This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.mft
File:                     0E88601104C6C43AC785175C29585EFD06974620.mft (raw, json)
Hash identifier:          rQKnhQTlmqFyqh42MJrzp9B4S0qMgcfOWrFzqXaM7+g=
Subject key identifier:   DB:88:4C:B5:49:7A:9D:07:6C:24:5B:C0:52:F5:C9:4C:69:BB:B8:F0
Authority key identifier: 0E:88:60:11:04:C6:C4:3A:C7:85:17:5C:29:58:5E:FD:06:97:46:20
Certificate issuer:       /CN=0E88601104C6C43AC785175C29585EFD06974620
Certificate serial:       7E7F16A01ECA5E9F538FF6F155B02AED66B9A325
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.mft
Manifest number:          0331
Signing time:             Sat 06 Dec 2025 09:20:21 +0000
Manifest this update:     Sat 06 Dec 2025 09:15:21 +0000
Manifest next update:     Sun 07 Dec 2025 12:13:21 +0000
Files and hashes:         1: 323830343a323231303a3a2f34382d3438203d3e20323634353839.roa (hash: RUPXGYFc3N0ZWFTODpHDk21IQfK7JmFqCdhx/1Ka6tk=)
                          2: 3134332e3230322e3232382e302f32342d3234203d3e20323634353839.roa (hash: ZGO5v9LUDQZRjXsn+ndJFWRwUxJYLrzNBAFMDafI0gA=)
                          3: 323830343a323231303a633030303a3a2f33342d3334203d3e20323634353839.roa (hash: 7DSHhb4g6HFGRhAKFHMHVvfJLvJKpVU7GdrA+yuW66M=)
                          4: 0E88601104C6C43AC785175C29585EFD06974620.crl (hash: 3mQyRxy44WZA5M6I5Td/e/n0/9Z1Nqd2ppIIxVB3Jls=)
                          5: 3133382e33362e3234302e302f32332d3233203d3e20323634353839.roa (hash: +3XDDjbpUjZYS64iae7bMObO4htNGF2MzhF9x1grRfk=)
                          6: 3133382e33362e3234312e302f32342d3234203d3e20323634353839.roa (hash: CTrQciMDxx8vgbFdw9ZhtXbFV9uTg7+xiXebGL4IcBw=)
                          7: 3134332e3230322e3233312e302f32342d3234203d3e20323634353839.roa (hash: 0zrk0rMnYzWSYDq46FuTI0iv0jDwmBnxoaItP+eRn6M=)
                          8: 3134332e3230322e3233302e302f32342d3234203d3e20323634353839.roa (hash: jF7P3JPghc/AEXiuXRrOdlHXfUjf3+C7Tg5FIpeRjPI=)
                          9: 3134332e3230322e3232392e302f32342d3234203d3e20323634353839.roa (hash: y048Dkkeefar+0HYkpGi1CGqcQN+18HgNGctlkgGRm4=)
                          10: 323830343a323231303a3a2f33342d3334203d3e20323634353839.roa (hash: BuY3JAd+I4GQ4Isw/fBgvSFhIYsLCQ++juQp2KHBFd8=)
                          11: 323830343a323231303a383030303a3a2f33342d3334203d3e20323634353839.roa (hash: PX+wwIOc1ieID9iSMRg+d7nEgrl4+4INLeP2emGG/78=)
                          12: 3133382e33362e3234332e302f32342d3234203d3e20323634353839.roa (hash: hv9ftqmNpaONsGT5S5w3yZVByFa4B+kPyKFdUqLXgGQ=)
                          13: 3133382e33362e3234322e302f32342d3234203d3e20323634353839.roa (hash: +9KcEL6OAPO2Fq7ZbMshlfBSAjbcWsvCmPPRoUp5LKE=)
                          14: 323830343a323231303a3a2f33332d3333203d3e20323634353839.roa (hash: JVP81+cv0YHuMm/kO22QIUMeE8hiF/fIBv9LFC46orI=)
                          15: 323830343a323231303a343030303a3a2f33342d3334203d3e20323634353839.roa (hash: aB1z7sY/Fwrtj5JKVGNz/9ciptRcynh6JYuqsnxTzUk=)
                          16: 3133382e33362e3234302e302f32342d3234203d3e20323634353839.roa (hash: DZqiSTx+V0teLhKuCpOTCGoIK1Uvk9SRjn8+zZJSwZY=)
                          17: 3133382e33362e3234322e302f32332d3233203d3e20323634353839.roa (hash: 8pt7YXEiXIfFxJCTJdqDqmkT8OgmhItP2tM+ZcM2c14=)
                          18: 3134332e3230322e3232382e302f32332d3233203d3e20323634353839.roa (hash: zBeuDG3RpGHHGbRjcO/FJ0TSzmfYg8s/84qoaut7x10=)
