This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.mft
File:                     CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.mft (raw, json)
Hash identifier:          4h0pOcEjJ+l5wRqA2ou5QlpA4vn2dW9zb8QzzIqTUwA=
Subject key identifier:   53:9F:31:39:16:52:AD:C8:45:F2:4B:1D:AA:F5:24:E9:35:A8:22:88
Authority key identifier: CB:CD:6C:54:C2:AC:7A:F2:B0:CE:1B:67:2F:5C:D2:74:C0:17:95:1D
Certificate issuer:       /CN=CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D
Certificate serial:       451723C63FC7545F8EC4CBED530FA0F8D5257A02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.mft
Manifest number:          0126
Signing time:             Mon 22 Dec 2025 18:52:33 +0000
Manifest this update:     Mon 22 Dec 2025 18:47:33 +0000
Manifest next update:     Tue 23 Dec 2025 21:18:33 +0000
Files and hashes:         1: 3136342e3136332e3139322e302f32322d3234203d3e20323731323533.roa (hash: Ql0iF5+L4dTD64DGYvCGzGkD3jGu1jUv08rhoiafxWk=)
                          2: 323830343a373839383a3a2f33322d3438203d3e20323731323533.roa (hash: xW+fvQFNMFekLO82/E1nb9mF3MD5AQJ7vbCnI5uk25M=)
                          3: CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.crl (hash: iLXVtG2I9NhKswbAlZmx0HF6j51eg/yKg4EzDtA9imE=)
                          4: 34352e3137322e39362e302f32322d3234203d3e20323731323533.roa (hash: rTC/gTT60746fE/p9fdkgPaXlGesIZj5KkmlOE1e4Fo=)
                          5: 3133312e3235352e35362e302f32322d3234203d3e20323731323533.roa (hash: uU+/csjT2NVQbIjnMFhPC8+dLWEEVAp/0FwA71AGAfg=)
                          6: 34352e3138302e31362e302f32322d3234203d3e20323731323533.roa (hash: Nf+xU4blwD0X0As5SResq4LdKOlUrjeZB1DEmIYQBKE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.crl
                          rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 21:18:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:17:23:c6:3f:c7:54:5f:8e:c4:cb:ed:53:0f:a0:f8:d5:25:7a:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D
        Validity
            Not Before: Dec 22 18:47:33 2025 GMT
            Not After : Dec 23 21:18:33 2025 GMT
        Subject: CN=539F31391652ADC845F24B1DAAF524E935A82288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b3:20:b5:59:dd:5d:97:a1:3f:29:3a:3d:8e:
                    94:4f:ca:8e:2d:21:dd:b5:78:d7:52:20:29:6c:b0:
                    fb:d9:87:33:27:1b:23:41:48:78:db:f3:72:72:19:
                    9e:65:e7:c5:cc:a8:b6:27:7d:54:39:f2:db:6f:c2:
                    dd:a2:88:e8:43:78:4a:ba:61:a9:6c:ad:de:de:c6:
                    02:d3:32:f2:ef:c7:71:c9:53:6d:0b:c8:59:1f:43:
                    bb:91:d7:af:02:f0:f3:45:6d:26:9f:37:79:1b:a5:
                    db:58:63:7d:27:e0:f8:04:ae:60:43:32:c0:e1:d0:
                    1e:c0:9a:55:1f:ea:29:9f:65:0f:ba:7e:21:e9:27:
                    c8:0a:b2:29:f5:95:af:c1:3f:9c:ce:b2:41:01:a1:
                    57:46:a2:4e:0e:91:93:67:43:8e:ec:7a:3b:07:f4:
                    f6:30:7d:e0:48:5e:96:dc:d4:7a:14:7f:61:14:39:
                    43:2c:ea:40:fd:14:4b:9c:17:10:6b:77:76:c5:aa:
                    d7:6f:6d:c5:c2:4d:1a:65:12:05:4f:38:da:ec:37:
