This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DyVz9GUmpChJJxwGEbaeiC7vxn55MWaAnCwfeFBmpNpB/0/67261DDE7301C73857B84C1EFD17E1F8573F23E5.mft
File:                     67261DDE7301C73857B84C1EFD17E1F8573F23E5.mft (raw, json)
Hash identifier:          /JxjaWsfS6pLxK5jW1IaBVC2lPxDAqpW2wz8aQBvmbA=
Subject key identifier:   8C:3C:BE:1E:2E:AD:B3:C2:00:F5:A6:3E:A6:01:95:6D:66:D6:4A:31
Authority key identifier: 67:26:1D:DE:73:01:C7:38:57:B8:4C:1E:FD:17:E1:F8:57:3F:23:E5
Certificate issuer:       /CN=67261DDE7301C73857B84C1EFD17E1F8573F23E5
Certificate serial:       27EDEED42AE1B26C9D6AD6C1F933C29B4C144541
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67261DDE7301C73857B84C1EFD17E1F8573F23E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DyVz9GUmpChJJxwGEbaeiC7vxn55MWaAnCwfeFBmpNpB/0/67261DDE7301C73857B84C1EFD17E1F8573F23E5.mft
Manifest number:          2F
Signing time:             Wed 24 Dec 2025 07:13:22 +0000
Manifest this update:     Wed 24 Dec 2025 07:08:22 +0000
Manifest next update:     Thu 25 Dec 2025 09:59:22 +0000
Files and hashes:         1: 3138362e3233332e3134342e302f32312d3232203d3e20323632373930.roa (hash: Vu3+/o6DyYR4IJu1qxPpPkr07zUcZNzrX9vuvNdw7Gc=)
                          2: 323830343a3231303a3a2f33322d3333203d3e20323632373930.roa (hash: 83M9H/OT9DLrhx0qRN1ZK/IezdTG110OEIJiCdyMXSI=)
                          3: 3137372e3130312e3134342e302f32302d3234203d3e20323632373930.roa (hash: Oa4KTKx1tqTir0qNBTMn7lQIOr/blg+xnjW9I8TXiAg=)
                          4: 3133382e3230342e32382e302f32322d3233203d3e20323632373930.roa (hash: MbB8RuvaaXP+32NAIYVIq5TKvvesdrewgSdt/iIk3p4=)
                          5: 67261DDE7301C73857B84C1EFD17E1F8573F23E5.crl (hash: DZctRwpEt2OURQ4vEWJ9hiFKTjcJ0YdDUpmgPB/A88I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DyVz9GUmpChJJxwGEbaeiC7vxn55MWaAnCwfeFBmpNpB/0/67261DDE7301C73857B84C1EFD17E1F8573F23E5.crl
                          rsync://rpki-repo.registro.br/repo/DyVz9GUmpChJJxwGEbaeiC7vxn55MWaAnCwfeFBmpNpB/0/67261DDE7301C73857B84C1EFD17E1F8573F23E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67261DDE7301C73857B84C1EFD17E1F8573F23E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 09:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ed:ee:d4:2a:e1:b2:6c:9d:6a:d6:c1:f9:33:c2:9b:4c:14:45:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67261DDE7301C73857B84C1EFD17E1F8573F23E5
        Validity
            Not Before: Dec 24 07:08:22 2025 GMT
            Not After : Dec 25 09:59:22 2025 GMT
        Subject: CN=8C3CBE1E2EADB3C200F5A63EA601956D66D64A31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d3:4b:10:95:5d:73:91:4c:15:98:5b:72:f0:
                    cc:f8:1e:e3:de:63:73:7e:72:f2:7e:0d:4f:ac:45:
                    3c:07:d6:06:e0:59:6e:d2:9f:ad:16:bb:b1:68:6c:
                    00:30:92:43:e9:7b:77:32:52:e4:d3:21:f2:ef:7f:
                    65:61:2f:ad:ba:52:84:1b:7f:6f:f2:a1:d8:bd:4a:
                    91:25:9a:16:c4:da:2d:21:07:1f:a7:ce:f5:78:43:
                    83:2f:21:c7:dd:70:c3:e1:cf:5d:55:b3:38:1f:b4:
                    da:7f:96:15:02:ac:72:77:d9:b4:22:d1:4b:89:dd:
                    4c:79:90:bc:9e:23:70:99:c8:47:42:27:a8:33:ce:
                    14:54:a5:b7:99:60:58:5b:76:dd:90:9f:25:36:85:
                    f1:14:ae:b2:31:0c:3f:a6:d4:0a:a4:dd:af:9d:65:
                    7c:6f:c3:a5:1a:3c:82:ef:0a:41:49:fa:10:8c:c6:
                    ef:62:74:4d:af:3d:44:15:3b:23:ed:96:67:0f:95:
                    37:49:f5:00:5e:fb:f7:b9:52:e7:f6:16:ca:1b:51:
