This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/1/CDBBBC8A21B569B8C13657EE73CC93CA9577A026.mft
File:                     CDBBBC8A21B569B8C13657EE73CC93CA9577A026.mft (raw, json)
Hash identifier:          8+FJPhF7aV7g48CQO6W4IHT/GgLWKahS4iBfFzIrUIw=
Subject key identifier:   05:08:FD:A9:82:39:01:96:C9:CF:B9:40:A5:E5:E9:33:A8:8D:BA:1E
Authority key identifier: CD:BB:BC:8A:21:B5:69:B8:C1:36:57:EE:73:CC:93:CA:95:77:A0:26
Certificate issuer:       /CN=CDBBBC8A21B569B8C13657EE73CC93CA9577A026
Certificate serial:       2EEB29CD122FBEC2E3624EE5B6913DD00E19C260
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDBBBC8A21B569B8C13657EE73CC93CA9577A026.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/1/CDBBBC8A21B569B8C13657EE73CC93CA9577A026.mft
Manifest number:          0386
Signing time:             Wed 24 Dec 2025 02:00:00 +0000
Manifest this update:     Wed 24 Dec 2025 01:55:00 +0000
Manifest next update:     Thu 25 Dec 2025 02:00:00 +0000
Files and hashes:         1: 34352e3137362e3230342e302f32322d3234203d3e20323638393532.roa (hash: 4hJYGyjO4344/a8LzwOFXD5KqWdcHB8kPrsJIfROI+s=)
                          2: CDBBBC8A21B569B8C13657EE73CC93CA9577A026.crl (hash: 9Bo87JAQ/Tm0K6t96diboSQqWQzpTovfWSb+/aBu13E=)
                          3: 323830343a356432303a3a2f33322d3335203d3e20323638393532.roa (hash: CzsiDQsxUsen7aCgQ5wvKD9dfKUQucEL7izH9lufr24=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/1/CDBBBC8A21B569B8C13657EE73CC93CA9577A026.crl
                          rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/1/CDBBBC8A21B569B8C13657EE73CC93CA9577A026.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDBBBC8A21B569B8C13657EE73CC93CA9577A026.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:eb:29:cd:12:2f:be:c2:e3:62:4e:e5:b6:91:3d:d0:0e:19:c2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDBBBC8A21B569B8C13657EE73CC93CA9577A026
        Validity
            Not Before: Dec 24 01:55:00 2025 GMT
            Not After : Dec 31 02:00:00 2025 GMT
        Subject: CN=3082010A0282010100E5C9B4665F50F2603B26D2CAF5662C409A8C704F3B3C90E83095DDAEA1AB655048A2EBDF10EB76CA97B6C8C3AE42BF6130A34647A522821D040C5300C07847C27290958EAD2D09C4FDB105CB950E8677AE5924CE4818A385EAB61DD87A53FC2F928BFCC6376CC9ECE9213C91C80E1E447B911B4A7E983140963F919BE8CFDF7EB704734327E0222672D021170B63EC800DCBBBB8C6DFEA9859FEC36805EFE77790C1E26868C27A643A9528410037A8E5E1DF97C66BC082F4B5371DFA52E2828261517733A657ED1A1244A6E40780F8ACB6046FF066C7CDD0576A6CEC0B0416EF2650B1669430E9E916423B7D27DDAA2A5F7ADC63CC38C95AE92D827159D452D50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c9:b4:66:5f:50:f2:60:3b:26:d2:ca:f5:66:
