This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
File:                     FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft (raw, json)
Hash identifier:          ZXxssESruPsr2cjTFNT8HqTq0YRZzG50mYFsBXqkeVo=
Subject key identifier:   52:64:ED:3F:DA:07:54:01:E8:55:E4:90:B1:FA:B2:E1:EB:C6:FC:48
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       1B41D4AF4CC49696670DACB2930EF2613A22784F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
Manifest number:          03BB
Signing time:             Fri 19 Dec 2025 19:18:00 +0000
Manifest this update:     Fri 19 Dec 2025 19:13:00 +0000
Manifest next update:     Sat 20 Dec 2025 19:18:00 +0000
Files and hashes:         1: 34352e3136382e3230302e302f32322d3232203d3e20323638313434.roa (hash: dRco9xWAS6YNiwkQursM7e/d/InrGrFTIbFcO0ma39U=)
                          2: 323830343a353862303a3132303a3a2f34352d3435203d3e20323638313434.roa (hash: 9XmGGEDhVppTpBmJTaOMVK+KdiAyWN4vWFz6CXd8en8=)
                          3: 323830343a353332633a3132303a3a2f34352d3435203d3e20323638353638.roa (hash: 12Ik1WP+wXlXmA60L59ZzxshMAk9r87hHdopBM1o5d4=)
                          4: 34352e3136332e3134372e302f32342d3234203d3e20323638353638.roa (hash: /v8acorAdNJWKMyHON1TrLhRmRzSmZOQ00aiFfiGakM=)
                          5: 34352e3136332e3134342e302f32322d3232203d3e20323638353638.roa (hash: Wj+8UyD3/jPZwLQAz3ESNxgusWRXy1yrhtczxNEb+aE=)
                          6: 34352e3136382e3230312e302f32342d3234203d3e20323638313434.roa (hash: yWQ2PTAEIvM/4+p+4nNhNSUU/IXk95+dYrlGvu5NoUc=)
                          7: 323830343a353332633a3133303a3a2f34352d3435203d3e20323638353638.roa (hash: IXyVrHRspWUH79XELDXaIxpJR4mD61QdQU1feIcXMwA=)
                          8: 323830343a353332633a3133383a3a2f34362d3436203d3e20323638353638.roa (hash: 8IKusYEYkuWhLRP8sQ3omDXfSlsf7X3AGOqAguBds+s=)
                          9: 323830343a353332633a3133383a3a2f34352d3435203d3e20323638353638.roa (hash: vl5uBzINRxrm1LU5juNz8vgm2yodhewOA3wC7b6r5o8=)
                          10: 323830343a353862303a3133383a3a2f34352d3435203d3e20323638313434.roa (hash: TAU70BXBoDnlw/Hue86oNpp8n9RnxPN48wPkRw3QMYA=)
                          11: 323830343a353332633a3133303a3a2f34362d3436203d3e20323638353638.roa (hash: H9CzJw7r4D25KNRW3mdt4AXXDzfCv3xL4fGG1V9wzeE=)
                          12: 323830343a353862303a3133343a3a2f34362d3436203d3e20323638313434.roa (hash: cK2sdSA7OSuYc2dqGms4MiUi631ZGsEFmpa9iG7lHZI=)
                          13: 323830343a353862303a3132343a3a2f34362d3436203d3e20323638313434.roa (hash: NDA/PqEgAF4NUPb7UjO5r+Tc5m2riQKbouWNKrrTKZo=)
                          14: 323830343a353332633a3a2f34352d3435203d3e20323638353638.roa (hash: LnjU8JMr0JF+SvN1d6IZkJwtVGaqkoZh12OpWE5I6sw=)
                          15: 323830343a353862303a3133383a3a2f34362d3436203d3e20323638313434.roa (hash: 76IrB6Bm4t6rKGvSR3dHkBBpYv+/jUOxBIJLCuDkdJo=)
