This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/300EF0D4A22607B70ACDD408162E82D502B579B4.mft
File:                     300EF0D4A22607B70ACDD408162E82D502B579B4.mft (raw, json)
Hash identifier:          Cd7PRdA45e5XYdYa9DqQjBrbSctkN9BXUYDU0sb0ES4=
Subject key identifier:   A8:2C:AB:9E:E5:9C:AB:B8:02:E1:85:7A:49:5F:6F:70:37:4E:43:19
Authority key identifier: 30:0E:F0:D4:A2:26:07:B7:0A:CD:D4:08:16:2E:82:D5:02:B5:79:B4
Certificate issuer:       /CN=300EF0D4A22607B70ACDD408162E82D502B579B4
Certificate serial:       3605030DE2496E1A124901DE7C7D92548F75CD9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/300EF0D4A22607B70ACDD408162E82D502B579B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/300EF0D4A22607B70ACDD408162E82D502B579B4.mft
Manifest number:          0129
Signing time:             Tue 23 Dec 2025 23:31:09 +0000
Manifest this update:     Tue 23 Dec 2025 23:26:09 +0000
Manifest next update:     Thu 25 Dec 2025 03:23:09 +0000
Files and hashes:         1: 300EF0D4A22607B70ACDD408162E82D502B579B4.crl (hash: Jtud7+PP3LUK0qYVgwRvOKgmsN8l3cVeqy8vsiaT+10=)
                          2: 323830343a353231303a3a2f33322d313238203d3e20323638343932.roa (hash: H707qYG+fxXNuwrbahA++mkoLJaZg87HN/wuXWVsYuA=)
                          3: 34352e3136322e342e302f32322d3234203d3e20323638343932.roa (hash: rBh+UT/7ctPWU3K8O8QraU8X1nLPRCUvpbr+O88DsTs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/300EF0D4A22607B70ACDD408162E82D502B579B4.crl
                          rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/300EF0D4A22607B70ACDD408162E82D502B579B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/300EF0D4A22607B70ACDD408162E82D502B579B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 03:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:05:03:0d:e2:49:6e:1a:12:49:01:de:7c:7d:92:54:8f:75:cd:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=300EF0D4A22607B70ACDD408162E82D502B579B4
        Validity
            Not Before: Dec 23 23:26:09 2025 GMT
            Not After : Dec 25 03:23:09 2025 GMT
        Subject: CN=A82CAB9EE59CABB802E1857A495F6F70374E4319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b3:2c:0b:93:7e:98:3d:77:22:a5:c0:2e:21:
                    9b:91:e6:fa:7d:39:0c:71:da:e8:7f:4f:69:d5:fc:
                    fd:85:98:b9:00:ab:54:1f:59:b0:bd:94:e7:52:77:
                    ec:b2:60:56:3d:5e:eb:f3:48:f3:20:0c:2d:63:d8:
                    1a:9d:9e:3a:8a:88:de:0a:72:c5:f9:5d:ec:ff:f4:
                    35:b4:1a:d1:3c:e3:45:c4:54:77:13:ef:86:6b:9d:
                    da:66:20:c5:7d:a3:fb:07:66:09:68:96:b5:c2:fd:
                    38:0b:6e:3a:c1:c6:2b:e0:72:77:2f:4b:a4:9a:95:
                    71:c1:2f:af:94:d1:af:3b:dc:0a:32:12:81:16:ab:
                    5a:45:95:18:79:d9:a4:08:1f:4a:40:64:b2:4f:2b:
                    55:c2:99:a1:23:56:c0:71:9e:95:a8:39:84:af:39:
                    db:78:d5:59:90:43:7a:8e:0b:87:70:29:47:a0:01:
                    b7:24:ac:96:a9:bf:b7:c4:78:4a:71:25:83:fa:15:
                    15:86:e4:d1:bf:49:2e:6d:76:10:cf:e4:f6:dd:7f:
                    90:8d:3c:78:40:2e:94:a6:20:43:a3:bd:49:1d:7f:
                    c2:85:fa:6d:e1:97:be:da:f6:90:40:11:79:36:db:
