This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft
File:                     85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft (raw, json)
Hash identifier:          SvoUXdFNWnYUThN2p9T4mZSayb7LtpRJJnpdRICLwyk=
Subject key identifier:   9D:79:0F:90:AC:E3:C5:5C:33:14:FB:CF:BD:F2:07:6C:73:99:75:10
Authority key identifier: 85:EE:0C:D6:61:88:7C:C8:8F:64:F6:B4:BE:9D:42:04:26:E2:00:DB
Certificate issuer:       /CN=85EE0CD661887CC88F64F6B4BE9D420426E200DB
Certificate serial:       153A526240BD386FCDE79AAE4090C2D1F83D868B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft
Manifest number:          0341
Signing time:             Fri 19 Dec 2025 02:47:23 +0000
Manifest this update:     Fri 19 Dec 2025 02:42:23 +0000
Manifest next update:     Sat 20 Dec 2025 04:26:23 +0000
Files and hashes:         1: 85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl (hash: i7v48QLzgN1qEhbh+MavOsNpbOtNlPVx6de5sjtNhxs=)
                          2: 323830343a383532303a3a2f33322d3334203d3e20323732353539.roa (hash: 62LOMhvbmOJdbTGkjcygK0r0w7DTO+g8VM0cQfmxQ4g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl
                          rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 04:26:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:3a:52:62:40:bd:38:6f:cd:e7:9a:ae:40:90:c2:d1:f8:3d:86:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85EE0CD661887CC88F64F6B4BE9D420426E200DB
        Validity
            Not Before: Dec 19 02:42:23 2025 GMT
            Not After : Dec 20 04:26:23 2025 GMT
        Subject: CN=9D790F90ACE3C55C3314FBCFBDF2076C73997510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:00:29:6f:f9:4d:b2:42:ba:94:4c:d2:5d:74:
                    e2:36:7d:08:18:04:a8:5c:86:f2:95:f2:11:c7:44:
                    a3:42:f6:cc:f8:f7:54:3b:10:11:72:2f:b2:05:5d:
                    b9:3d:ea:b8:e5:87:91:e7:0c:45:83:5d:33:68:af:
                    55:46:1f:c6:32:21:fe:6f:4c:fe:21:52:76:cd:d5:
                    8a:f8:26:c9:c7:b2:49:a9:32:66:b5:f2:80:6d:f4:
                    54:29:f6:b5:0e:8b:19:7c:ec:cf:82:eb:f1:38:b7:
                    d8:f1:ac:cd:39:8b:0e:11:33:b4:dc:fb:f7:5f:2d:
                    db:76:b1:c3:3f:8e:a7:06:1b:f7:a2:cf:e4:74:47:
                    32:1f:c3:56:cc:d9:34:d0:de:ea:d1:05:a9:64:d6:
                    c6:03:f6:5f:de:62:d2:ee:35:85:32:e4:13:6b:60:
                    bd:4f:14:62:a8:24:0b:8a:1c:ff:2d:7b:d8:35:1b:
                    6f:14:b3:41:90:72:7c:ca:f4:d9:52:f4:6a:e5:65:
                    37:3b:37:67:53:14:6e:d4:0a:06:f0:32:78:9e:15:
                    a0:d7:11:78:c0:56:49:7b:a4:77:5a:9a:ae:12:67:
                    90:65:1c:11:ff:31:fc:c6:c6:c6:7d:fb:60:c5:2c:
                    08:1b:60:0b:0c:2d:32:34:ee:70:bd:68:26:15:d2:
                    ab:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:79:0F:90:AC:E3:C5:5C:33:14:FB:CF:BD:F2:07:6C:73:99:75:10
            X509v3 Authority Key Identifier:
                keyid:85:EE:0C:D6:61:88:7C:C8:8F:64:F6:B4:BE:9D:42:04:26:E2:00:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:16:a7:1c:fb:cd:e1:d3:07:9d:de:12:93:0d:b6:d6:fb:79:
         dd:f7:30:53:11:e1:d0:ac:47:f3:7c:1d:22:e8:1f:7f:2a:bb:
         19:5a:e0:f7:80:3d:1a:39:2c:c0:bf:0c:08:e0:65:cd:1e:ce:
         92:d6:b9:6f:12:2b:fc:f9:93:7d:8b:71:6a:a6:1a:03:0b:fd:
         09:c0:60:aa:fc:6c:6d:11:5b:ee:69:86:da:0b:f6:5c:1e:26:
         90:6e:a9:cd:fc:8f:f0:a1:8d:dd:71:14:af:8c:a5:0c:32:da:
         82:8d:6d:ba:73:28:5e:99:1a:b5:32:a3:9f:c9:5a:8f:f3:70:
         8e:8c:88:b7:01:db:7a:54:bf:f2:0d:87:be:5d:7a:6b:08:88:
         ec:c9:fa:bb:57:86:98:2f:b2:e4:4a:72:28:ca:1c:07:4e:0c:
         79:0f:47:80:f3:d9:69:09:f1:58:f3:6c:af:c6:06:9f:3c:a7:
         55:be:85:eb:e0:70:b1:a9:7c:43:6f:58:88:a0:ad:1e:17:2b:
         28:b1:ce:41:0b:4a:db:db:08:5a:68:96:8c:06:5b:b5:bd:71:
         21:67:3c:51:51:91:3d:45:54:64:55:ef:6a:d6:94:2d:61:14:
         f4:39:1f:96:84:05:8b:40:74:27:6f:6f:68:bc:ff:74:7d:f7:
         5f:f7:fa:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----