This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AiY9FfwiebnrJY2JaDhp7DSTdpE3JBJGVziBw5xXr5gJ/0/84955A3B55625C35E5CD6FBE13801E9A8E1F1F3B.mft
File:                     84955A3B55625C35E5CD6FBE13801E9A8E1F1F3B.mft (raw, json)
Hash identifier:          vkhQ9U0HVY2NIRt74oqbyNCUOzz6QRkEGTROgISVizo=
Subject key identifier:   75:4E:BC:EF:88:10:77:A6:07:4C:2D:28:C9:56:36:9A:FB:56:E5:53
Authority key identifier: 84:95:5A:3B:55:62:5C:35:E5:CD:6F:BE:13:80:1E:9A:8E:1F:1F:3B
Certificate issuer:       /CN=84955A3B55625C35E5CD6FBE13801E9A8E1F1F3B
Certificate serial:       36F8394E72E2617D252E39D098904C9E599FF61A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84955A3B55625C35E5CD6FBE13801E9A8E1F1F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AiY9FfwiebnrJY2JaDhp7DSTdpE3JBJGVziBw5xXr5gJ/0/84955A3B55625C35E5CD6FBE13801E9A8E1F1F3B.mft
Manifest number:          6E
Signing time:             Wed 24 Dec 2025 12:00:21 +0000
Manifest this update:     Wed 24 Dec 2025 11:55:21 +0000
Manifest next update:     Thu 25 Dec 2025 13:25:21 +0000
Files and hashes:         1: 323830343a393330343a383030303a3a2f33342d313238203d3e20323734373439.roa (hash: 8UlTE0PsRtnYcvuu7MFB/dcIM1uziu0AKGGwyH4carA=)
                          2: 84955A3B55625C35E5CD6FBE13801E9A8E1F1F3B.crl (hash: UtQAGIBLWK2fTUTQnTdSAkgHBbup33XbG1OuY854YuM=)
                          3: 323830343a393330343a3a2f33332d313238203d3e20323734373439.roa (hash: znL8Hfcp8rJ9wnnT0OWu288Fz83zbxwtXxxzhx/aHeU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AiY9FfwiebnrJY2JaDhp7DSTdpE3JBJGVziBw5xXr5gJ/0/84955A3B55625C35E5CD6FBE13801E9A8E1F1F3B.crl
                          rsync://rpki-repo.registro.br/repo/AiY9FfwiebnrJY2JaDhp7DSTdpE3JBJGVziBw5xXr5gJ/0/84955A3B55625C35E5CD6FBE13801E9A8E1F1F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84955A3B55625C35E5CD6FBE13801E9A8E1F1F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 13:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f8:39:4e:72:e2:61:7d:25:2e:39:d0:98:90:4c:9e:59:9f:f6:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84955A3B55625C35E5CD6FBE13801E9A8E1F1F3B
        Validity
            Not Before: Dec 24 11:55:21 2025 GMT
            Not After : Dec 25 13:25:21 2025 GMT
        Subject: CN=754EBCEF881077A6074C2D28C956369AFB56E553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:77:ce:62:49:59:76:30:00:89:20:20:84:ea:
                    59:c3:0d:37:13:71:88:40:8b:8a:17:64:ba:9f:7f:
                    fb:3d:fe:34:f1:af:87:6f:95:3f:27:0e:ef:99:4f:
                    86:55:01:2b:9d:d8:e6:41:af:a1:83:78:13:6c:3a:
                    3b:86:e5:51:b4:06:99:03:5f:2f:3b:3a:4f:7a:fb:
                    a5:01:0b:9e:86:7a:60:63:57:b8:97:07:38:6b:89:
                    ed:9e:02:2c:35:64:8d:b0:53:6d:fd:d9:79:26:be:
                    32:3b:b5:e2:45:32:dd:45:ca:c2:7e:de:37:cc:e4:
                    05:d5:f0:1a:01:e0:09:33:34:51:a1:8f:e1:02:3a:
                    21:00:69:c4:7d:c4:6b:e1:2c:e3:b1:f8:1e:f8:80:
                    78:da:2c:f2:33:e3:81:88:be:49:66:3f:51:12:1e:
                    59:f4:ef:8d:c2:72:7c:41:6c:01:d6:36:2b:71:b4:
                    c8:da:25:be:d9:00:62:49:7e:e6:d7:af:19:19:89:
                    90:a6:e3:97:72:fe:42:7b:3e:fd:a6:36:49:e5:75:
                    db:f5:4a:53:ee:89:04:b1:88:33:13:db:79:47:8b:
                    35:dd:c7:a5:6f:76:76:ab:f4:4d:bb:68:9b:02:5e:
                    c1:3a:cb:57:fd:c8:36:40:7b:49:68:92:b1:07:16:
                    1e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:4E:BC:EF:88:10:77:A6:07:4C:2D:28:C9:56:36:9A:FB:56:E5:53
            X509v3 Authority Key Identifier:
                keyid:84:95:5A:3B:55:62:5C:35:E5:CD:6F:BE:13:80:1E:9A:8E:1F:1F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AiY9FfwiebnrJY2JaDhp7DSTdpE3JBJGVziBw5xXr5gJ/0/84955A3B55625C35E5CD6FBE13801E9A8E1F1F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84955A3B55625C35E5CD6FBE13801E9A8E1F1F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AiY9FfwiebnrJY2JaDhp7DSTdpE3JBJGVziBw5xXr5gJ/0/84955A3B55625C35E5CD6FBE13801E9A8E1F1F3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:20:39:35:16:f4:f8:f6:ab:44:6a:8d:f8:9e:4c:c8:5a:40:
         01:bc:ac:cd:b6:02:a8:bd:55:1a:76:4b:d4:59:ee:35:6b:2e:
         1a:e0:94:ab:a4:0d:ba:d4:da:88:c6:43:ac:42:3b:ac:1c:d2:
         09:f5:3d:3f:45:37:a5:ce:ee:bd:1a:b3:9d:14:06:c8:f2:00:
         0b:c3:4c:67:7b:81:26:1f:1a:c6:75:52:20:b1:e7:ad:31:8c:
         f5:e1:3c:70:9b:8d:8c:9d:67:78:18:ca:1f:e9:8d:e2:aa:5c:
         ba:b1:60:b8:20:74:15:66:3d:06:87:b5:50:9d:f3:65:60:c9:
         fc:73:49:5a:dd:99:2e:e6:e7:ca:4f:d3:c5:1b:c4:9b:55:53:
         58:bb:ed:52:42:93:d9:80:36:d0:4b:f1:c7:ce:ae:42:08:50:
         2e:81:1f:fd:35:7d:c8:28:ee:67:94:bb:d3:b4:da:f9:97:02:
         f7:15:5e:6b:27:6b:21:23:31:48:e9:14:38:0d:2d:89:8f:3d:
         d3:7a:37:62:4c:8f:29:83:b4:72:6f:35:91:2c:62:c8:7c:1f:
         d5:2d:1a:dc:7a:ca:2e:c4:6c:d4:88:fc:01:a7:76:e6:83:a0:
         05:3c:b8:3f:be:fd:05:e7:58:e1:f9:6e:ed:79:d2:8b:df:c5:
         aa:ee:c2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:25:57 2025 by rpki-client