This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.mft
File:                     66DCAA5522EEEC15CC978DE673986E897244B698.mft (raw, json)
Hash identifier:          4N2GTKnTJMbTBnpPEJMzjfyCKNxMQ79WOfG6Yczq800=
Subject key identifier:   CA:61:CA:4A:A4:1E:32:83:02:08:34:D6:63:E1:CA:DD:B9:98:99:DB
Authority key identifier: 66:DC:AA:55:22:EE:EC:15:CC:97:8D:E6:73:98:6E:89:72:44:B6:98
Certificate issuer:       /CN=66DCAA5522EEEC15CC978DE673986E897244B698
Certificate serial:       5AC3469579083ABEE66E8FE39E84E98AA13FFADE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66DCAA5522EEEC15CC978DE673986E897244B698.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.mft
Manifest number:          0301
Signing time:             Fri 05 Dec 2025 21:30:14 +0000
Manifest this update:     Fri 05 Dec 2025 21:25:14 +0000
Manifest next update:     Sat 06 Dec 2025 22:06:14 +0000
Files and hashes:         1: 34352e3233352e302e302f32322d3234203d3e20323637333930.roa (hash: xxkzZlzNnmqYTshl6Uai4i2lv96/YrTBJknS6dRLNbA=)
                          2: 66DCAA5522EEEC15CC978DE673986E897244B698.crl (hash: GlpzwV9zpv13xickOao8d7l+FmWhK7DIciiCctAqUL8=)
                          3: 323830343a346363343a3a2f33322d3438203d3e20323637333930.roa (hash: hv7GJnPJJH69UkfbyS/UqD3tSNA9O787umB0YeWkrcY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.crl
                          rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66DCAA5522EEEC15CC978DE673986E897244B698.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 22:06:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c3:46:95:79:08:3a:be:e6:6e:8f:e3:9e:84:e9:8a:a1:3f:fa:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66DCAA5522EEEC15CC978DE673986E897244B698
        Validity
            Not Before: Dec  5 21:25:14 2025 GMT
            Not After : Dec  6 22:06:14 2025 GMT
        Subject: CN=CA61CA4AA41E3283020834D663E1CADDB99899DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f7:ff:a2:90:4c:8b:f5:01:dc:40:0f:09:c0:
                    a0:f8:4c:b2:0a:46:ca:73:73:a5:f7:fd:a1:a1:67:
                    71:b6:ac:34:fb:02:ee:6d:41:63:0c:a7:fb:ea:a0:
                    ff:b5:80:25:d5:fd:15:9f:39:e2:4c:d4:6e:00:c8:
                    6c:9e:b0:fb:a7:4f:a9:77:60:28:8d:34:c1:58:0a:
                    86:c4:c6:c2:7e:7a:e9:56:f1:ab:ef:8e:52:78:44:
                    6c:9c:1e:5a:39:6e:be:a8:19:6d:31:c6:08:6f:ec:
                    8d:df:f7:04:ea:e2:bc:d4:37:4e:a5:b7:f7:dc:ce:
                    54:b3:15:6b:02:15:fb:59:db:f3:12:07:b7:b1:9f:
                    89:11:e0:a2:00:37:f6:64:9a:66:33:5d:93:b2:80:
                    fe:87:3b:12:17:52:55:4c:d9:91:39:41:d8:6d:b9:
                    f6:d4:89:26:ab:8d:79:7d:6c:5a:5c:47:89:71:94:
                    dd:32:ad:1a:61:1e:49:95:d0:05:d3:07:fa:bf:1f:
                    3d:73:4d:12:06:32:5b:59:11:bf:d7:7e:24:48:1a:
                    70:e1:8d:7d:95:80:5d:34:e3:e5:a7:a9:74:9b:12:
                    e9:6f:e5:0d:f1:db:f1:97:74:a4:6d:25:34:d8:45:
                    03:96:29:8f:cf:3c:71:b1:34:bb:4c:98:89:25:d2:
