This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/2DC0F242ADDA7136D95141422051D1361143E486.mft
File:                     2DC0F242ADDA7136D95141422051D1361143E486.mft (raw, json)
Hash identifier:          kN1/xl0HzJJKD8/nz7FvTVI+LYX+f6Eof33dVf6jWq4=
Subject key identifier:   B9:B6:E4:05:09:7E:4C:95:A5:AB:6F:61:56:36:F2:66:F6:17:CC:A9
Authority key identifier: 2D:C0:F2:42:AD:DA:71:36:D9:51:41:42:20:51:D1:36:11:43:E4:86
Certificate issuer:       /CN=2DC0F242ADDA7136D95141422051D1361143E486
Certificate serial:       365CE2B815FB2DFFEE54D39164DC6CF1B6731327
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DC0F242ADDA7136D95141422051D1361143E486.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/2DC0F242ADDA7136D95141422051D1361143E486.mft
Manifest number:          8D
Signing time:             Fri 19 Dec 2025 08:39:47 +0000
Manifest this update:     Fri 19 Dec 2025 08:34:47 +0000
Manifest next update:     Sat 20 Dec 2025 10:09:47 +0000
Files and hashes:         1: 323830343a336437343a383a3a2f34382d313238203d3e20323632363137.roa (hash: Ld7qHXuPS91pdHxwloAo7FA70+JcJi+eAtEA9lfI+k0=)
                          2: 323830343a336437343a3430303a3a2f34302d313238203d3e20323632363137.roa (hash: +ObNk1En759gkb006BFhDoR0YjDG9cLJkyIcgwn//5M=)
                          3: 323830343a336437343a333a3a2f34382d313238203d3e20323632363137.roa (hash: KebVC4AnpFiaebunPQVuMMxvsk81mCZI+Qx8qGNxz6k=)
                          4: 323830343a336437343a3130303a3a2f34382d313238203d3e20323636353332.roa (hash: OurFGdWzBTMjaeL+fT/NQy5HChPORqd9dIs6UVijoRg=)
                          5: 323830343a336437343a3130323a3a2f34382d313238203d3e20323636353332.roa (hash: i4pEqSh+MlJiMFtrrQMyV1crIrkk9RMd+fBrv2rnLrM=)
                          6: 323830343a336437343a613a3a2f34382d313238203d3e20323636353332.roa (hash: us2DcMOTb2Z9kbSNUL9Ss4wzGf7K1g/iVqm9aLZFCZg=)
                          7: 323830343a336437343a623a3a2f34382d313238203d3e20323636353332.roa (hash: WLyTnYz818OmVCR4LGkt5xnsHkOXvCJsoJLXeS27Jkk=)
                          8: 2DC0F242ADDA7136D95141422051D1361143E486.crl (hash: DgFYny6tXQDy+dPN4FRUuLhqjSp6lgO21034X2AiGjU=)
                          9: 323830343a336437343a3130313a3a2f34382d313238203d3e20323636353332.roa (hash: HpNxeqVwHu+L9vMBuFNRH62MOdFSsngKjYq1T5wh3ko=)
                          10: 34352e36352e3232382e302f32322d3332203d3e20323632363137.roa (hash: 5HeZ+G7UtKi7z2I/TmttbRr8/iN4w9Sq+eCJUKY/UX0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/2DC0F242ADDA7136D95141422051D1361143E486.crl
                          rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/2DC0F242ADDA7136D95141422051D1361143E486.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DC0F242ADDA7136D95141422051D1361143E486.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 10:09:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:5c:e2:b8:15:fb:2d:ff:ee:54:d3:91:64:dc:6c:f1:b6:73:13:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DC0F242ADDA7136D95141422051D1361143E486
