This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft
File:                     CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft (raw, json)
Hash identifier:          78GjyDRii+7M/jwNkEWgCk7xRha7Hpmxtp5JyipybTk=
Subject key identifier:   DF:C2:20:AD:6C:6E:35:45:CC:F9:1A:EE:A6:FA:5C:44:36:DB:B4:E3
Authority key identifier: CA:0A:B2:BC:B2:83:EF:EB:B7:72:29:E5:6E:86:E4:5C:98:64:D5:CF
Certificate issuer:       /CN=CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF
Certificate serial:       0F59E467C88534D208FF7AC62102DEE6BE0E60BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft
Manifest number:          7A
Signing time:             Tue 23 Dec 2025 20:06:17 +0000
Manifest this update:     Tue 23 Dec 2025 20:01:17 +0000
Manifest next update:     Wed 24 Dec 2025 22:09:17 +0000
Files and hashes:         1: 323830343a336431303a3a2f33322d313238203d3e20323636323531.roa (hash: 6OM5TUR8INqK6ybskaGnuewoKzCLeWsNPgoxidg6HF0=)
                          2: CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.crl (hash: FOsQVUwUDl+rvYKt7CF7ev39SFzM9ShAU1kRm0XPA1U=)
                          3: 3139322e3134302e36382e302f32322d3332203d3e20323636323531.roa (hash: EsQelpaQeAfU/Gzg0i25pm2jNJGfy2Qz/7ELSEE9Oeo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.crl
                          rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 22:09:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:59:e4:67:c8:85:34:d2:08:ff:7a:c6:21:02:de:e6:be:0e:60:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF
        Validity
            Not Before: Dec 23 20:01:17 2025 GMT
            Not After : Dec 24 22:09:17 2025 GMT
        Subject: CN=DFC220AD6C6E3545CCF91AEEA6FA5C4436DBB4E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:37:3d:35:9e:18:7a:12:e4:02:25:ca:62:00:
                    e4:39:c1:bf:ef:60:bc:0e:78:72:2b:f7:3b:37:15:
                    0d:f2:6c:c5:55:8a:b5:90:9a:ea:d0:40:de:cd:b0:
                    d0:f6:65:63:b2:21:5f:f2:2c:46:60:21:76:cd:e1:
                    91:01:82:5c:31:b2:55:df:e8:61:75:07:6f:82:0f:
                    bf:c5:8f:85:bb:54:28:1e:1d:46:60:7d:ba:0b:01:
                    e9:b7:5d:55:b6:62:c6:12:aa:94:23:3b:d5:35:06:
                    57:09:86:89:da:e5:3b:a9:bf:65:d1:6d:54:a9:df:
                    e9:a2:ec:a7:d6:3f:05:82:fd:9c:69:45:f8:06:91:
                    a4:6d:6d:21:3c:40:53:35:4b:71:61:3b:59:64:56:
                    e6:7e:39:01:f8:a0:af:d9:3c:84:6d:25:2c:df:25:
                    92:df:f0:a2:c6:de:7a:60:8c:87:78:00:81:33:66:
                    23:2e:d3:25:58:e2:04:ea:0b:f3:05:34:1b:e4:a1:
                    17:bf:ff:95:ef:8a:0c:0e:0d:94:b2:4a:8c:9b:d3:
                    81:ea:a6:b9:85:2f:4c:80:76:bd:fc:90:9c:86:38:
                    14:fb:f4:4f:4c:af:01:8f:68:41:5c:33:34:cb:a2:
                    0a:81:f6:2f:60:e9:f3:f1:4b:e2:7a:db:88:ef:d7:
