This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.mft
File:                     36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.mft (raw, json)
Hash identifier:          kfyEJvBnGMmNqyN/1if1aD1Uxdj+g/5AKytu9aQ4ztY=
Subject key identifier:   4B:77:CA:6F:E4:E0:E9:0A:D3:10:01:FE:DF:46:14:48:42:F6:9B:0F
Authority key identifier: 36:AC:D4:4E:2E:3E:16:38:8F:A2:90:1E:5B:C9:BB:79:A8:81:BF:80
Certificate issuer:       /CN=36ACD44E2E3E16388FA2901E5BC9BB79A881BF80
Certificate serial:       2DBB02F8340246642F7C45B0E453BE9EC89C136B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.mft
Manifest number:          6F
Signing time:             Sun 21 Dec 2025 23:19:35 +0000
Manifest this update:     Sun 21 Dec 2025 23:14:35 +0000
Manifest next update:     Tue 23 Dec 2025 03:11:35 +0000
Files and hashes:         1: 3136382e3138312e3130342e302f32322d3332203d3e20323635333334.roa (hash: Q8UBRh0hTfSCsd4RiacAAKcPqzHAfv45lX+zztg4Brw=)
                          2: 323830343a326533633a3a2f33322d313238203d3e20323635333334.roa (hash: QF8VQwARJKuaS0v6ROc9Wa6I26Qc9yQxM436sBW0P3o=)
                          3: 36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.crl (hash: 4Jnbo5IqQUzOuHcVq+sSBHRTqXrvIulQ9V9/3hJLFrA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.crl
                          rsync://rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 03:11:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:bb:02:f8:34:02:46:64:2f:7c:45:b0:e4:53:be:9e:c8:9c:13:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ACD44E2E3E16388FA2901E5BC9BB79A881BF80
        Validity
            Not Before: Dec 21 23:14:35 2025 GMT
            Not After : Dec 23 03:11:35 2025 GMT
        Subject: CN=4B77CA6FE4E0E90AD31001FEDF46144842F69B0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f4:ec:91:7e:b0:a5:60:6c:db:7b:48:e1:46:
                    ec:83:2e:04:d9:cf:48:d0:7b:d1:0f:34:e0:a0:ef:
                    2b:31:4a:bb:2e:7f:dc:65:a6:68:ff:6b:13:de:7a:
                    b5:04:b3:24:62:ab:93:c1:24:4f:ac:14:9d:c8:81:
                    9f:86:59:42:f0:3c:78:b1:6d:36:c8:a9:5b:4d:ce:
                    f2:61:b5:ae:74:fb:21:b2:99:23:ba:32:9b:96:f9:
                    d3:f9:9b:92:b0:e1:03:67:92:1b:8e:3d:83:06:58:
                    0e:85:a4:d8:5e:ca:81:59:e4:73:57:b7:ab:75:ef:
                    55:14:26:aa:7a:2f:48:a7:7f:5b:4c:e8:d5:25:8d:
                    ba:b6:ea:c2:78:d1:d2:15:e0:7c:14:fc:2e:88:88:
                    c7:08:2d:4e:a6:39:96:07:40:3b:e7:09:04:18:0d:
                    1b:3d:99:36:ca:19:a0:9c:4b:00:55:72:4a:82:55:
                    7d:51:2b:95:7b:d8:c4:1f:d6:f7:c6:7f:03:e9:74:
                    51:e9:39:7b:a7:c4:70:4e:b7:de:1f:cf:ca:7a:ed:
                    91:22:12:3e:c4:1c:ed:5d:fc:78:e7:ad:c9:6d:ff:
                    2f:0c:3b:8b:7e:83:d2:14:b0:7c:02:f9:9f:8d:19:
                    fc:b2:07:67:15:89:d2:05:0d:89:20:66:e5:15:dc:
                    c6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:77:CA:6F:E4:E0:E9:0A:D3:10:01:FE:DF:46:14:48:42:F6:9B:0F
            X509v3 Authority Key Identifier:
                keyid:36:AC:D4:4E:2E:3E:16:38:8F:A2:90:1E:5B:C9:BB:79:A8:81:BF:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:5c:ac:a1:d5:ce:8f:b7:35:3a:34:e7:29:ea:a6:13:52:ee:
         a0:2e:6a:dd:9c:8c:42:2f:27:e1:1d:34:c0:53:83:ea:16:c3:
         77:f3:20:f2:0c:e8:d9:bd:b5:d9:d1:79:1f:62:ef:c0:dd:ed:
         18:62:ba:63:51:36:38:d3:90:72:2b:e0:ca:99:8f:76:b6:79:
         98:25:b1:f7:ae:ee:bf:bd:52:df:dc:45:35:6b:71:d2:02:75:
         d8:aa:f1:9a:b3:c7:b2:8b:a1:7f:22:fc:4e:e8:30:9d:45:01:
         c1:81:48:45:b3:dc:58:c9:86:a4:9b:af:a4:aa:4b:10:05:37:
         1e:34:83:9e:0f:67:77:50:d9:9a:ba:6e:fc:41:d0:3b:64:1d:
         91:3b:84:76:36:36:85:1f:81:2a:f1:3b:5b:fc:16:62:19:61:
         ef:35:1a:31:c1:28:2e:29:b3:e6:fc:22:20:77:62:46:c9:f6:
         44:8f:74:ab:95:42:79:ce:cf:6a:c0:ff:24:30:7a:0b:43:be:
         5c:78:f8:27:72:26:d0:eb:87:9b:47:8f:48:2b:15:4e:56:5b:
         2e:f9:0c:72:0e:65:bf:40:53:50:c2:0f:43:4b:9d:a8:71:51:
         ac:0c:c7:65:2b:7c:be:68:a7:77:cd:60:19:9c:91:f8:5f:41:
         d0:94:76:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 11:35:06 2025 by rpki-client