                    25:49:68:3c:ec:da:fb:39:fa:68:ce:75:05:5e:34:
                    dc:66:03:bd:f2:eb:e8:60:20:fa:65:3b:7e:b6:e3:
                    9f:35:05:71:da:32:1a:2e:68:2c:66:4e:db:69:01:
                    d1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:3C:BE:1E:2E:AD:B3:C2:00:F5:A6:3E:A6:01:95:6D:66:D6:4A:31
            X509v3 Authority Key Identifier:
                keyid:67:26:1D:DE:73:01:C7:38:57:B8:4C:1E:FD:17:E1:F8:57:3F:23:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DyVz9GUmpChJJxwGEbaeiC7vxn55MWaAnCwfeFBmpNpB/0/67261DDE7301C73857B84C1EFD17E1F8573F23E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67261DDE7301C73857B84C1EFD17E1F8573F23E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DyVz9GUmpChJJxwGEbaeiC7vxn55MWaAnCwfeFBmpNpB/0/67261DDE7301C73857B84C1EFD17E1F8573F23E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:bd:27:44:42:90:68:80:9e:8f:b5:14:65:f4:9c:65:a0:c1:
         f0:39:b1:51:9d:83:03:2c:e1:4b:7c:70:63:70:63:a7:f7:9f:
         0d:18:b3:94:ac:5c:da:48:af:59:f7:26:1e:d4:1b:48:de:c6:
         38:2f:66:18:13:0e:2d:46:02:62:9f:a2:0f:d2:8b:c4:be:26:
         5d:22:db:9f:c4:2e:77:1f:d1:cb:06:e2:bb:cd:99:8a:c5:89:
         10:42:5a:1d:ea:07:42:57:ad:e5:8a:49:b6:70:f8:4f:ee:88:
         93:2f:26:2b:18:b7:cd:6e:6f:b3:48:1c:48:02:b9:2c:9c:27:
         13:17:41:6d:4d:37:08:49:f0:f6:34:13:33:6c:16:45:3f:6f:
         c0:de:2d:d2:a4:e2:3a:10:d1:fe:f1:14:1a:a0:7c:db:d4:4a:
         b3:17:86:e3:3b:5b:ce:30:e6:72:b1:37:23:6c:da:b7:45:ae:
         fd:4c:a9:de:db:9e:f9:37:cb:af:76:2a:44:eb:d7:a4:96:6f:
         c4:c7:06:d9:43:e8:54:37:cc:01:f2:3b:16:00:67:f4:f7:e6:
         c1:8d:ef:f4:61:ca:5c:b7:5c:7c:0d:8c:c0:77:10:bb:3c:82:
         96:66:ae:9f:8e:be:cb:61:5a:3c:72:18:7e:24:3f:f9:85:64:
         34:da:ae:da
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJ+3u1CrhsmydatbB+TPCm0wURUEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjcyNjFEREU3MzAxQzczODU3Qjg0QzFFRkQxN0UxRjg1
NzNGMjNFNTAeFw0yNTEyMjQwNzA4MjJaFw0yNTEyMjUwOTU5MjJaMDMxMTAvBgNV
BAMTKDhDM0NCRTFFMkVBREIzQzIwMEY1QTYzRUE2MDE5NTZENjZENjRBMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu00sQlV1zkUwVmFty8Mz4HuPe
Y3N+cvJ+DU+sRTwH1gbgWW7Sn60Wu7FobAAwkkPpe3cyUuTTIfLvf2VhL626UoQb
f2/yodi9SpElmhbE2i0hBx+nzvV4Q4MvIcfdcMPhz11VszgftNp/lhUCrHJ32bQi
0UuJ3Ux5kLyeI3CZyEdCJ6gzzhRUpbeZYFhbdt2QnyU2hfEUrrIxDD+m1Aqk3a+d
ZXxvw6UaPILvCkFJ+hCMxu9idE2vPUQVOyPtlmcPlTdJ9QBe+/e5Uuf2FsobUSVJ
aDzs2vs5+mjOdQVeNNxmA73y6+hgIPplO3624581BXHaMhouaCxmTttpAdF1AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUjDy+Hi6ts8IA9aY+pgGVbWbWSjEwHwYDVR0j
BBgwFoAUZyYd3nMBxzhXuEwe/Rfh+Fc/I+UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHlWejlHVW1wQ2hKSnh3R0ViYWVpQzd2eG41NU1XYUFuQ3dmZUZCbXBO
cEIvMC82NzI2MURERTczMDFDNzM4NTdCODRDMUVGRDE3RTFGODU3M0YyM0U1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3MjYxRERFNzMwMUM3Mzg1
N0I4NEMxRUZEMTdFMUY4NTczRjIzRTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RHlWejlHVW1wQ2hKSnh3R0ViYWVpQzd2eG41NU1XYUFuQ3dmZUZCbXBOcEIvMC82
NzI2MURERTczMDFDNzM4NTdCODRDMUVGRDE3RTFGODU3M0YyM0U1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnb0nREKQaICej7UUZfScZaDB8DmxUZ2DAyzhS3xwY3Bjp/efDRizlKxc2kiv
WfcmHtQbSN7GOC9mGBMOLUYCYp+iD9KLxL4mXSLbn8Qudx/Rywbiu82ZisWJEEJa
HeoHQlet5YpJtnD4T+6Iky8mKxi3zW5vs0gcSAK5LJwnExdBbU03CEnw9jQTM2wW
RT9vwN4t0qTiOhDR/vEUGqB829RKsxeG4ztbzjDmcrE3I2zat0Wu/Uyp3tue+TfL
r3YqROvXpJZvxMcG2UPoVDfMAfI7FgBn9PfmwY3v9GHKXLdcfA2MwHcQuzyClmau
n46+y2FaPHIYfiQ/+YVkNNqu2g==
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:05:16 2025 by rpki-client