This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/E608E42463C3A9603E3AD30D10A74366181F80B1.mft
File:                     E608E42463C3A9603E3AD30D10A74366181F80B1.mft (raw, json)
Hash identifier:          iuIyfKISqm2LXmbZBQTfepO/EzAjwxdk68AY/LDT0xw=
Subject key identifier:   A1:4E:D9:42:AC:60:90:70:0C:C1:25:A8:B6:CC:40:26:B1:3F:76:4F
Authority key identifier: E6:08:E4:24:63:C3:A9:60:3E:3A:D3:0D:10:A7:43:66:18:1F:80:B1
Certificate issuer:       /CN=E608E42463C3A9603E3AD30D10A74366181F80B1
Certificate serial:       45D920E91035925E8F7F5B8C8A89E446EEA6B9FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E608E42463C3A9603E3AD30D10A74366181F80B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/E608E42463C3A9603E3AD30D10A74366181F80B1.mft
Manifest number:          017A
Signing time:             Thu 18 Dec 2025 19:20:48 +0000
Manifest this update:     Thu 18 Dec 2025 19:15:48 +0000
Manifest next update:     Fri 19 Dec 2025 20:06:48 +0000
Files and hashes:         1: 3137372e39332e3133382e302f32332d3234203d3e203238333636.roa (hash: bkYcbVYuRB2P2J8NNVLDbmCAhnBiAfhZYWEkerNCAyk=)
                          2: 3138372e38372e31362e302f32312d3234203d3e203238333636.roa (hash: nPlWmlKfLem7nHTCpdpCy0exX9DwvzsYz6i5SE6f6pw=)
                          3: 3138372e38372e32342e302f32332d3234203d3e203238333636.roa (hash: moWn8uI/3IWb34okTIUbrVvtbNNZfYU8aUK0p0UMWro=)
                          4: 323830343a63383a3a2f33322d3438203d3e203238333636.roa (hash: 60tITfFiLIY8+h6WN/qMAxw7JYTRngs7eztXUm6jhiM=)
                          5: 3138392e38342e38302e302f32302d3234203d3e203238333636.roa (hash: c2cScBg652HgEGl2eOuUJY5F5r7ETt7TRjMrOkTEvPk=)
                          6: E608E42463C3A9603E3AD30D10A74366181F80B1.crl (hash: 6ogFPm36cbwwDm8eF0eksKfH6p+SN8ARJTZSOt3NClI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/E608E42463C3A9603E3AD30D10A74366181F80B1.crl
                          rsync://rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/E608E42463C3A9603E3AD30D10A74366181F80B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E608E42463C3A9603E3AD30D10A74366181F80B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 20:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d9:20:e9:10:35:92:5e:8f:7f:5b:8c:8a:89:e4:46:ee:a6:b9:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E608E42463C3A9603E3AD30D10A74366181F80B1
        Validity
            Not Before: Dec 18 19:15:48 2025 GMT
            Not After : Dec 19 20:06:48 2025 GMT
        Subject: CN=A14ED942AC6090700CC125A8B6CC4026B13F764F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7a:b5:57:81:f7:61:41:8a:31:83:0b:b9:da:
                    11:67:18:9f:a4:4e:79:ce:8f:16:bd:4a:fa:7a:33:
                    d9:a7:b3:a6:e9:08:41:b5:ae:3a:3b:0e:3c:c3:8e:
                    a5:82:3f:74:35:6e:19:b8:a4:98:99:7a:73:06:25:
                    5a:56:b1:b1:3c:e4:7c:e1:2f:cd:b5:e4:e7:37:15:
                    b7:84:81:f7:8c:2e:80:66:83:d7:25:56:1c:05:6d:
                    60:f8:1f:4b:d9:f2:90:5e:cb:73:28:0b:80:e0:be:
                    cf:1c:b5:4c:7f:64:1c:09:18:0e:da:84:00:37:4f:
                    23:3f:ec:cd:9b:1a:37:38:86:61:d8:6b:f6:fb:cf:
                    a3:c8:3f:30:3e:72:c4:04:85:d3:d7:1c:eb:32:91:
                    74:e2:96:7f:de:d5:2a:f8:3b:51:56:8a:59:f1:40:
                    4e:46:1e:96:98:86:4b:be:29:8f:ad:b7:d3:08:a4:
                    b4:b0:a5:f4:36:c2:da:e9:91:73:e7:e4:1f:ca:e3:
                    dc:87:1f:1b:56:ac:dc:13:c0:ad:ce:11:8d:fe:b8:
