This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HkCaY28h886xQtW1F4cXP2hot5dhattHfveCuSRvSbBq/0/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.mft
File:                     B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.mft (raw, json)
Hash identifier:          KCfQileIPtGchkLXoiLlMXIP90tswVD2ZXNpse9nDBs=
Subject key identifier:   F9:ED:86:D8:E0:38:32:7F:53:03:85:40:C1:7C:38:71:3A:DB:FD:3B
Authority key identifier: B6:29:AD:9F:55:FA:B6:BB:BF:BD:FF:EB:C0:5F:F5:6F:BC:A9:CC:94
Certificate issuer:       /CN=B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94
Certificate serial:       17E0229A7393CA22118C3AA7E724269B56DD8CC7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkCaY28h886xQtW1F4cXP2hot5dhattHfveCuSRvSbBq/0/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.mft
Manifest number:          77
Signing time:             Wed 24 Dec 2025 00:05:40 +0000
Manifest this update:     Wed 24 Dec 2025 00:00:40 +0000
Manifest next update:     Thu 25 Dec 2025 03:13:40 +0000
Files and hashes:         1: 34352e3138312e3138342e302f32322d3234203d3e20323639323030.roa (hash: MjgAbGBA3MLIQEbDOEqfgH94qhnYSyUXbioQpjVsW7I=)
                          2: B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.crl (hash: KJQvndtiuwkkvOk0UNZ1HL17XoM5n0UZy8BjEaNfErc=)
                          3: 323830343a363065633a3a2f33322d3332203d3e20323639323030.roa (hash: n9rse3OoCQBo0ruAYtRVJWD4u89jY4UKuEhCcVoKoUM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HkCaY28h886xQtW1F4cXP2hot5dhattHfveCuSRvSbBq/0/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.crl
                          rsync://rpki-repo.registro.br/repo/HkCaY28h886xQtW1F4cXP2hot5dhattHfveCuSRvSbBq/0/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 03:13:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e0:22:9a:73:93:ca:22:11:8c:3a:a7:e7:24:26:9b:56:dd:8c:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94
        Validity
            Not Before: Dec 24 00:00:40 2025 GMT
            Not After : Dec 25 03:13:40 2025 GMT
        Subject: CN=F9ED86D8E038327F53038540C17C38713ADBFD3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:15:e4:9a:c3:84:df:0f:ad:4a:43:2a:4d:5e:
                    72:39:6e:e6:94:17:8d:e9:6e:bc:2d:27:e6:23:39:
                    17:9b:5d:bb:b7:a9:0f:46:a6:19:ea:4f:bb:9e:41:
                    af:b1:dc:43:46:bb:d8:42:eb:07:41:93:1c:ac:d6:
                    fa:bd:8f:f2:2e:4f:f3:82:88:d2:27:50:70:4c:90:
                    23:fd:49:2e:13:94:e9:e8:6f:14:66:0a:96:5c:6e:
                    3f:9a:e0:13:ef:c1:70:5b:75:ad:71:5f:20:ab:67:
                    84:e8:f2:28:8b:f5:23:60:3f:8d:87:d2:33:cb:4c:
                    28:1d:52:9c:a9:f4:cb:3a:c1:3f:33:1c:bd:28:04:
                    17:34:bf:25:21:89:a1:54:fc:ea:15:b9:80:49:9b:
                    17:53:bc:46:ea:e9:4b:5f:a5:93:1d:6e:dc:be:1f:
                    68:f5:0d:a6:3d:4a:35:90:b6:6a:81:62:26:13:c1:
                    f5:51:fa:5f:21:7f:60:a0:2d:07:a8:f3:83:02:4a:
                    8b:50:28:b9:08:98:bd:f2:f5:e6:5a:f2:96:f0:fa:
                    92:5a:30:95:23:c0:d7:37:7c:b7:d4:72:0b:25:fd:
                    a4:5b:af:35:6e:8d:6b:45:ef:2c:e4:b2:9c:bc:d4:
                    2b:7a:23:11:4b:31:50:fd:74:5d:82:7a:5c:c0:a7:
                    52:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:ED:86:D8:E0:38:32:7F:53:03:85:40:C1:7C:38:71:3A:DB:FD:3B
            X509v3 Authority Key Identifier:
                keyid:B6:29:AD:9F:55:FA:B6:BB:BF:BD:FF:EB:C0:5F:F5:6F:BC:A9:CC:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkCaY28h886xQtW1F4cXP2hot5dhattHfveCuSRvSbBq/0/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkCaY28h886xQtW1F4cXP2hot5dhattHfveCuSRvSbBq/0/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:79:0d:5a:8f:0c:7d:e7:c9:36:5a:91:7e:f2:59:11:03:cf:
         5f:3c:34:5c:40:54:98:f5:d9:99:4e:f3:b7:a8:71:00:5f:28:
         d9:02:1c:09:2a:99:aa:0f:f8:63:69:07:97:d6:f1:42:26:0b:
         7a:2f:ee:ef:fb:25:3c:a1:67:24:cf:2c:bf:f2:a1:b2:11:86:
         37:0f:6b:c9:c3:28:0d:e7:1f:26:7d:f7:48:b4:eb:44:f2:46:
         c5:a3:72:a5:16:31:8a:d2:d2:6e:0f:a4:b9:4a:83:36:c0:20:
         4b:cf:de:b0:51:71:5e:ce:6c:56:a7:05:c8:3e:36:1e:b9:b6:
         91:16:36:25:0e:e3:a5:e6:ac:a2:66:45:38:c7:8e:64:dc:18:
         5e:1d:62:54:2d:d8:6a:05:53:ba:4c:d3:eb:db:02:a5:88:19:
         38:2f:02:36:9b:7e:40:79:53:cd:48:ff:f5:16:c6:f9:9b:fa:
         72:70:36:93:56:cf:49:4f:08:96:08:9c:9a:be:c3:e4:4d:5b:
         e6:31:a7:9f:a4:e3:fe:f1:f4:ae:f5:60:5a:23:29:5d:ad:dc:
         bc:26:99:a1:90:9c:4e:c6:8b:28:ec:a3:d0:91:2a:e5:54:dd:
         c7:b8:40:a7:fd:bf:49:fd:c5:8c:f6:d9:7f:14:d1:70:da:95:
         16:6d:54:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:29:17 2025 by rpki-client