                          19: 323830343a323231303a383030303a3a2f33332d3333203d3e20323634353839.roa (hash: z0PK89XPf7iScPDW5/s/N6ven+AoHLN0gyU8EK0vNeo=)
                          20: 3133382e33362e3234302e302f32322d3232203d3e20323634353839.roa (hash: K84lfU1RhnRjpWwWFsC7fGV98rOEFsh1J68jGmxtvhs=)
                          21: 323830343a323231303a3a2f33322d3332203d3e20323634353839.roa (hash: 5dX02pKTmcG5vMsy47XWvGYRUU8FZoy/F9zypLxTMYI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.crl
                          rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 12:13:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:7f:16:a0:1e:ca:5e:9f:53:8f:f6:f1:55:b0:2a:ed:66:b9:a3:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E88601104C6C43AC785175C29585EFD06974620
        Validity
            Not Before: Dec  6 09:15:21 2025 GMT
            Not After : Dec  7 12:13:21 2025 GMT
        Subject: CN=DB884CB5497A9D076C245BC052F5C94C69BBB8F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:af:fc:23:42:24:a5:53:f6:49:90:f9:66:a5:
                    bd:9b:9c:0e:b0:b9:47:59:68:c3:ae:59:3f:90:50:
                    4c:90:c5:d9:ac:d0:b0:7a:61:a3:ea:c4:aa:8e:b3:
                    9d:90:19:92:80:09:95:3d:be:1f:a8:5b:7c:d0:99:
                    7f:92:ba:29:79:9b:43:79:ed:e8:78:3d:bb:3c:29:
                    04:6e:46:83:1b:c7:20:17:cc:df:4e:02:9c:b9:7e:
                    be:2f:aa:6e:1d:b1:a9:9b:26:10:c8:8e:ec:28:6e:
                    30:6b:4a:f5:cb:61:af:ea:03:48:ee:82:18:2d:db:
                    89:51:ba:4e:0b:04:ce:d0:af:e5:34:62:18:da:39:
                    e3:5b:8c:c8:3c:47:45:9f:80:3e:56:8b:f7:dd:00:
                    a1:91:85:2d:f8:72:f6:f7:ff:1b:c5:7b:f4:98:fd:
                    bb:40:27:8c:db:5e:4c:76:2f:b9:4e:3e:28:8d:c0:
                    b9:fa:29:7d:13:ac:a2:a6:67:e8:d1:5d:b7:b2:ac:
                    1c:9c:7f:1e:d3:3a:11:07:ab:20:15:76:bb:77:64:
                    b3:75:67:e3:ed:00:d0:88:75:5a:c4:02:dd:7c:dd:
                    0a:a6:ea:1d:81:b9:8d:d9:af:73:32:75:f1:ee:5c:
                    2f:f6:ff:c5:f5:61:af:09:82:86:e2:62:1e:e4:22:
                    9a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:88:4C:B5:49:7A:9D:07:6C:24:5B:C0:52:F5:C9:4C:69:BB:B8:F0
            X509v3 Authority Key Identifier:
                keyid:0E:88:60:11:04:C6:C4:3A:C7:85:17:5C:29:58:5E:FD:06:97:46:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:9f:b8:93:51:22:5b:ac:c3:29:26:d3:2a:c8:a8:f6:0a:ff:
         32:86:44:86:f5:b0:61:9c:35:77:dd:d3:1d:dc:c2:78:76:80:
         cd:f7:c8:28:0b:69:d5:66:60:1d:4a:47:cb:95:14:27:14:8b:
         8d:1c:fa:fd:39:08:44:e8:d7:ba:5d:68:a7:90:49:81:1b:8b:
         6f:a4:09:50:ac:56:8b:7d:e4:5c:97:a1:ed:42:f0:f5:09:da:
         75:2d:49:42:2f:ba:d9:85:54:48:a5:8b:f0:3e:02:9a:39:82:
         b3:94:90:51:09:10:1d:e5:61:f7:44:1b:97:07:40:c0:ed:dd:
         64:03:83:56:4c:9c:b2:b3:b7:ca:fe:d5:58:d2:25:27:d1:e1:
         c1:0c:b7:1b:5a:e8:e5:3d:8f:e4:81:a5:ae:09:e3:bc:f0:3f:
         19:d4:78:54:30:ac:71:26:7f:33:51:00:b9:57:c3:df:b1:cb:
         a0:b8:24:c7:d7:2e:6b:04:e3:2d:0a:da:d4:3a:6f:c6:7f:8f:
         66:25:cc:9a:28:4b:30:f9:bb:90:05:75:fd:5f:a4:72:c8:29:
         5f:6e:ca:95:5a:ee:66:c2:7b:18:bf:a0:d7:87:a4:00:38:eb:
         a5:32:0e:86:1a:76:c4:0c:93:fd:37:e8:29:21:36:71:f3:c4:
         ae:5e:9e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:51:22 2025 by rpki-client