                    0f:20:c6:04:cc:9d:9b:f3:65:97:b3:91:eb:fd:79:
                    c9:ec:36:7e:15:8c:41:5d:be:e0:14:2e:2e:03:56:
                    7b:7f:4f:4d:31:81:18:9d:c1:57:a9:c1:d3:f1:06:
                    72:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:9F:31:39:16:52:AD:C8:45:F2:4B:1D:AA:F5:24:E9:35:A8:22:88
            X509v3 Authority Key Identifier:
                keyid:CB:CD:6C:54:C2:AC:7A:F2:B0:CE:1B:67:2F:5C:D2:74:C0:17:95:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:d0:4d:6a:46:51:da:b5:09:98:88:42:08:07:1a:54:4e:3e:
         1c:f3:9d:ee:2f:41:66:4c:e2:6f:16:04:35:40:65:56:4a:2b:
         b0:28:47:48:ac:24:e3:48:4a:0c:18:32:fc:7c:4b:4e:f0:cc:
         36:e5:68:ff:08:c4:c7:7a:97:2a:6c:25:2f:fc:8e:19:86:e9:
         8d:99:5c:05:aa:e4:1d:20:b6:d9:86:0f:2f:9c:4b:77:af:a1:
         e6:d2:e7:22:d2:be:df:5e:12:aa:38:53:35:f7:f6:9c:46:8e:
         44:79:c4:48:8b:0b:a6:69:52:6a:72:f5:09:f9:1a:17:d8:54:
         34:96:6f:d0:0c:d9:fe:e3:3a:25:e0:4e:68:da:25:39:c3:70:
         d6:3a:06:ad:1b:76:99:f8:c9:db:5f:a2:a2:43:d1:ad:f7:0e:
         4a:7f:7c:51:16:53:4f:2e:d4:f6:2b:a3:fe:40:f0:1b:06:c9:
         23:48:b6:59:f9:f3:95:d9:ed:86:b2:55:bc:74:55:a8:e6:76:
         f9:ec:a4:43:65:48:84:cd:7b:fa:f9:08:ed:86:39:29:eb:f5:
         55:40:d0:80:d9:d2:de:cf:55:65:7c:56:c9:e3:72:bd:95:71:
         0d:e6:a9:87:fd:05:94:af:6c:80:8d:3f:cd:e1:7d:ce:bf:83:
         a8:0d:06:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURRcjxj/HVF+OxMvtUw+g+NUlegIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JDRDZDNTRDMkFDN0FGMkIwQ0UxQjY3MkY1Q0QyNzRD
MDE3OTUxRDAeFw0yNTEyMjIxODQ3MzNaFw0yNTEyMjMyMTE4MzNaMDMxMTAvBgNV
BAMTKDUzOUYzMTM5MTY1MkFEQzg0NUYyNEIxREFBRjUyNEU5MzVBODIyODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtsyC1Wd1dl6E/KTo9jpRPyo4t
Id21eNdSIClssPvZhzMnGyNBSHjb83JyGZ5l58XMqLYnfVQ58ttvwt2iiOhDeEq6
Yalsrd7exgLTMvLvx3HJU20LyFkfQ7uR168C8PNFbSafN3kbpdtYY30n4PgErmBD
MsDh0B7AmlUf6imfZQ+6fiHpJ8gKsin1la/BP5zOskEBoVdGok4OkZNnQ47sejsH
9PYwfeBIXpbc1HoUf2EUOUMs6kD9FEucFxBrd3bFqtdvbcXCTRplEgVPONrsNw8g
xgTMnZvzZZezkev9ecnsNn4VjEFdvuAULi4DVnt/T00xgRidwVepwdPxBnIJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUU58xORZSrchF8ksdqvUk6TWoIogwHwYDVR0j
BBgwFoAUy81sVMKsevKwzhtnL1zSdMAXlR0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWVoc0NtQU1EZ3c2MzdLeWZBTGttc1JvZVF4Q1NHVVFCWTQ4aExxRGho
UE0vMC9DQkNENkM1NEMyQUM3QUYyQjBDRTFCNjcyRjVDRDI3NEMwMTc5NTFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCQ0Q2QzU0QzJBQzdBRjJC
MENFMUI2NzJGNUNEMjc0QzAxNzk1MUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RWVoc0NtQU1EZ3c2MzdLeWZBTGttc1JvZVF4Q1NHVVFCWTQ4aExxRGhoUE0vMC9D
QkNENkM1NEMyQUM3QUYyQjBDRTFCNjcyRjVDRDI3NEMwMTc5NTFELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAl9BNakZR2rUJmIhCCAcaVE4+HPOd7i9BZkzibxYENUBlVkorsChHSKwk40hK
DBgy/HxLTvDMNuVo/wjEx3qXKmwlL/yOGYbpjZlcBarkHSC22YYPL5xLd6+h5tLn
ItK+314SqjhTNff2nEaORHnESIsLpmlSanL1CfkaF9hUNJZv0AzZ/uM6JeBOaNol
OcNw1joGrRt2mfjJ21+iokPRrfcOSn98URZTTy7U9iuj/kDwGwbJI0i2Wfnzldnt
hrJVvHRVqOZ2+eykQ2VIhM17+vkI7YY5Kev1VUDQgNnS3s9VZXxWyeNyvZVxDeap
h/0FlK9sgI0/zeF9zr+DqA0Gkw==
-----END CERTIFICATE-----
Generated at Tue Dec 23 11:19:31 2025 by rpki-client