This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft
File:                     21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft (raw, json)
Hash identifier:          KwYnHHPjVpehT6Jtgjylauq6CoOMkKNDRmmzC817bl4=
Subject key identifier:   8C:8D:96:E6:25:55:75:A5:9D:70:C6:DC:2C:0A:58:E1:09:01:34:64
Authority key identifier: 21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66
Certificate issuer:       /CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
Certificate serial:       6C9DB0773C63F634404A6D041FBAEE2A5A3D404A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft
Manifest number:          0341
Signing time:             Sat 20 Dec 2025 02:09:48 +0000
Manifest this update:     Sat 20 Dec 2025 02:04:48 +0000
Manifest next update:     Sun 21 Dec 2025 05:34:48 +0000
Files and hashes:         1: 3133382e3132312e3136342e302f32322d3232203d3e20323730393130.roa (hash: U1U/PJKv+Yna7Dv3n/OMq3HZDeNphHtQAu6Jb7RzBs0=)
                          2: 323830343a373335633a343030303a3a2f33342d3334203d3e20323730393130.roa (hash: zZmqNl3wVb+besWe55tMDhoT10Qhn57ix2MlPtQrb2w=)
                          3: 3133382e3132312e3136362e302f32332d3233203d3e20323730393130.roa (hash: lL3sWcpDBbZjNJudevKuoE9ICP1DM73uG/8oJbBo9Og=)
                          4: 323830343a373335633a3a2f33332d3333203d3e20323730393130.roa (hash: TYRWQ7gyDTR9aR04XFxDpPB2omElfX3dnOpZ3IOnRX4=)
                          5: 21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl (hash: 3ixAdTB4TuE6OVpNWKo6IrwCYWTSlXzqBViKtHp5Cuw=)
                          6: 323830343a373335633a3a2f33322d3332203d3e20323730393130.roa (hash: J37Irn6rkJ/gW2wUAdd0Ln1bXjOwHrhLGBV5ttnIhOU=)
                          7: 3133382e3132312e3136372e302f32342d3234203d3e20323730393130.roa (hash: smaUHbT25OXhUmvU+Kn4HyZtcLPSslJSZIjbPHYe0vU=)
                          8: 3133382e3132312e3136342e302f32342d3234203d3e20323730393130.roa (hash: uuAjvoElj+s2P03j2V4PuccKOgje+VoUZnf+Hle0akg=)
                          9: 3133382e3132312e3136342e302f32332d3233203d3e20323730393130.roa (hash: x8GmIb1SS/y7q4B+DFsz2yAOvlZbT66RrnYr4dLqQ+o=)
                          10: 323830343a373335633a383030303a3a2f33332d3333203d3e20323730393130.roa (hash: RerjbS9xKc0/CK/Y5n8XplDwJVGGM77Bh0aaB454fY4=)
                          11: 3133382e3132312e3136352e302f32342d3234203d3e20323730393130.roa (hash: JL+tQ5Kfrej9dzNOHqdA47WL83D9j5wRJVEy93Y0jqU=)
                          12: 323830343a373335633a633030303a3a2f33342d3334203d3e20323730393130.roa (hash: RnSg+YKbK8pR5bia+dZ9K105SclQ1I16ep03dg/iZ7c=)
                          13: 323830343a373335633a383030303a3a2f33342d3334203d3e20323730393130.roa (hash: 5CA3bhiL9G5EqssM79mQ2NXKJ4+iR7T1WwgYCJVhPkw=)
                          14: 323830343a373335633a3a2f33342d3334203d3e20323730393130.roa (hash: CsvGGcE0V3Tu69LRuhwsdvsimuS6XZEP7ogsRoKMiZM=)
