This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/89C2D7F07FF1C3BAD441528520572EB33C763CEB.mft
File:                     89C2D7F07FF1C3BAD441528520572EB33C763CEB.mft (raw, json)
Hash identifier:          5Q63OhAbF1KXGmwum1ciRZAxBkHYW3ugHbn7TVigYWA=
Subject key identifier:   E2:2E:47:D7:FE:DE:27:08:EA:20:C9:32:69:4A:C6:95:1A:99:ED:CA
Authority key identifier: 89:C2:D7:F0:7F:F1:C3:BA:D4:41:52:85:20:57:2E:B3:3C:76:3C:EB
Certificate issuer:       /CN=89C2D7F07FF1C3BAD441528520572EB33C763CEB
Certificate serial:       34DD38484D2DA98B77DA8FF43DC9FA4C64694477
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89C2D7F07FF1C3BAD441528520572EB33C763CEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/89C2D7F07FF1C3BAD441528520572EB33C763CEB.mft
Manifest number:          0E
Signing time:             Fri 05 Dec 2025 15:26:25 +0000
Manifest this update:     Fri 05 Dec 2025 15:21:25 +0000
Manifest next update:     Sat 06 Dec 2025 16:48:25 +0000
Files and hashes:         1: 3136382e3233322e38322e302f32342d3234203d3e20323634393336.roa (hash: jK+f8A3wtlEIaM5pEueNQ4v1lT7CE+6C98FjZfW2XrY=)
                          2: 3136382e3233322e38312e302f32342d3234203d3e20323634393336.roa (hash: Q9ulgKnqz+VkCV2sLerkLiJe6qmytob77pdRwZeK/O0=)
                          3: 3136382e3233322e38332e302f32342d3234203d3e20323634393336.roa (hash: fyCXwVhYlTR6ZvuZAsU6dDdICqf0ROyVOb5Ct9zsiOI=)
                          4: 3136382e3233322e38302e302f32322d3232203d3e20323634393336.roa (hash: dvo5n45sE31jrlfkZyucS2BjPqd8DGVAptxVuaTznBA=)
                          5: 3136382e3233322e38322e302f32332d3233203d3e20323634393336.roa (hash: dtYKe9LmFw7eUdpu7tOYqxiOkqY5cTGmugHdNck7Occ=)
                          6: 323830343a333033343a36303a3a2f34342d3434203d3e20323634393336.roa (hash: ItCF7/5WWPpDpautNlBrdm7eR4JtF6m2sPLjVkRN/4U=)
                          7: 323830343a333033343a31303a3a2f34342d3434203d3e20323634393336.roa (hash: 7lOm+Ol7Z4E2q32oYEIkAe97y+xsQeHgmU5Vd7EDHpc=)
                          8: 89C2D7F07FF1C3BAD441528520572EB33C763CEB.crl (hash: xDnHamiSASdv5cMOIjALNsW9WmAiyBsXOHCoxxQcQRY=)
                          9: 323830343a333033343a3132303a3a2f34332d3433203d3e20323634393336.roa (hash: cpsPGI7l6vxvLCLdkOm1O8sf8Puieh3TVysmjZPKnk0=)
                          10: 323830343a333033343a3a2f34342d3434203d3e20323634393336.roa (hash: RZU/s6PNv0N2pTgVWGE6tOR1GTQxjMFb/f3kP/QuFTE=)
                          11: 323830343a333033343a33303a3a2f34342d3434203d3e20323634393336.roa (hash: Sn+GqF+mvIJJdVyqS5JDLzdB4qn9nl5v15iRgGSxX70=)
                          12: 3136382e3233322e38302e302f32342d3234203d3e20323634393336.roa (hash: HxsPaIF/qzhQffODUqeFPjeROXR2c6/2HLHKeKdTir0=)
                          13: 323830343a333033343a35303a3a2f34342d3434203d3e20323634393336.roa (hash: T17EmrtKCo6H68yj4YZOfyOabOPLWvT1IrywCiOeDs4=)
                          14: 323830343a333033343a3131303a3a2f34342d3434203d3e20323634393336.roa (hash: IO/rH//qlAhwvhuC8wG6vU+EQOoFe+Fd6/3D+VD3/6g=)
                          15: 3136382e3233322e38302e302f32332d3233203d3e20323634393336.roa (hash: UR0cTCKTskpcZcn05cRH5cJDLC2qzJ/rIR88Tx3oDOc=)
                          16: 323830343a333033343a32303a3a2f34342d3434203d3e20323634393336.roa (hash: HSd9qSRmS61f+Ezwy1vpC3+2ALGhOHHXl1kMJ9LYWFU=)
                          17: 323830343a333033343a3a2f33322d3332203d3e20323634393336.roa (hash: SgazwX7n47i9tIUXGGZ6AEqHnWUyREKwtBiNxw+jemc=)
