This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft
File:                     21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft (raw, json)
Hash identifier:          tTGC1X1GXVnRMAR2jXOdeM6VEEP7f7C55L8jbTZIQyQ=
Subject key identifier:   C9:E6:99:B9:05:FF:4C:08:FC:54:FF:5A:89:15:22:9F:C9:6E:BB:72
Authority key identifier: 21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66
Certificate issuer:       /CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
Certificate serial:       183C43048DC0A57CBD1054DEB267314682DAA1B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft
Manifest number:          0345
Signing time:             Tue 23 Dec 2025 05:06:01 +0000
Manifest this update:     Tue 23 Dec 2025 05:01:01 +0000
Manifest next update:     Wed 24 Dec 2025 05:31:01 +0000
Files and hashes:         1: 323830343a373335633a383030303a3a2f33342d3334203d3e20323730393130.roa (hash: 5CA3bhiL9G5EqssM79mQ2NXKJ4+iR7T1WwgYCJVhPkw=)
                          2: 3133382e3132312e3136362e302f32342d3234203d3e20323730393130.roa (hash: r7vfeKk55qhQBOyEy24AMQ64UzQyzWkqz312ndhdfUc=)
                          3: 323830343a373335633a633030303a3a2f33342d3334203d3e20323730393130.roa (hash: RnSg+YKbK8pR5bia+dZ9K105SclQ1I16ep03dg/iZ7c=)
                          4: 323830343a373335633a3a2f33322d3332203d3e20323730393130.roa (hash: J37Irn6rkJ/gW2wUAdd0Ln1bXjOwHrhLGBV5ttnIhOU=)
                          5: 323830343a373335633a3a2f33342d3334203d3e20323730393130.roa (hash: CsvGGcE0V3Tu69LRuhwsdvsimuS6XZEP7ogsRoKMiZM=)
                          6: 3133382e3132312e3136342e302f32322d3232203d3e20323730393130.roa (hash: U1U/PJKv+Yna7Dv3n/OMq3HZDeNphHtQAu6Jb7RzBs0=)
                          7: 323830343a373335633a383030303a3a2f33332d3333203d3e20323730393130.roa (hash: RerjbS9xKc0/CK/Y5n8XplDwJVGGM77Bh0aaB454fY4=)
                          8: 3133382e3132312e3136352e302f32342d3234203d3e20323730393130.roa (hash: JL+tQ5Kfrej9dzNOHqdA47WL83D9j5wRJVEy93Y0jqU=)
                          9: 3133382e3132312e3136362e302f32332d3233203d3e20323730393130.roa (hash: lL3sWcpDBbZjNJudevKuoE9ICP1DM73uG/8oJbBo9Og=)
                          10: 3133382e3132312e3136342e302f32342d3234203d3e20323730393130.roa (hash: uuAjvoElj+s2P03j2V4PuccKOgje+VoUZnf+Hle0akg=)
                          11: 323830343a373335633a3a2f33332d3333203d3e20323730393130.roa (hash: TYRWQ7gyDTR9aR04XFxDpPB2omElfX3dnOpZ3IOnRX4=)
                          12: 323830343a373335633a343030303a3a2f33342d3334203d3e20323730393130.roa (hash: zZmqNl3wVb+besWe55tMDhoT10Qhn57ix2MlPtQrb2w=)
                          13: 21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl (hash: 6es+eX+x3hw27QMlrAw/FnWeltJNZCsDjxTyz0/pprU=)
                          14: 3133382e3132312e3136342e302f32332d3233203d3e20323730393130.roa (hash: x8GmIb1SS/y7q4B+DFsz2yAOvlZbT66RrnYr4dLqQ+o=)
                          15: 3133382e3132312e3136372e302f32342d3234203d3e20323730393130.roa (hash: smaUHbT25OXhUmvU+Kn4HyZtcLPSslJSZIjbPHYe0vU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl
                          rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 05:31:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:3c:43:04:8d:c0:a5:7c:bd:10:54:de:b2:67:31:46:82:da:a1:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
        Validity
            Not Before: Dec 23 05:01:01 2025 GMT
            Not After : Dec 24 05:31:01 2025 GMT
        Subject: CN=C9E699B905FF4C08FC54FF5A8915229FC96EBB72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3f:e4:91:f4:bf:0a:fd:c9:33:91:ad:4f:d4:
                    63:c0:04:3e:03:58:8c:17:25:1b:d7:d0:55:76:e3:
                    83:70:45:08:c9:7e:ba:24:00:f9:ac:34:fa:7f:b7:
                    a0:23:e3:15:a9:36:f4:bb:fb:7b:c2:d4:e0:ca:6c:
