This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.mft
File:                     08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.mft (raw, json)
Hash identifier:          Q+UdfqkjAlmdK0ZZ0jz/2/XOj44cUmHPvHPOPdWv94I=
Subject key identifier:   D8:D3:74:CD:77:24:31:EF:DA:7D:AF:E9:12:97:F4:BC:EC:6A:5F:CA
Authority key identifier: 08:B3:92:C8:17:3B:C0:63:AC:E9:F4:F4:2C:85:E8:F3:BC:29:7F:A4
Certificate issuer:       /CN=08B392C8173BC063ACE9F4F42C85E8F3BC297FA4
Certificate serial:       29186758E3472BBF0943D1E0314CE481B8130D1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.mft
Manifest number:          028A
Signing time:             Tue 23 Dec 2025 09:00:52 +0000
Manifest this update:     Tue 23 Dec 2025 08:55:52 +0000
Manifest next update:     Wed 24 Dec 2025 11:29:52 +0000
Files and hashes:         1: 3133312e3136312e3232382e302f32322d3332203d3e20323634343034.roa (hash: TtZY2HkDxWkCvGI4HqDn8AnGzlPaFTi1kjMjjf0hwqo=)
                          2: 3133382e3235352e31362e302f32322d3332203d3e20323634343034.roa (hash: W81QTTTQzuhYSuk1FTdnaq94J/D0E+fE04/OEQhe72M=)
                          3: 08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.crl (hash: eS4PZUPmHru1lZtszEEyLG8b1FYOa7yV/9pvgHsyVcI=)
                          4: 3137302e38322e3134302e302f32322d3332203d3e20323634343034.roa (hash: Pr3FB6N7/fnnubm+xzlGWqAog5Eg3D0n86eXpZJwgjA=)
                          5: 323830343a316466383a3a2f33322d313238203d3e20323634343034.roa (hash: ec1Zk7JGNh5slBLz+PZID/Uvujfx1n692BGaXyzD6Jg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.crl
                          rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 11:06:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:18:67:58:e3:47:2b:bf:09:43:d1:e0:31:4c:e4:81:b8:13:0d:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08B392C8173BC063ACE9F4F42C85E8F3BC297FA4
        Validity
            Not Before: Dec 23 08:55:52 2025 GMT
            Not After : Dec 24 11:29:52 2025 GMT
        Subject: CN=D8D374CD772431EFDA7DAFE91297F4BCEC6A5FCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a3:4e:ca:84:2f:15:c1:67:c6:15:dd:a9:b1:
                    f6:37:a8:83:12:d3:a8:e4:15:c2:cd:46:34:d7:ae:
                    5a:33:93:ca:d4:2f:14:6f:bd:61:c1:47:88:32:7f:
                    c4:20:3d:52:2c:1c:3c:82:24:9e:71:8c:cd:c1:6b:
                    b7:7d:42:4d:cd:37:93:f0:48:7a:0d:5c:e3:4a:79:
                    77:34:a5:eb:33:53:06:1b:b7:f7:22:4a:93:51:15:
                    f9:84:28:f4:29:ad:5d:80:1b:9e:45:d6:1d:0f:cd:
                    13:21:c3:73:d7:dc:85:84:99:2d:ed:4a:c3:cd:60:
                    54:74:50:53:88:26:31:c5:f6:34:58:59:ca:df:41:
                    8f:07:cd:d9:b2:46:fd:16:7c:0b:6c:3b:48:05:49:
                    07:d3:50:06:e9:fe:57:cc:76:73:2a:4e:0e:30:c6:
                    c8:a1:8a:2a:c6:9e:2e:c0:f1:f0:be:59:8e:32:37:
                    bb:cc:b9:2e:80:ff:d6:86:80:a1:27:eb:ca:4a:66:
                    6b:da:c6:a2:20:01:41:41:04:51:de:7b:5c:9b:66:
                    3b:7c:a6:36:5a:49:e2:08:c6:62:96:85:1a:bd:83:
                    b3:e8:88:36:47:60:f3:8e:42:e5:48:eb:19:e2:a3:
                    75:c8:84:40:75:96:0a:ac:f7:ff:04:88:e1:18:56:
                    75:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D3:74:CD:77:24:31:EF:DA:7D:AF:E9:12:97:F4:BC:EC:6A:5F:CA
            X509v3 Authority Key Identifier:
                keyid:08:B3:92:C8:17:3B:C0:63:AC:E9:F4:F4:2C:85:E8:F3:BC:29:7F:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:34:cd:17:e4:39:3b:53:e6:18:f3:33:29:32:9d:2a:88:87:
         44:0b:41:9e:16:b0:f9:91:78:21:fa:73:1f:5b:96:31:36:3a:
         a7:95:8e:ca:aa:b6:ed:d1:4e:ab:99:04:43:5c:45:bc:55:ab:
         e8:ca:f6:d9:70:da:16:f2:7e:8b:1d:d2:86:73:67:03:02:d0:
         d6:98:c1:24:96:45:8d:a9:1a:3b:27:53:56:80:12:2c:1e:95:
         42:bb:73:64:c6:16:7d:12:af:50:32:fd:a0:74:6d:03:82:a6:
         62:1d:d9:00:c7:9b:99:45:98:5c:f5:b3:13:2b:fa:b5:af:98:
         4c:05:04:ec:4b:70:ed:0b:88:44:21:b4:9e:c0:d3:ff:24:6f:
         d8:d2:bc:ac:0a:8c:0d:c6:21:4e:59:2b:af:e5:6d:84:93:4e:
         24:a2:43:58:aa:c1:87:d6:14:4c:69:5f:55:f1:f7:14:4c:bc:
         37:c7:fe:36:89:12:8c:fe:8f:31:f5:76:13:51:bd:bd:a4:fe:
         dc:89:2c:49:4d:2e:86:f3:25:fd:6f:a9:c1:f3:31:f9:ca:48:
         08:44:3d:62:65:16:2f:4d:29:81:30:05:17:9d:67:00:9d:44:
         55:18:a9:82:a5:27:d5:5d:0d:5e:60:79:8a:03:fa:4c:81:4d:
         68:65:f5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----