                          18: 323830343a333033343a34303a3a2f34342d3434203d3e20323634393336.roa (hash: c0/SqBV5T4crWw9NSjpX+dUNtD1PmlKVj5CYgW077KY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/89C2D7F07FF1C3BAD441528520572EB33C763CEB.crl
                          rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/89C2D7F07FF1C3BAD441528520572EB33C763CEB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89C2D7F07FF1C3BAD441528520572EB33C763CEB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 16:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:dd:38:48:4d:2d:a9:8b:77:da:8f:f4:3d:c9:fa:4c:64:69:44:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89C2D7F07FF1C3BAD441528520572EB33C763CEB
        Validity
            Not Before: Dec  5 15:21:25 2025 GMT
            Not After : Dec  6 16:48:25 2025 GMT
        Subject: CN=E22E47D7FEDE2708EA20C932694AC6951A99EDCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b9:1e:8c:52:65:e6:52:c4:af:d3:48:8b:1f:
                    01:40:49:97:11:66:62:f7:ee:f6:88:49:15:02:dd:
                    7e:a4:91:60:f0:b8:b3:0b:e9:47:94:a8:ed:91:65:
                    87:7f:4d:f7:a6:cc:85:85:cb:db:b1:9d:15:3a:30:
                    8c:93:53:16:7b:73:c2:ca:da:68:95:8a:07:c7:8b:
                    42:7d:f0:ee:b1:ce:4e:93:6e:a3:8d:a9:38:2f:39:
                    c2:6f:c5:35:66:a5:33:3b:ef:c2:9e:10:b7:15:bf:
                    b2:7a:8b:96:a9:03:87:ef:42:de:c7:17:c0:80:e3:
                    de:12:5d:ff:9f:b8:fd:41:ed:c1:cc:7f:9e:34:e0:
                    0d:b4:b3:80:e6:a2:b0:9b:db:fc:a1:24:e9:8b:e5:
                    01:f2:4e:84:e9:8b:9c:6b:7d:af:22:a8:19:21:f0:
                    c2:68:a2:2c:63:5b:b4:f8:7f:cf:e6:38:91:a3:91:
                    a8:55:9c:e6:0c:82:6a:a8:ca:ba:c8:60:1f:8d:c4:
                    e1:02:a2:3d:a9:ca:ee:07:4b:3f:41:23:71:50:3b:
                    d8:09:aa:cf:07:48:de:02:04:a6:a5:75:21:37:51:
                    ca:08:45:fc:f8:7b:e8:18:33:5f:ee:52:a2:d7:e6:
                    71:cb:6a:fb:de:88:49:be:c6:63:55:aa:73:11:45:
                    99:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:2E:47:D7:FE:DE:27:08:EA:20:C9:32:69:4A:C6:95:1A:99:ED:CA
            X509v3 Authority Key Identifier:
                keyid:89:C2:D7:F0:7F:F1:C3:BA:D4:41:52:85:20:57:2E:B3:3C:76:3C:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/89C2D7F07FF1C3BAD441528520572EB33C763CEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89C2D7F07FF1C3BAD441528520572EB33C763CEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/89C2D7F07FF1C3BAD441528520572EB33C763CEB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:22:c8:08:71:d6:8a:50:aa:24:3e:ee:d3:77:2d:83:1b:bb:
         0d:e7:50:b7:37:66:31:c0:c7:6d:8d:5f:8a:44:ca:c9:fc:79:
         e2:26:cd:91:a9:c7:42:5a:95:90:89:e4:10:93:36:c6:92:1a:
         bf:68:f6:7f:0a:9c:b0:db:f3:ba:a0:9a:3b:18:6f:1b:d0:bd:
         c2:9b:ad:4e:47:2e:06:d3:8b:82:72:28:4f:05:76:0d:0f:d1:
         62:01:0b:1e:79:0b:ec:90:95:a1:b7:b8:09:b0:a7:30:a1:31:
         53:2c:a0:04:f7:cb:ed:1c:c6:73:9e:74:af:44:e2:be:1b:1f:
         7d:30:54:69:c0:88:3d:8d:e5:6b:7a:33:08:f0:f9:3d:30:c0:
         43:6f:e8:6e:c8:76:a2:48:b9:8a:51:3d:ac:06:61:f1:46:43:
         24:bf:34:9f:15:af:6c:7e:f9:ff:5c:8b:f9:7e:9e:46:ef:86:
         af:24:6d:2a:38:7b:1c:f0:f2:70:22:9a:5c:8f:10:84:fd:e3:
         50:27:eb:70:35:52:7b:a7:64:17:65:6e:be:46:29:d1:39:4d:
         f0:86:ac:c2:f6:f9:e4:a7:65:bf:22:c9:2e:de:b4:ad:c4:8e:
         01:2a:49:7c:2b:5f:64:fa:a6:bb:5d:61:96:ac:22:6c:19:e2:
         09:ee:9a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:09:03 2025 by rpki-client