This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AteVhdEa624K3bQz13Tg5EWLavw1cEdZ58rhUHWQZ3C2/0/331F7E78E2A6B5907AFC67699C13B93A2ADD82E0.mft
File:                     331F7E78E2A6B5907AFC67699C13B93A2ADD82E0.mft (raw, json)
Hash identifier:          3TLQyPK6lJbf25RWHIDQUBZi09BC+rNwDPnR724Nrng=
Subject key identifier:   AA:60:FA:89:66:05:A7:9D:FF:5A:5B:CB:02:E0:D6:CB:B7:DF:DA:B0
Authority key identifier: 33:1F:7E:78:E2:A6:B5:90:7A:FC:67:69:9C:13:B9:3A:2A:DD:82:E0
Certificate issuer:       /CN=331F7E78E2A6B5907AFC67699C13B93A2ADD82E0
Certificate serial:       4B12B164879FEAC22D2DF890D30BC8B863341966
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/331F7E78E2A6B5907AFC67699C13B93A2ADD82E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AteVhdEa624K3bQz13Tg5EWLavw1cEdZ58rhUHWQZ3C2/0/331F7E78E2A6B5907AFC67699C13B93A2ADD82E0.mft
Manifest number:          F8
Signing time:             Sat 20 Dec 2025 01:08:16 +0000
Manifest this update:     Sat 20 Dec 2025 01:03:16 +0000
Manifest next update:     Sun 21 Dec 2025 01:09:16 +0000
Files and hashes:         1: 34352e3139302e3134382e302f32322d3332203d3e20323639363632.roa (hash: xLv7pwOsgePmbqgQXVYYDExijC7tVPe4eRihKgShD88=)
                          2: 331F7E78E2A6B5907AFC67699C13B93A2ADD82E0.crl (hash: 03fqJCW3wXuCg5yAfpTZpFATzt7CFFRbM4glOzJi9x8=)
                          3: 323830343a363766383a3a2f33322d313238203d3e20323639363632.roa (hash: XwPs5h3xrivNysLtDE2Qy6dJn4+XL4hHkolyK/hhevA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AteVhdEa624K3bQz13Tg5EWLavw1cEdZ58rhUHWQZ3C2/0/331F7E78E2A6B5907AFC67699C13B93A2ADD82E0.crl
                          rsync://rpki-repo.registro.br/repo/AteVhdEa624K3bQz13Tg5EWLavw1cEdZ58rhUHWQZ3C2/0/331F7E78E2A6B5907AFC67699C13B93A2ADD82E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/331F7E78E2A6B5907AFC67699C13B93A2ADD82E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 01:09:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:12:b1:64:87:9f:ea:c2:2d:2d:f8:90:d3:0b:c8:b8:63:34:19:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=331F7E78E2A6B5907AFC67699C13B93A2ADD82E0
        Validity
            Not Before: Dec 20 01:03:16 2025 GMT
            Not After : Dec 21 01:09:16 2025 GMT
        Subject: CN=AA60FA896605A79DFF5A5BCB02E0D6CBB7DFDAB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4a:56:c0:e2:0e:44:45:cc:ce:88:af:43:23:
                    3b:49:b4:ee:de:46:cd:3d:b1:a4:f4:b0:e7:96:83:
                    b1:63:cc:df:7e:57:c0:01:dc:d9:fd:79:84:df:b4:
                    18:92:61:72:74:4a:a0:83:f5:a4:dc:2a:12:85:c6:
                    27:ba:85:22:2a:51:f9:82:da:fb:17:96:f4:0c:9c:
                    09:35:a5:42:e4:4f:87:d5:10:c7:ec:ab:c1:89:04:
                    34:24:74:a4:a4:fe:3e:c6:68:7f:00:28:05:a7:40:
                    39:2f:78:2a:de:48:f8:58:25:65:14:cc:c3:f6:b2:
                    b7:e4:3d:a2:74:b9:b7:11:d3:3c:e1:e5:f6:bc:29:
                    f9:1b:4f:22:ee:c3:c1:ff:ad:8c:64:14:dd:eb:27:
                    b8:7e:41:82:c2:ae:82:ce:d1:de:a4:77:6e:54:b8:
                    e7:df:96:28:31:22:d8:de:d2:17:2e:07:87:ec:0c:
                    06:1e:3c:23:6a:b7:9c:e4:e9:32:bc:f8:f0:f7:32:
                    d1:74:51:78:a4:fc:cd:28:fb:b3:69:84:2b:03:e6:
                    ea:ba:70:19:e1:4f:da:c4:97:db:85:37:27:d3:cd:
                    8e:f9:76:f9:14:1b:8d:ec:d7:3c:4c:fb:cb:b8:47:
                    4c:ed:a5:99:15:17:11:64:2a:d3:2a:11:5a:32:45:
                    fc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:60:FA:89:66:05:A7:9D:FF:5A:5B:CB:02:E0:D6:CB:B7:DF:DA:B0
            X509v3 Authority Key Identifier:
                keyid:33:1F:7E:78:E2:A6:B5:90:7A:FC:67:69:9C:13:B9:3A:2A:DD:82:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AteVhdEa624K3bQz13Tg5EWLavw1cEdZ58rhUHWQZ3C2/0/331F7E78E2A6B5907AFC67699C13B93A2ADD82E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/331F7E78E2A6B5907AFC67699C13B93A2ADD82E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AteVhdEa624K3bQz13Tg5EWLavw1cEdZ58rhUHWQZ3C2/0/331F7E78E2A6B5907AFC67699C13B93A2ADD82E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:be:61:6b:b0:c6:8f:f4:6f:16:0f:ec:db:dd:8d:98:f4:ce:
         bd:2d:ba:45:bc:84:f9:6a:1c:81:29:b0:a0:68:48:d1:e2:70:
         54:ca:a6:ec:b9:8c:1a:1d:55:d1:d0:06:4f:44:fd:42:b6:c9:
         d5:a0:1c:93:04:6c:03:b6:c7:8a:df:db:4d:80:fb:37:46:e8:
         c8:9f:83:d4:cd:99:ca:fe:f9:88:a3:7c:b8:6e:5f:2a:c3:fb:
         e7:01:5a:da:7c:2f:4a:33:81:d5:f6:40:fe:1f:2b:33:ca:0b:
         8f:e5:1f:12:c9:88:75:b3:ba:62:99:64:08:e1:1a:f1:24:bc:
         11:26:fb:3d:e8:31:e2:41:f5:b0:a6:e0:f6:6d:7f:76:c6:ca:
         19:81:68:27:4e:8b:96:32:d0:1a:ee:3d:8d:ff:dd:b6:88:4d:
         5d:1c:ec:dc:55:8a:99:1c:f6:c7:46:83:d8:e2:6c:23:5e:85:
         f7:7f:45:14:9f:ac:3c:10:f8:1f:8f:fe:79:18:91:73:46:c0:
         88:b2:18:9f:b5:52:14:e4:d2:29:39:87:4d:e8:de:a8:ff:54:
         2d:c8:a6:49:c5:17:45:23:0a:fc:1b:2d:95:9f:a7:b7:c5:24:
         1c:01:87:72:60:0d:ba:e6:e7:f3:8a:31:fa:9b:2e:43:89:d3:
         b6:cb:b1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:13:28 2025 by rpki-client