                    2c:40:9a:8c:70:4f:3b:3c:90:e8:30:95:dd:ae:a1:
                    ab:65:50:48:a2:eb:df:10:eb:76:ca:97:b6:c8:c3:
                    ae:42:bf:61:30:a3:46:47:a5:22:82:1d:04:0c:53:
                    00:c0:78:47:c2:72:90:95:8e:ad:2d:09:c4:fd:b1:
                    05:cb:95:0e:86:77:ae:59:24:ce:48:18:a3:85:ea:
                    b6:1d:d8:7a:53:fc:2f:92:8b:fc:c6:37:6c:c9:ec:
                    e9:21:3c:91:c8:0e:1e:44:7b:91:1b:4a:7e:98:31:
                    40:96:3f:91:9b:e8:cf:df:7e:b7:04:73:43:27:e0:
                    22:26:72:d0:21:17:0b:63:ec:80:0d:cb:bb:b8:c6:
                    df:ea:98:59:fe:c3:68:05:ef:e7:77:90:c1:e2:68:
                    68:c2:7a:64:3a:95:28:41:00:37:a8:e5:e1:df:97:
                    c6:6b:c0:82:f4:b5:37:1d:fa:52:e2:82:82:61:51:
                    77:33:a6:57:ed:1a:12:44:a6:e4:07:80:f8:ac:b6:
                    04:6f:f0:66:c7:cd:d0:57:6a:6c:ec:0b:04:16:ef:
                    26:50:b1:66:94:30:e9:e9:16:42:3b:7d:27:dd:aa:
                    2a:5f:7a:dc:63:cc:38:c9:5a:e9:2d:82:71:59:d4:
                    52:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:08:FD:A9:82:39:01:96:C9:CF:B9:40:A5:E5:E9:33:A8:8D:BA:1E
            X509v3 Authority Key Identifier:
                keyid:CD:BB:BC:8A:21:B5:69:B8:C1:36:57:EE:73:CC:93:CA:95:77:A0:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/1/CDBBBC8A21B569B8C13657EE73CC93CA9577A026.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDBBBC8A21B569B8C13657EE73CC93CA9577A026.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/1/CDBBBC8A21B569B8C13657EE73CC93CA9577A026.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:54:10:c7:db:1f:a9:ad:c7:23:e4:ce:d5:96:10:60:1f:33:
         f9:53:18:c2:c2:69:df:4a:fb:a8:25:3a:ce:53:18:fc:68:54:
         7a:5a:7a:64:6a:a4:d4:59:58:d9:15:9e:55:b5:e3:c8:3d:b1:
         fc:78:a5:42:2e:e4:af:dd:be:bb:b5:8f:44:87:79:3e:8d:27:
         a3:8b:ba:05:98:71:06:7e:ca:15:04:ea:18:a9:72:a6:f7:69:
         36:70:a6:c1:00:1d:f9:bc:f2:ce:b8:a2:3a:e8:8e:cc:01:fd:
         3d:11:60:d8:3f:fc:26:b2:23:d1:0f:90:08:ca:bc:f8:19:c6:
         44:3d:c0:14:5a:44:fd:7d:f3:93:17:11:85:7a:29:79:34:ce:
         9f:20:7e:c7:bf:26:75:63:9b:b4:3f:d2:e8:0b:93:04:8f:51:
         a3:2f:47:8d:8b:56:93:61:a1:4a:14:5a:0a:7f:fe:48:76:f8:
         3e:d1:5d:55:df:c0:7c:46:45:51:db:50:0a:13:9d:e7:c7:28:
         2b:fb:67:1a:25:3a:f8:28:b3:7b:3c:e0:31:66:6d:99:86:a6:
         49:a1:81:0b:5c:55:88:fd:0e:f7:7c:7d:11:f0:f5:76:1c:c3:
