This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.mft
File:                     F2E351E04CEB2540D88297555ED76E80B91C52F7.mft (raw, json)
Hash identifier:          80vGtKifwM9usw+qcQx7AtoDaEclft3prkBcaMd/+Qw=
Subject key identifier:   6B:16:D3:36:5D:B3:25:98:51:2D:9D:B6:56:EC:BA:DA:FC:7B:1B:23
Authority key identifier: F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7
Certificate issuer:       /CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
Certificate serial:       7E0C19BD3E825CE85DA4DDE76B7D7928F11875C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.mft
Manifest number:          0337
Signing time:             Sat 20 Dec 2025 08:24:59 +0000
Manifest this update:     Sat 20 Dec 2025 08:19:59 +0000
Manifest next update:     Sun 21 Dec 2025 09:26:59 +0000
Files and hashes:         1: 323830343a353838343a3a2f33332d3333203d3e20323638313334.roa (hash: tDiVEceIES/yQXwUni8f9UGFDwzaCsW+EDw3wQu6Yuk=)
                          2: F2E351E04CEB2540D88297555ED76E80B91C52F7.crl (hash: I7YCnfCj9jBwnDT0dEftl7dBnDCkoDVKnaPoyqeV3VE=)
                          3: 323830343a353838343a3a2f33322d3332203d3e20323638313334.roa (hash: G7lxAt5S9OV1UAu+yEo/KM1W4ne4MJrtoIvU9kPIAzw=)
                          4: 34352e3136392e3234302e302f32342d3234203d3e20323638313334.roa (hash: w7Elp6ZbBTUT+MRRiz5sFrw1LXrzUIx794i2+v0cX8Q=)
                          5: 34352e3136392e3234302e302f32322d3232203d3e20323638313334.roa (hash: ZA5mMUVDU0RUEPFKjzBAe/rWiqfKg6ug18/TcIy4Kc0=)
                          6: 34352e3136392e3234302e302f32332d3233203d3e20323638313334.roa (hash: TEneWmx+zgxAmv5+fMyXV+yZzdbd14y+SvCG6xPUhS8=)
                          7: 34352e3136392e3234322e302f32342d3234203d3e20323638313334.roa (hash: hAF/Ltt/MMtz+5ZrSs8bnPbbnYehMPNXoGKi4FTyLK0=)
                          8: 323830343a353838343a633030303a3a2f33342d3334203d3e20323638313334.roa (hash: QZrbBW84R40IYGmIegFlNlGaD4W8XMYgJIrpxutTQPc=)
                          9: 323830343a353838343a383030303a3a2f33342d3334203d3e20323638313334.roa (hash: /bU9zgKmS9h8J0fGnTSzXeneNX+SFVzUg40MPtUHN0U=)
                          10: 323830343a353838343a343030303a3a2f33342d3334203d3e20323638313334.roa (hash: FYNfKWLGCborOJHpYOR+IduNVUTj0eYEWMDVeqXk4Oo=)
                          11: 34352e3136392e3234322e302f32332d3233203d3e20323638313334.roa (hash: dla9nUhegKf+vVRnD4rktsCM5alxUG9aGpvIiYLBU4Q=)
                          12: 323830343a353838343a383030303a3a2f33332d3333203d3e20323638313334.roa (hash: oY+UqILAJ0O28fhipILYjkq9GGMd9cTG8fZG/wxsL+M=)
                          13: 34352e3136392e3234332e302f32342d3234203d3e20323638313334.roa (hash: 8iJ4Mwq1YRscFGyv6IZOF3K8XIVu4lY7yftEf98rV6o=)
                          14: 34352e3136392e3234312e302f32342d3234203d3e20323638313334.roa (hash: zSlCdf2nnMEaBWfySJynzi+q4DsCrdfDHvAPKoW6tas=)
