This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/0/486F1988E524109FEE5954E3D13AD3BEA739160B.mft
File:                     486F1988E524109FEE5954E3D13AD3BEA739160B.mft (raw, json)
Hash identifier:          kwtGbDk+wRDOB/O443nhY5yAdxLoJX0ksgBt3qtTzuw=
Subject key identifier:   0E:CC:71:AE:CC:22:EF:0A:65:39:65:52:16:9E:4E:5C:8A:13:E5:05
Authority key identifier: 48:6F:19:88:E5:24:10:9F:EE:59:54:E3:D1:3A:D3:BE:A7:39:16:0B
Certificate issuer:       /CN=486F1988E524109FEE5954E3D13AD3BEA739160B
Certificate serial:       2AD565A719FDA37531C78E4A940D61FD6166E227
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/486F1988E524109FEE5954E3D13AD3BEA739160B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/0/486F1988E524109FEE5954E3D13AD3BEA739160B.mft
Manifest number:          0333
Signing time:             Sat 20 Dec 2025 14:35:34 +0000
Manifest this update:     Sat 20 Dec 2025 14:30:34 +0000
Manifest next update:     Sun 21 Dec 2025 16:35:34 +0000
Files and hashes:         1: 3139302e3131352e38302e302f32322d3234203d3e20323730343535.roa (hash: sxLPpB22UfB14OamzqKocBAD2WPku1yTLrOQpKGlgJk=)
                          2: 486F1988E524109FEE5954E3D13AD3BEA739160B.crl (hash: 2rV3pSJX6099i9/QrtkImelvAa/Pu3W5V/4LqPQIFmU=)
                          3: 323830343a366334303a3a2f33322d3438203d3e20323730343535.roa (hash: EOxsB8csRRjHNER5YoQtpmRco45XZ31J0J3TSyssxsA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/0/486F1988E524109FEE5954E3D13AD3BEA739160B.crl
                          rsync://rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/0/486F1988E524109FEE5954E3D13AD3BEA739160B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/486F1988E524109FEE5954E3D13AD3BEA739160B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 16:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d5:65:a7:19:fd:a3:75:31:c7:8e:4a:94:0d:61:fd:61:66:e2:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486F1988E524109FEE5954E3D13AD3BEA739160B
        Validity
            Not Before: Dec 20 14:30:34 2025 GMT
            Not After : Dec 21 16:35:34 2025 GMT
        Subject: CN=0ECC71AECC22EF0A65396552169E4E5C8A13E505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1e:80:98:74:cb:e1:52:95:25:6d:2d:e0:20:
                    ab:a1:fc:c9:20:ea:c5:ad:95:27:1c:00:1f:52:56:
                    f6:9c:13:85:27:78:24:f6:bf:c4:39:2a:fd:18:d1:
                    f4:82:51:2a:00:a3:c1:fa:f2:17:34:cd:4b:65:77:
                    24:73:9e:64:02:57:80:a5:a7:98:fb:70:2e:62:fa:
                    98:9d:47:e0:5f:12:64:b4:b5:80:ca:e2:99:8f:ae:
                    65:f5:b8:b8:f5:20:58:3f:6c:04:6b:7d:eb:87:ba:
                    00:e1:6f:ca:1c:d9:0a:94:98:53:ce:d5:c7:f6:ce:
                    6c:f4:f2:50:0b:f7:6a:c3:0d:3a:3f:98:a8:5d:90:
                    02:2f:70:55:98:a5:f6:24:87:35:c7:3a:9a:39:90:
                    a3:f8:05:10:77:12:62:64:56:45:fe:a2:23:17:85:
                    b4:35:91:59:a1:d6:98:a2:de:03:6d:5e:cb:10:a0:
                    bf:01:18:b9:a2:a5:02:58:71:c1:a7:db:32:c8:2f:
                    2c:df:d1:75:97:89:70:e6:e2:95:aa:f5:be:5c:b6:
                    d7:e7:c5:b3:9d:a9:75:7c:36:ad:57:eb:7f:79:7c:
                    c8:5c:21:d3:13:d7:03:10:30:6a:72:bf:40:52:40:
                    e1:74:26:17:9f:d6:de:c0:73:99:5b:e0:02:b5:76:
