This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft
File:                     21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft (raw, json)
Hash identifier:          Yjzo/3vtptUct9rjB2E2vJ1aYN1MEmoonv9kzfPXuUk=
Subject key identifier:   13:E8:79:EE:82:82:36:A5:A9:C0:67:C5:30:DB:9D:F6:D9:09:A0:ED
Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
Certificate issuer:       /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Certificate serial:       3AFA096DD5BF47B1F887DC008D04CA172315A2F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft
Manifest number:          0195
Signing time:             Sun 21 Dec 2025 20:29:20 +0000
Manifest this update:     Sun 21 Dec 2025 20:24:20 +0000
Manifest next update:     Mon 22 Dec 2025 23:26:20 +0000
Files and hashes:         1: 3133382e3230342e35312e302f32342d3234203d3e20323633383931.roa (hash: 2R2Rf6MPjaw0vHm+MKMheF1N2EcLNQp7FDpH/+osnZs=)
                          2: 3137302e37382e3136322e302f32332d3233203d3e20323633383931.roa (hash: j7yRviWUtBR47diRRZQSwOhBel2iKKRcdCzb2LcKh5U=)
                          3: 323830343a323734383a3a2f33322d3332203d3e20323633383931.roa (hash: MO6euXOe3+e/c5Y8E5tznHMe0mpIDKm2mZmkPoTVZII=)
                          4: 323830343a323734383a3a2f33332d3333203d3e20323633383931.roa (hash: 2PavSs/XlyAnstVNXVfHqNUh15pZH0dOS5gkVJPXKtM=)
                          5: 3137302e37382e3136302e302f32322d3232203d3e20323633383931.roa (hash: HpEEDz0SGmZuCTiB2WRYUvaYO0gVRzUCdu5824wi6Ew=)
                          6: 3133382e3230342e34382e302f32342d3234203d3e20323633383931.roa (hash: R241NIE5eErEAQdwLYr0SIplvpzgtNrTTFwlfX2dXfY=)
                          7: 3137302e37382e3136332e302f32342d3234203d3e20323633383931.roa (hash: 7xYxxrOSzrS8k5y97eIDahGvI9CFe6PC4Z6wgywaHcA=)
                          8: 3133382e3230342e34382e302f32322d3232203d3e20323633383931.roa (hash: I7xu8XqiplgU4PCcvipFhnLFR9uYEyMAQwYnkk8pujw=)
                          9: 3137302e37382e3136302e302f32342d3234203d3e20323633383931.roa (hash: YSeBPg2lex9h3YRA+gBpl4SonB4GrQPdQMUbhsffoPg=)
                          10: 323830343a323734383a383030303a3a2f33332d3333203d3e20323633383931.roa (hash: ZeYgp7BvXvd74/k48bnu+qRITehFL0rvHom26iEGLjk=)
                          11: 3133382e3230342e35302e302f32342d3234203d3e20323633383931.roa (hash: 5qYxf8RXkN8h2eEpN2bZTKCxHdo3reMiK56wr54VAQM=)
                          12: 3133382e3230342e34392e302f32342d3234203d3e20323633383931.roa (hash: fnh0ESskr/VjHvCeSJYSJ+yhqrvpgXqsJ2QHzdbAUrc=)
                          13: 3133382e3230342e35302e302f32332d3233203d3e20323633383931.roa (hash: 87P4ZthL45ryd5ao/4BROx3S+QtsOjAMhagAkYjLUrs=)
                          14: 3137302e37382e3136322e302f32342d3234203d3e20323633383931.roa (hash: HDx54wdTXW76T09og51BV5Z57Cx2GSP0rNDysCobcg4=)
                          15: 21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl (hash: Uo2EflAsKbaKsLxTpCd6TAIYfVDiN6t99h8dBsgsmMk=)
                          16: 323830343a323734383a383030303a3a2f33342d3334203d3e20323633383931.roa (hash: M5gd/5b8yphWCNw+C9KUG3jIlSUAJO8pUTrE9dAxLXI=)
                          17: 323830343a323734383a3a2f33342d3334203d3e20323633383931.roa (hash: P72Vo0+btTdKLtZrwM6d6w1d0tSzgvKj3HQWGsIM80w=)
                          18: 3137302e37382e3136302e302f32332d3233203d3e20323633383931.roa (hash: nIftzw3+iZpcDi7LXAU8XgDFUdrkMrxxET01lz87b78=)