         12:40:08:a7:cd:49:86:0d:8c:c7:a2:a0:39:26:40:e0:f9:76:
         5e:5c:08:4d
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIULuspzRIvvsLjYk7ltpE90A4ZwmAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0RCQkJDOEEyMUI1NjlCOEMxMzY1N0VFNzNDQzkzQ0E5
NTc3QTAyNjAeFw0yNTEyMjQwMTU1MDBaFw0yNTEyMzEwMjAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTVDOUI0NjY1RjUwRjI2MDNC
MjZEMkNBRjU2NjJDNDA5QThDNzA0RjNCM0M5MEU4MzA5NUREQUVBMUFCNjU1MDQ4
QTJFQkRGMTBFQjc2Q0E5N0I2QzhDM0FFNDJCRjYxMzBBMzQ2NDdBNTIyODIxRDA0
MEM1MzAwQzA3ODQ3QzI3MjkwOTU4RUFEMkQwOUM0RkRCMTA1Q0I5NTBFODY3N0FF
NTkyNENFNDgxOEEzODVFQUI2MUREODdBNTNGQzJGOTI4QkZDQzYzNzZDQzlFQ0U5
MjEzQzkxQzgwRTFFNDQ3QjkxMUI0QTdFOTgzMTQwOTYzRjkxOUJFOENGREY3RUI3
MDQ3MzQzMjdFMDIyMjY3MkQwMjExNzBCNjNFQzgwMERDQkJCQjhDNkRGRUE5ODU5
RkVDMzY4MDVFRkU3Nzc5MEMxRTI2ODY4QzI3QTY0M0E5NTI4NDEwMDM3QThFNUUx
REY5N0M2NkJDMDgyRjRCNTM3MURGQTUyRTI4MjgyNjE1MTc3MzNBNjU3RUQxQTEy
NDRBNkU0MDc4MEY4QUNCNjA0NkZGMDY2QzdDREQwNTc2QTZDRUMwQjA0MTZFRjI2
NTBCMTY2OTQzMEU5RTkxNjQyM0I3RDI3RERBQTJBNUY3QURDNjNDQzM4Qzk1QUU5
MkQ4MjcxNTlENDUyRDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA5cm0Zl9Q8mA7JtLK9WYsQJqMcE87PJDoMJXdrqGrZVBIouvfEOt2
ype2yMOuQr9hMKNGR6Uigh0EDFMAwHhHwnKQlY6tLQnE/bEFy5UOhneuWSTOSBij
heq2Hdh6U/wvkov8xjdsyezpITyRyA4eRHuRG0p+mDFAlj+Rm+jP3363BHNDJ+Ai
JnLQIRcLY+yADcu7uMbf6phZ/sNoBe/nd5DB4mhownpkOpUoQQA3qOXh35fGa8CC
9LU3HfpS4oKCYVF3M6ZX7RoSRKbkB4D4rLYEb/Bmx83QV2ps7AsEFu8mULFmlDDp
6RZCO30n3aoqX3rcY8w4yVrpLYJxWdRS1QIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FAUI/amCOQGWyc+5QKXl6TOojboeMB8GA1UdIwQYMBaAFM27vIohtWm4wTZX7nPM
k8qVd6AmMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0c0VVU0eFRmeGZzcTR4
ZnM5ZENOOG8ya1NRd1k2UlpHaGQ2NWJUbWM4cmdtLzEvQ0RCQkJDOEEyMUI1NjlC
OEMxMzY1N0VFNzNDQzkzQ0E5NTc3QTAyNi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9DREJCQkM4QTIxQjU2OUI4QzEzNjU3RUU3M0NDOTNDQTk1NzdB
MDI2LmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0c0VVU0eFRmeGZzcTR4ZnM5ZENO
OG8ya1NRd1k2UlpHaGQ2NWJUbWM4cmdtLzEvQ0RCQkJDOEEyMUI1NjlCOEMxMzY1
N0VFNzNDQzkzQ0E5NTc3QTAyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALVUEMfbH6mtxyPkztWWEGAf
M/lTGMLCad9K+6glOs5TGPxoVHpaemRqpNRZWNkVnlW148g9sfx4pUIu5K/dvru1
j0SHeT6NJ6OLugWYcQZ+yhUE6hipcqb3aTZwpsEAHfm88s64ojrojswB/T0RYNg/
/CayI9EPkAjKvPgZxkQ9wBRaRP1985MXEYV6KXk0zp8gfse/JnVjm7Q/0ugLkwSP
UaMvR42LVpNhoUoUWgp//kh2+D7RXVXfwHxGRVHbUAoTnefHKCv7ZxolOvgos3s8
4DFmbZmGpkmhgQtcVYj9Dvd8fRHw9XYcwxJACKfNSYYNjMeioDkmQOD5dl5cCE0=
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:21:37 2025 by rpki-client