This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/08CF424E6FE1980B284A93E6736C3E8628D381CA.mft
File:                     08CF424E6FE1980B284A93E6736C3E8628D381CA.mft (raw, json)
Hash identifier:          1RnNuaLFx7mxgYPUpI+Rw7oPrGLTfKg6wN8jeuQNUbc=
Subject key identifier:   58:03:BE:66:84:CA:77:A6:8A:43:8A:23:C0:E0:78:40:C2:D2:45:02
Authority key identifier: 08:CF:42:4E:6F:E1:98:0B:28:4A:93:E6:73:6C:3E:86:28:D3:81:CA
Certificate issuer:       /CN=08CF424E6FE1980B284A93E6736C3E8628D381CA
Certificate serial:       55039372AC634592CD6A28570872CDD6B1D9D8B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08CF424E6FE1980B284A93E6736C3E8628D381CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/08CF424E6FE1980B284A93E6736C3E8628D381CA.mft
Manifest number:          8E
Signing time:             Tue 23 Dec 2025 22:24:12 +0000
Manifest this update:     Tue 23 Dec 2025 22:19:12 +0000
Manifest next update:     Thu 25 Dec 2025 01:36:12 +0000
Files and hashes:         1: 323830343a313735343a3a2f33322d3438203d3e20323633313337.roa (hash: 2pYNoB0nzMjsHVlF53HbQfxAIHIUNDTF1t94z66lpOQ=)
                          2: 08CF424E6FE1980B284A93E6736C3E8628D381CA.crl (hash: Y3lmZmVPdgTfDVVoIOqzQdkJAB21EPJSPuVCQdIK9mk=)
                          3: 3136382e3232382e3139362e302f32322d3234203d3e20323633313337.roa (hash: tdHzWepgJjgudC2yhCBD8JneXIfij9C0XXUgfdzTwBM=)
                          4: 3137372e39332e36342e302f32312d3234203d3e20323633313337.roa (hash: M/qY9z7KJ0sdMDhdS+zWWCVPkw7NbeXln4juApbMLok=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/08CF424E6FE1980B284A93E6736C3E8628D381CA.crl
                          rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/08CF424E6FE1980B284A93E6736C3E8628D381CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08CF424E6FE1980B284A93E6736C3E8628D381CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 01:36:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:03:93:72:ac:63:45:92:cd:6a:28:57:08:72:cd:d6:b1:d9:d8:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08CF424E6FE1980B284A93E6736C3E8628D381CA
        Validity
            Not Before: Dec 23 22:19:12 2025 GMT
            Not After : Dec 25 01:36:12 2025 GMT
        Subject: CN=5803BE6684CA77A68A438A23C0E07840C2D24502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b8:ff:64:62:f7:f1:53:e0:80:77:d1:12:31:
                    5c:cc:37:07:de:d1:c8:c6:d4:62:09:3a:12:24:24:
                    97:3c:03:b3:14:3b:1b:fc:2a:a4:81:33:b3:ea:3c:
                    1d:7e:a5:1c:c9:1e:96:df:b1:ed:07:f8:58:7f:12:
                    ee:8d:42:a1:b8:cc:a3:40:c5:8c:e5:3d:53:35:58:
                    69:87:60:f0:35:d8:2e:80:2f:32:ba:01:e6:22:9c:
                    58:e7:fe:b3:64:ee:28:6f:27:b0:c4:d4:dc:f1:53:
                    5e:81:87:e4:22:7f:80:26:32:4e:0a:10:9b:ce:37:
                    7c:cf:5f:46:f4:27:41:e9:28:33:ed:96:04:0b:d7:
                    e9:36:cd:0e:d1:f4:fd:e2:3c:9b:f3:d4:46:9f:56:
                    ca:74:8b:eb:81:cf:29:a6:56:bc:59:20:4b:37:60:
                    9f:73:5c:f1:ae:bf:e0:92:9a:3f:c2:a1:95:0d:cb:
                    40:ee:a9:79:fa:c5:a3:a7:d1:b6:58:de:9d:e0:8a:
                    54:b2:4c:32:b9:5c:c6:cd:ba:76:29:fc:08:12:78:
                    7e:0a:87:e1:d9:b9:3c:18:a2:ff:f9:fd:0a:8c:5d:
                    9b:45:0a:87:85:59:e4:d6:4e:3c:52:0e:36:3c:cb:
                    06:d0:63:00:fa:9e:69:25:63:fe:38:4e:51:25:d2:
                    23:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:03:BE:66:84:CA:77:A6:8A:43:8A:23:C0:E0:78:40:C2:D2:45:02
            X509v3 Authority Key Identifier:
                keyid:08:CF:42:4E:6F:E1:98:0B:28:4A:93:E6:73:6C:3E:86:28:D3:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/08CF424E6FE1980B284A93E6736C3E8628D381CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08CF424E6FE1980B284A93E6736C3E8628D381CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/08CF424E6FE1980B284A93E6736C3E8628D381CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a2:60:27:54:31:48:b6:d8:67:d0:aa:4a:f5:77:86:79:3c:
         d6:9f:6e:f9:87:11:f8:55:a6:0c:f5:0c:87:be:13:94:36:0f:
         d6:44:53:eb:92:31:99:53:eb:b4:a7:2f:69:8d:2a:a5:16:fe:
         a2:e5:ba:fe:50:40:9b:0d:ff:11:30:0e:39:38:74:3f:4f:1f:
         8e:05:03:cc:30:da:00:34:11:48:6f:b8:c4:75:47:18:55:ea:
         11:a6:27:99:a1:ce:fa:25:ea:80:26:44:da:78:ef:cc:e2:0a:
         02:3a:50:dd:dc:66:43:09:fe:3e:ae:ea:27:b3:aa:3b:9f:56:
         86:11:d4:20:4f:ad:c2:de:94:f7:dc:42:2d:89:eb:5f:39:ed:
         11:17:4f:04:87:db:1b:40:8c:58:c8:73:47:67:93:3f:7d:9c:
         e5:f5:a3:61:d0:f3:0d:85:ab:22:64:87:dc:ab:64:fa:5c:38:
         e2:00:62:ea:c8:4b:e0:ef:4e:d4:6b:47:18:27:a6:a9:3a:08:
         93:d1:16:c1:fc:4b:df:d9:f1:c3:29:71:43:65:2d:15:d6:9c:
         d2:a0:2f:c2:b8:e5:de:41:cb:ef:c8:ea:4f:91:e5:d4:54:20:
         a9:9b:70:ca:8f:a2:40:ac:f3:0c:77:a7:94:bf:c7:bf:4b:6d:
         fd:7f:7c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 16:06:17 2025 by rpki-client