This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.mft
File:                     8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.mft (raw, json)
Hash identifier:          4Rlb/1IPhgWnEjVKP827z64sLfNTP8wwqHeiSGQpvT8=
Subject key identifier:   D7:F5:6E:44:D7:E0:B1:1D:5E:00:34:B8:AD:6C:DA:D0:3A:3B:4B:7D
Authority key identifier: 8C:7B:5F:1D:F8:C6:59:D6:DC:9F:CC:53:2A:93:B9:EF:1C:43:C5:69
Certificate issuer:       /CN=8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569
Certificate serial:       7338BC18BE0AFA05C8C3C8834DA87A6A37A324C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.mft
Manifest number:          88
Signing time:             Tue 23 Dec 2025 07:36:40 +0000
Manifest this update:     Tue 23 Dec 2025 07:31:40 +0000
Manifest next update:     Wed 24 Dec 2025 07:46:40 +0000
Files and hashes:         1: 3136382e3139362e3135342e302f32342d3234203d3e20323635343631.roa (hash: ifuJxqU4a+8rG3k34Ns0NosdtSxHkd5g20lw0jZxHUM=)
                          2: 323830343a333437633a633030303a3a2f33362d3336203d3e20323635343631.roa (hash: /x0r92timG5YwaJhwVPPM2RSs3DVOUeJAuukIqM37hQ=)
                          3: 3136382e3139362e3135332e302f32342d3234203d3e20323635343631.roa (hash: OKxWWzGEBMxnVvl+7cmZX8RNnumjW08yDHr0GwoRLK0=)
                          4: 323830343a333437633a613030303a3a2f33362d3336203d3e20323635343631.roa (hash: Y3BoxUq/w5ovYjOBq+YPxRUZMdfCh0A7i49nZUn7AnM=)
                          5: 323830343a333437633a3a2f33362d3336203d3e20323635343631.roa (hash: 3WER/jW23JkF6Yqz3PvguCfldP/2lVcz203G7wTqyEs=)
                          6: 323830343a333437633a343030303a3a2f33362d3336203d3e20323635343631.roa (hash: i+MfEOKhmhGZpBUgdLviL7dhasGJaVgJWzgxupkIXP8=)
                          7: 3136382e3139362e3135322e302f32342d3234203d3e20323635343631.roa (hash: IlO1cehuqtdP2CtKKygYj9ulv3NlL8BSnEc3rcXtH4Q=)
                          8: 3136382e3139362e3135352e302f32342d3234203d3e20323635343631.roa (hash: my8/S3MIsBNYW/x0gFtoQNussu714xSmnlPgsFwrnJs=)
                          9: 8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.crl (hash: D2f7Bqwh3z6vkDxYhZqRNuEBOB/BWhg5Vl+eGvLxBRw=)
                          10: 323830343a333437633a383030303a3a2f33362d3336203d3e20323635343631.roa (hash: s4H7RD1QdFKwlJnXkSn5OJflItXFXtkdrjv1Nu8OQxU=)
                          11: 3136382e3139362e3135322e302f32332d3233203d3e20323635343631.roa (hash: ZjsB+i+HeaPRS/xs0TWEeI7qr3leqjb2o+qwLGG22fU=)
                          12: 323830343a333437633a323030303a3a2f33362d3336203d3e20323635343631.roa (hash: XJXbicTiz1vRqPrpznv3f1laTUe0a88aMkkEmpG+NSw=)
                          13: 3136382e3139362e3135342e302f32332d3233203d3e20323635343631.roa (hash: 7t5WCqa0Kf8lj3p3b6b4lWEkTR0A1OMl9B6M6EEZBGY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.crl
                          rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 07:46:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:38:bc:18:be:0a:fa:05:c8:c3:c8:83:4d:a8:7a:6a:37:a3:24:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569
        Validity
            Not Before: Dec 23 07:31:40 2025 GMT
            Not After : Dec 24 07:46:40 2025 GMT
        Subject: CN=D7F56E44D7E0B11D5E0034B8AD6CDAD03A3B4B7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:26:37:16:f5:59:d3:79:38:85:43:19:a3:5b:
                    10:09:6f:d9:5e:79:f6:f1:59:a6:b2:b9:da:74:07:
                    ff:bf:2c:8f:a8:71:57:0e:2d:7a:9d:dd:8c:7a:45:
                    ec:95:0e:88:d8:4e:ec:bd:27:e7:01:f5:c8:92:19:
                    2d:c3:fe:fb:c0:3d:35:98:ab:7c:af:9d:4b:8f:fb:
                    93:32:f2:95:d2:fa:55:57:ed:e8:92:c6:1c:4f:c2:
