This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft
File:                     D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft (raw, json)
Hash identifier:          9iIe+J3Oz8adFELu/YVnT78sp/ihc4pYutOt0WXlxeg=
Subject key identifier:   85:74:1D:8F:11:BA:D8:5E:37:A5:DB:23:B7:45:77:29:5F:20:3B:C2
Authority key identifier: D6:30:86:E4:2E:9B:AB:A0:28:DC:D8:D6:5C:FF:50:CE:EF:BD:78:DC
Certificate issuer:       /CN=D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC
Certificate serial:       7C5CC5A0B0DAAD3369EF50BBC6093A15EB59E070
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft
Manifest number:          0341
Signing time:             Fri 19 Dec 2025 04:16:58 +0000
Manifest this update:     Fri 19 Dec 2025 04:11:58 +0000
Manifest next update:     Sat 20 Dec 2025 06:33:58 +0000
Files and hashes:         1: 3137372e37332e35362e302f32322d3234203d3e20323633303731.roa (hash: 0DCCZJbrhxGS3fKPi1a5Yh23caoQ1m2nGZ+Ls0nr36Y=)
                          2: 3139312e362e3134342e302f32312d3234203d3e20323633303731.roa (hash: 3z/seUfwbtY8VHvQVEp/hjesW7X+hzHuxNmo8T4n9yI=)
                          3: 323830343a3934633a3a2f33322d3438203d3e20323633303731.roa (hash: a+ZxC/aVIvRBiL+9b6UmCNXG86FPx17UdrDq464ohKI=)
                          4: D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.crl (hash: 3nt0QB84zsaR5m+KSCFCLSOUE+cfA6zokSSqKdcEcGk=)
                          5: 3138362e3233322e3138382e302f32322d3234203d3e20323633303731.roa (hash: QZ++cLr6ePWgalsSJXAkh2lAerAWd1JhyTtP73I1+S8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.crl
                          rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 06:33:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:5c:c5:a0:b0:da:ad:33:69:ef:50:bb:c6:09:3a:15:eb:59:e0:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC
        Validity
            Not Before: Dec 19 04:11:58 2025 GMT
            Not After : Dec 20 06:33:58 2025 GMT
        Subject: CN=85741D8F11BAD85E37A5DB23B74577295F203BC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e8:20:4d:f6:ea:3c:9b:ce:ad:00:aa:98:74:
                    04:5d:98:a2:3b:9f:8a:06:78:1b:37:45:8e:f5:30:
                    ea:aa:ba:e9:ba:37:cb:a9:82:d4:2f:2d:bb:52:15:
                    32:3f:8e:35:ac:62:c9:50:a4:4f:f9:d3:90:39:ce:
                    94:14:09:f1:4b:eb:0d:f1:9a:b4:13:7f:f5:6e:5e:
                    8c:60:b3:d8:74:f3:2a:d2:97:18:c6:7c:26:37:04:
                    3f:2c:2e:94:2b:0e:0f:d4:2f:93:f6:2b:3d:e5:a6:
                    58:08:f9:98:6a:da:c1:9f:77:bb:fd:8e:7c:db:b3:
                    aa:d7:da:5f:95:b3:48:b5:77:71:0d:f8:66:90:bf:
                    1b:b4:dc:c9:21:b9:ab:74:79:d3:73:c9:9a:6b:2d:
                    f8:61:86:40:52:e9:27:3b:b7:06:d7:c4:45:9f:20:
                    1f:a6:42:f0:2b:e7:a8:d5:92:06:5f:5c:58:5b:f6:
                    35:1b:dd:be:91:bd:0b:0d:78:c0:5e:b4:fa:2d:d0:
                    1b:43:39:f6:cb:10:d2:e5:c8:f6:6c:cf:bc:8d:ec:
                    38:60:77:76:06:3d:01:7b:40:68:ec:80:d2:35:59:
                    13:b1:5e:83:f6:55:b6:fd:05:a9:e4:90:80:be:8c:
