This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
File:                     8EAA572CDAB740A56977FFFC602F113E473F2E77.mft (raw, json)
Hash identifier:          V9wJ+GCHY+5L0+sj8ZS6wfnrcNOD3kaU+1A5oDHVSxU=
Subject key identifier:   8D:AD:27:AC:53:3D:86:69:A9:2F:51:B6:05:86:B4:7C:0B:6F:55:94
Authority key identifier: 8E:AA:57:2C:DA:B7:40:A5:69:77:FF:FC:60:2F:11:3E:47:3F:2E:77
Certificate issuer:       /CN=8EAA572CDAB740A56977FFFC602F113E473F2E77
Certificate serial:       1FD349B24A078A52BA24ACB5C797DC72ACDC68AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
Manifest number:          0340
Signing time:             Fri 19 Dec 2025 08:09:19 +0000
Manifest this update:     Fri 19 Dec 2025 08:04:19 +0000
Manifest next update:     Sat 20 Dec 2025 10:39:19 +0000
Files and hashes:         1: 3138362e3230392e3232342e302f32302d3232203d3e203533313534.roa (hash: GP5N/ojn+CpGVA4mqG79uEfaVmGi1ccM9DHakURSDw8=)
                          2: 8EAA572CDAB740A56977FFFC602F113E473F2E77.crl (hash: bAuNfK3Ubbm9e3JraobYbr+BfgsQh5qh/SLMerk4e4Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.crl
                          rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 10:39:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:d3:49:b2:4a:07:8a:52:ba:24:ac:b5:c7:97:dc:72:ac:dc:68:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EAA572CDAB740A56977FFFC602F113E473F2E77
        Validity
            Not Before: Dec 19 08:04:19 2025 GMT
            Not After : Dec 20 10:39:19 2025 GMT
        Subject: CN=8DAD27AC533D8669A92F51B60586B47C0B6F5594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7f:07:16:98:94:23:2d:95:d9:6d:8f:e8:10:
                    29:ab:0b:3a:45:8e:72:ec:8c:af:6f:ae:d0:15:54:
                    bb:93:d1:49:a2:cb:65:30:d7:8f:c5:69:eb:c4:fe:
                    25:30:a3:97:0e:79:9d:d3:8d:41:ea:b7:f7:6d:90:
                    9e:b9:33:2b:4d:ab:c6:72:98:10:0d:75:81:7d:76:
                    02:ee:a6:3a:c5:ca:62:c4:30:02:52:44:9a:73:e9:
                    93:0c:92:4c:ae:21:f0:2d:9a:c2:7a:58:72:77:06:
                    1c:ba:bc:d3:74:84:50:ea:05:cf:26:0a:87:5a:39:
                    ba:39:ae:00:4a:73:73:a3:58:81:f9:e6:32:a0:92:
                    19:b0:c0:cd:24:b5:b6:a0:fd:23:e4:e4:77:fe:78:
                    1e:80:7b:3b:8e:c6:93:c9:d0:19:2a:8e:cd:be:43:
                    5c:99:83:86:97:40:99:1e:31:38:fd:9c:8c:8c:82:
                    0e:c1:ec:f3:cf:23:c4:6c:18:68:6c:52:34:76:d1:
                    55:6a:0a:d4:64:10:26:ca:d8:5d:8a:2a:e5:5d:ee:
                    e6:6e:8c:15:62:21:b9:4a:5a:87:06:c0:41:c5:05:
                    ca:aa:f8:56:62:f4:ae:51:f1:5e:9f:ee:3f:1b:8c:
                    f0:ce:98:b5:4a:09:53:e1:bd:d5:19:37:31:33:fb:
                    fe:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AD:27:AC:53:3D:86:69:A9:2F:51:B6:05:86:B4:7C:0B:6F:55:94
            X509v3 Authority Key Identifier:
                keyid:8E:AA:57:2C:DA:B7:40:A5:69:77:FF:FC:60:2F:11:3E:47:3F:2E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:b7:36:23:d9:a6:66:c1:d0:21:4c:ae:8e:a6:7f:df:c5:6b:
         77:41:d0:d9:84:17:6b:be:e0:80:97:77:a2:7a:c6:bc:17:7d:
         b1:ca:fb:bf:ca:ae:12:dc:c5:71:60:26:43:17:8d:b4:4a:54:
         a7:d5:c0:24:c7:05:20:64:a9:bc:b6:ae:25:29:5b:f2:b6:51:
         d1:72:5c:40:ac:7f:d5:06:a3:bb:1a:7a:9c:03:4d:86:50:96:
         a6:b3:94:17:82:1f:69:01:c1:a2:31:52:69:62:06:ad:d2:4c:
         d9:af:03:96:e2:96:1b:8a:f4:41:c0:df:00:aa:a4:24:77:d9:
         dd:81:5b:a5:33:98:4b:3d:6e:db:3e:01:b9:e8:cb:67:b8:fe:
         4b:12:a9:89:7d:c9:28:d3:23:a3:fa:3f:a9:b4:1b:85:7c:df:
         74:c0:cc:6c:fd:09:1a:f4:aa:64:fd:18:d1:d1:88:fe:0a:b5:
         88:4c:cc:a2:5d:43:6b:f5:eb:f9:d3:a1:c8:94:83:7a:78:e5:
         9a:c3:d4:ba:21:5c:2e:38:03:ac:63:42:15:47:a1:9c:66:0f:
         5e:51:cb:4c:d2:1b:0c:15:d3:0b:06:a7:41:87:2a:c1:44:51:
         0a:3d:4d:88:4a:5a:64:a4:15:bc:ba:cf:9e:df:cd:e3:bf:14:
         70:9e:7e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:57:55 2025 by rpki-client