:23:30 2025 by rpki-client