This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.mft
File:                     28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.mft (raw, json)
Hash identifier:          9iNb1HHIuatdp/WBucGMgcoJrYC3W4YkFsGmWZLymVI=
Subject key identifier:   F2:9C:8E:18:8B:A5:41:FB:F2:10:EC:2F:3D:B2:B3:55:C4:14:C1:08
Authority key identifier: 28:F9:F9:FB:DF:48:9E:86:A2:CB:92:9A:47:E8:BC:0A:BC:2A:1B:1C
Certificate issuer:       /CN=28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C
Certificate serial:       7665D0326E2954F2A8DCCC8BB2C804C8DF992AE0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.mft
Manifest number:          0253
Signing time:             Sat 20 Dec 2025 20:25:10 +0000
Manifest this update:     Sat 20 Dec 2025 20:20:10 +0000
Manifest next update:     Sun 21 Dec 2025 21:48:10 +0000
Files and hashes:         1: 34352e3233392e37342e302f32342d3234203d3e20323638333535.roa (hash: Ow2VMl3N0uWYaasHq7yrM+aWOjjPSUtNQ6/TwMRQTz4=)
                          2: 323830343a346665303a3a2f33322d3332203d3e20323638333535.roa (hash: 4GIAN6A0ztAgt+6zdfDVuh+yrYGA2FWm7BMrP7pPH78=)
                          3: 34352e3233392e37322e302f32322d3232203d3e20323638333535.roa (hash: Irtvtjw9Qn1ROshMlDhm83Na66r4xtEJQ5KfElKCj/0=)
                          4: 34352e3233392e37322e302f32342d3234203d3e20323638333535.roa (hash: Ct5VU801pl/x69hQdUUaYoWlR+ugIyvMehViBYvWqsM=)
                          5: 34352e3233392e37332e302f32342d3234203d3e20323638333535.roa (hash: 8nLSYCsU/RguhB4raTXQB/UdGmMilCsobE34zpYNDlI=)
                          6: 323830343a346665303a3a2f33332d3333203d3e20323638333535.roa (hash: UJNsPzUGlFh3uo1vK3eQte0VyBK74waL1o+Je1X0+8k=)
                          7: 34352e3233392e37342e302f32332d3233203d3e20323638333535.roa (hash: 1isfo61GZF2mzPimmWN25j3nSCQYU80433KkRIbJc1s=)
                          8: 323830343a346665303a383030303a3a2f33332d3333203d3e20323638333535.roa (hash: HFtPxATLX5EpbVFkw5GdmivQ5LTbLGy2fdMs9HhaMo0=)
                          9: 34352e3233392e37352e302f32342d3234203d3e20323638333535.roa (hash: RYW2qyUG1NHMaCSvOLymsJBIwIHtivxwWrAiV1hktWc=)
                          10: 34352e3233392e37322e302f32332d3233203d3e20323638333535.roa (hash: d4TnNgLFV5QuFe7AGff4exdLMTnJ2LcNXSsUhygUe8Q=)
                          11: 34352e3233392e37322e302f32322d3332203d3e20313938393439.roa (hash: QhHBcgzwgektTva1wEMQkhEVRdv/pdT5zmZ0+cGwow8=)
                          12: 28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.crl (hash: l0HSAJt8xMFJVLl2P6hdms6NunJ8Y489A/5L6G9Nzr4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.crl
                          rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 21:48:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:65:d0:32:6e:29:54:f2:a8:dc:cc:8b:b2:c8:04:c8:df:99:2a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C
        Validity
            Not Before: Dec 20 20:20:10 2025 GMT
            Not After : Dec 21 21:48:10 2025 GMT
        Subject: CN=F29C8E188BA541FBF210EC2F3DB2B355C414C108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:02:c3:3d:7d:1f:20:9d:bc:5a:50:49:70:0f:
                    5e:b6:94:6b:9b:ac:ab:c6:d8:64:6e:4a:35:a9:3d:
                    2d:a6:bc:d0:fe:7b:72:24:13:71:eb:a6:e2:f8:fe:
                    c2:ee:b8:5f:8c:7f:92:3f:55:90:db:a4:ba:f6:c7:
                    fc:ce:56:36:49:c5:ad:86:c6:56:93:d6:32:69:8d:
                    55:17:89:04:cd:c7:ea:9b:aa:c5:36:96:3d:54:46:
                    0e:d2:66:30:24:5e:36:f0:11:12:59:69:eb:06:69:
                    42:6b:29:1c:83:cf:07:76:38:62:42:2f:62:21:bf:
                    d9:b4:20:c0:0f:1b:3a:85:2c:24:77:cd:ab:ac:70:
                    ec:3a:fc:3d:87:d6:01:4c:a0:5a:6d:06:82:c2:ea:
                    65:cf:ed:a7:e6:1d:a3:56:90:e4:2d:22:6d:40:43:
                    b9:7c:9f:69:05:db:3d:da:f8:1d:a3:11:0b:5d:2a:
                    47:9c:5a:6d:8a:1a:e4:58:4c:09:63:49:41:c0:65:
                    e8:f3:7f:17:70:7b:46:01:3c:2c:57:c5:cb:bb:6d:
                    a0:ae:63:d8:35:c5:d9:46:b7:d8:2a:1d:f1:d7:65:
                    d8:d0:0d:c0:31:cf:22:36:a8:27:ba:07:ef:18:58:
                    ed:32:a4:b8:2b:4e:71:40:65:86:55:77:b4:64:07:
                    3f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:9C:8E:18:8B:A5:41:FB:F2:10:EC:2F:3D:B2:B3:55:C4:14:C1:08
            X509v3 Authority Key Identifier:
                keyid:28:F9:F9:FB:DF:48:9E:86:A2:CB:92:9A:47:E8:BC:0A:BC:2A:1B:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:88:8d:f8:a1:da:61:0d:a9:96:27:1e:9d:f7:20:34:6d:99:
         1a:59:b9:fb:c0:e2:ce:86:52:7f:fa:92:5e:a8:4f:0c:9b:ab:
         b3:db:02:d3:21:50:a8:17:2f:a5:23:13:1a:1b:3e:4b:99:3f:
         fd:da:c8:6b:49:6e:ec:92:4c:e0:bb:06:41:5f:e9:cc:ad:43:
         2c:3b:82:1e:f6:d9:3d:25:67:85:a9:e7:36:0b:91:bd:34:fe:
         71:e2:00:dd:b4:8c:a7:37:d4:bb:9d:fe:67:5b:26:31:c0:2e:
         49:a6:e0:e1:e6:21:f7:8f:a0:64:5c:ed:ef:ee:66:de:48:03:
         57:bb:ad:44:b9:28:a7:6d:06:27:ee:3a:75:71:03:89:f3:34:
         41:28:98:c2:71:a6:e3:c6:f8:c6:a1:e4:4f:60:c8:96:bb:35:
         90:61:a8:d5:55:03:e9:9b:a0:52:dd:7d:c9:19:07:15:d9:ae:
         ba:10:28:a9:5e:65:b3:b9:79:2a:2d:bd:b1:8a:db:ea:1e:7b:
         c6:af:12:35:8d:bb:0e:c6:3c:ba:12:99:28:01:6e:d0:7c:0c:
         14:90:bd:7c:a6:f8:ac:bd:0e:cc:23:4b:e7:1b:a4:e6:12:f9:
         d8:8d:0a:e7:1c:84:ce:27:56:0f:b4:fc:5c:af:15:0e:4c:70:
         eb:3c:5a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:59:24 2025 by rpki-client