This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/0B1CB0F64F2EB6F6050796AC4CD16208EC123488.mft
File:                     0B1CB0F64F2EB6F6050796AC4CD16208EC123488.mft (raw, json)
Hash identifier:          69TcGYf80d6KmdpZI+s89DLvXMgtAAfAxNhCMip4H2w=
Subject key identifier:   8A:11:53:64:C5:9F:10:F3:A9:C3:0B:83:5C:4F:BF:B7:FB:CA:F6:0F
Authority key identifier: 0B:1C:B0:F6:4F:2E:B6:F6:05:07:96:AC:4C:D1:62:08:EC:12:34:88
Certificate issuer:       /CN=0B1CB0F64F2EB6F6050796AC4CD16208EC123488
Certificate serial:       7742519F34FDA2E403952FF341D8B30883D8C834
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B1CB0F64F2EB6F6050796AC4CD16208EC123488.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/0B1CB0F64F2EB6F6050796AC4CD16208EC123488.mft
Manifest number:          0135
Signing time:             Sun 21 Dec 2025 02:33:36 +0000
Manifest this update:     Sun 21 Dec 2025 02:28:36 +0000
Manifest next update:     Mon 22 Dec 2025 06:21:36 +0000
Files and hashes:         1: 323830343a3337633a3a2f33322d3438203d3e203532393831.roa (hash: b5KezCkhblAJ5Z4TIFGPKB/zvKk9ibX93mC500F/5y0=)
                          2: 0B1CB0F64F2EB6F6050796AC4CD16208EC123488.crl (hash: uS6klrpTwcbeCO9IdnUNXYC1bpCIDXNQRIkF1zcknuQ=)
                          3: 3137372e32322e33322e302f32302d3234203d3e203532393831.roa (hash: BtHO1/BvTn/rzMwnPK3Yuahu5bdt5KP1wDLdBeKpufg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/0B1CB0F64F2EB6F6050796AC4CD16208EC123488.crl
                          rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/0B1CB0F64F2EB6F6050796AC4CD16208EC123488.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B1CB0F64F2EB6F6050796AC4CD16208EC123488.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 06:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:42:51:9f:34:fd:a2:e4:03:95:2f:f3:41:d8:b3:08:83:d8:c8:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B1CB0F64F2EB6F6050796AC4CD16208EC123488
        Validity
            Not Before: Dec 21 02:28:36 2025 GMT
            Not After : Dec 22 06:21:36 2025 GMT
        Subject: CN=8A115364C59F10F3A9C30B835C4FBFB7FBCAF60F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bd:8f:24:d8:7a:f9:ee:75:79:85:5e:dc:0f:
                    e2:9c:b9:6a:e3:60:6e:25:60:fd:b5:21:3f:b3:cc:
                    d3:0a:06:a1:7b:ab:31:bd:71:07:0b:48:89:9e:ea:
                    b4:5f:62:ab:5e:91:3f:a2:9b:02:c3:9a:7b:b1:06:
                    66:15:a0:12:e1:70:c5:05:8b:36:29:a6:5e:eb:bd:
                    c4:74:07:01:70:6c:e6:d1:81:8a:8f:16:51:7a:3e:
                    b5:8f:7c:4a:06:c9:58:e1:8b:9f:d2:7e:7a:a7:75:
                    64:16:50:46:5d:87:37:48:2c:a4:b7:6f:b6:27:83:
                    58:46:18:76:f3:70:82:c6:1e:b3:cd:8e:ee:6a:df:
                    79:62:c4:d0:16:f8:84:b9:d0:74:42:46:d5:e5:9b:
                    58:bf:af:1f:ce:62:ac:42:c1:79:e7:76:2f:10:39:
                    29:e7:ae:f6:80:5d:c3:e9:a8:49:b6:6a:1f:0c:a0:
                    f3:be:90:b3:39:aa:0c:10:77:08:03:e5:4f:80:af:
                    cb:b7:0d:49:3a:e3:b4:33:f4:83:34:ba:e5:00:f5:
                    c3:7e:e5:ff:e2:d7:48:f7:ba:39:df:8d:05:8e:8f:
                    67:47:cf:d9:c0:df:62:3b:50:24:f9:77:37:a1:4f:
                    dc:d3:8f:18:80:f9:7b:d4:04:ee:44:b3:75:e1:20:
                    46:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:11:53:64:C5:9F:10:F3:A9:C3:0B:83:5C:4F:BF:B7:FB:CA:F6:0F
            X509v3 Authority Key Identifier:
                keyid:0B:1C:B0:F6:4F:2E:B6:F6:05:07:96:AC:4C:D1:62:08:EC:12:34:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/0B1CB0F64F2EB6F6050796AC4CD16208EC123488.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B1CB0F64F2EB6F6050796AC4CD16208EC123488.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/0B1CB0F64F2EB6F6050796AC4CD16208EC123488.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:a9:d1:a5:45:f7:09:c5:13:d1:75:bb:dc:48:25:4a:57:ac:
         5b:8e:b4:a5:18:ad:4e:91:e9:c0:81:41:bb:c3:d8:90:5f:ff:
         90:37:a1:b8:77:1f:c4:b8:1b:9d:fd:33:40:7a:84:1f:9b:82:
         f4:0e:e2:6a:89:20:ef:be:67:d6:0d:7f:39:cd:ba:9c:70:fa:
         5b:1c:4d:8f:91:47:f1:b9:13:3c:1e:e1:16:5c:d0:0a:3a:86:
         d5:4b:2e:3b:d2:6e:5c:c4:50:9a:2e:7b:f5:bc:9f:2f:e2:18:
         3b:0f:e9:a9:5c:54:c0:93:0d:20:5d:f0:30:15:a9:62:7d:3e:
         75:a5:b7:45:d3:b0:9f:08:3d:6f:4a:4e:a1:84:dd:17:c1:0c:
         a1:df:60:ca:b1:b9:33:09:10:a8:ae:ef:a4:8e:46:9b:77:61:
         cd:b0:f5:68:66:65:e4:b4:ba:85:90:c8:e6:5a:b0:0a:0d:c8:
         41:b0:52:35:36:b8:b5:1c:7a:a7:c5:0a:e2:07:5e:57:a5:c3:
         0c:cc:d7:2a:a0:f8:d2:92:7c:f0:21:5d:bd:b0:5f:95:82:3d:
         45:d1:a5:2c:73:6a:be:59:be:08:25:14:1a:c3:33:9b:86:35:
         60:d3:7b:32:3a:2b:6b:54:20:c1:bc:4c:66:6e:32:23:20:39:
         5a:09:29:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:59:20 2025 by rpki-client