This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.mft
File:                     834325D3983126D2D723BBC6EC0C6196882A6196.mft (raw, json)
Hash identifier:          WXZbKIuAA8uNkkBzqrVgfYZ2rUsQgRFEt3upEkxMbA0=
Subject key identifier:   A4:B7:31:7D:66:AC:FA:A6:4C:B2:DF:4D:D3:E2:F7:28:A2:E7:65:FB
Authority key identifier: 83:43:25:D3:98:31:26:D2:D7:23:BB:C6:EC:0C:61:96:88:2A:61:96
Certificate issuer:       /CN=834325D3983126D2D723BBC6EC0C6196882A6196
Certificate serial:       6D8CF9104A23D1845C2B9AD97F803304A01FB091
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/834325D3983126D2D723BBC6EC0C6196882A6196.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.mft
Manifest number:          0285
Signing time:             Mon 22 Dec 2025 13:11:00 +0000
Manifest this update:     Mon 22 Dec 2025 13:06:00 +0000
Manifest next update:     Tue 23 Dec 2025 13:32:00 +0000
Files and hashes:         1: 834325D3983126D2D723BBC6EC0C6196882A6196.crl (hash: 5yd0om7mzr4ZYXx4zu57PJMr/DKnwH2sxf0F2qk3uhs=)
                          2: 3137392e34382e39362e302f32322d3234203d3e20323731303437.roa (hash: T2C6JO37uu1Wed9fw/h/i4fvBlLzw0CaTwVkAF2Ypz8=)
                          3: 323830313a38303a333964303a3a2f34382d3438203d3e20323731303437.roa (hash: LLVr4OVXEEacPBXbjTpAy8xTHjkBS/Xp3CBF5MQFNag=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.crl
                          rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/834325D3983126D2D723BBC6EC0C6196882A6196.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 13:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:8c:f9:10:4a:23:d1:84:5c:2b:9a:d9:7f:80:33:04:a0:1f:b0:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=834325D3983126D2D723BBC6EC0C6196882A6196
        Validity
            Not Before: Dec 22 13:06:00 2025 GMT
            Not After : Dec 23 13:32:00 2025 GMT
        Subject: CN=A4B7317D66ACFAA64CB2DF4DD3E2F728A2E765FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9a:86:b6:6f:21:f7:cd:3e:cf:73:f5:76:66:
                    99:36:d1:89:8b:2e:e3:a9:e2:d4:c7:e8:2c:67:1f:
                    a1:45:b9:18:b5:11:4c:2c:eb:f8:7d:b8:ca:d6:35:
                    9c:85:59:49:a7:81:b0:82:f9:f3:92:ff:78:da:c5:
                    ce:9c:3a:c7:31:4d:eb:75:6d:25:96:7c:19:01:a8:
                    d5:22:7b:04:e7:d5:a2:03:63:ac:24:4a:92:09:43:
                    47:1c:a7:65:19:be:00:04:fe:78:cb:e3:08:9a:07:
                    1a:39:7f:6b:de:4c:44:65:be:94:3b:bf:fb:1a:be:
                    e7:a7:33:8d:61:9d:2a:a6:c4:16:21:8e:0c:75:99:
                    f7:c7:a0:5b:b0:1a:65:5a:77:59:cd:8a:06:db:18:
                    3e:4e:93:03:9c:cd:58:39:0b:02:f8:07:b9:2d:be:
                    b5:be:39:fe:05:5a:6b:a8:e0:af:43:4f:35:cd:7c:
                    87:aa:b0:d3:5e:19:d5:c7:40:9c:19:8e:d4:ba:a5:
                    88:cb:79:10:d5:f4:2a:1d:49:11:9c:de:ea:56:42:
                    20:92:d6:9f:18:47:eb:62:62:d8:8f:3c:d0:2f:5b:
                    cd:65:68:b4:b5:a1:b6:ba:1e:16:45:c0:fd:70:5a:
                    6d:15:ab:cf:44:fa:6c:71:5c:6d:0f:36:0a:0b:45:
                    1b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B7:31:7D:66:AC:FA:A6:4C:B2:DF:4D:D3:E2:F7:28:A2:E7:65:FB
            X509v3 Authority Key Identifier:
                keyid:83:43:25:D3:98:31:26:D2:D7:23:BB:C6:EC:0C:61:96:88:2A:61:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/834325D3983126D2D723BBC6EC0C6196882A6196.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:ba:22:1c:3a:33:9f:18:1a:6f:5f:b1:c2:05:c6:19:3a:91:
         1a:81:5f:b2:7f:ee:c5:6b:8c:26:90:eb:90:e8:ff:72:e2:34:
         86:a2:26:cd:fc:84:82:ef:fe:a0:15:72:61:b0:7c:97:b3:e2:
         eb:04:32:c3:0c:a8:4c:d5:32:c9:4c:23:00:cc:7a:95:6d:a2:
         1f:42:04:d6:57:7e:4e:fd:85:73:df:a3:d4:8a:63:d9:65:89:
         22:0c:d2:4d:43:c2:db:4c:6b:50:57:0b:f3:91:af:fd:69:27:
         be:cf:52:bf:74:03:3e:69:0d:9e:c3:cf:2d:80:28:0c:2a:51:
         1c:a4:fb:6a:e3:1d:04:87:e5:cd:a5:8d:1c:a8:55:65:6a:b9:
         0d:55:f2:49:2f:89:73:44:87:57:52:9f:78:bb:ac:fd:6e:af:
         6f:14:08:6d:d7:ef:38:f4:8f:ac:f7:49:12:48:ba:e5:23:7c:
         96:a0:24:d3:df:57:82:79:5c:00:27:2d:97:03:2d:18:74:88:
         fa:56:a4:7f:21:86:29:ba:f2:3e:b0:5f:1b:99:05:54:8c:dc:
         04:f7:f8:4d:cd:d3:5f:e8:14:ff:88:d7:49:38:52:b6:23:d9:
         85:62:b6:3e:32:5b:97:f3:09:0f:7f:91:77:f2:63:f6:86:f3:
         6b:9d:97:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 02:07:56 2025 by rpki-client