This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FMmLPGwXaqHUyFttaEWc4UQi7gYWhr3WbPrKxENiaEA5/0/ECB433183132CC4AB44E4E77CB4AD589FFC36B64.mft
File:                     ECB433183132CC4AB44E4E77CB4AD589FFC36B64.mft (raw, json)
Hash identifier:          wzBX2If5nngDBtvQ2HjLRDru4Gktj7Z2yakF8Ov1PBQ=
Subject key identifier:   22:8B:ED:FA:FE:CD:35:C7:45:16:29:0B:05:27:44:5B:C0:9A:2B:D7
Authority key identifier: EC:B4:33:18:31:32:CC:4A:B4:4E:4E:77:CB:4A:D5:89:FF:C3:6B:64
Certificate issuer:       /CN=ECB433183132CC4AB44E4E77CB4AD589FFC36B64
Certificate serial:       06896C7D9C6B7DEEA576B2E0A38EEFC7DD230079
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECB433183132CC4AB44E4E77CB4AD589FFC36B64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMmLPGwXaqHUyFttaEWc4UQi7gYWhr3WbPrKxENiaEA5/0/ECB433183132CC4AB44E4E77CB4AD589FFC36B64.mft
Manifest number:          0185
Signing time:             Sun 21 Dec 2025 16:18:22 +0000
Manifest this update:     Sun 21 Dec 2025 16:13:22 +0000
Manifest next update:     Mon 22 Dec 2025 19:58:22 +0000
Files and hashes:         1: 323830343a343239633a383030303a3a2f33332d3333203d3e20323637353132.roa (hash: 9va2hBXBijgamV37hUvokCAzxgduKfipi4Y5zw7UOuU=)
                          2: 323830343a343239633a3a2f33332d3333203d3e20323637353132.roa (hash: BHF6cPdBzeasQ/QUyf4WQjN6XosgpgrOq0kX3Ed76pU=)
                          3: ECB433183132CC4AB44E4E77CB4AD589FFC36B64.crl (hash: lbU2KSD9AXNS7qpNFT2r4sO6inUb3lIYjcNJazfEDTU=)
                          4: 3230312e3138322e3131362e302f32322d3232203d3e20323637353132.roa (hash: tzLyg7bGRBrj3mUHIRYDC2dVu0mWy/nykCKge/hqnLc=)
                          5: 3230312e3138322e3131362e302f32332d3234203d3e20323637353132.roa (hash: 3+QREmkXsnt0XGAFeA3TxUXQ/61rffdfWNhxhmLcUQE=)
                          6: 323830343a343239633a3a2f33322d3332203d3e20323637353132.roa (hash: ouK5LQ5z7SJDj347TdCjw/PhHUldymv0zv5sDELn8rA=)
                          7: 3230312e3138322e3131392e302f32342d3234203d3e20323637353132.roa (hash: d3K2hYma6wmE35eRMkmrKq6grdTI2vlcFrmYn+T2rsQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FMmLPGwXaqHUyFttaEWc4UQi7gYWhr3WbPrKxENiaEA5/0/ECB433183132CC4AB44E4E77CB4AD589FFC36B64.crl
                          rsync://rpki-repo.registro.br/repo/FMmLPGwXaqHUyFttaEWc4UQi7gYWhr3WbPrKxENiaEA5/0/ECB433183132CC4AB44E4E77CB4AD589FFC36B64.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECB433183132CC4AB44E4E77CB4AD589FFC36B64.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 19:58:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:89:6c:7d:9c:6b:7d:ee:a5:76:b2:e0:a3:8e:ef:c7:dd:23:00:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECB433183132CC4AB44E4E77CB4AD589FFC36B64
        Validity
            Not Before: Dec 21 16:13:22 2025 GMT
            Not After : Dec 22 19:58:22 2025 GMT
