This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Cw2NPuKyqz9XCyK4XtunZ8FyUpcbXp536jcevNpJEkhW/0/6620E7E637362D4E42A914BCCAEBB44C4ADE193D.mft
File:                     6620E7E637362D4E42A914BCCAEBB44C4ADE193D.mft (raw, json)
Hash identifier:          s2jc02+w/8/L0l4jFFo+y7Op9m38yJVJ5sbZjrgH/SA=
Subject key identifier:   01:80:58:65:AA:F2:0B:0D:3B:81:77:C9:C7:9C:C5:DA:92:FA:8E:08
Authority key identifier: 66:20:E7:E6:37:36:2D:4E:42:A9:14:BC:CA:EB:B4:4C:4A:DE:19:3D
Certificate issuer:       /CN=6620E7E637362D4E42A914BCCAEBB44C4ADE193D
Certificate serial:       233974144C4C314AAFA304D6D1860ECB0979EDC8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6620E7E637362D4E42A914BCCAEBB44C4ADE193D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cw2NPuKyqz9XCyK4XtunZ8FyUpcbXp536jcevNpJEkhW/0/6620E7E637362D4E42A914BCCAEBB44C4ADE193D.mft
Manifest number:          3F
Signing time:             Wed 24 Dec 2025 00:45:32 +0000
Manifest this update:     Wed 24 Dec 2025 00:40:32 +0000
Manifest next update:     Thu 25 Dec 2025 03:12:32 +0000
Files and hashes:         1: 323830343a336632303a3a2f33322d313238203d3e20323636363431.roa (hash: W5CcgW5VYsbie4dq702fseUgjeqp0IplmaIB+bZypKo=)
                          2: 6620E7E637362D4E42A914BCCAEBB44C4ADE193D.crl (hash: W5bSjp8ijWQmDEJhjEfnRlVWuj6bMdR6rQ2VxZzKtLc=)
                          3: 3136302e3233382e3138302e302f32322d3332203d3e20323636363431.roa (hash: Ar3OtMZEdX3eGAmRwEV6wIzLqNbzXYAX5CqeSeAW8nQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cw2NPuKyqz9XCyK4XtunZ8FyUpcbXp536jcevNpJEkhW/0/6620E7E637362D4E42A914BCCAEBB44C4ADE193D.crl
                          rsync://rpki-repo.registro.br/repo/Cw2NPuKyqz9XCyK4XtunZ8FyUpcbXp536jcevNpJEkhW/0/6620E7E637362D4E42A914BCCAEBB44C4ADE193D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6620E7E637362D4E42A914BCCAEBB44C4ADE193D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 03:12:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:39:74:14:4c:4c:31:4a:af:a3:04:d6:d1:86:0e:cb:09:79:ed:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6620E7E637362D4E42A914BCCAEBB44C4ADE193D
        Validity
            Not Before: Dec 24 00:40:32 2025 GMT
            Not After : Dec 25 03:12:32 2025 GMT
        Subject: CN=01805865AAF20B0D3B8177C9C79CC5DA92FA8E08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4b:31:2f:ca:d6:e3:b1:91:a8:f2:1e:12:39:
                    f7:0d:59:a1:e1:94:22:5a:35:aa:e1:79:b0:7a:aa:
                    b8:5b:37:7c:5d:10:ec:85:17:37:f0:34:eb:9d:f0:
                    ec:94:8a:50:9b:df:e7:6f:20:9b:1a:a2:84:25:f4:
                    26:2a:35:0c:bd:d2:2f:47:c8:fd:40:17:b7:ed:10:
                    b4:91:11:dc:e0:c5:e5:da:a6:c4:53:0f:84:96:ea:
                    7b:de:82:08:77:d4:46:66:99:ad:bd:47:03:3e:56:
                    b9:c9:c6:03:27:14:b8:fa:4d:bb:d3:ff:82:7b:0b:
                    19:09:f0:9e:d8:b6:50:97:9f:34:2a:11:85:ea:6f:
                    e5:13:d0:ae:e6:19:f4:f3:df:2e:20:69:d8:6d:62:
                    a6:5e:ac:b4:8e:92:bf:c4:b0:13:3b:a5:d0:c2:b5:
                    65:76:b5:f0:16:a8:a9:ea:4f:79:94:79:96:c0:e1:
                    36:65:b2:10:8a:af:c8:fc:68:b3:58:73:c7:cf:85:
                    95:91:a3:07:11:d1:bb:05:eb:19:b0:c9:98:b1:b4:
                    a7:8a:fb:83:a5:f6:09:af:d2:22:3c:84:c6:90:ef:
                    6e:3b:61:3d:29:f1:81:f6:41:14:46:db:dc:82:45:
                    f6:d7:d5:0b:55:4a:0c:37:69:09:d1:83:a4:2a:05:
                    0b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:80:58:65:AA:F2:0B:0D:3B:81:77:C9:C7:9C:C5:DA:92:FA:8E:08
            X509v3 Authority Key Identifier:
                keyid:66:20:E7:E6:37:36:2D:4E:42:A9:14:BC:CA:EB:B4:4C:4A:DE:19:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cw2NPuKyqz9XCyK4XtunZ8FyUpcbXp536jcevNpJEkhW/0/6620E7E637362D4E42A914BCCAEBB44C4ADE193D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6620E7E637362D4E42A914BCCAEBB44C4ADE193D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cw2NPuKyqz9XCyK4XtunZ8FyUpcbXp536jcevNpJEkhW/0/6620E7E637362D4E42A914BCCAEBB44C4ADE193D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:83:8c:c1:46:18:59:4f:4c:e5:69:ff:d7:9d:b7:d8:d4:73:
         b2:80:a4:ba:8c:29:ea:d1:c9:9f:47:24:e5:3c:ae:b9:71:6f:
         a1:06:1e:26:6a:89:33:3a:db:0f:4e:9b:c3:06:b5:97:fb:d9:
         a0:86:9e:62:6f:fe:f0:49:f9:e1:90:3e:47:13:fb:51:38:40:
         8e:5a:5c:70:84:b8:e5:09:60:b3:a7:b4:85:06:ba:5e:91:69:
         64:9e:35:a8:81:cd:f4:64:c8:cb:b4:a4:1d:59:67:5d:2d:53:
         f3:9c:f8:d1:8a:69:ab:97:23:c6:03:2c:c5:55:b7:03:6a:5b:
         4a:23:2c:12:c2:c5:0f:34:02:52:cb:0b:7d:cd:4f:aa:b4:f6:
         1c:0d:7e:7c:d5:92:f8:cf:04:dc:9f:11:d9:1a:e4:05:f8:ec:
         fa:45:96:89:34:2d:3a:55:c7:a4:4b:e7:f3:87:07:60:97:70:
         0e:ec:73:a6:51:47:6c:75:e1:a2:5c:0f:d1:e0:e8:99:cf:c1:
         8e:25:9b:f5:6b:b0:1f:a9:29:7a:c7:2d:26:fc:47:24:4e:d1:
         5b:2f:3e:83:fe:f3:40:78:ee:f7:11:51:c7:ec:ad:ee:a4:39:
         b7:57:71:fa:bd:48:69:3c:d4:69:ab:7b:06:d3:9e:88:cb:05:
         6f:11:19:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:05:31 2025 by rpki-client