                          16: FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl (hash: N/c1u66XDPOJG5m/oeScH91t4wQxK61IQ/fPrtkjCd0=)
                          17: 34352e3136382e3230302e302f32342d3234203d3e20323638313434.roa (hash: /vwgBgBVyLPFKBDeztSiIqIcJ3ceTfk3YO7FT1E9fuY=)
                          18: 34352e3136382e3230322e302f32342d3234203d3e20323638313434.roa (hash: kJO3sRvel/oIy0TAGWHmnddSIEvFCNB0sSWQGN9CJtc=)
                          19: 323830343a353862303a3133303a3a2f34352d3435203d3e20323638313434.roa (hash: k2BiEKEsEJvUaGfo59QNIdsYjwcbje4kN5MsBj1ec+w=)
                          20: 34352e3136332e3134342e302f32332d3233203d3e20323638353638.roa (hash: WY5G6r89AFZASrEpNsSu6XnzCJbSx+Wr8eaYExD2neg=)
                          21: 323830343a353862303a3132303a3a2f34362d3436203d3e20323638313434.roa (hash: a+bU897TD198IoFNdAYK8BXTJpijKwCZcFksJZRvUQM=)
                          22: 323830343a353862303a3a2f33322d3334203d3e20323638313434.roa (hash: gxqfqn2nBhG1uzQQcZlq8imbfP7b2E6sFeF9P+2dpaE=)
                          23: 34352e3136332e3134352e302f32342d3234203d3e20323638353638.roa (hash: wsqd0lyPo7/YmokEhYrcXKaP/9JuDnh/Do3nVzQxJtU=)
                          24: 323830343a353862303a3132633a3a2f34362d3436203d3e20323638313434.roa (hash: KtqiO5hD0XKZJeTohb/6okdbRPkCW1lk9PH/C6iyrps=)
                          25: 323830343a353862303a3133303a3a2f34362d3436203d3e20323638313434.roa (hash: 5yAxmMVBaWvSb1BMx56WFaPceNARKI82Cjp+hmCAO7I=)
                          26: 323830343a353862303a3132383a3a2f34362d3436203d3e20323638313434.roa (hash: xqmpATOoYUx7kKeYKdFwPtoJ13JGzEW/sXsAzhgMLTI=)
                          27: 323830343a353862303a3a2f34352d3435203d3e20323638313434.roa (hash: Mq0EkJGDArgO2fRTCuU9jvTiWPQG9Jvuczq5U1utgyA=)
                          28: 323830343a353862303a3132383a3a2f34352d3435203d3e20323638313434.roa (hash: PKqYQCHS8k0+4gMXQPXfLs1VIxvJISLiRFDEXMtZ500=)
                          29: 34352e3136332e3134342e302f32342d3234203d3e20323638353638.roa (hash: im40Vu9TTrylfKVYAvbLgG2isrrDEExLMv8jlLqOqT8=)
                          30: 34352e3136332e3134362e302f32332d3233203d3e20323638353638.roa (hash: By4QFd0hhZVALY0Aeiml70ur/rG6CUbr2M3xMn7c3Ps=)
                          31: 323830343a353332633a3133343a3a2f34362d3436203d3e20323638353638.roa (hash: WQgDLTyWcYB+d8tCQF+rZy8h6eL4V7MxnT4pGPU7dnE=)
                          32: 323830343a353332633a3132383a3a2f34352d3435203d3e20323638353638.roa (hash: WLXuEJGr1ugqpus0jOpfg6CVCKLuVSt4kuNKv1Ya9gU=)
                          33: 34352e3136382e3230302e302f32332d3233203d3e20323638313434.roa (hash: 9bw3nOSVujQTJio7RWcxOljnydXZwnc57eER4W41FTY=)
                          34: 323830343a353332633a3a2f33322d3332203d3e20323638353638.roa (hash: Vvgbr8/69vhkOZr2g+gS7IJuzsIovOgiHSBgx1vSDWM=)
                          35: 34352e3136332e3134362e302f32342d3234203d3e20323638353638.roa (hash: gSZITvsRgU3M+07oJk4DU6sZh57hz8Fs+Fh7wFnxuec=)
