This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/MCAqBhEqiwukZBc3mdE2GaFppSDh9zeHLXELqgCAmRM/0/85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.mft
File:                     85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.mft (raw, json)
Hash identifier:          HNvTzx/e78a320tqWyuDi5b1A+VYw/8nGXYVPkdRY2k=
Subject key identifier:   35:36:D2:0B:06:BC:34:88:01:E1:63:EE:0A:85:4A:A9:84:D2:E6:DF
Authority key identifier: 85:B0:D4:E0:DD:B2:4C:93:20:63:5A:9E:BE:E7:FB:DF:BE:41:F4:13
Certificate issuer:       /CN=85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413
Certificate serial:       25FD19732C5890CB4A2AD2929980EE688CB0ABDB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/MCAqBhEqiwukZBc3mdE2GaFppSDh9zeHLXELqgCAmRM/0/85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.mft
Manifest number:          C1
Signing time:             Wed 24 Dec 2025 12:28:59 +0000
Manifest this update:     Wed 24 Dec 2025 12:23:59 +0000
Manifest next update:     Thu 25 Dec 2025 15:07:59 +0000
Files and hashes:         1: 85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.crl (hash: hdPPUOf5qXfgI+i3I9IXeoZ8f2pA1deaXWosa7Le4qQ=)
                          2: 3139302e392e3131322e302f32342d3234203d3e20323733363339.roa (hash: N8YAVwGqrrgB1Zfeu1c6LlyNKIFRpyxdhrk7duWgKpk=)
                          3: 3139302e392e3131342e302f32342d3234203d3e20323733363339.roa (hash: ed+JbOHBCQsNfsGF/Q7Vz27gIqPQP6fh90KC5vwdhxI=)
                          4: 3139302e392e3131332e302f32342d3234203d3e20323733363339.roa (hash: sUdtxk4NXvoeiaz1NpeACLa7VnhlZiLC62loksRVz4M=)
                          5: 3139302e392e3131352e302f32342d3234203d3e20323733363339.roa (hash: eqBr6Cm1ax/yL+Uy2XrhorwsBjltmjJiRD19QytKKwY=)
                          6: 3139302e392e3131322e302f32322d3232203d3e20323733363339.roa (hash: J6WUd5glG5jeS4DZU6q2Gm0x+DtQh5cTqGnpPD427IA=)
                          7: 3139302e392e3131342e302f32332d3233203d3e20323733363339.roa (hash: DnmQJ9O0F8bbtO3b05M/USiBRzBFbweyiWzexHmh2sw=)
                          8: 3139302e392e3131322e302f32332d3233203d3e20323733363339.roa (hash: NlDejssKshiP6MJc/8yd5rGqPTlJLYt67T63Q4B8Z8k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/MCAqBhEqiwukZBc3mdE2GaFppSDh9zeHLXELqgCAmRM/0/85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.crl
                          rsync://rpki-repo.registro.br/repo/MCAqBhEqiwukZBc3mdE2GaFppSDh9zeHLXELqgCAmRM/0/85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 15:07:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:fd:19:73:2c:58:90:cb:4a:2a:d2:92:99:80:ee:68:8c:b0:ab:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413
        Validity
            Not Before: Dec 24 12:23:59 2025 GMT
            Not After : Dec 25 15:07:59 2025 GMT
        Subject: CN=3536D20B06BC348801E163EE0A854AA984D2E6DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:34:d1:82:92:86:17:97:42:42:44:56:49:d8:
                    98:59:57:27:ad:69:36:76:70:1d:95:e6:32:c8:06:
                    6d:6e:f0:97:40:71:e0:c1:13:28:d6:22:52:1a:59:
                    19:e5:18:e7:4b:84:d7:3b:ee:e7:35:e8:0e:4e:91:
                    a4:c8:a9:7d:17:da:50:19:1c:15:f6:56:7e:bc:45:
                    dc:e4:87:cb:93:df:a9:1a:8c:3a:62:10:d8:0e:f6:
                    40:f7:cd:2e:1d:c9:87:4b:2b:91:28:e9:fb:fb:3d:
                    f4:03:6b:bb:0e:fb:91:7b:a9:7a:bd:94:25:a9:71:
                    d7:e4:21:de:72:f3:7e:99:05:46:7e:f5:e1:15:b3:
                    a7:00:97:1e:6c:23:75:cf:87:bc:15:06:5e:67:32:
                    23:1d:cd:ed:94:96:49:6a:63:b6:1c:c5:bc:52:43:
                    8c:24:f6:dd:25:8f:cc:a3:ee:cd:a9:b5:9f:4b:c5:
                    4d:c9:33:96:9d:60:15:08:18:3f:eb:2c:91:0b:16:
                    27:c1:91:59:5d:5d:26:ad:9e:36:0b:0c:3d:ed:c8:
                    b2:94:fc:d1:cc:70:aa:f5:a0:c7:9b:a5:24:8c:1f:
                    49:2d:fe:2f:38:98:9b:b2:59:df:e4:3d:8a:6c:7a:
                    b0:7a:26:8b:0b:56:91:3f:61:70:90:56:64:99:68:
                    b6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:36:D2:0B:06:BC:34:88:01:E1:63:EE:0A:85:4A:A9:84:D2:E6:DF
            X509v3 Authority Key Identifier:
                keyid:85:B0:D4:E0:DD:B2:4C:93:20:63:5A:9E:BE:E7:FB:DF:BE:41:F4:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/MCAqBhEqiwukZBc3mdE2GaFppSDh9zeHLXELqgCAmRM/0/85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/MCAqBhEqiwukZBc3mdE2GaFppSDh9zeHLXELqgCAmRM/0/85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:b7:45:52:dd:ea:93:b2:f4:2b:31:49:74:3b:89:ab:df:8e:
         e5:e0:b1:4c:3d:3b:00:76:c1:60:4f:22:17:f8:96:15:2b:f6:
         f1:c8:f1:ce:06:40:4d:b8:ca:57:46:f9:da:8f:2f:de:d6:38:
         43:53:32:13:fd:c5:bc:9d:ec:51:8f:6a:91:76:75:a5:1f:28:
         60:ad:23:aa:00:59:ad:b8:79:21:e5:2d:38:a8:5f:bc:5a:ca:
         89:0e:89:b5:56:17:35:b0:11:b8:23:66:73:be:cf:3e:2e:07:
         7b:71:a0:31:ec:13:0d:21:0b:61:bb:5d:6a:8b:fe:22:72:77:
         b8:cd:ae:4f:42:73:87:cd:43:1e:4b:6d:72:86:1d:82:46:ae:
         f9:4a:06:2d:05:3c:8b:5e:8a:98:57:85:81:33:d4:13:88:39:
         27:64:d6:e8:c6:87:04:99:01:9d:1c:ff:44:b2:5c:07:29:ce:
         dd:e7:e3:15:ce:2f:35:5c:98:4d:33:e4:93:0b:51:95:8e:04:
         66:77:a2:7d:3b:6e:ba:2e:74:32:30:0d:60:fd:dd:52:18:88:
         81:48:2b:92:60:25:7a:2e:6b:f0:6b:cc:2d:f4:36:a3:13:11:
         5c:f2:b2:d5:46:87:e2:1b:a4:c2:e1:52:48:6d:28:dd:f7:77:
         f0:38:b9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:17:47 2025 by rpki-client