This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325.mft
File:                     E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325.mft (raw, json)
Hash identifier:          Rwubbqxmt4rxKMU7/JgpMsoX7nPxJvKbADNbcOoeaKY=
Subject key identifier:   ED:8D:15:38:AC:94:D2:87:02:4A:DE:C5:16:21:56:F9:B6:F1:87:73
Authority key identifier: E0:F9:CE:BF:1B:40:D8:FC:1A:5E:2C:82:B0:39:57:0C:93:49:F3:25
Certificate issuer:       /CN=E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325
Certificate serial:       18A6FE7B0790F1ACCC2F8DBE1E3148497F72C75B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325.mft
Manifest number:          8C
Signing time:             Sun 21 Dec 2025 21:35:34 +0000
Manifest this update:     Sun 21 Dec 2025 21:30:34 +0000
Manifest next update:     Mon 22 Dec 2025 21:58:34 +0000
Files and hashes:         1: E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325.crl (hash: iLCjf0QbXdyJftzn48NWiQjAL5ZMd3eKirS3T2VpVyc=)
                          2: 323830343a343637633a3a2f33322d313238203d3e20323636393932.roa (hash: FG9yedBaRW69iKWQ5vrW8liVhEjSF+gYfzKeBeedf5w=)
                          3: 34352e3232362e39322e302f32322d3332203d3e20323636393932.roa (hash: tGtZGahHyRDdT4wps0iiTI4ennMfoo4Is3Y2F9jKOn8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325.crl
                          rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 21:58:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a6:fe:7b:07:90:f1:ac:cc:2f:8d:be:1e:31:48:49:7f:72:c7:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325
        Validity
            Not Before: Dec 21 21:30:34 2025 GMT
            Not After : Dec 22 21:58:34 2025 GMT
        Subject: CN=ED8D1538AC94D287024ADEC5162156F9B6F18773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fb:84:c6:f9:29:f5:a9:7b:40:81:90:a9:c8:
                    3f:99:98:4b:17:22:17:f7:d0:33:a0:56:95:41:3e:
                    77:6b:b2:5c:b5:19:07:09:07:6d:4b:30:af:c9:81:
                    79:d2:e1:b9:ec:bf:8c:9c:80:8b:c9:aa:9b:3b:9b:
                    0c:55:17:7f:ca:c4:64:07:6e:9a:71:27:f3:6b:d6:
                    6c:6c:40:0d:4c:03:cc:6f:32:a1:80:ef:8f:40:06:
                    a5:88:61:2a:06:57:9e:58:5a:a8:ee:c4:0c:e0:37:
                    08:e3:30:14:a5:35:0d:e8:f4:4a:d8:41:0b:7f:3f:
                    62:37:06:42:b4:fe:ce:78:9b:54:4d:bc:ce:3c:db:
                    59:6d:40:5f:43:6c:02:d0:90:a6:46:ff:f4:84:c4:
                    16:e4:0b:5e:47:d9:66:af:19:5b:74:ae:3a:f9:ff:
                    63:2d:61:db:5b:30:92:df:71:f3:0b:16:1f:ac:4d:
                    b7:17:ac:47:08:c9:06:62:96:3b:94:92:59:dc:d8:
                    69:e5:2e:33:ae:3a:bb:30:ad:28:47:63:eb:e2:a2:
                    eb:0b:e1:23:38:85:59:55:84:cf:a4:da:ea:0b:5c:
                    7b:6e:75:28:79:27:15:7a:a7:85:62:92:88:c3:07:
                    1c:04:0d:b5:d6:51:ff:9c:56:fa:06:6c:64:89:99:
                    87:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8D:15:38:AC:94:D2:87:02:4A:DE:C5:16:21:56:F9:B6:F1:87:73
            X509v3 Authority Key Identifier:
                keyid:E0:F9:CE:BF:1B:40:D8:FC:1A:5E:2C:82:B0:39:57:0C:93:49:F3:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:3c:34:f8:ab:a9:32:f2:84:37:12:7d:6a:33:b3:07:dc:dd:
         99:da:eb:2a:0f:92:b1:f0:60:95:b7:8c:8d:12:00:d4:cd:09:
         5b:95:b8:c0:bc:2c:21:d7:a1:d7:97:7e:d1:5d:62:4d:ae:d0:
         de:8d:38:58:f3:94:ff:77:24:a3:02:51:6b:e3:07:1e:ad:30:
         f2:74:6f:bf:d0:22:d6:86:78:59:e1:0b:11:9c:5c:f9:2a:8d:
         5e:8d:16:b8:37:20:45:99:8f:1b:1e:00:cd:78:f9:3d:60:8a:
         71:0f:a7:c7:83:73:48:16:80:f4:4f:8e:1b:18:b6:53:98:3e:
         1f:49:7d:52:b0:2e:28:84:b8:f2:55:b3:fd:93:d1:8a:0e:2d:
         4e:90:8a:66:38:71:10:9d:f6:36:ae:24:76:93:2f:f8:45:4b:
         7d:5d:c9:83:26:a8:ef:ae:93:ea:bd:f1:6d:0c:1e:6e:4c:32:
         f3:1b:ea:14:6f:08:25:9c:b6:63:d4:3e:08:31:52:d5:4a:24:
         c7:bf:b5:d9:dd:7d:de:21:82:7a:9c:d2:c1:ea:7a:5e:cf:d1:
         08:ce:36:58:9c:c7:23:6e:be:59:da:dd:b0:0b:0b:3b:1e:00:
         49:9e:07:6e:94:38:04:55:3f:8e:f0:ac:92:94:52:14:14:52:
         71:20:5d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 11:01:42 2025 by rpki-client