This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GoeofHi9XokQVyFJctj61yqct1AzTW1omwbkyq5NikZC/0/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.mft
File:                     0E686F37C80B20480C4AE8C509583AA4CDABCA3B.mft (raw, json)
Hash identifier:          KZWRpFZzr2TMYLkQX/hJL6/qd6VLod2pSTU+Rd2I3Is=
Subject key identifier:   5E:71:21:6B:15:DE:AC:E6:88:37:0D:73:5D:DC:6D:67:55:1E:93:7C
Authority key identifier: 0E:68:6F:37:C8:0B:20:48:0C:4A:E8:C5:09:58:3A:A4:CD:AB:CA:3B
Certificate issuer:       /CN=0E686F37C80B20480C4AE8C509583AA4CDABCA3B
Certificate serial:       6F52804183E4194D121F016C97D792CABB48D469
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoeofHi9XokQVyFJctj61yqct1AzTW1omwbkyq5NikZC/0/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.mft
Manifest number:          02FE
Signing time:             Mon 22 Dec 2025 19:47:20 +0000
Manifest this update:     Mon 22 Dec 2025 19:42:20 +0000
Manifest next update:     Tue 23 Dec 2025 23:34:20 +0000
Files and hashes:         1: 0E686F37C80B20480C4AE8C509583AA4CDABCA3B.crl (hash: HVA6/f1qd1KXZCCPMGajDlP2MMEj5pvoKrmg5ysQmYM=)
                          2: 3137302e38332e34302e302f32322d3332203d3e20323636343632.roa (hash: aRzeGC6MkrZhgZDy5/miUWPRVDW0dGjNpaxRq3pUWxE=)
                          3: 323830343a333832633a3a2f33322d313238203d3e20323636343632.roa (hash: 91VLEnvLUOJrm4b+m2Udcff5+gM5f7rR9XE9JI+TuVc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GoeofHi9XokQVyFJctj61yqct1AzTW1omwbkyq5NikZC/0/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.crl
                          rsync://rpki-repo.registro.br/repo/GoeofHi9XokQVyFJctj61yqct1AzTW1omwbkyq5NikZC/0/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 23:34:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:52:80:41:83:e4:19:4d:12:1f:01:6c:97:d7:92:ca:bb:48:d4:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E686F37C80B20480C4AE8C509583AA4CDABCA3B
        Validity
            Not Before: Dec 22 19:42:20 2025 GMT
            Not After : Dec 23 23:34:20 2025 GMT
        Subject: CN=5E71216B15DEACE688370D735DDC6D67551E937C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:83:f7:b3:2e:b6:19:94:80:83:4d:88:0e:cf:
                    93:f8:8c:60:4b:55:a1:ef:7a:3a:cd:c0:d8:4d:2f:
                    4c:91:9f:40:86:1d:5e:ac:75:cb:cc:eb:99:52:29:
                    95:64:0b:a5:75:a0:c5:72:95:03:97:fa:6f:e7:32:
                    2e:d8:68:e1:79:4c:b0:e7:0a:70:e0:27:17:6f:39:
                    eb:31:6b:8c:23:c3:a7:fc:de:43:dc:50:cc:83:9c:
                    f3:ac:af:7e:21:d6:fb:df:06:c2:c2:f1:25:52:62:
                    cc:bd:b4:5f:48:93:c6:79:18:1a:d1:d8:17:77:16:
                    c9:eb:72:c3:a1:b2:7a:a3:38:a7:8d:ad:3a:29:d2:
                    7e:7a:a8:e5:a4:fe:fd:b2:09:dd:67:f7:3c:d4:c7:
                    1f:be:ca:48:f2:f0:3e:22:7f:ff:d1:4a:e9:02:24:
                    33:b4:db:2f:0e:bc:0b:31:b8:6c:4a:d5:42:17:58:
                    85:54:a7:3e:03:76:c4:99:d4:89:fb:7c:6d:64:7c:
                    86:cb:35:02:b6:2c:8c:67:00:14:38:be:0b:4a:b6:
                    2a:ae:9f:67:1c:82:c9:09:65:90:a8:5c:dd:29:86:
                    33:ac:c9:00:80:2e:0a:fe:d7:d5:3f:b8:03:7f:52:
                    bd:89:f9:4a:8d:ef:3f:06:67:a3:3b:3f:83:6d:01:
                    19:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:71:21:6B:15:DE:AC:E6:88:37:0D:73:5D:DC:6D:67:55:1E:93:7C
            X509v3 Authority Key Identifier:
                keyid:0E:68:6F:37:C8:0B:20:48:0C:4A:E8:C5:09:58:3A:A4:CD:AB:CA:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoeofHi9XokQVyFJctj61yqct1AzTW1omwbkyq5NikZC/0/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoeofHi9XokQVyFJctj61yqct1AzTW1omwbkyq5NikZC/0/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:8e:94:1a:12:f6:71:1a:75:4d:90:5a:f8:c4:b9:bf:43:ef:
         0f:35:8d:3c:03:29:af:55:5e:55:26:4f:f1:cf:1e:e3:cc:a3:
         58:0d:6c:c7:c6:3f:27:f9:7d:92:5e:cc:ea:2f:ac:8e:cc:80:
         7a:47:af:27:53:a5:39:44:42:ec:04:e2:97:33:03:6f:4b:54:
         f2:1d:f3:46:cd:b5:43:ab:8f:cd:01:69:63:69:21:58:54:1e:
         1c:6c:0a:3c:c1:d7:17:b7:5b:3f:58:49:7a:1e:71:00:bf:51:
         37:2d:97:5c:d7:b6:b4:dc:5f:9f:6c:a7:4c:e4:42:db:07:81:
         ed:16:f0:51:a6:75:a3:e2:b1:4d:7c:6c:49:db:37:7c:35:59:
         ea:a1:6e:63:1c:dd:ed:e8:6f:d0:76:cf:f3:c4:9c:99:5c:aa:
         1d:d5:a3:3c:d8:79:3c:2a:6b:b3:d9:7b:2a:6b:24:53:8f:cc:
         e1:c2:9f:9a:6a:86:f9:fd:fa:2f:c2:b2:52:ac:24:80:67:47:
         17:74:f2:f2:3f:6c:3f:3f:ac:d0:e3:c9:75:d2:75:d7:5e:d9:
         60:cf:ea:ff:68:92:28:6b:e1:c4:0f:24:d8:9a:b9:2f:72:15:
         e2:99:10:30:bd:57:db:c6:e2:49:e5:79:76:95:f4:ac:3c:3c:
         1b:d4:38:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 14:40:11 2025 by rpki-client