This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/C868A06878254001614E44615C6C21349FD5A104.mft
File:                     C868A06878254001614E44615C6C21349FD5A104.mft (raw, json)
Hash identifier:          RqpAKIceHKe/1liRZGG2lTp9ozXn7ZbcTWsw9GhLU0Q=
Subject key identifier:   13:2A:88:06:E5:1C:2F:F5:C9:89:CD:A2:1E:36:4E:20:65:30:E6:9A
Authority key identifier: C8:68:A0:68:78:25:40:01:61:4E:44:61:5C:6C:21:34:9F:D5:A1:04
Certificate issuer:       /CN=C868A06878254001614E44615C6C21349FD5A104
Certificate serial:       42518E684549EE5F7112681B532F5170844A1CD0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A06878254001614E44615C6C21349FD5A104.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/C868A06878254001614E44615C6C21349FD5A104.mft
Manifest number:          0154
Signing time:             Sat 20 Dec 2025 05:22:49 +0000
Manifest this update:     Sat 20 Dec 2025 05:17:49 +0000
Manifest next update:     Sun 21 Dec 2025 06:12:49 +0000
Files and hashes:         1: 3137372e3230302e3135302e302f32332d3233203d3e203532373933.roa (hash: JRLBgIhIg5ngdgpoI1PqRuMzGnlSwFm0D6yToYQnfgM=)
                          2: 3137372e3230302e3135362e302f32342d3234203d3e203532373933.roa (hash: DLbOTHEE+1pnhk6pfT7/u1dv9vttA0YY7KuZxmuEUzs=)
                          3: 3137372e3230302e3134342e302f32342d3234203d3e203532373933.roa (hash: 9y0Vr91KHbS4gcqMfnJ1WUP9nz11L/7zUgQHb5hrVfg=)
                          4: 3137372e3230302e3135302e302f32342d3234203d3e203532373933.roa (hash: ZmoAID2kZd6yY7QFEFORGuZ14OtrohjVtTXmCeiEttw=)
                          5: 3137372e3230302e3135322e302f32342d3234203d3e203532373933.roa (hash: HjUBXKetPWHkkZYpH/t3/XY0d5HEv9IWBZEtRFn4XnU=)
                          6: 3137372e3230302e3135312e302f32342d3234203d3e203532373933.roa (hash: njsi2Cej9Xk7xx+Oa2Bef2XVU97/dSaQh3oDDVVOEa0=)
                          7: 3137372e3230302e3134352e302f32342d3234203d3e203532373933.roa (hash: VzpFAii21AJeuR9cy9+BdCEo6smyYYd2BvU5Lj++xVY=)
                          8: 3137372e3230302e3135342e302f32342d3234203d3e203532373933.roa (hash: mrPDC/zgIHB48cXbHM+R7m7RPb0MctXkSl7GFvpZfK4=)
                          9: C868A06878254001614E44615C6C21349FD5A104.crl (hash: TbjqI1zqdiZ3dEhu1+pB+XgZPfiaj8gpglh2Ajcrt8E=)
                          10: 3137372e3230302e3135372e302f32342d3234203d3e203532373933.roa (hash: TbRVSjCW2B0TUP+Q/ndQxYtJhkkXbYHFoU1PyMq4rK8=)
                          11: 3137372e3230302e3135392e302f32342d3234203d3e203532373933.roa (hash: qxXT5c15P3/njzcFn5gjA1Fko/bq6rqKj3K9Zf6ArBk=)
                          12: 3137372e3230302e3134382e302f32342d3234203d3e203532373933.roa (hash: qDun3CYRw2UlEmb5qEFkv7dEdiP1CpYcLlOWmy3LSRY=)
                          13: 3137372e3230302e3134392e302f32342d3234203d3e203532373933.roa (hash: UdRpFSd8bkDX7Gb44jRPsk81M8wfemLHpuFnvnFZOxA=)
                          14: 3137372e3230302e3135352e302f32342d3234203d3e203532373933.roa (hash: ChirMnfycqgA6wT4zdu/RpuS5R1uCE7KR+EsUQxifsI=)
                          15: 3137372e3230302e3134362e302f32342d3234203d3e203532373933.roa (hash: OFnea01lU+vgpcJgiUpOZy8zXcllYV9e7EddRy5ffOE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/C868A06878254001614E44615C6C21349FD5A104.crl
