This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.mft
File:                     D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.mft (raw, json)
Hash identifier:          5U9fskgjiCw3ETs9BGpN5Y4YR1guAq58BwPFtc4ZBZ0=
Subject key identifier:   1A:37:91:E8:6C:93:96:4D:C6:1A:9D:F6:F9:A9:74:DC:84:A4:AA:EB
Authority key identifier: D9:C9:4E:0B:7C:90:50:30:F4:DB:01:C3:3B:F8:C1:68:2B:2E:04:2F
Certificate issuer:       /CN=D9C94E0B7C905030F4DB01C33BF8C1682B2E042F
Certificate serial:       6C853EA238A6F8213AADE728330FDDE6B14F9C23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.mft
Manifest number:          0341
Signing time:             Fri 19 Dec 2025 18:20:14 +0000
Manifest this update:     Fri 19 Dec 2025 18:15:14 +0000
Manifest next update:     Sat 20 Dec 2025 19:23:14 +0000
Files and hashes:         1: 3133312e3130382e32382e302f32322d3234203d3e203631363539.roa (hash: LpLs+i3g/uLpn4OYQy4EM5R0tGf85XQBkDf3K9t6dhk=)
                          2: 323830343a316338343a3a2f33322d3438203d3e203631363539.roa (hash: nZ1gopaqkmRR4chzafMFQB8Y4M4MiBNQU4L++aKleIU=)
                          3: D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.crl (hash: 1xbbxCsWOLqLU4pF0ihbZpR/xuLYvB4uxB0HQzvMd5M=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.crl
                          rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 19:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:85:3e:a2:38:a6:f8:21:3a:ad:e7:28:33:0f:dd:e6:b1:4f:9c:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9C94E0B7C905030F4DB01C33BF8C1682B2E042F
        Validity
            Not Before: Dec 19 18:15:14 2025 GMT
            Not After : Dec 20 19:23:14 2025 GMT
        Subject: CN=1A3791E86C93964DC61A9DF6F9A974DC84A4AAEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5e:32:ab:83:30:82:45:65:a1:97:35:c5:00:
                    30:e6:91:4a:51:56:a4:9e:dc:e9:2d:1f:c9:aa:01:
                    98:ac:53:9f:3a:27:26:32:e5:6f:49:2e:c6:91:74:
                    c9:23:57:72:7d:49:c9:31:c9:4e:7b:58:69:8f:c3:
                    82:bf:52:90:44:59:d1:ff:87:a7:9d:a5:2e:ad:ed:
                    a1:0e:7f:2f:ca:c3:f6:f9:fe:16:de:6d:00:d7:b9:
                    08:ff:cf:ce:98:70:64:66:65:27:88:e5:53:a2:a9:
                    d6:6e:39:c3:98:a2:79:b4:d2:ea:7a:d0:1a:1c:de:
                    d3:63:c5:c0:3d:af:4e:f7:ea:12:7a:1a:69:4e:88:
                    e7:6d:b0:ef:13:7c:a3:7c:69:36:8e:9b:d1:37:87:
                    05:aa:5f:e5:76:1b:7a:e1:16:0a:b8:ab:4d:5c:b5:
                    2c:b6:c6:56:23:e7:3c:dc:fd:6d:89:b6:91:55:a7:
                    6e:ad:4a:c2:86:12:29:ae:3f:f9:01:03:48:6b:23:
                    5e:b7:e3:2c:66:44:5f:6f:72:7e:35:20:bc:5c:7f:
                    cf:d5:e1:5a:39:84:0c:e8:a0:d6:74:18:37:6a:0a:
                    5a:16:7a:93:62:01:7d:9b:bc:97:df:51:2a:18:71:
                    39:cc:36:e9:94:73:91:93:03:2a:49:22:01:81:34:
