This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.mft
File:                     CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.mft (raw, json)
Hash identifier:          KgQiDEKQhY1/iXYYP8rXcmwf/qD0nM8jO7PdQuZ03Hc=
Subject key identifier:   35:22:32:A5:39:29:17:1E:17:2D:97:6F:46:70:1C:9D:B0:66:01:45
Authority key identifier: CA:FB:3F:D5:BF:98:78:D8:18:3A:B3:AD:06:18:B5:AE:D2:3F:DC:F4
Certificate issuer:       /CN=CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4
Certificate serial:       6CB5737F1E4EF4B228ED6E8183BF80CECDC7CB6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.mft
Manifest number:          0D
Signing time:             Sun 07 Dec 2025 13:11:48 +0000
Manifest this update:     Sun 07 Dec 2025 13:06:48 +0000
Manifest next update:     Mon 08 Dec 2025 13:16:48 +0000
Files and hashes:         1: CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.crl (hash: FcyJEee8ligr14U8CJnCKO3N1fDEH4xwPnme4HtPlSs=)
                          2: 34352e3138342e3131322e302f32322d3232203d3e20323639333936.roa (hash: 3yG2D2Cfamxvd/q8Sa5jAkhfU7jkrZ8jyqentjpklb4=)
                          3: 323830343a363366633a383030303a3a2f33332d3333203d3e20323639333936.roa (hash: Jx2HoGTpTEOFYaF0AGEQVcHJKWD+iwmHMigicirolok=)
                          4: AS269396.asa (hash: +lvkoxSMzs1JHWJbLvyknolUlvRr2j0KrvzDmZSEQg4=)
                          5: 34352e3138342e3131342e302f32332d3233203d3e20323639333936.roa (hash: 9Ll9SlYhCe9s5J3AdmUJk/u5EYDWZrDBERmYkJ4XipI=)
                          6: 34352e3138342e3131322e302f32332d3233203d3e20323639333936.roa (hash: SXfhTYQUUmxM0nOskdW9HWgudVdDt2GtsWPbeyqYdg8=)
                          7: 323830343a363366633a3a2f33322d3332203d3e20323639333936.roa (hash: MF6p37v2tgM05fGi90XZYc1EpUb1DUMPbHLr0xQOPXk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.crl
                          rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Dec 2025 13:16:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b5:73:7f:1e:4e:f4:b2:28:ed:6e:81:83:bf:80:ce:cd:c7:cb:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4
        Validity
            Not Before: Dec  7 13:06:48 2025 GMT
            Not After : Dec  8 13:16:48 2025 GMT
        Subject: CN=352232A53929171E172D976F46701C9DB0660145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f4:b0:61:56:73:ca:72:7a:f9:1e:6e:0c:53:
                    c9:c1:cb:b4:fd:6d:93:a5:cd:5e:da:68:be:9a:04:
                    bf:3e:e5:6a:00:a6:97:1a:d6:f7:59:fa:e6:8a:29:
                    a0:c0:7a:3a:bd:5c:cc:27:4c:0e:36:19:00:a4:7c:
                    ae:e8:46:fd:aa:02:1e:0a:b3:f3:a2:b9:a5:da:48:
                    22:eb:2b:d6:2c:e1:b8:ee:f8:00:5c:ae:b3:c3:87:
                    d3:22:16:d6:c1:68:b5:9d:9b:a6:0b:fa:04:11:b4:
                    81:1e:fb:cf:09:03:d4:55:6e:6a:8a:83:c7:ed:36:
                    b5:3b:05:01:a8:d5:02:20:80:20:6a:1e:2b:82:2b:
                    65:3d:65:d3:9f:c3:16:1f:35:0c:a9:db:c6:4d:df:
                    ea:e5:22:a8:9d:8e:f0:a1:6d:02:e7:05:40:31:f8:
                    b2:f0:de:9f:4b:96:71:b2:1c:6f:ed:5a:97:c4:05:
                    52:e4:db:10:32:e9:d0:81:6c:bf:d4:64:37:f3:02:
                    b8:d0:aa:30:d1:c1:f0:4c:d3:5a:97:9e:43:73:9b:
                    b5:b9:0a:7d:8f:50:08:7e:84:61:52:cf:af:de:17:
                    76:51:0e:b1:4f:51:8d:83:af:b4:26:71:11:75:bf:
                    71:0b:e7:26:01:92:97:e1:50:9c:1e:93:6d:01:bc:
                    8f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:22:32:A5:39:29:17:1E:17:2D:97:6F:46:70:1C:9D:B0:66:01:45
            X509v3 Authority Key Identifier:
                keyid:CA:FB:3F:D5:BF:98:78:D8:18:3A:B3:AD:06:18:B5:AE:D2:3F:DC:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:cb:9c:89:d0:a6:ca:d3:b8:7d:85:57:7a:67:55:93:f8:be:
         e7:e4:ad:43:63:9d:03:f6:57:6f:7e:09:22:cc:72:e8:eb:f5:
         39:24:3f:10:7a:45:8c:d3:e7:43:eb:03:9b:3f:de:c7:26:8e:
         ec:f5:23:bb:07:00:44:d6:bb:cc:6c:b3:9e:f2:5f:af:71:0e:
         c9:7b:73:2b:b6:48:d1:0c:44:0d:cc:40:bc:7d:39:1a:0d:1b:
         17:12:17:65:e8:32:bb:24:f1:0b:73:da:3a:75:8d:64:2c:00:
         4b:d2:39:f5:63:19:b8:48:f6:c5:f2:38:3c:33:58:9b:cc:45:
         2c:5f:cc:c5:99:b6:96:0b:74:fa:96:0f:9b:02:90:f6:80:ca:
         26:03:1a:29:32:73:fd:30:f6:b1:be:ed:45:68:aa:a5:b9:21:
         ba:f1:ff:bb:e9:0c:a1:83:98:c0:3e:71:4f:51:72:0d:dc:93:
         e5:41:ee:93:76:62:39:b4:1c:8a:27:01:4b:42:9f:03:bd:52:
         26:5c:32:49:c3:23:b5:5f:f1:bd:20:2e:70:55:0e:8c:5d:01:
         0a:2b:f0:64:9f:72:e3:f9:cc:16:4d:c2:8a:2f:1d:88:7d:65:
         1f:ac:9b:7a:b1:fd:33:21:e9:1d:fb:9d:95:82:db:9b:19:e1:
         44:8d:40:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 16:56:12 2025 by rpki-client