        Subject: CN=228BEDFAFECD35C74516290B0527445BC09A2BD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9e:9a:e4:10:bc:5d:c9:df:93:77:94:5d:39:
                    2e:a7:22:6f:07:da:37:a8:05:4c:32:1c:0a:9a:b3:
                    53:4c:75:14:48:59:74:6b:36:40:fe:10:58:81:89:
                    f9:a5:4a:cc:c3:54:96:79:5c:12:81:9c:0c:a8:e2:
                    0e:84:e1:e8:e1:3b:75:39:97:a4:cf:49:1f:ff:b3:
                    81:47:72:8e:b1:d0:a1:a6:2c:38:a6:ad:4f:75:37:
                    c5:a7:3c:30:b3:a6:7c:27:e2:19:f4:91:bd:6a:bb:
                    71:a7:10:28:60:4a:66:ab:37:15:4b:ab:28:61:eb:
                    5c:53:ba:d7:06:f3:c6:48:7c:01:c9:b2:7e:af:30:
                    79:7a:31:17:42:c1:01:1b:a4:22:fe:94:68:59:10:
                    f0:b7:9c:2c:c7:b6:cd:1a:eb:3a:01:3f:d7:c5:21:
                    8c:4f:69:a0:ff:0b:09:18:5c:51:e2:7d:0e:68:97:
                    af:92:31:c0:45:bf:24:59:c5:79:72:77:2a:aa:71:
                    ff:c1:d6:1f:fc:65:cb:f0:b1:35:6a:7b:87:71:bc:
                    46:00:02:33:0e:ba:41:14:f4:82:e4:d1:c9:32:45:
                    05:82:78:f0:8f:bc:c7:c2:5f:4d:55:49:a3:a9:b5:
                    88:0b:de:9d:b6:ae:b2:d7:9d:5e:4f:1d:7b:f8:51:
                    be:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:8B:ED:FA:FE:CD:35:C7:45:16:29:0B:05:27:44:5B:C0:9A:2B:D7
            X509v3 Authority Key Identifier:
                keyid:EC:B4:33:18:31:32:CC:4A:B4:4E:4E:77:CB:4A:D5:89:FF:C3:6B:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMmLPGwXaqHUyFttaEWc4UQi7gYWhr3WbPrKxENiaEA5/0/ECB433183132CC4AB44E4E77CB4AD589FFC36B64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECB433183132CC4AB44E4E77CB4AD589FFC36B64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMmLPGwXaqHUyFttaEWc4UQi7gYWhr3WbPrKxENiaEA5/0/ECB433183132CC4AB44E4E77CB4AD589FFC36B64.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:5f:ce:c5:b3:77:c0:90:de:a5:27:36:0b:9d:77:39:3d:2d:
         03:2d:e6:8f:18:50:c3:84:16:29:db:6d:d3:07:54:79:f3:e2:
         38:19:97:76:48:53:fd:d4:15:75:ad:68:e7:d9:d3:86:e3:03:
         b3:d1:a2:a4:32:31:6b:cf:1f:a3:b4:be:f5:a3:b0:13:8c:56:
         51:77:30:01:69:8b:79:e9:c8:d6:47:95:4e:bf:d5:3a:b6:ec:
         94:2e:94:7c:9f:5a:90:33:72:09:40:3a:dc:d9:60:31:53:0a:
         4b:18:66:3b:a3:ee:86:80:29:28:cc:2f:8f:1a:85:81:8c:5a:
         c9:b4:ae:8b:7e:c3:bc:bd:cf:54:69:02:25:16:10:2b:ad:0a:
         49:6f:5c:1b:3d:36:97:57:af:f8:cd:b0:78:bf:8a:81:ec:f6:
         b9:40:24:d8:a9:36:09:d4:ea:17:bb:8b:91:21:4a:c6:53:2f:
         28:a7:b9:8d:1f:d9:4d:37:85:db:38:75:83:b3:23:ff:ba:1d:
         a8:d4:dc:e3:6f:a0:d3:f4:e8:92:54:69:0a:f7:17:08:2b:9d:
         f3:5d:d5:9f:a8:79:61:9c:45:d2:7a:e4:07:c7:85:07:09:b3:
         20:82:0b:87:5b:f9:dd:33:5c:32:8b:79:62:76:ab:8c:2f:f5:
         11:93:96:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 21:30:07 2025 by rpki-client