This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/8ABB79087ACA27A21985F6F05B9103D446BB65F4.mft
File:                     8ABB79087ACA27A21985F6F05B9103D446BB65F4.mft (raw, json)
Hash identifier:          HGHQvWw5L5XbwbxJJVmk31g1tdXUtjBe3yUv/lDZZrU=
Subject key identifier:   7F:64:B2:E3:FF:85:2F:FD:32:43:3B:8C:4A:22:12:EA:A3:66:83:5D
Authority key identifier: 8A:BB:79:08:7A:CA:27:A2:19:85:F6:F0:5B:91:03:D4:46:BB:65:F4
Certificate issuer:       /CN=8ABB79087ACA27A21985F6F05B9103D446BB65F4
Certificate serial:       289F8C044D420975E35A00285721B51693B16572
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABB79087ACA27A21985F6F05B9103D446BB65F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/8ABB79087ACA27A21985F6F05B9103D446BB65F4.mft
Manifest number:          0220
Signing time:             Sat 20 Dec 2025 21:55:02 +0000
Manifest this update:     Sat 20 Dec 2025 21:50:02 +0000
Manifest next update:     Sun 21 Dec 2025 22:37:02 +0000
Files and hashes:         1: 34352e3232392e3232382e302f32322d3234203d3e20323637313335.roa (hash: GdifItRlTtUlYcbUBqRZVfxiaRGlD4yfqKYk4YAwsqU=)
                          2: 8ABB79087ACA27A21985F6F05B9103D446BB65F4.crl (hash: 3+ArifS8b9rm31YCBOkzeAdqes5qmp+3ZFyQCeA4b3s=)
                          3: 323830343a343861343a3a2f33322d3438203d3e20323637313335.roa (hash: C9Arra7cE4jxnSRAWvcRLtdDgw58dKAc9Yo8shFl/a4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/8ABB79087ACA27A21985F6F05B9103D446BB65F4.crl
                          rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/8ABB79087ACA27A21985F6F05B9103D446BB65F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABB79087ACA27A21985F6F05B9103D446BB65F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:9f:8c:04:4d:42:09:75:e3:5a:00:28:57:21:b5:16:93:b1:65:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABB79087ACA27A21985F6F05B9103D446BB65F4
        Validity
            Not Before: Dec 20 21:50:02 2025 GMT
            Not After : Dec 21 22:37:02 2025 GMT
        Subject: CN=7F64B2E3FF852FFD32433B8C4A2212EAA366835D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ab:9f:d1:e4:e0:98:ab:39:cf:91:3d:d9:c4:
                    f4:16:3b:c3:b1:ef:78:61:e7:c3:cd:fe:98:75:a2:
                    ad:dd:d6:35:d9:a9:30:06:cd:ef:fc:1f:53:34:d3:
                    ee:ae:0b:e9:9a:74:58:21:60:ea:31:d9:f9:72:d0:
                    35:3f:3a:c1:15:71:65:bd:69:19:85:3e:2c:7c:ee:
                    d7:3c:cc:2c:5d:00:ed:dc:91:08:26:8e:22:db:7f:
                    c5:57:ef:2a:38:41:19:86:1e:a8:b7:63:8a:7d:3d:
                    d8:ea:f9:89:03:dc:fe:9e:d4:ed:d6:7f:c6:cb:7a:
                    73:9b:c6:bd:90:1e:27:58:9a:a4:7f:b0:bf:ef:2a:
                    60:82:2a:24:b0:93:d6:77:6f:1f:0f:63:d1:ad:a8:
                    61:6d:d5:7b:63:ae:cd:18:a4:65:10:2e:70:f0:a0:
                    4b:1c:87:03:65:af:07:01:34:2b:b4:b3:2d:0c:46:
                    90:68:5e:ca:9e:00:61:de:e4:3f:4c:38:15:a1:f8:
                    02:1c:f1:b8:01:d4:66:87:77:3d:66:e4:46:51:0f:
                    d4:2c:67:ff:7d:7f:82:eb:dc:ff:aa:2c:58:7d:2a:
                    d6:32:68:a9:a0:6d:a0:3b:64:56:0c:0e:3d:8f:b3:
                    cf:06:a0:de:a2:da:a2:89:6f:ad:a0:29:a7:90:4c:
                    49:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:64:B2:E3:FF:85:2F:FD:32:43:3B:8C:4A:22:12:EA:A3:66:83:5D
            X509v3 Authority Key Identifier:
                keyid:8A:BB:79:08:7A:CA:27:A2:19:85:F6:F0:5B:91:03:D4:46:BB:65:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/8ABB79087ACA27A21985F6F05B9103D446BB65F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABB79087ACA27A21985F6F05B9103D446BB65F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/8ABB79087ACA27A21985F6F05B9103D446BB65F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:37:68:7d:57:9c:cf:42:f2:80:c1:33:b7:05:57:e3:47:bf:
         60:a4:dc:a2:b7:43:e4:ec:91:60:b4:ba:1c:51:72:41:33:08:
         fa:92:84:4b:51:d3:ac:c3:e5:a4:e8:16:82:3d:1b:42:fe:0c:
         a7:e4:a4:b1:eb:09:70:da:e6:d6:e9:27:47:cf:29:56:ec:b6:
         64:16:ba:36:c8:67:5f:05:bd:40:f3:2a:7f:20:c0:06:44:00:
         65:58:aa:c5:7c:40:91:7d:a7:13:e2:0d:98:f9:6d:b0:04:73:
         30:74:3b:e7:26:53:82:29:d4:31:bd:f4:c1:41:6a:91:5e:90:
         25:78:87:a0:d7:2c:c6:9c:15:e1:de:f6:2f:32:15:7e:d2:ad:
         f8:d9:14:16:d4:a5:bb:c0:95:94:9a:f0:5e:d3:0b:96:e4:99:
         68:f0:a0:cb:b1:df:8b:25:35:14:74:d4:78:93:07:f0:d1:e6:
         10:f9:48:55:15:c7:d8:58:89:cc:fa:62:b3:45:eb:52:58:50:
         55:f9:9e:95:98:21:f1:65:7f:62:56:8e:2b:78:3a:6d:e9:70:
         da:8b:a3:37:54:63:4d:12:db:e2:2a:b1:5f:f6:58:8b:6d:40:
         39:fe:32:f6:08:ca:f5:d1:ff:a8:8f:0e:2a:ab:d3:c1:7d:a4:
         1d:0d:ea:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:41:35 2025 by rpki-client