                    9a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CC:71:AE:CC:22:EF:0A:65:39:65:52:16:9E:4E:5C:8A:13:E5:05
            X509v3 Authority Key Identifier:
                keyid:48:6F:19:88:E5:24:10:9F:EE:59:54:E3:D1:3A:D3:BE:A7:39:16:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/0/486F1988E524109FEE5954E3D13AD3BEA739160B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/486F1988E524109FEE5954E3D13AD3BEA739160B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/0/486F1988E524109FEE5954E3D13AD3BEA739160B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:0b:d4:53:06:ae:0b:f3:ed:69:f7:42:e6:d6:b4:42:82:4d:
         40:21:89:1d:c5:0e:a8:ef:17:84:de:1b:55:5e:40:e9:ce:9a:
         ef:1c:22:ed:26:d8:f4:1b:0a:a9:e9:1d:82:07:c2:d7:42:16:
         4b:4e:7d:c9:ed:0d:3d:95:4a:f1:8b:49:3e:55:5c:6e:20:c6:
         64:27:28:da:23:db:9d:9b:f0:28:8d:c5:a2:bd:ce:55:be:44:
         b3:ef:a0:fc:9f:3a:83:90:61:8a:dc:b9:9c:9f:e6:66:98:bc:
         3d:83:58:fe:ec:07:80:82:c6:14:fd:61:2e:e5:11:2f:bc:7e:
         48:fb:7d:03:28:68:43:df:21:dd:c6:1f:e3:69:42:42:dd:3b:
         c9:18:27:8d:3c:d3:cc:05:36:00:73:2c:fa:52:d5:71:ee:7c:
         e4:55:40:8b:c8:84:8f:cc:df:48:3c:23:35:67:72:18:2e:07:
         1b:d5:20:36:06:fc:42:c8:c5:b2:10:20:60:4c:f7:c2:d8:91:
         97:20:0a:ca:63:66:06:79:52:ca:97:95:3e:dc:1e:cb:da:ee:
         43:31:64:b0:b8:b7:d0:a3:2b:1a:e4:ec:d2:76:81:82:b1:a4:
         25:34:66:5b:3d:20:ab:4e:15:72:3b:2f:28:9e:6f:48:e9:63:
         b5:3d:50:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKtVlpxn9o3Uxx45KlA1h/WFm4icwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDg2RjE5ODhFNTI0MTA5RkVFNTk1NEUzRDEzQUQzQkVB
NzM5MTYwQjAeFw0yNTEyMjAxNDMwMzRaFw0yNTEyMjExNjM1MzRaMDMxMTAvBgNV
BAMTKDBFQ0M3MUFFQ0MyMkVGMEE2NTM5NjU1MjE2OUU0RTVDOEExM0U1MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQHoCYdMvhUpUlbS3gIKuh/Mkg
6sWtlSccAB9SVvacE4UneCT2v8Q5Kv0Y0fSCUSoAo8H68hc0zUtldyRznmQCV4Cl
p5j7cC5i+pidR+BfEmS0tYDK4pmPrmX1uLj1IFg/bARrfeuHugDhb8oc2QqUmFPO
1cf2zmz08lAL92rDDTo/mKhdkAIvcFWYpfYkhzXHOpo5kKP4BRB3EmJkVkX+oiMX
hbQ1kVmh1pii3gNtXssQoL8BGLmipQJYccGn2zLILyzf0XWXiXDm4pWq9b5cttfn
xbOdqXV8Nq1X6395fMhcIdMT1wMQMGpyv0BSQOF0Jhef1t7Ac5lb4AK1dpo3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUDsxxrswi7wplOWVSFp5OXIoT5QUwHwYDVR0j
BBgwFoAUSG8ZiOUkEJ/uWVTj0TrTvqc5FgswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkhFaVVmMks1NXg1Y29XNkJIcHlTV0dNWmRtNnFLRGVGMUhYV21xalZw
TDgvMC80ODZGMTk4OEU1MjQxMDlGRUU1OTU0RTNEMTNBRDNCRUE3MzkxNjBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ4NkYxOTg4RTUyNDEwOUZF
RTU5NTRFM0QxM0FEM0JFQTczOTE2MEIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RkhFaVVmMks1NXg1Y29XNkJIcHlTV0dNWmRtNnFLRGVGMUhYV21xalZwTDgvMC80
ODZGMTk4OEU1MjQxMDlGRUU1OTU0RTNEMTNBRDNCRUE3MzkxNjBCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnwvUUwauC/PtafdC5ta0QoJNQCGJHcUOqO8XhN4bVV5A6c6a7xwi7SbY9BsK
qekdggfC10IWS059ye0NPZVK8YtJPlVcbiDGZCco2iPbnZvwKI3For3OVb5Es++g
/J86g5Bhity5nJ/mZpi8PYNY/uwHgILGFP1hLuURL7x+SPt9AyhoQ98h3cYf42lC
Qt07yRgnjTzTzAU2AHMs+lLVce585FVAi8iEj8zfSDwjNWdyGC4HG9UgNgb8QsjF
shAgYEz3wtiRlyAKymNmBnlSypeVPtwey9ruQzFksLi30KMrGuTs0naBgrGkJTRm
Wz0gq04VcjsvKJ5vSOljtT1Qqw==
-----END CERTIFICATE-----
Generated at Sat Dec 20 23:59:22 2025 by rpki-client