                          rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/C868A06878254001614E44615C6C21349FD5A104.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A06878254001614E44615C6C21349FD5A104.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 06:12:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:51:8e:68:45:49:ee:5f:71:12:68:1b:53:2f:51:70:84:4a:1c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C868A06878254001614E44615C6C21349FD5A104
        Validity
            Not Before: Dec 20 05:17:49 2025 GMT
            Not After : Dec 21 06:12:49 2025 GMT
        Subject: CN=132A8806E51C2FF5C989CDA21E364E206530E69A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:13:6e:d9:09:65:57:34:9e:27:45:24:de:20:
                    f3:86:8d:5e:89:1b:dc:8a:23:3a:29:4f:3e:75:a8:
                    eb:7a:ae:0c:f2:df:37:27:7f:c0:cf:ae:e5:d8:3a:
                    e2:af:74:29:9e:4c:01:43:60:22:8f:c9:68:16:e7:
                    b5:12:0d:3e:1c:50:2b:30:fe:a3:b9:24:45:99:19:
                    ef:8f:d9:c2:9a:b1:ad:45:a7:fa:60:ce:cd:50:7b:
                    22:a0:df:d5:d5:73:6d:95:b5:e7:b6:39:ce:9d:02:
                    cd:73:60:13:41:a3:8c:04:6f:7c:de:65:b1:29:f1:
                    49:4a:52:53:e5:18:93:b5:98:21:a2:e8:e7:bc:94:
                    94:cd:3e:21:66:d6:46:ec:ff:6f:4f:9e:06:94:80:
                    a3:16:f3:83:73:0a:25:2b:f2:dc:3c:9b:04:e2:f7:
                    b1:cf:9c:de:ed:4f:93:31:63:50:fa:0e:7d:a5:67:
                    37:e1:95:4b:ba:95:c1:26:ce:b4:b6:41:ce:04:f6:
                    06:3d:94:de:d5:8c:32:67:2c:9d:4c:34:b9:87:18:
                    e6:77:1c:c4:2e:3e:4c:dd:da:9a:ee:77:37:af:1d:
                    e5:a3:e5:12:72:aa:42:98:70:5b:bc:32:70:25:b4:
                    c4:68:f3:5d:97:54:49:3e:26:2a:fe:d9:cc:09:e7:
                    dc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2A:88:06:E5:1C:2F:F5:C9:89:CD:A2:1E:36:4E:20:65:30:E6:9A
            X509v3 Authority Key Identifier:
                keyid:C8:68:A0:68:78:25:40:01:61:4E:44:61:5C:6C:21:34:9F:D5:A1:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/C868A06878254001614E44615C6C21349FD5A104.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A06878254001614E44615C6C21349FD5A104.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/C868A06878254001614E44615C6C21349FD5A104.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:c5:4c:e9:60:1f:d5:28:12:76:f9:c0:1f:24:00:72:b1:69:
         33:15:46:e1:47:e6:d8:f9:71:67:8c:93:9b:a0:53:17:da:bd:
         40:1f:c1:a0:17:f6:27:2e:bb:e7:50:e4:91:c8:78:72:03:ea:
         92:5f:83:86:9c:31:d5:da:de:2c:9d:8c:f5:27:4e:9d:3c:f5:
         4c:34:4f:bd:66:b4:51:9f:bb:fa:69:d3:6a:c7:e6:68:7f:a4:
         39:d9:40:7e:8d:9b:f4:6c:58:9a:67:45:e6:ae:38:69:06:ee:
         f4:43:94:a3:f8:58:de:75:b2:df:61:36:58:4c:7a:e5:29:20:
         8c:d0:89:f0:76:1b:fc:cd:f2:50:5f:d9:df:20:45:2d:c3:3c:
         10:1a:ec:83:c0:a3:a3:63:fb:d0:30:0a:8b:01:a2:36:57:d9:
         63:a6:60:6c:f7:b6:2d:60:4f:6c:cc:d7:88:24:e1:84:f5:62:
         23:f1:c4:48:3d:a3:ec:c3:b3:b5:9e:18:5e:cb:dc:f3:1d:bb:
         ea:8f:00:da:9c:f6:b3:25:a7:13:c1:1b:54:d5:37:af:f2:e5:
         9c:53:c7:c9:4c:bc:7b:c2:03:e4:eb:c4:88:66:0a:b2:28:b0:
         e3:01:f3:73:9a:7a:86:7e:12:ac:80:71:ef:9d:c1:58:48:df:
         df:05:25:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:13:20 2025 by rpki-client