                          15: 3133382e3132312e3136362e302f32342d3234203d3e20323730393130.roa (hash: r7vfeKk55qhQBOyEy24AMQ64UzQyzWkqz312ndhdfUc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl
                          rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 05:34:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:9d:b0:77:3c:63:f6:34:40:4a:6d:04:1f:ba:ee:2a:5a:3d:40:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
        Validity
            Not Before: Dec 20 02:04:48 2025 GMT
            Not After : Dec 21 05:34:48 2025 GMT
        Subject: CN=8C8D96E6255575A59D70C6DC2C0A58E109013464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ba:9b:ad:78:0b:28:bc:64:c8:37:d5:32:f8:
                    0e:10:c5:d8:ca:20:87:1d:42:6a:6a:bc:e5:77:de:
                    cb:a7:91:8c:76:e9:1c:c5:17:63:91:c8:b4:61:63:
                    f2:ba:04:bc:be:2b:fb:b7:3f:a1:e8:96:56:3e:1c:
                    f7:2d:16:f5:78:1c:16:5b:b8:c9:81:8c:b3:32:0e:
                    51:cb:97:75:88:00:6d:64:7c:5b:18:00:c2:1f:a0:
                    d6:b3:33:75:1d:ae:e4:f2:62:02:49:7e:07:b1:de:
                    7d:5a:41:5a:28:e5:c5:ea:0f:50:ad:4e:ec:3a:7f:
                    77:f0:91:61:d3:b0:8b:b7:7b:2d:51:4f:fe:b6:aa:
                    50:72:f3:c2:03:73:45:55:3b:d1:d5:ae:d0:32:6c:
                    2d:19:d5:db:b7:ba:4c:2c:eb:fc:39:91:4d:f3:90:
                    ef:fd:a1:34:36:ec:55:3a:c8:9b:78:a4:5f:f8:15:
                    c7:47:f8:07:b9:c3:7a:bb:3a:84:9c:53:de:32:b6:
                    6f:a5:9c:e9:31:05:37:43:f5:47:c9:2e:37:d3:67:
                    69:6c:58:53:0b:88:40:51:af:85:ef:4e:75:7d:c8:
                    58:a8:df:01:bd:2a:c7:5b:e1:af:c5:35:38:cd:ca:
                    3b:03:b1:45:bd:9d:0d:4b:77:59:f1:96:b7:00:d2:
                    16:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8D:96:E6:25:55:75:A5:9D:70:C6:DC:2C:0A:58:E1:09:01:34:64
            X509v3 Authority Key Identifier:
                keyid:21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:cb:b6:fb:94:43:d7:6d:4d:09:54:74:e8:40:c1:93:ae:57:
         4e:8d:33:35:6e:e0:a6:f9:e8:51:ee:47:73:97:76:b8:8f:95:
         db:30:91:80:f7:7b:a4:b7:5e:9f:1a:46:3b:7d:2c:18:f2:9b:
         3d:f5:81:45:e6:80:7f:40:94:15:50:9d:c3:c8:b8:03:80:c3:
         8b:ac:fe:28:ee:43:2d:c4:18:1c:fd:41:77:5d:a0:be:06:89:
         74:e3:f1:9f:97:e3:36:e7:7a:3a:8d:3f:69:65:e1:ec:13:ef:
         46:03:55:6e:a6:2f:21:7c:88:89:39:0b:3e:4d:60:81:35:ed:
         06:67:26:2e:b2:69:ea:fe:5d:23:aa:36:48:23:cb:1b:ec:9d:
         69:5c:d6:27:71:b9:f1:87:9b:57:be:1c:08:76:5c:9a:46:0c:
         46:ea:3c:f3:19:12:ec:ca:ba:e6:87:2f:b7:de:ee:b1:81:27:
         86:a0:c9:44:7d:ca:ac:7d:ea:4d:1c:1d:f8:59:c7:8c:a4:8f:
         84:ec:22:23:97:29:e7:5e:92:55:46:49:00:22:ef:e5:24:57:
         61:19:3d:74:5f:a5:4b:57:3b:15:19:d5:4b:c3:e0:ef:80:92:
         69:ab:1c:78:5b:3d:db:a8:4b:d7:bd:c3:85:8e:c6:ae:5d:7b:
         90:72:60:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:05:45 2025 by rpki-client