                    e6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:61:CA:4A:A4:1E:32:83:02:08:34:D6:63:E1:CA:DD:B9:98:99:DB
            X509v3 Authority Key Identifier:
                keyid:66:DC:AA:55:22:EE:EC:15:CC:97:8D:E6:73:98:6E:89:72:44:B6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66DCAA5522EEEC15CC978DE673986E897244B698.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:1a:a2:5c:10:6d:0a:53:0b:1b:a4:10:16:40:aa:aa:df:23:
         67:11:d3:51:ac:6a:1e:02:f1:3c:c0:d6:23:f3:8a:82:51:52:
         0f:ed:c0:29:eb:b7:e7:d7:b5:30:7a:f9:ee:f3:79:9c:50:8f:
         84:80:e8:97:b1:1e:56:b1:21:68:73:7f:6d:71:44:08:ff:74:
         ee:82:a4:ce:de:93:c4:e7:b4:5a:e7:a8:02:67:a5:35:8c:44:
         2b:d5:48:ce:45:ae:7c:78:49:cf:41:18:d8:e8:6c:65:8e:49:
         19:52:20:c0:75:bf:b0:cb:88:04:87:ee:6f:ab:37:ef:28:a2:
         8f:04:3c:7c:99:fb:25:1c:9a:2b:6f:76:08:58:f1:c7:29:56:
         63:a0:0e:a5:3b:56:ba:08:7d:58:84:4c:c9:ad:69:06:23:80:
         29:dd:ab:fe:64:21:24:fe:9c:36:ba:6e:07:90:75:53:97:ae:
         58:af:0e:7c:6e:d4:02:3c:d4:d1:c7:73:eb:7b:83:c2:48:cf:
         0e:26:15:8a:54:e7:76:ed:50:6a:bb:dc:67:eb:83:a9:2d:a7:
         8c:77:6b:03:7f:b3:4c:4a:d0:f6:c7:8a:cf:f7:8f:7b:8d:6d:
         03:c2:0c:60:0c:1a:8e:66:d4:2c:a6:84:c0:f0:40:88:74:0d:
         67:b7:69:7f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWsNGlXkIOr7mbo/jnoTpiqE/+t4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZEQ0FBNTUyMkVFRUMxNUNDOTc4REU2NzM5ODZFODk3
MjQ0QjY5ODAeFw0yNTEyMDUyMTI1MTRaFw0yNTEyMDYyMjA2MTRaMDMxMTAvBgNV
BAMTKENBNjFDQTRBQTQxRTMyODMwMjA4MzRENjYzRTFDQUREQjk5ODk5REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH9/+ikEyL9QHcQA8JwKD4TLIK
Rspzc6X3/aGhZ3G2rDT7Au5tQWMMp/vqoP+1gCXV/RWfOeJM1G4AyGyesPunT6l3
YCiNNMFYCobExsJ+eulW8avvjlJ4RGycHlo5br6oGW0xxghv7I3f9wTq4rzUN06l
t/fczlSzFWsCFftZ2/MSB7exn4kR4KIAN/ZkmmYzXZOygP6HOxIXUlVM2ZE5Qdht
ufbUiSarjXl9bFpcR4lxlN0yrRphHkmV0AXTB/q/Hz1zTRIGMltZEb/XfiRIGnDh
jX2VgF004+WnqXSbEulv5Q3x2/GXdKRtJTTYRQOWKY/PPHGxNLtMmIkl0ubZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUymHKSqQeMoMCCDTWY+HK3bmYmdswHwYDVR0j
BBgwFoAUZtyqVSLu7BXMl43mc5huiXJEtpgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGhGUXV6TVJXb2NzM0Nzb1FDOHJrRkJFdkZ5enNiQzc1ajJZeXZVWU5W
YmsvMC82NkRDQUE1NTIyRUVFQzE1Q0M5NzhERTY3Mzk4NkU4OTcyNDRCNjk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2RENBQTU1MjJFRUVDMTVD
Qzk3OERFNjczOTg2RTg5NzI0NEI2OTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NGhGUXV6TVJXb2NzM0Nzb1FDOHJrRkJFdkZ5enNiQzc1ajJZeXZVWU5WYmsvMC82
NkRDQUE1NTIyRUVFQzE1Q0M5NzhERTY3Mzk4NkU4OTcyNDRCNjk4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArRqiXBBtClMLG6QQFkCqqt8jZxHTUaxqHgLxPMDWI/OKglFSD+3AKeu359e1
MHr57vN5nFCPhIDol7EeVrEhaHN/bXFECP907oKkzt6TxOe0WueoAmelNYxEK9VI
zkWufHhJz0EY2OhsZY5JGVIgwHW/sMuIBIfub6s37yiijwQ8fJn7JRyaK292CFjx
xylWY6AOpTtWugh9WIRMya1pBiOAKd2r/mQhJP6cNrpuB5B1U5euWK8OfG7UAjzU
0cdz63uDwkjPDiYVilTndu1QarvcZ+uDqS2njHdrA3+zTErQ9seKz/ePe41tA8IM
YAwajmbULKaEwPBAiHQNZ7dpfw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:05:55 2025 by rpki-client