                    6c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:37:91:E8:6C:93:96:4D:C6:1A:9D:F6:F9:A9:74:DC:84:A4:AA:EB
            X509v3 Authority Key Identifier:
                keyid:D9:C9:4E:0B:7C:90:50:30:F4:DB:01:C3:3B:F8:C1:68:2B:2E:04:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:64:92:17:71:69:7b:26:fa:04:91:44:c9:ac:e8:65:e4:9a:
         70:1a:b0:4b:e6:dd:c8:5d:4e:b6:d6:03:13:52:52:6c:b4:1f:
         fa:b4:c0:4b:d2:eb:3a:78:e1:b1:6d:8d:22:8b:f7:5c:d2:3f:
         e8:50:93:f8:ce:30:80:6a:ba:0f:be:25:f1:58:84:44:08:55:
         d7:e3:9c:5f:19:67:5e:b9:c0:cd:c3:0e:95:2c:cb:9a:25:01:
         42:57:14:af:aa:d8:6b:2d:46:7c:11:c3:4e:33:d0:70:c6:c5:
         fb:3b:02:68:02:70:69:52:f9:47:1c:b9:c9:ea:70:cd:66:68:
         48:74:f6:38:aa:59:24:2c:73:cd:97:ff:c7:5c:df:4b:78:eb:
         12:0e:28:8d:85:ae:88:39:4d:01:c0:f5:e3:20:58:64:64:dd:
         ef:99:d9:de:7a:e0:a5:c7:4d:4c:5e:4e:1b:54:1b:ef:49:ae:
         55:18:32:17:e3:65:34:4f:95:94:46:48:6f:37:27:4e:d2:f8:
         c2:5b:9c:8e:fc:2e:5d:29:16:be:76:c2:2c:41:93:b7:54:8b:
         be:aa:e1:e7:e4:d6:42:eb:27:d3:68:97:df:cf:7f:c7:12:3f:
         ca:cc:63:6f:4a:ab:b0:48:e9:9a:33:db:1d:62:dd:bc:d0:a2:
         5b:48:3c:98
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUbIU+ojim+CE6recoMw/d5rFPnCMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDlDOTRFMEI3QzkwNTAzMEY0REIwMUMzM0JGOEMxNjgy
QjJFMDQyRjAeFw0yNTEyMTkxODE1MTRaFw0yNTEyMjAxOTIzMTRaMDMxMTAvBgNV
BAMTKDFBMzc5MUU4NkM5Mzk2NERDNjFBOURGNkY5QTk3NERDODRBNEFBRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+XjKrgzCCRWWhlzXFADDmkUpR
VqSe3OktH8mqAZisU586JyYy5W9JLsaRdMkjV3J9SckxyU57WGmPw4K/UpBEWdH/
h6edpS6t7aEOfy/Kw/b5/hbebQDXuQj/z86YcGRmZSeI5VOiqdZuOcOYonm00up6
0Boc3tNjxcA9r0736hJ6GmlOiOdtsO8TfKN8aTaOm9E3hwWqX+V2G3rhFgq4q01c
tSy2xlYj5zzc/W2JtpFVp26tSsKGEimuP/kBA0hrI1634yxmRF9vcn41ILxcf8/V
4Vo5hAzooNZ0GDdqCloWepNiAX2bvJffUSoYcTnMNumUc5GTAypJIgGBNGwpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUGjeR6GyTlk3GGp32+al03ISkquswHwYDVR0j
BBgwFoAU2clOC3yQUDD02wHDO/jBaCsuBC8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVA4WW52WWVyOGlrNk0zUExodDNxWFdjdVloUTViWllnVzVhTHN3UVhk
ZVkvMS9EOUM5NEUwQjdDOTA1MDMwRjREQjAxQzMzQkY4QzE2ODJCMkUwNDJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5Qzk0RTBCN0M5MDUwMzBG
NERCMDFDMzNCRjhDMTY4MkIyRTA0MkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RVA4WW52WWVyOGlrNk0zUExodDNxWFdjdVloUTViWllnVzVhTHN3UVhkZVkvMS9E
OUM5NEUwQjdDOTA1MDMwRjREQjAxQzMzQkY4QzE2ODJCMkUwNDJGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAl2SSF3Fpeyb6BJFEyazoZeSacBqwS+bdyF1OttYDE1JSbLQf+rTAS9LrOnjh
sW2NIov3XNI/6FCT+M4wgGq6D74l8ViERAhV1+OcXxlnXrnAzcMOlSzLmiUBQlcU
r6rYay1GfBHDTjPQcMbF+zsCaAJwaVL5Rxy5yepwzWZoSHT2OKpZJCxzzZf/x1zf
S3jrEg4ojYWuiDlNAcD14yBYZGTd75nZ3nrgpcdNTF5OG1Qb70muVRgyF+NlNE+V
lEZIbzcnTtL4wlucjvwuXSkWvnbCLEGTt1SLvqrh5+TWQusn02iX389/xxI/ysxj
b0qrsEjpmjPbHWLdvNCiW0g8mA==
-----END CERTIFICATE-----
Generated at Sat Dec 20 12:40:29 2025 by rpki-client