                          15: 323830343a353838343a3a2f33342d3334203d3e20323638313334.roa (hash: jDZToRhC7rw94u0eX6sqBzX3BMM1S9ndtZoU0Obme7Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl
                          rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 09:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:0c:19:bd:3e:82:5c:e8:5d:a4:dd:e7:6b:7d:79:28:f1:18:75:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
        Validity
            Not Before: Dec 20 08:19:59 2025 GMT
            Not After : Dec 21 09:26:59 2025 GMT
        Subject: CN=6B16D3365DB32598512D9DB656ECBADAFC7B1B23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cd:1a:58:71:5f:b4:2d:f3:38:83:4b:3f:af:
                    56:1b:9b:85:4d:95:7e:d7:38:f7:1c:07:1e:ea:5f:
                    bf:f9:7f:53:18:ff:a5:79:94:b7:6d:dc:22:4c:41:
                    51:3e:4d:ea:d5:b4:f7:ef:20:2e:18:99:0a:5c:b2:
                    be:8d:60:65:69:eb:c0:94:4e:36:31:35:79:92:5d:
                    5c:ab:a0:e4:37:08:d9:a1:a3:99:8c:cb:71:6e:ef:
                    55:f0:c3:d1:c9:d7:5d:a7:1f:ad:63:be:b4:91:07:
                    2a:7c:51:14:59:01:2c:98:f7:35:6f:89:c2:6a:da:
                    f0:9f:38:bd:8a:92:42:54:cc:03:6d:a9:88:19:56:
                    8a:3b:83:fc:9f:2e:3e:b2:09:84:8e:cc:8a:11:5d:
                    7a:da:42:f5:34:a7:4d:8a:d8:69:2e:bf:51:cf:bb:
                    f4:fe:43:0a:98:81:8f:ef:bd:31:8d:ee:0c:52:4a:
                    88:45:b1:bb:b7:34:4a:aa:07:30:6d:1b:77:4b:55:
                    99:c7:09:9b:26:9e:c3:a7:8a:41:a2:a1:4c:7b:41:
                    a2:4a:84:12:f2:f5:d5:0b:1f:0a:e2:45:3e:0f:e2:
                    e7:90:8e:9e:fe:f8:2f:9f:ee:c0:4e:11:63:59:ad:
                    57:b4:81:00:1e:52:aa:2a:92:b1:dd:1a:2a:45:fb:
                    4c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:16:D3:36:5D:B3:25:98:51:2D:9D:B6:56:EC:BA:DA:FC:7B:1B:23
            X509v3 Authority Key Identifier:
                keyid:F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:8b:f4:4e:3a:8d:dd:f2:13:b2:85:5f:00:d4:57:b6:49:e6:
         df:13:5c:d4:b0:dd:02:7b:26:aa:d9:af:f4:16:30:a6:5f:0b:
         4b:4c:5d:ce:2e:63:a3:a5:f1:75:73:78:7a:02:58:fb:04:44:
         d5:1f:30:14:b2:f4:76:9b:7e:a5:ac:97:18:92:c2:72:e2:b1:
         92:19:41:2e:50:4f:23:f0:94:3e:ea:40:1a:20:ea:ba:0d:04:
         fd:45:89:ab:39:fb:8f:4c:99:20:de:19:3c:66:12:eb:7a:38:
         20:3d:df:94:68:2d:84:dd:ef:13:01:f1:c5:69:af:e5:f1:60:
         cf:74:53:04:a7:da:43:78:67:87:1d:b8:aa:70:da:41:7b:96:
         84:3e:a8:b1:c9:aa:1f:4e:80:53:7f:f4:0d:7d:b6:8c:1e:b5:
         9f:d3:04:3a:0a:f5:2b:5f:67:7a:de:c3:76:f6:4e:c2:fc:23:
         d1:72:71:00:76:66:9b:aa:3c:5f:56:1d:54:90:49:8f:47:a5:
         52:9c:d7:a3:10:ec:35:18:d3:15:c2:a7:ff:3d:5d:4f:70:be:
         a0:07:f3:88:dc:44:39:d9:7b:ca:fc:da:54:a7:24:f3:6f:5e:
         1c:30:90:00:02:b1:4d:46:78:12:c4:01:c8:c7:92:34:90:e8:
         11:30:a8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:08:21 2025 by rpki-client