                    38:71:1c:fa:27:cb:a7:cb:77:9e:46:dc:79:55:c3:
                    d9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:2C:AB:9E:E5:9C:AB:B8:02:E1:85:7A:49:5F:6F:70:37:4E:43:19
            X509v3 Authority Key Identifier:
                keyid:30:0E:F0:D4:A2:26:07:B7:0A:CD:D4:08:16:2E:82:D5:02:B5:79:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/300EF0D4A22607B70ACDD408162E82D502B579B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/300EF0D4A22607B70ACDD408162E82D502B579B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/300EF0D4A22607B70ACDD408162E82D502B579B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:d6:94:2c:6e:b0:91:52:04:70:58:d2:90:42:7b:81:65:d5:
         da:fb:1f:48:37:b7:bb:b0:6d:cb:36:a1:7b:79:bf:58:fe:88:
         67:4e:74:e1:f0:c9:65:25:79:4c:19:b6:98:15:00:06:bd:48:
         e3:cf:d3:ae:ad:31:22:f5:eb:f6:da:94:ad:5b:ea:69:16:de:
         a4:f4:39:ee:e3:21:8f:68:7a:3b:59:e4:bd:99:9b:9a:f7:f5:
         23:04:5e:23:91:18:b7:12:1d:3e:d9:1f:3d:0c:0c:bf:3a:70:
         55:83:57:36:36:ce:32:05:5b:db:45:1c:64:48:2e:b7:97:a0:
         aa:31:a4:69:b2:66:71:d6:4b:5c:b2:5f:5f:21:65:01:d3:0e:
         9f:15:0f:50:e5:c1:f7:cb:40:ab:e5:d4:e5:2d:d4:e3:88:2c:
         9a:cd:5d:67:05:22:68:e7:ab:71:a4:9d:8b:f8:5a:bd:1e:a9:
         9b:dd:1e:f5:ff:13:a3:fc:94:9d:4d:3b:0d:27:d5:da:e5:91:
         c7:17:49:c2:b4:51:38:e6:48:a8:15:90:86:f4:ba:b5:88:f8:
         be:f7:b2:3a:a4:04:ea:a0:12:95:2f:3d:a1:65:da:8c:9f:66:
         62:17:08:76:a3:b3:4a:df:c3:23:0c:ac:fb:e1:6b:e8:73:27:
         6a:72:99:1b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNgUDDeJJbhoSSQHefH2SVI91zZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzAwRUYwRDRBMjI2MDdCNzBBQ0RENDA4MTYyRTgyRDUw
MkI1NzlCNDAeFw0yNTEyMjMyMzI2MDlaFw0yNTEyMjUwMzIzMDlaMDMxMTAvBgNV
BAMTKEE4MkNBQjlFRTU5Q0FCQjgwMkUxODU3QTQ5NUY2RjcwMzc0RTQzMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWsywLk36YPXcipcAuIZuR5vp9
OQxx2uh/T2nV/P2FmLkAq1QfWbC9lOdSd+yyYFY9XuvzSPMgDC1j2BqdnjqKiN4K
csX5Xez/9DW0GtE840XEVHcT74ZrndpmIMV9o/sHZglolrXC/TgLbjrBxivgcncv
S6SalXHBL6+U0a873AoyEoEWq1pFlRh52aQIH0pAZLJPK1XCmaEjVsBxnpWoOYSv
Odt41VmQQ3qOC4dwKUegAbckrJapv7fEeEpxJYP6FRWG5NG/SS5tdhDP5Pbdf5CN
PHhALpSmIEOjvUkdf8KF+m3hl77a9pBAEXk22zhxHPony6fLd55G3HlVw9k9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUqCyrnuWcq7gC4YV6SV9vcDdOQxkwHwYDVR0j
BBgwFoAUMA7w1KImB7cKzdQIFi6C1QK1ebQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnNhcWk3b1phRDdYbVI1MWJMU1BGZVVIR3k2amZFM2NnSkRQVmJqTTFK
ajEvMC8zMDBFRjBENEEyMjYwN0I3MEFDREQ0MDgxNjJFODJENTAyQjU3OUI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwMEVGMEQ0QTIyNjA3Qjcw
QUNERDQwODE2MkU4MkQ1MDJCNTc5QjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RnNhcWk3b1phRDdYbVI1MWJMU1BGZVVIR3k2amZFM2NnSkRQVmJqTTFKajEvMC8z
MDBFRjBENEEyMjYwN0I3MEFDREQ0MDgxNjJFODJENTAyQjU3OUI0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMNaULG6wkVIEcFjSkEJ7gWXV2vsfSDe3u7Btyzahe3m/WP6IZ0504fDJZSV5
TBm2mBUABr1I48/Trq0xIvXr9tqUrVvqaRbepPQ57uMhj2h6O1nkvZmbmvf1IwRe
I5EYtxIdPtkfPQwMvzpwVYNXNjbOMgVb20UcZEgut5egqjGkabJmcdZLXLJfXyFl
AdMOnxUPUOXB98tAq+XU5S3U44gsms1dZwUiaOercaSdi/havR6pm90e9f8To/yU
nU07DSfV2uWRxxdJwrRROOZIqBWQhvS6tYj4vveyOqQE6qASlS89oWXajJ9mYhcI
dqOzSt/DIwys++Fr6HMnanKZGw==
-----END CERTIFICATE-----