                    a4:9d:aa:ec:9d:eb:90:5a:38:d5:9c:17:d5:65:94:
                    ed:7d:5f:b8:ee:03:0d:8a:59:eb:2c:f1:18:24:3a:
                    05:6f:42:a6:89:ea:96:b7:03:ce:72:5a:cf:51:2f:
                    b8:2b:1f:31:70:80:c7:6c:09:a8:d7:44:33:54:e5:
                    b4:87:39:c4:93:16:6c:39:aa:e8:f2:e1:bb:33:08:
                    ad:63:ca:eb:ed:5d:a3:52:10:86:93:70:d2:77:b2:
                    40:ec:d3:ef:00:27:93:c8:ff:a3:5f:40:f3:d6:f1:
                    d9:70:27:44:a9:99:40:51:30:af:ce:1b:f1:83:1b:
                    de:a6:23:49:5a:1d:03:a7:ea:24:e9:69:c9:ab:35:
                    2d:99:64:11:25:22:ab:86:00:28:c8:fe:db:01:6a:
                    d9:3f:37:ac:04:77:8d:80:82:6a:36:22:31:a8:86:
                    71:05:06:5f:ba:07:9d:ea:b4:9a:b3:89:0d:35:87:
                    35:4a:72:22:78:ee:2f:37:06:ce:b3:ea:eb:c8:d1:
                    8a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E6:99:B9:05:FF:4C:08:FC:54:FF:5A:89:15:22:9F:C9:6E:BB:72
            X509v3 Authority Key Identifier:
                keyid:21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:18:11:26:15:a8:9b:9c:a3:93:d8:ce:80:11:33:4f:da:01:
         84:6c:31:fc:5b:a3:83:e1:7f:e4:53:6d:06:17:a1:9f:c8:76:
         bf:99:93:cd:7e:29:84:f4:7d:bf:14:88:ce:fb:1b:10:08:72:
         05:65:25:21:9a:06:e4:71:24:de:4a:6b:f3:10:5d:aa:a4:05:
         05:80:a2:49:bd:53:99:ac:98:75:1f:68:c2:e4:e6:10:17:df:
         f1:f2:c7:11:6b:ed:54:a1:f6:bb:d2:eb:9c:6e:24:98:b1:81:
         6b:17:87:da:23:f6:6a:d5:17:59:77:24:49:ee:66:5c:f9:b8:
         2a:f8:b8:76:3a:23:ff:93:70:1d:b5:ad:6c:b5:a8:9e:95:81:
         d7:a4:53:83:c3:f5:f4:cc:1e:b5:bf:e2:43:bc:23:36:57:ce:
         bc:8e:fe:7a:90:1f:37:43:70:36:91:97:aa:94:38:72:cf:66:
         00:6b:c8:bc:8d:27:c5:06:3a:c0:28:ca:be:e5:20:43:25:d0:
         07:33:98:60:b6:b4:5d:bf:8f:98:1a:d0:6e:13:58:6c:d5:6b:
         db:e1:dd:a7:4c:fe:4a:9a:82:30:2d:b8:c2:f1:dd:c3:dd:2f:
         cd:c1:7c:82:bc:7c:8a:fd:92:ff:f8:35:25:9c:7f:19:ee:62:
         02:9c:26:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGDxDBI3ApXy9EFTesmcxRoLaobcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFCNjZENTE4RjZGMUVDNDQwODk2RURFQTFDNkY5RTY5
NENDM0I2NjAeFw0yNTEyMjMwNTAxMDFaFw0yNTEyMjQwNTMxMDFaMDMxMTAvBgNV
BAMTKEM5RTY5OUI5MDVGRjRDMDhGQzU0RkY1QTg5MTUyMjlGQzk2RUJCNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClP+SR9L8K/ckzka1P1GPABD4D
WIwXJRvX0FV244NwRQjJfrokAPmsNPp/t6Aj4xWpNvS7+3vC1ODKbKSdquyd65Ba
ONWcF9VllO19X7juAw2KWess8RgkOgVvQqaJ6pa3A85yWs9RL7grHzFwgMdsCajX
RDNU5bSHOcSTFmw5qujy4bszCK1jyuvtXaNSEIaTcNJ3skDs0+8AJ5PI/6NfQPPW
8dlwJ0SpmUBRMK/OG/GDG96mI0laHQOn6iTpacmrNS2ZZBElIquGACjI/tsBatk/
N6wEd42Agmo2IjGohnEFBl+6B53qtJqziQ01hzVKciJ47i83Bs6z6uvI0YoHAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUyeaZuQX/TAj8VP9aiRUin8luu3IwHwYDVR0j
BBgwFoAUIbZtUY9vHsRAiW7eocb55pTMO2YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDNxRTVIc0NxOEI1SGp0Smc5MXBjeFFZRVRyUnlIUXBCa1VHUmNEaGRU
Q2YvMS8yMUI2NkQ1MThGNkYxRUM0NDA4OTZFREVBMUM2RjlFNjk0Q0MzQjY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxQjY2RDUxOEY2RjFFQzQ0
MDg5NkVERUExQzZGOUU2OTRDQzNCNjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RDNxRTVIc0NxOEI1SGp0Smc5MXBjeFFZRVRyUnlIUXBCa1VHUmNEaGRUQ2YvMS8y
MUI2NkQ1MThGNkYxRUM0NDA4OTZFREVBMUM2RjlFNjk0Q0MzQjY2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJBgRJhWom5yjk9jOgBEzT9oBhGwx/Fujg+F/5FNtBhehn8h2v5mTzX4phPR9
vxSIzvsbEAhyBWUlIZoG5HEk3kpr8xBdqqQFBYCiSb1TmayYdR9owuTmEBff8fLH
EWvtVKH2u9LrnG4kmLGBaxeH2iP2atUXWXckSe5mXPm4Kvi4djoj/5NwHbWtbLWo
npWB16RTg8P19Mwetb/iQ7wjNlfOvI7+epAfN0NwNpGXqpQ4cs9mAGvIvI0nxQY6
wCjKvuUgQyXQBzOYYLa0Xb+PmBrQbhNYbNVr2+Hdp0z+SpqCMC24wvHdw90vzcF8
grx8iv2S//g1JZx/Ge5iApwmuA==
-----END CERTIFICATE-----
Generated at Tue Dec 23 07:58:38 2025 by rpki-client