                          36: 34352e3136382e3230322e302f32332d3233203d3e20323638313434.roa (hash: o8lw/hC7x83SCM2dZ00vSeqY4z5eHTHSNNqPxAOs9ng=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
                          rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 19:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:41:d4:af:4c:c4:96:96:67:0d:ac:b2:93:0e:f2:61:3a:22:78:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Dec 19 19:13:00 2025 GMT
            Not After : Dec 26 19:18:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f0:9a:02:e3:5d:7c:6c:98:54:47:bc:8f:49:
                    e6:91:08:96:a2:4c:64:d6:1a:20:54:ce:d5:96:4d:
                    dc:a7:90:f4:16:ec:09:af:b2:60:c4:5b:90:29:ee:
                    96:fd:be:28:6c:a6:36:74:82:d3:3d:d3:22:58:05:
                    46:64:fc:bf:68:20:2e:7f:dd:fc:71:f6:c5:b9:58:
                    4f:0f:0e:98:7f:15:47:b6:6f:90:f1:85:94:17:61:
                    0e:26:58:d8:54:29:0d:9d:4f:84:c9:cf:76:85:9e:
                    50:f1:1b:31:9b:5d:9e:69:61:c7:cf:58:90:d1:f1:
                    4a:09:c8:f1:a5:65:07:8e:51:9d:7b:e8:55:1e:2a:
                    35:58:e3:12:76:09:5c:a3:ea:1c:a2:ee:ff:2a:47:
                    d5:51:45:6a:9e:76:bb:ff:69:d4:42:8d:b1:f0:5d:
                    35:12:e3:dd:7a:4e:d5:93:fc:25:25:8b:90:ce:63:
                    cb:11:6b:ea:78:81:1a:a3:bc:4d:de:b8:ff:a9:96:
                    7f:73:21:a5:66:92:91:f8:cc:cf:7f:9f:58:de:ef:
                    4a:5b:82:13:4f:06:81:65:c5:62:db:c9:e8:90:c7:
                    94:1b:84:84:2c:17:05:b2:98:f5:b4:b8:51:d6:ef:
                    a7:81:3d:4b:ec:29:6f:8a:7a:0f:7f:dd:a6:6f:d8:
                    e9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:64:ED:3F:DA:07:54:01:E8:55:E4:90:B1:FA:B2:E1:EB:C6:FC:48
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:5e:64:60:e2:08:8d:02:2e:e1:08:d3:27:f1:e4:6a:c3:83:
         c0:b5:90:82:a7:e1:18:de:c4:2d:33:d6:bf:54:59:0e:bf:ce:
         97:8d:c1:97:7e:0a:3f:b9:43:ce:a6:ab:7b:0b:24:65:f6:b8:
         3f:cc:23:75:a5:62:d8:8e:1f:12:aa:2e:2b:a1:93:ff:81:f0:
         62:34:d1:a1:4d:b7:dc:f0:4e:b1:29:d5:08:b3:d6:76:c1:ed:
         2a:cb:dc:b5:78:22:47:1f:6d:9b:ee:06:71:0a:0f:11:a2:4e:
         6a:a6:35:61:88:3d:2a:0a:a0:a9:72:bf:39:8e:d2:c8:ab:fe:
         98:aa:b7:81:32:ba:01:b8:f7:69:36:7e:64:d2:8f:fc:26:26:
         5a:2b:5a:0d:2a:a2:07:52:93:6a:ac:c8:bc:32:1f:2b:43:be:
         bf:57:94:08:ae:74:fb:38:86:ad:9b:06:37:7a:15:db:cf:0c:
         c2:85:03:78:87:54:a8:69:95:21:10:07:2a:ad:73:e4:9e:a7:
         2f:f4:d6:29:fa:2c:e0:e0:a9:fc:6f:02:28:69:13:5f:f9:d2:
         94:b0:78:f6:c7:24:cf:0d:93:87:ad:0b:7e:7f:0a:e5:f5:ac:
         7e:cb:9b:15:31:f0:ae:b4:00:82:1a:c1:80:fa:f9:5f:64:ec:
         a4:c6:42:62
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----