This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft
File:                     99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft (raw, json)
Hash identifier:          F9El/MRhAzUt6+pjxeVWKaC1p2kv/+jI4Qrp6YLPbKQ=
Subject key identifier:   E1:BD:DD:BC:16:DB:A1:AF:DC:51:7E:A8:50:A5:4B:14:C7:51:6E:7E
Authority key identifier: 99:A8:F5:3F:34:26:C9:83:CA:87:D5:D7:AC:F6:AB:5E:14:37:15:54
Certificate issuer:       /CN=99A8F53F3426C983CA87D5D7ACF6AB5E14371554
Certificate serial:       19F417DAF791A3E31B9120A05BF96E9DCC5D0309
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft
Manifest number:          0340
Signing time:             Sat 20 Dec 2025 17:02:15 +0000
Manifest this update:     Sat 20 Dec 2025 16:57:15 +0000
Manifest next update:     Sun 21 Dec 2025 20:54:15 +0000
Files and hashes:         1: 99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl (hash: 7s5gngQ5cNIJcqWkJqZ36Mrq+suIromaKl5N/+mT39o=)
                          2: 3137392e3130372e34382e302f32322d3234203d3e20323633323834.roa (hash: 59L2ncly+4CTUTyhWleTXAijjeUxtcEeHxk7ZbQ1Y/o=)
                          3: 323830343a313635633a3a2f33322d3438203d3e20323633323834.roa (hash: 2PI5RKymGmz8mUp+uI2zB9l9pOFqFN2mMalTTIpWkw4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl
                          rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 20:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:f4:17:da:f7:91:a3:e3:1b:91:20:a0:5b:f9:6e:9d:cc:5d:03:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99A8F53F3426C983CA87D5D7ACF6AB5E14371554
        Validity
            Not Before: Dec 20 16:57:15 2025 GMT
            Not After : Dec 21 20:54:15 2025 GMT
        Subject: CN=E1BDDDBC16DBA1AFDC517EA850A54B14C7516E7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ae:ef:27:c9:bf:62:5b:c8:40:91:b3:43:b5:
                    0c:50:f2:f3:54:de:8d:a8:7a:e1:16:d2:54:35:9b:
                    5a:38:16:2e:b8:68:c0:4e:14:e6:48:59:05:df:90:
                    55:27:3d:9d:af:8c:ff:ba:72:d4:b8:37:66:b8:32:
                    71:65:e4:77:a7:05:1e:0c:03:06:43:29:5c:ec:b4:
                    db:ff:5f:f3:f1:6d:1c:1e:e5:05:e3:f1:db:1e:90:
                    8c:c1:c1:ec:45:34:4f:ab:a8:92:36:f8:8f:b3:8f:
                    96:89:f8:4a:43:db:95:53:c3:9b:fe:49:b2:71:c5:
                    1d:0c:8c:e0:72:74:6a:d1:98:de:f2:f7:12:58:0c:
                    74:24:a2:99:7e:fe:4e:01:b4:ef:58:84:e8:f2:6b:
                    ab:dc:c6:b4:72:ec:09:1a:97:40:60:c9:ad:8b:2a:
                    4d:5d:8c:bc:5b:4e:2d:90:29:6a:30:e5:de:0a:09:
                    21:e1:79:26:5f:dc:36:1a:c5:23:ed:e3:5b:a5:2c:
                    58:93:23:9c:b8:9d:ce:66:da:ad:37:89:a8:8c:6c:
                    70:22:1d:fd:9c:38:b6:ac:04:09:50:9c:ef:e7:90:
                    ab:70:9b:10:ea:3f:b2:6f:b8:d7:eb:a0:3e:b5:e8:
                    ec:df:33:aa:ff:3a:11:a4:11:b4:31:69:e8:d1:cf:
                    ec:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:BD:DD:BC:16:DB:A1:AF:DC:51:7E:A8:50:A5:4B:14:C7:51:6E:7E
            X509v3 Authority Key Identifier:
                keyid:99:A8:F5:3F:34:26:C9:83:CA:87:D5:D7:AC:F6:AB:5E:14:37:15:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:71:b3:92:8d:c7:4c:fb:00:e2:83:a4:81:76:fa:53:03:8e:
         1a:a9:17:4d:41:9f:f5:78:3f:90:54:f1:c4:42:a4:62:57:13:
         cd:89:bf:27:20:d2:e8:4c:12:3b:b1:78:65:39:f1:da:1b:01:
         c6:5c:60:2b:ee:a1:b2:f0:72:cb:0c:81:e2:71:8e:76:7b:f6:
         c6:9f:58:fe:05:cf:08:17:24:b1:66:7f:ff:87:83:5f:9c:dc:
         f4:13:f5:19:e5:9b:1e:32:f5:44:0f:fd:e4:26:2d:ba:05:46:
         78:47:2b:44:38:91:6c:74:52:b5:13:74:09:d4:b0:a3:17:26:
         8b:d3:6d:37:1b:5e:fc:9a:ff:0a:35:7f:dc:7c:c1:40:28:5f:
         da:9b:a9:cf:04:05:aa:ef:3c:0f:6c:c1:cf:5d:fc:9b:2a:55:
         58:34:3e:81:10:5e:38:7b:49:28:ac:02:a7:a2:f6:bc:e3:0f:
         3c:5e:56:52:11:82:5e:a8:8d:9e:f0:93:58:e9:46:49:27:52:
         0b:ed:09:03:22:e6:db:31:b0:d5:38:91:8d:53:c0:fb:be:b3:
         94:1c:9d:b2:9e:72:bb:ea:5a:b6:dd:b2:ed:13:6a:96:bb:ec:
         ed:ca:ee:72:7f:da:ac:f2:bc:4d:0d:e2:a4:d2:32:1b:e2:4e:
         5d:83:d9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:58:17 2025 by rpki-client