                    c8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C2:20:AD:6C:6E:35:45:CC:F9:1A:EE:A6:FA:5C:44:36:DB:B4:E3
            X509v3 Authority Key Identifier:
                keyid:CA:0A:B2:BC:B2:83:EF:EB:B7:72:29:E5:6E:86:E4:5C:98:64:D5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:34:ee:a7:65:80:26:a9:58:18:29:61:69:d8:c4:55:38:d7:
         35:ac:2d:2f:39:a6:be:f2:7d:e6:40:6d:51:ae:b5:bc:eb:19:
         b9:b4:5b:e1:97:7e:b7:9c:d2:e9:da:b4:3e:5c:8f:c1:a3:4f:
         49:a8:0e:5b:b3:aa:78:90:8a:c0:d1:75:a3:4b:22:16:ef:9f:
         65:d1:e3:51:39:23:8f:1a:64:fb:0d:10:51:6e:c5:c9:7b:8c:
         19:85:42:2d:56:0d:d2:fe:88:2d:f8:36:af:39:cb:a1:34:e3:
         e9:d4:a7:e1:94:ea:a2:29:8f:5a:1e:51:ad:f5:a2:6a:e5:ec:
         bc:31:5f:d4:bf:60:43:50:9e:25:c2:6d:60:04:f6:df:d3:24:
         99:30:e1:73:c3:d5:64:0e:3f:45:56:00:f1:b6:ee:1f:a3:55:
         4f:e9:31:6f:59:2a:05:93:32:4a:d0:f0:1f:ab:47:6f:7a:ec:
         df:55:91:1f:89:ab:a4:a1:9b:81:73:6c:8d:33:68:7f:90:0a:
         f1:81:a0:9a:80:9e:22:91:75:ba:58:3d:2a:1e:5e:60:2f:09:
         35:f2:f1:b8:e8:af:a6:d6:f3:79:62:c6:c7:6a:0d:fb:4a:f3:
         da:44:d5:68:9b:80:d0:e5:2d:dd:24:18:95:00:e8:cc:58:c3:
         55:d9:e4:de
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUD1nkZ8iFNNII/3rGIQLe5r4OYL0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0EwQUIyQkNCMjgzRUZFQkI3NzIyOUU1NkU4NkU0NUM5
ODY0RDVDRjAeFw0yNTEyMjMyMDAxMTdaFw0yNTEyMjQyMjA5MTdaMDMxMTAvBgNV
BAMTKERGQzIyMEFENkM2RTM1NDVDQ0Y5MUFFRUE2RkE1QzQ0MzZEQkI0RTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrNz01nhh6EuQCJcpiAOQ5wb/v
YLwOeHIr9zs3FQ3ybMVVirWQmurQQN7NsND2ZWOyIV/yLEZgIXbN4ZEBglwxslXf
6GF1B2+CD7/Fj4W7VCgeHUZgfboLAem3XVW2YsYSqpQjO9U1BlcJhona5Tupv2XR
bVSp3+mi7KfWPwWC/ZxpRfgGkaRtbSE8QFM1S3FhO1lkVuZ+OQH4oK/ZPIRtJSzf
JZLf8KLG3npgjId4AIEzZiMu0yVY4gTqC/MFNBvkoRe//5XvigwODZSySoyb04Hq
prmFL0yAdr38kJyGOBT79E9MrwGPaEFcMzTLogqB9i9g6fPxS+J624jv18ivAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU38IgrWxuNUXM+RrupvpcRDbbtOMwHwYDVR0j
BBgwFoAUygqyvLKD7+u3cinlbobkXJhk1c8wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9BVFdUWnZ0YVp6NEtYVzIzVENGVXhhUFFxRTZjbVJVQlJhOEc4RnBldXFm
LzAvQ0EwQUIyQkNCMjgzRUZFQkI3NzIyOUU1NkU4NkU0NUM5ODY0RDVDRi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9DQTBBQjJCQ0IyODNFRkVCQjc3
MjI5RTU2RTg2RTQ1Qzk4NjRENUNGLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FU
V1RadnRhWno0S1hXMjNUQ0ZVeGFQUXFFNmNtUlVCUmE4RzhGcGV1cWYvMC9DQTBB
QjJCQ0IyODNFRkVCQjc3MjI5RTU2RTg2RTQ1Qzk4NjRENUNGLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
XDTup2WAJqlYGClhadjEVTjXNawtLzmmvvJ95kBtUa61vOsZubRb4Zd+t5zS6dq0
PlyPwaNPSagOW7OqeJCKwNF1o0siFu+fZdHjUTkjjxpk+w0QUW7FyXuMGYVCLVYN
0v6ILfg2rznLoTTj6dSn4ZTqoimPWh5RrfWiauXsvDFf1L9gQ1CeJcJtYAT239Mk
mTDhc8PVZA4/RVYA8bbuH6NVT+kxb1kqBZMyStDwH6tHb3rs31WRH4mrpKGbgXNs
jTNof5AK8YGgmoCeIpF1ulg9Kh5eYC8JNfLxuOivptbzeWLGx2oN+0rz2kTVaJuA
0OUt3SQYlQDozFjDVdnk3g==
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:25:48 2025 by rpki-client