        Validity
            Not Before: Dec 19 08:34:47 2025 GMT
            Not After : Dec 20 10:09:47 2025 GMT
        Subject: CN=B9B6E405097E4C95A5AB6F615636F266F617CCA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:90:ee:62:19:fb:82:b3:c9:c8:12:dd:75:40:
                    7f:39:d9:71:83:b0:64:7a:7a:e8:7c:43:5b:6c:7d:
                    da:c7:a1:88:17:5a:d6:be:7c:8c:4e:5f:e9:4b:2f:
                    e0:2b:b3:03:61:4a:74:d9:e9:4c:56:52:09:a2:d9:
                    86:32:2e:7f:be:7c:7e:9a:2a:d6:00:9e:52:5e:3f:
                    b4:6e:2e:e1:e7:14:8e:7d:1e:0c:38:f0:65:6a:5c:
                    b0:48:cc:0e:5e:69:c4:36:ec:7b:b4:8d:98:b8:67:
                    64:80:e3:d4:52:34:ff:53:46:b2:b7:c3:55:19:fd:
                    6c:57:83:d4:1c:92:f8:73:73:a7:85:ff:66:00:e2:
                    e7:86:7c:39:3e:8c:f5:46:c0:4c:73:c1:ba:0f:ed:
                    82:80:03:9f:2c:c5:95:90:a1:c1:e5:2e:79:6b:71:
                    3d:0f:fc:c0:f3:de:9c:94:56:f6:cd:7c:6d:fd:27:
                    ae:94:41:b1:04:81:77:ed:f0:72:ea:56:70:6b:fb:
                    83:5e:52:6c:5a:c3:09:46:05:cf:68:f8:02:1c:7d:
                    aa:ac:55:e3:05:f4:08:1c:87:9a:f3:cc:19:09:76:
                    c7:97:1e:35:6a:0e:b3:46:a8:66:9a:12:1f:aa:ad:
                    ed:b2:a6:94:82:0f:08:d0:99:16:cb:70:3b:7c:91:
                    10:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B6:E4:05:09:7E:4C:95:A5:AB:6F:61:56:36:F2:66:F6:17:CC:A9
            X509v3 Authority Key Identifier:
                keyid:2D:C0:F2:42:AD:DA:71:36:D9:51:41:42:20:51:D1:36:11:43:E4:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/2DC0F242ADDA7136D95141422051D1361143E486.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DC0F242ADDA7136D95141422051D1361143E486.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/2DC0F242ADDA7136D95141422051D1361143E486.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:91:42:e0:fb:87:18:eb:b7:08:0f:53:5d:7d:6d:ef:cb:38:
         57:d3:26:da:4b:69:8b:12:6c:9f:9f:4b:2d:12:0d:2f:a2:4b:
         47:63:38:32:69:eb:7e:3e:b6:aa:5d:76:cb:3a:db:85:50:91:
         23:3e:da:ea:85:13:dd:e5:fd:c7:10:00:0f:a2:0b:5a:2f:a6:
         fc:a2:d5:d5:e5:58:20:56:80:9c:73:60:b4:a9:df:c0:58:4d:
         03:50:74:2c:54:41:ef:69:36:9c:36:de:21:2a:ad:6e:96:a3:
         dd:f7:8c:d5:c5:59:a2:05:c8:74:7a:2c:59:a8:e4:5c:ee:3f:
         15:e0:1b:22:30:83:7a:2d:a8:f7:ae:a0:35:b3:4f:ce:09:94:
         dc:46:fd:e8:e3:e6:51:46:a5:9c:e5:e9:05:8f:83:3e:c4:e9:
         5a:c2:b9:e4:ae:1d:03:91:e0:73:6c:06:f1:98:69:18:fb:30:
         a1:3a:0d:ac:c9:85:ba:6e:e4:8c:52:99:43:cb:d0:6b:3c:48:
         bb:75:4b:c2:9b:62:41:d9:d6:91:99:36:ab:c6:ca:ce:44:1b:
         86:f9:3a:8d:8e:a4:57:b8:10:63:4d:dc:08:1b:ce:df:02:e3:
         87:e4:78:a3:93:c6:c6:9d:f1:42:24:21:75:1e:b9:e5:61:0a:
         4a:c5:ba:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 15:24:37 2025 by rpki-client