                          19: 323830343a323734383a343030303a3a2f33342d3334203d3e20323633383931.roa (hash: /1pYXUGiJNlzcrDlu+7hGgbwVbBdHLvZnAiIEDJ3mgY=)
                          20: 3137302e37382e3136312e302f32342d3234203d3e20323633383931.roa (hash: hTxBNdPsHdR1pRLMbwfTzlRUFGvMXwjPrS7ZVuQLTBI=)
                          21: 3133382e3230342e34382e302f32332d3233203d3e20323633383931.roa (hash: zbCbYNA/Sv7aeTAlT2UCgGMCCpHHDrdhHwaAb6T7RlA=)
                          22: 323830343a323734383a633030303a3a2f33342d3334203d3e20323633383931.roa (hash: FVJlg76zsiFIfRzwHjWJZAiSFiMl0j2j2H/CwENa5OQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl
                          rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 23:26:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:fa:09:6d:d5:bf:47:b1:f8:87:dc:00:8d:04:ca:17:23:15:a2:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
        Validity
            Not Before: Dec 21 20:24:20 2025 GMT
            Not After : Dec 22 23:26:20 2025 GMT
        Subject: CN=13E879EE828236A5A9C067C530DB9DF6D909A0ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:74:a3:6a:27:96:dc:50:5a:e3:ca:ec:6c:59:
                    e7:95:13:88:5a:bb:41:5f:5e:35:9f:07:c7:24:e2:
                    ec:84:28:04:9c:1a:07:02:a8:99:42:e4:0d:06:b6:
                    40:87:fc:7e:b0:56:7a:d8:75:23:76:53:4c:6e:39:
                    5e:33:4b:88:61:89:70:39:8d:fb:7a:13:2d:3d:4d:
                    46:9d:6d:f0:69:35:48:56:05:a5:d9:97:81:77:65:
                    a2:cb:dd:05:5d:b2:7a:bb:7f:07:98:69:54:df:31:
                    80:74:1b:2f:1a:be:ff:22:fc:10:87:20:15:8f:f3:
                    2c:4f:a9:9b:28:5f:92:76:e4:f7:95:49:ae:8a:29:
                    33:49:a3:d5:ff:17:20:4d:cd:e9:eb:fa:ee:69:ff:
                    94:ea:bc:75:3d:c2:45:e3:ca:05:7a:80:c6:68:71:
                    83:98:c4:85:40:08:e9:66:1b:c6:2c:d8:73:6f:09:
                    e8:54:18:d4:ee:35:2f:1f:4f:07:d2:ea:85:a8:1f:
                    54:59:cf:8b:8e:2b:e8:35:33:3a:41:3b:84:47:45:
                    33:12:27:c8:44:4f:55:d0:b7:1f:2b:6a:6d:7b:94:
                    aa:b3:80:3f:79:6f:f8:b6:a0:83:58:c3:95:de:c6:
                    30:0e:13:90:ae:6d:e6:ab:5f:67:1e:18:5a:c7:50:
                    3a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E8:79:EE:82:82:36:A5:A9:C0:67:C5:30:DB:9D:F6:D9:09:A0:ED
            X509v3 Authority Key Identifier:
                keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:70:2d:27:fd:0b:c9:49:a4:af:2c:1f:9a:ba:48:9e:74:67:
         7e:ea:c7:09:06:7e:2f:24:84:84:52:5a:e8:6e:5b:5c:35:d7:
         11:41:93:58:1f:7d:15:d1:5c:26:9c:73:fb:e3:d4:54:a9:b0:
         8b:16:7c:45:77:16:1a:ce:02:a0:c3:c3:20:a2:81:d8:f1:8f:
         cb:82:3d:0d:f0:7c:ed:4c:d6:43:ce:49:a1:9c:d6:cd:14:4f:
         06:b1:bd:82:49:75:01:97:bf:f9:67:65:a7:e5:0d:65:45:43:
         c7:f2:fb:64:e7:d5:76:61:e7:6d:c8:cb:92:b2:1c:04:5f:49:
         39:d7:1c:82:ca:2b:f3:51:a8:ad:ca:66:35:a1:01:36:bb:ef:
         e7:8a:cf:f8:4b:6b:e1:f9:9b:7c:a7:70:2e:e7:38:10:19:fb:
         cf:72:0b:ab:2f:cf:da:01:6b:72:e9:0b:55:19:ae:76:59:1e:
         ed:3f:9b:1d:3d:b2:8a:9a:a8:f9:fd:82:a4:28:30:02:32:36:
         65:4b:ba:72:09:0a:91:a9:41:92:55:18:a0:2e:83:e0:2b:ea:
         dc:22:d7:c7:0c:6c:a9:f1:22:1e:fa:b3:b9:a3:7b:9f:81:fa:
         6b:8c:47:f5:f8:aa:f1:5b:06:ff:3b:5e:25:bc:47:0a:05:de:
         58:dc:34:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 06:11:09 2025 by rpki-client