                    a5:e8:03:47:e1:a2:30:94:2d:55:d8:e2:9f:a1:ef:
                    8f:7e:a9:c3:8a:ce:90:55:cf:62:1a:fc:bd:7d:7e:
                    9e:71:7a:af:6e:4f:46:6d:b0:1b:4a:42:ac:23:d2:
                    83:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4E:D9:42:AC:60:90:70:0C:C1:25:A8:B6:CC:40:26:B1:3F:76:4F
            X509v3 Authority Key Identifier:
                keyid:E6:08:E4:24:63:C3:A9:60:3E:3A:D3:0D:10:A7:43:66:18:1F:80:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/E608E42463C3A9603E3AD30D10A74366181F80B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E608E42463C3A9603E3AD30D10A74366181F80B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/E608E42463C3A9603E3AD30D10A74366181F80B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:6d:ab:45:a8:e9:ea:9a:53:f1:3d:82:59:eb:c6:d5:40:bb:
         b3:fd:cf:07:1a:f0:7b:51:43:31:68:6e:db:82:63:6c:1c:26:
         9a:93:a5:97:d6:cd:be:0c:9e:1e:98:0d:df:a9:4f:b7:c1:b8:
         cf:84:29:2b:e1:79:c5:18:a0:94:db:54:27:37:71:af:3a:d5:
         76:ab:41:df:ee:15:30:f3:d5:9e:1a:97:8b:fb:3a:d5:d6:91:
         f3:72:18:ff:8a:3d:5a:e3:d5:80:b8:cf:d5:c0:14:b1:20:5a:
         27:4c:28:b8:bb:43:7b:41:62:dc:cf:df:8b:e0:60:90:82:8c:
         97:54:5e:71:58:13:13:93:73:9b:9e:9e:74:33:30:e0:4e:fb:
         b8:f5:3b:3c:51:38:81:86:d3:10:97:45:61:98:80:17:bf:44:
         ef:38:2f:1a:d9:bd:0f:e8:01:9f:09:be:28:ce:52:38:5f:38:
         74:52:b0:7f:ff:ee:75:4a:19:89:26:80:f0:1d:96:32:d8:66:
         09:a2:80:61:72:57:e8:e8:c1:ea:25:a4:d6:28:16:47:64:d8:
         95:4b:e8:d7:cf:83:a1:7d:a0:10:61:f1:ae:ad:5a:c3:08:94:
         58:44:0e:f7:72:9d:71:fd:a4:3b:08:e2:23:79:f2:26:6f:6b:
         91:ad:82:a4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURdkg6RA1kl6Pf1uMionkRu6mufswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTYwOEU0MjQ2M0MzQTk2MDNFM0FEMzBEMTBBNzQzNjYx
ODFGODBCMTAeFw0yNTEyMTgxOTE1NDhaFw0yNTEyMTkyMDA2NDhaMDMxMTAvBgNV
BAMTKEExNEVEOTQyQUM2MDkwNzAwQ0MxMjVBOEI2Q0M0MDI2QjEzRjc2NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjerVXgfdhQYoxgwu52hFnGJ+k
TnnOjxa9Svp6M9mns6bpCEG1rjo7DjzDjqWCP3Q1bhm4pJiZenMGJVpWsbE85Hzh
L8215Oc3FbeEgfeMLoBmg9clVhwFbWD4H0vZ8pBey3MoC4Dgvs8ctUx/ZBwJGA7a
hAA3TyM/7M2bGjc4hmHYa/b7z6PIPzA+csQEhdPXHOsykXTiln/e1Sr4O1FWilnx
QE5GHpaYhku+KY+tt9MIpLSwpfQ2wtrpkXPn5B/K49yHHxtWrNwTwK3OEY3+uKXo
A0fhojCULVXY4p+h749+qcOKzpBVz2Ia/L19fp5xeq9uT0ZtsBtKQqwj0oM7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUoU7ZQqxgkHAMwSWotsxAJrE/dk8wHwYDVR0j
BBgwFoAU5gjkJGPDqWA+OtMNEKdDZhgfgLEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWJicGMxdmQzbWlWZ250dVdMb2NRTUQ1YnhYRWhxaW9hZmlneTZ0TFpi
MkIvMC9FNjA4RTQyNDYzQzNBOTYwM0UzQUQzMEQxMEE3NDM2NjE4MUY4MEIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2MDhFNDI0NjNDM0E5NjAz
RTNBRDMwRDEwQTc0MzY2MTgxRjgwQjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OWJicGMxdmQzbWlWZ250dVdMb2NRTUQ1YnhYRWhxaW9hZmlneTZ0TFpiMkIvMC9F
NjA4RTQyNDYzQzNBOTYwM0UzQUQzMEQxMEE3NDM2NjE4MUY4MEIxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFm2rRajp6ppT8T2CWevG1UC7s/3PBxrwe1FDMWhu24JjbBwmmpOll9bNvgye
HpgN36lPt8G4z4QpK+F5xRiglNtUJzdxrzrVdqtB3+4VMPPVnhqXi/s61daR83IY
/4o9WuPVgLjP1cAUsSBaJ0wouLtDe0Fi3M/fi+BgkIKMl1RecVgTE5Nzm56edDMw
4E77uPU7PFE4gYbTEJdFYZiAF79E7zgvGtm9D+gBnwm+KM5SOF84dFKwf//udUoZ
iSaA8B2WMthmCaKAYXJX6OjB6iWk1igWR2TYlUvo18+DoX2gEGHxrq1awwiUWEQO
93Kdcf2kOwjiI3nyJm9rka2CpA==
-----END CERTIFICATE-----
Generated at Fri Dec 19 09:30:48 2025 by rpki-client