This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.mft
File:                     0667C1E975614C995A6FB737132548928E943717.mft (raw, json)
Hash identifier:          yvkjt4ARzFPa0sTdEJY5Du/RozuE4kLqviz7dOm5Ems=
Subject key identifier:   D3:46:FB:B3:A8:32:58:4E:B8:51:DC:98:94:A0:8C:CE:1F:70:E6:68
Authority key identifier: 06:67:C1:E9:75:61:4C:99:5A:6F:B7:37:13:25:48:92:8E:94:37:17
Certificate issuer:       /CN=0667C1E975614C995A6FB737132548928E943717
Certificate serial:       112F8CD4EC95D5D03C5F7CE77B536945EF3BD969
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.mft
Manifest number:          0338
Signing time:             Sat 06 Dec 2025 18:31:45 +0000
Manifest this update:     Sat 06 Dec 2025 18:26:45 +0000
Manifest next update:     Sun 07 Dec 2025 21:16:45 +0000
Files and hashes:         1: 3138372e3131312e3131332e302f32342d3234203d3e20323731363830.roa (hash: nrOdqZOfY5Nbn0thVXtoyCD/xS8FjidLJDZuWGGR5DE=)
                          2: 3138372e3131312e3131322e302f32322d3232203d3e20323731363830.roa (hash: UDc2a11lMXoutrxkVXHv9/P2ZCVJhAIP/APUwqyFI+Y=)
                          3: 3138372e3131312e3131352e302f32342d3234203d3e20323731363830.roa (hash: oIInCdgaGC3oZ63SvbkLHxdHc1iFO02Y1xvdWzEcFSI=)
                          4: 0667C1E975614C995A6FB737132548928E943717.crl (hash: Y73VLk03PROXOpsmmXHX9uXcq8aSSu48WRwUl2P6x4k=)
                          5: 3138372e3131312e3131322e302f32332d3233203d3e20323731363830.roa (hash: JVu8beyHKjU9ufH+KvindaEB+yOIp4s8pyXSuRmYUGk=)
                          6: 3138372e3131312e3131342e302f32342d3234203d3e20323731363830.roa (hash: jOaa9Y6B1wldYTqunC0ifArH1I/MagZETYt4EwF5yq0=)
                          7: 323830343a376635303a3a2f33322d3332203d3e20323731363830.roa (hash: 8mwojufcPep+splbZMuv38KNaQbe2kXCGWx7hQgtXxA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.crl
                          rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 20:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:2f:8c:d4:ec:95:d5:d0:3c:5f:7c:e7:7b:53:69:45:ef:3b:d9:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0667C1E975614C995A6FB737132548928E943717
        Validity
            Not Before: Dec  6 18:26:45 2025 GMT
            Not After : Dec  7 21:16:45 2025 GMT
        Subject: CN=D346FBB3A832584EB851DC9894A08CCE1F70E668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:85:f5:12:04:10:2d:cc:6c:51:d1:c0:32:e0:
                    30:1c:eb:2e:09:8c:6d:b9:24:8c:27:81:28:3a:79:
                    f3:7c:c9:1d:0e:da:30:3b:33:f4:b8:ef:64:d6:a1:
                    ff:05:b9:62:3b:c8:56:e7:26:02:18:41:21:04:f5:
                    36:99:93:4b:94:7c:5f:c0:ac:a9:8a:a6:45:dd:f7:
                    0b:7f:a2:01:6b:eb:a5:29:c7:47:c5:08:35:47:ae:
                    a6:20:b5:21:ff:20:18:64:ef:e7:21:62:29:32:24:
                    b1:4d:d1:e6:8a:d7:e3:ae:8a:72:2f:40:7e:d5:71:
                    61:05:36:50:bc:1e:df:d9:1a:db:6a:76:46:af:94:
                    27:73:2d:b1:cb:0f:9d:f2:b0:38:3c:d8:e9:5e:02:
                    d8:e5:8a:ab:c3:8f:cd:d3:99:9b:c8:d8:73:70:0f:
                    8f:fb:97:86:69:2e:a0:2e:e8:f6:1b:f4:70:87:7e:
                    21:d7:9b:22:4c:ca:5d:e4:16:98:0b:0f:74:57:8a:
                    a9:74:3d:db:2a:61:ad:88:54:ba:cf:ab:05:4f:e9:
                    88:56:a3:17:54:03:ba:2e:84:fc:39:f9:11:bb:f7:
                    37:b2:0d:e2:c8:db:ce:bb:e2:fc:17:22:be:3c:ce:
                    3d:bf:cb:d1:51:e5:08:14:18:30:37:55:d0:ec:23:
                    04:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:46:FB:B3:A8:32:58:4E:B8:51:DC:98:94:A0:8C:CE:1F:70:E6:68
            X509v3 Authority Key Identifier:
                keyid:06:67:C1:E9:75:61:4C:99:5A:6F:B7:37:13:25:48:92:8E:94:37:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f9:ef:8f:a7:b7:17:2a:4a:dd:a9:a4:71:b5:0a:ba:89:a5:
         cd:1f:29:2f:5b:9a:4d:91:f7:96:4b:3c:98:b0:2d:07:e1:06:
         b7:c9:a2:47:17:a5:2e:26:46:b3:ab:fc:c3:fe:3c:91:88:53:
         0d:e4:0e:5a:03:7a:5d:6c:03:e7:2f:2c:ee:90:e1:27:81:17:
         e1:8a:e7:cc:2e:6e:37:d1:8f:64:bd:bc:12:0e:39:a6:90:25:
         39:2b:71:e3:10:64:d8:26:db:61:f8:c5:94:22:41:49:70:aa:
         fc:9a:e0:96:5d:e5:cb:6d:c6:f1:fc:44:fa:da:5e:f2:5b:40:
         84:d5:d3:3d:e4:d7:c6:71:70:cc:1b:4a:cf:bd:cf:35:ed:36:
         22:5b:d9:70:48:c1:3b:03:a2:a6:f5:af:00:45:79:79:9e:1b:
         96:ef:ee:89:ce:8a:d2:1e:86:b1:58:a7:34:19:8c:5b:6d:4e:
         1b:f3:8a:67:7e:9e:f0:e5:ef:77:71:1d:cd:a3:e8:c3:0a:4e:
         e2:64:f9:7f:51:56:7c:39:f0:1b:98:33:73:0a:7c:a6:5d:9f:
         fa:53:9a:af:c7:8d:4e:99:93:34:3f:d5:c3:08:77:04:a1:68:
         0f:46:bc:b9:c0:9c:a4:34:58:54:fe:0e:3e:b1:c6:c1:77:1d:
         26:94:ac:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:02:33 2025 by rpki-client