                    f0:8f:91:0b:5c:5a:e0:6a:89:2e:7c:4b:52:e0:5d:
                    c2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:74:1D:8F:11:BA:D8:5E:37:A5:DB:23:B7:45:77:29:5F:20:3B:C2
            X509v3 Authority Key Identifier:
                keyid:D6:30:86:E4:2E:9B:AB:A0:28:DC:D8:D6:5C:FF:50:CE:EF:BD:78:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:9e:23:03:c7:da:23:b2:49:4d:48:8b:1d:d1:f2:db:9e:5a:
         49:34:40:b4:ef:43:44:c3:41:19:63:8d:c2:c1:41:45:da:60:
         c7:f7:fa:13:ba:e2:78:67:57:3c:b8:08:8c:ce:8c:4e:1b:59:
         da:19:ee:52:e5:47:6f:69:80:e1:e1:23:99:4c:2a:da:c4:87:
         7e:7a:3b:99:ef:24:cf:a8:98:aa:96:cc:d6:18:94:98:37:97:
         57:1a:c9:3e:12:9e:6d:67:db:59:ea:27:57:16:47:3f:fd:70:
         2d:7d:a4:ed:3f:2c:cf:0a:ad:3d:d1:3f:dd:72:7f:90:1f:79:
         16:fd:a5:fd:f0:50:16:89:0f:59:f7:8d:50:2f:b9:b0:3d:85:
         0e:ac:0b:9e:61:79:b8:6b:b1:1f:c0:5a:90:36:88:c4:6c:88:
         4d:2b:eb:19:26:42:7d:6c:c9:8d:19:30:ea:7a:33:67:8f:26:
         63:44:97:dd:2c:f2:c5:b5:e9:73:1e:b7:f7:71:b3:73:58:17:
         7c:85:be:4b:45:d5:4b:23:50:8e:75:c6:80:b1:ed:96:42:6e:
         3c:b2:c4:65:4a:da:0c:c9:50:60:8f:41:48:16:17:1c:0c:10:
         4d:84:cc:c4:98:76:da:6e:96:79:3b:81:30:d9:34:df:88:c4:
         60:d8:03:43
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfFzFoLDarTNp71C7xgk6FetZ4HAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYzMDg2RTQyRTlCQUJBMDI4RENEOEQ2NUNGRjUwQ0VF
RkJENzhEQzAeFw0yNTEyMTkwNDExNThaFw0yNTEyMjAwNjMzNThaMDMxMTAvBgNV
BAMTKDg1NzQxRDhGMTFCQUQ4NUUzN0E1REIyM0I3NDU3NzI5NUYyMDNCQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl6CBN9uo8m86tAKqYdARdmKI7
n4oGeBs3RY71MOqquum6N8upgtQvLbtSFTI/jjWsYslQpE/505A5zpQUCfFL6w3x
mrQTf/VuXoxgs9h08yrSlxjGfCY3BD8sLpQrDg/UL5P2Kz3lplgI+Zhq2sGfd7v9
jnzbs6rX2l+Vs0i1d3EN+GaQvxu03Mkhuat0edNzyZprLfhhhkBS6Sc7twbXxEWf
IB+mQvAr56jVkgZfXFhb9jUb3b6RvQsNeMBetPot0BtDOfbLENLlyPZsz7yN7Dhg
d3YGPQF7QGjsgNI1WROxXoP2Vbb9BankkIC+jPCPkQtcWuBqiS58S1LgXcLjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUhXQdjxG62F43pdsjt0V3KV8gO8IwHwYDVR0j
BBgwFoAU1jCG5C6bq6Ao3NjWXP9Qzu+9eNwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzJRclpiUUw4dm1EdnIyR2YxTk5xU1lEWEo4b0FxQ3dnQmExMjMxSG5l
U00vMS9ENjMwODZFNDJFOUJBQkEwMjhEQ0Q4RDY1Q0ZGNTBDRUVGQkQ3OERDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2MzA4NkU0MkU5QkFCQTAy
OERDRDhENjVDRkY1MENFRUZCRDc4REMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QzJRclpiUUw4dm1EdnIyR2YxTk5xU1lEWEo4b0FxQ3dnQmExMjMxSG5lU00vMS9E
NjMwODZFNDJFOUJBQkEwMjhEQ0Q4RDY1Q0ZGNTBDRUVGQkQ3OERDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbJ4jA8faI7JJTUiLHdHy255aSTRAtO9DRMNBGWONwsFBRdpgx/f6E7rieGdX
PLgIjM6MThtZ2hnuUuVHb2mA4eEjmUwq2sSHfno7me8kz6iYqpbM1hiUmDeXVxrJ
PhKebWfbWeonVxZHP/1wLX2k7T8szwqtPdE/3XJ/kB95Fv2l/fBQFokPWfeNUC+5
sD2FDqwLnmF5uGuxH8BakDaIxGyITSvrGSZCfWzJjRkw6nozZ48mY0SX3SzyxbXp
cx6393Gzc1gXfIW+S0XVSyNQjnXGgLHtlkJuPLLEZUraDMlQYI9BSBYXHAwQTYTM
xJh22m6WeTuBMNk034jEYNgDQw==
-----END CERTIFICATE-----
Generated at Fri Dec 19 12:20:00 2025 by rpki-client