This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2CoJMWfwoZHGpjCuNS4seRHQJEJSEo2pk9HS4efPVvt7/0/F8FCC9D0A386F207C9FD886E269D8F44B338578D.mft
File:                     F8FCC9D0A386F207C9FD886E269D8F44B338578D.mft (raw, json)
Hash identifier:          R2Bj/i8l9v3XNL1JWfng+NtASP8JmElDd1D0ApmJrQ0=
Subject key identifier:   86:0C:3A:18:52:AF:9E:6D:29:AC:B7:54:59:29:1F:63:45:64:AC:05
Authority key identifier: F8:FC:C9:D0:A3:86:F2:07:C9:FD:88:6E:26:9D:8F:44:B3:38:57:8D
Certificate issuer:       /CN=F8FCC9D0A386F207C9FD886E269D8F44B338578D
Certificate serial:       27AF3B6F63E3021B7B4F5227DBC2FD3C7587F028
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8FCC9D0A386F207C9FD886E269D8F44B338578D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2CoJMWfwoZHGpjCuNS4seRHQJEJSEo2pk9HS4efPVvt7/0/F8FCC9D0A386F207C9FD886E269D8F44B338578D.mft
Manifest number:          02A6
Signing time:             Wed 17 Dec 2025 21:56:26 +0000
Manifest this update:     Wed 17 Dec 2025 21:51:26 +0000
Manifest next update:     Thu 18 Dec 2025 22:49:26 +0000
Files and hashes:         1: 323830343a316161343a3a2f33322d3334203d3e203631383733.roa (hash: 8sIH0ZelYmsVoQtiez4w+0drrJ+3+rUc+jsPodUrlso=)
                          2: F8FCC9D0A386F207C9FD886E269D8F44B338578D.crl (hash: bJ5mk5VcEywaI/q6Eu4dtlE0h3yn621pItWvuNxipzw=)
                          3: 3230312e3134392e3130382e302f32322d3234203d3e203631383733.roa (hash: n2s5CT0kda59q9O9WExIKnE9TjbbSzgabvmzaUkmfnk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2CoJMWfwoZHGpjCuNS4seRHQJEJSEo2pk9HS4efPVvt7/0/F8FCC9D0A386F207C9FD886E269D8F44B338578D.crl
                          rsync://rpki-repo.registro.br/repo/2CoJMWfwoZHGpjCuNS4seRHQJEJSEo2pk9HS4efPVvt7/0/F8FCC9D0A386F207C9FD886E269D8F44B338578D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8FCC9D0A386F207C9FD886E269D8F44B338578D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Dec 2025 22:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:af:3b:6f:63:e3:02:1b:7b:4f:52:27:db:c2:fd:3c:75:87:f0:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8FCC9D0A386F207C9FD886E269D8F44B338578D
        Validity
            Not Before: Dec 17 21:51:26 2025 GMT
            Not After : Dec 18 22:49:26 2025 GMT
        Subject: CN=860C3A1852AF9E6D29ACB75459291F634564AC05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ea:db:9e:5b:76:98:c7:de:dd:8d:b8:dd:c2:
                    2c:d7:34:a3:b7:99:16:f3:c7:44:0f:53:a9:0a:49:
                    58:81:c3:f8:c8:97:e3:63:02:89:3e:39:51:b2:f6:
                    81:fe:38:56:d3:c0:61:46:c4:59:69:fc:ce:01:da:
                    21:51:db:99:bb:fd:4e:26:4b:45:9d:8c:fd:6a:53:
                    01:8d:d5:62:e1:6f:97:c7:ee:20:67:02:d4:c1:b5:
                    70:2e:b0:be:3a:20:29:d6:4e:d0:28:85:03:0d:17:
                    de:63:07:81:f0:bf:f9:d4:f3:b2:e5:4f:ee:ea:88:
                    0b:07:25:77:ee:ed:c4:5f:97:57:51:9a:46:9c:85:
                    bf:18:16:07:e5:42:a0:e8:ee:3d:53:56:8e:c0:2a:
                    2a:89:6f:5c:84:22:aa:b5:c0:74:e4:77:ef:8c:2a:
                    fb:21:20:d8:da:de:49:cd:32:b1:32:43:06:06:43:
                    78:47:75:42:f4:04:2e:ab:7f:be:97:7d:7d:be:47:
                    6b:99:90:b6:43:a1:cb:a9:03:c7:1c:e5:f2:8c:e1:
                    6b:78:dc:e3:38:d4:07:5d:b1:80:5c:25:ed:8a:97:
                    ca:33:19:de:be:27:1c:b1:65:ce:e8:a1:76:80:b6:
                    19:b9:56:43:8d:63:57:ac:6f:e3:49:cc:1b:f5:19:
                    23:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:0C:3A:18:52:AF:9E:6D:29:AC:B7:54:59:29:1F:63:45:64:AC:05
            X509v3 Authority Key Identifier:
                keyid:F8:FC:C9:D0:A3:86:F2:07:C9:FD:88:6E:26:9D:8F:44:B3:38:57:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2CoJMWfwoZHGpjCuNS4seRHQJEJSEo2pk9HS4efPVvt7/0/F8FCC9D0A386F207C9FD886E269D8F44B338578D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8FCC9D0A386F207C9FD886E269D8F44B338578D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CoJMWfwoZHGpjCuNS4seRHQJEJSEo2pk9HS4efPVvt7/0/F8FCC9D0A386F207C9FD886E269D8F44B338578D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:9c:c4:aa:50:f4:c2:cb:cc:a2:b1:dc:1c:41:23:ea:d7:1e:
         49:10:83:b7:09:aa:2b:80:ad:aa:28:4c:de:6f:8e:90:2e:e0:
         0d:4b:00:d1:32:15:e6:63:be:71:10:e7:cf:ab:f2:c3:af:0f:
         fd:89:2e:05:06:05:ba:cb:82:b9:77:12:d9:27:07:ad:c1:12:
         46:ac:62:94:bb:9d:ad:e4:50:dd:ef:f9:d9:71:af:f2:30:72:
         db:50:11:fe:c1:91:f0:a7:2a:68:e5:27:c7:7a:86:62:6f:46:
         28:d6:d1:8d:60:ba:7f:ae:52:c5:01:83:9e:51:5c:87:51:96:
         9c:e1:85:36:db:95:2e:63:36:eb:50:b4:b6:e3:7d:b3:91:91:
         b8:3c:a3:f5:57:75:28:3a:c5:50:32:e7:e6:0b:13:67:bb:27:
         1a:fc:c6:bf:69:79:21:aa:de:de:f5:21:d5:5f:b3:ef:c5:53:
         b3:bc:63:ef:63:ad:04:c8:8d:66:c9:4d:06:b5:1f:7e:b0:c0:
         07:0f:9b:6d:f4:11:19:06:98:c2:d4:8a:3d:02:9c:86:cf:c3:
         e7:fe:56:fe:71:b6:95:2d:fb:2c:9b:ad:15:f8:11:15:e7:56:
         df:cb:97:55:4c:d2:e5:fd:16:5c:7e:6e:24:79:01:a8:56:f9:
         ee:18:1e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 06:33:48 2025 by rpki-client