This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/208F84112F1A4B695E56F4EB839321D9C18D523D.mft
File:                     208F84112F1A4B695E56F4EB839321D9C18D523D.mft (raw, json)
Hash identifier:          KDHGO79CmpG/EOFYHTnDEvL1DZpN9dT5SiSgCTrspjk=
Subject key identifier:   F5:1E:56:50:FD:30:35:15:E7:B1:A7:A5:BB:DC:15:79:34:A0:58:19
Authority key identifier: 20:8F:84:11:2F:1A:4B:69:5E:56:F4:EB:83:93:21:D9:C1:8D:52:3D
Certificate issuer:       /CN=208F84112F1A4B695E56F4EB839321D9C18D523D
Certificate serial:       1C289CD829322E5B8CD0880667F869C27D6ABC57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/208F84112F1A4B695E56F4EB839321D9C18D523D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/208F84112F1A4B695E56F4EB839321D9C18D523D.mft
Manifest number:          01E4
Signing time:             Sat 20 Dec 2025 20:09:25 +0000
Manifest this update:     Sat 20 Dec 2025 20:04:25 +0000
Manifest next update:     Sun 21 Dec 2025 20:40:25 +0000
Files and hashes:         1: 208F84112F1A4B695E56F4EB839321D9C18D523D.crl (hash: hs8rsdvcg2YevaFTXRf6YpfP9XciO14VpCJCx4QlS0o=)
                          2: 34352e3139312e31322e302f32322d3332203d3e20323730323538.roa (hash: y1DOoRZ2jRrfbJDP3KGlI04eqvq1vu59qC0FEwtqWO4=)
                          3: 323830343a363934303a3a2f33322d313238203d3e20323730323538.roa (hash: 3tsYT8SUMOVUQyEdwK16B3lt0iXoYtumoCmOphT0MOo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/208F84112F1A4B695E56F4EB839321D9C18D523D.crl
                          rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/208F84112F1A4B695E56F4EB839321D9C18D523D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/208F84112F1A4B695E56F4EB839321D9C18D523D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 20:40:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:28:9c:d8:29:32:2e:5b:8c:d0:88:06:67:f8:69:c2:7d:6a:bc:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208F84112F1A4B695E56F4EB839321D9C18D523D
        Validity
            Not Before: Dec 20 20:04:25 2025 GMT
            Not After : Dec 21 20:40:25 2025 GMT
        Subject: CN=F51E5650FD303515E7B1A7A5BBDC157934A05819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bb:48:c7:e8:71:6a:bc:4b:57:2f:6e:0e:18:
                    b5:b2:3b:d0:6b:a1:7c:10:6b:c6:12:8e:18:f4:1e:
                    07:8d:f8:0c:0d:a3:55:84:6d:c3:79:49:d6:d2:12:
                    0b:ae:f9:33:39:41:f9:57:23:0a:a0:84:ac:0d:00:
                    f8:87:19:b3:39:54:e4:8d:85:c6:4a:6d:97:7a:8a:
                    94:e4:17:30:3f:2c:ce:7d:64:f5:0e:f8:fc:20:06:
                    26:db:4e:df:bd:fe:7f:66:db:fc:1c:f3:e2:a4:01:
                    2d:ec:6b:09:c9:a8:87:c9:8e:00:b6:00:3e:e7:3c:
                    4b:f1:bf:39:1f:5a:db:d4:0a:87:a1:7e:64:dd:88:
                    45:47:5d:25:91:eb:63:3a:c2:0a:61:06:d1:11:5b:
                    be:6e:06:7f:c7:fd:34:19:93:5b:7d:2f:f8:0f:e6:
                    74:28:e3:4d:11:bb:c8:fc:9a:d6:d5:39:88:68:da:
                    78:d8:e4:af:6f:a3:fb:a2:5e:d9:5d:91:be:98:64:
                    e2:0a:70:c1:e3:c5:2e:85:e5:10:fd:28:e9:80:ec:
                    59:59:d1:ab:73:c9:c1:5b:67:74:04:33:4f:b9:8f:
                    75:b2:97:f3:21:cb:57:cc:66:17:22:e4:1f:bc:4e:
                    69:21:1b:07:06:c3:a9:ff:15:da:78:4f:c6:fe:77:
                    81:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:1E:56:50:FD:30:35:15:E7:B1:A7:A5:BB:DC:15:79:34:A0:58:19
            X509v3 Authority Key Identifier:
                keyid:20:8F:84:11:2F:1A:4B:69:5E:56:F4:EB:83:93:21:D9:C1:8D:52:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/208F84112F1A4B695E56F4EB839321D9C18D523D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/208F84112F1A4B695E56F4EB839321D9C18D523D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/208F84112F1A4B695E56F4EB839321D9C18D523D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:fd:af:82:2b:b0:50:e2:85:64:e6:38:9d:79:63:e0:a6:a8:
         d9:6d:91:45:88:b9:78:bd:a4:da:78:25:28:b7:c9:f7:28:4e:
         29:29:9b:4f:00:18:e7:07:f7:11:06:91:08:4e:e4:0a:2a:10:
         f2:81:f2:c0:4b:71:d0:da:17:02:56:9b:c1:aa:d0:27:7b:95:
         74:1f:17:a1:e4:ec:ec:10:55:b7:aa:b0:e2:11:6d:02:d0:2a:
         f4:31:1f:67:35:b1:fd:55:71:d3:e2:f1:d2:d8:b4:5f:50:34:
         77:fa:3f:89:56:c2:e0:0e:57:83:a3:c8:22:d1:de:0c:ed:92:
         87:cc:6c:af:7e:84:25:a4:ce:c4:be:46:d3:c7:2c:f1:a7:71:
         7d:51:a4:b0:98:0b:ca:d9:84:47:d2:3d:15:e3:17:84:87:0d:
         b3:a9:a4:46:35:43:82:32:e2:ee:a3:46:5f:0a:7f:4f:a6:2c:
         58:aa:75:4a:7b:79:91:4a:b4:4d:f3:ab:29:a9:c9:ca:b4:2b:
         2c:a3:34:96:08:df:d6:64:18:29:3c:4f:a1:df:70:47:fe:14:
         97:d9:f3:fc:30:7c:a3:80:32:2c:9a:66:a4:77:f0:fb:48:34:
         0f:85:3f:f4:d5:ac:70:52:09:8a:11:77:fc:25:f5:e8:40:de:
         ff:1f:48:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:09:31 2025 by rpki-client