                    ae:e7:76:da:29:68:cb:2a:5d:2f:b0:a5:98:06:15:
                    2f:75:c7:0d:f9:80:6e:03:82:38:43:1a:19:0f:23:
                    ba:c0:74:8a:68:a6:ac:0a:ef:78:34:3f:36:58:34:
                    a8:84:cd:2a:58:7a:85:60:22:32:92:eb:ec:f4:f6:
                    43:cc:d7:00:46:22:7a:85:05:2e:a4:a5:9d:17:9f:
                    b0:34:ff:37:39:bc:0a:28:fd:bb:de:37:92:51:af:
                    2a:26:db:54:e4:3b:73:36:d0:83:da:a1:e8:d0:ba:
                    3f:50:6f:67:56:81:f0:65:ac:97:9f:7f:a0:43:cc:
                    c7:1a:4d:f2:0f:63:5f:a5:5b:c1:0d:89:d7:d0:63:
                    25:d1:85:87:dd:61:cd:a3:e5:21:59:e5:8d:59:aa:
                    60:36:d2:87:cc:7f:b3:ef:d9:15:5d:97:97:e5:c3:
                    07:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F5:6E:44:D7:E0:B1:1D:5E:00:34:B8:AD:6C:DA:D0:3A:3B:4B:7D
            X509v3 Authority Key Identifier:
                keyid:8C:7B:5F:1D:F8:C6:59:D6:DC:9F:CC:53:2A:93:B9:EF:1C:43:C5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:b1:a0:43:40:51:55:ea:fd:fa:63:90:00:48:c3:92:9f:4c:
         6d:88:17:f3:cd:7d:ba:0d:0c:e1:cf:46:ac:2d:87:51:f8:61:
         d1:b1:25:a2:45:2b:ed:ff:15:da:44:37:9b:94:3f:91:a0:d7:
         b0:08:af:02:e4:09:b6:9a:0e:0f:8e:ef:bd:6a:28:59:65:75:
         e9:1c:e3:56:46:f2:1c:ab:af:0c:36:a0:23:14:71:f6:88:7d:
         db:c3:ff:e0:df:5b:8c:ee:85:24:7a:c2:01:cd:0c:12:0d:24:
         2d:17:57:97:72:e2:48:3c:7a:b5:da:8b:66:cf:32:6b:36:2f:
         7a:e0:97:1d:35:b3:c8:d1:7d:be:93:e5:48:47:13:0b:bd:59:
         4a:53:47:84:91:2e:8d:c3:db:b5:6e:93:2d:d9:1c:5e:e6:06:
         1e:08:c8:04:0b:31:b5:2c:c9:56:e1:ac:2a:b9:59:4f:a5:cc:
         7c:5f:6b:c4:8f:a3:04:cc:9f:bc:35:2e:ef:9a:ab:0c:10:e9:
         ef:79:47:00:14:f6:5f:25:3a:2a:0f:68:ca:61:c6:56:4e:d7:
         87:b8:bb:d0:d6:b2:d5:93:2d:54:a7:27:4b:b2:5c:56:62:c2:
         55:7b:8f:8e:41:85:81:14:77:d1:a5:7d:be:e3:c0:fa:c0:38:
         2a:6c:8c:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUczi8GL4K+gXIw8iDTah6ajejJMcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEM3QjVGMURGOEM2NTlENkRDOUZDQzUzMkE5M0I5RUYx
QzQzQzU2OTAeFw0yNTEyMjMwNzMxNDBaFw0yNTEyMjQwNzQ2NDBaMDMxMTAvBgNV
BAMTKEQ3RjU2RTQ0RDdFMEIxMUQ1RTAwMzRCOEFENkNEQUQwM0EzQjRCN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpJjcW9VnTeTiFQxmjWxAJb9le
efbxWaayudp0B/+/LI+ocVcOLXqd3Yx6ReyVDojYTuy9J+cB9ciSGS3D/vvAPTWY
q3yvnUuP+5My8pXS+lVX7eiSxhxPwq7ndtopaMsqXS+wpZgGFS91xw35gG4DgjhD
GhkPI7rAdIpopqwK73g0PzZYNKiEzSpYeoVgIjKS6+z09kPM1wBGInqFBS6kpZ0X
n7A0/zc5vAoo/bveN5JRryom21TkO3M20IPaoejQuj9Qb2dWgfBlrJeff6BDzMca
TfIPY1+lW8ENidfQYyXRhYfdYc2j5SFZ5Y1ZqmA20ofMf7Pv2RVdl5flwweZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU1/VuRNfgsR1eADS4rWza0Do7S30wHwYDVR0j
BBgwFoAUjHtfHfjGWdbcn8xTKpO57xxDxWkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVpZdFViWmlwaFE5aXc5eVZjNHZzZEdIaEVCWXU4Ymd4bW9YTGZIZmNi
MncvMC84QzdCNUYxREY4QzY1OUQ2REM5RkNDNTMyQTkzQjlFRjFDNDNDNTY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDN0I1RjFERjhDNjU5RDZE
QzlGQ0M1MzJBOTNCOUVGMUM0M0M1NjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OVpZdFViWmlwaFE5aXc5eVZjNHZzZEdIaEVCWXU4Ymd4bW9YTGZIZmNiMncvMC84
QzdCNUYxREY4QzY1OUQ2REM5RkNDNTMyQTkzQjlFRjFDNDNDNTY5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAA7GgQ0BRVer9+mOQAEjDkp9MbYgX8819ug0M4c9GrC2HUfhh0bElokUr7f8V
2kQ3m5Q/kaDXsAivAuQJtpoOD47vvWooWWV16RzjVkbyHKuvDDagIxRx9oh928P/
4N9bjO6FJHrCAc0MEg0kLRdXl3LiSDx6tdqLZs8yazYveuCXHTWzyNF9vpPlSEcT
C71ZSlNHhJEujcPbtW6TLdkcXuYGHgjIBAsxtSzJVuGsKrlZT6XMfF9rxI+jBMyf
vDUu75qrDBDp73lHABT2XyU6Kg9oymHGVk7Xh7i70Nay1ZMtVKcnS7JcVmLCVXuP
jkGFgRR30aV9vuPA+sA4KmyMzA==
-----END CERTIFICATE-----
Generated at Tue Dec 23 19:42:39 2025 by rpki-client