This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.mft
File:                     F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.mft (raw, json)
Hash identifier:          VqzZOLt2JVLRCFncWgyqsTCWI7o2xVCrxng9Bi128sY=
Subject key identifier:   F2:A6:4F:6E:41:17:97:9F:0C:DF:84:04:06:7E:27:26:49:09:7C:5E
Authority key identifier: F0:C1:0B:CB:9F:02:D8:24:7A:A0:2A:3E:DE:A9:4D:D4:B3:B9:9E:BE
Certificate issuer:       /CN=F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE
Certificate serial:       4FDC67D4FC30153FDCC60EC8B8ED9D0C5B6B4D1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.mft
Manifest number:          0329
Signing time:             Sat 06 Dec 2025 09:33:51 +0000
Manifest this update:     Sat 06 Dec 2025 09:28:51 +0000
Manifest next update:     Sun 07 Dec 2025 10:53:51 +0000
Files and hashes:         1: 3136382e3139372e3135392e302f32342d3234203d3e20323635343835.roa (hash: ggwshtBvCD2NErVK/vMVHsklQ2yeQGE205ikTiDmu4U=)
                          2: 3136382e3139372e3135362e302f32322d3232203d3e20323635343835.roa (hash: ho+2stj1+2//bBiLA82EQ15fMhZKj+ZV+8pgiUfd5lQ=)
                          3: 3136382e3139372e3135362e302f32332d3233203d3e20323635343835.roa (hash: Bcj+cezIBa5IU7SOP+QHr4o3rAckGafDiMQS0vkPg6s=)
                          4: 3136382e3139372e3135362e302f32342d3234203d3e20323635343835.roa (hash: h1hzxlKnqRjxs6dzZxXJfzVgOW72kbl1DF7IVQXZq7Q=)
                          5: 3136382e3139372e3135372e302f32342d3234203d3e20323635343835.roa (hash: eQyMYMQheFFOY76x5kkSnAWnHWAuRe2acPXyPh7Ipu8=)
                          6: F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.crl (hash: 3otK5YIp54nU7VwX4no7LnF6R8TRkeDlUCOGg9tttwc=)
                          7: 3136382e3139372e3135382e302f32342d3234203d3e20323635343835.roa (hash: kC4ohzPIFCKYTXrPl6c3v01MljKO2fvgrBbVa7PnLV0=)
                          8: 323830343a333464633a3a2f33322d3430203d3e20323635343835.roa (hash: fi0nx9VEH+bSF5Va9xmFg9sEL87cu8bON4+0RP08rFY=)
                          9: 3136382e3139372e3135382e302f32332d3233203d3e20323635343835.roa (hash: 08Xc50ykfh9wfoHbUN6H4sI1VuHuMBOoUOuD39nszxY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.crl
                          rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 10:53:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:dc:67:d4:fc:30:15:3f:dc:c6:0e:c8:b8:ed:9d:0c:5b:6b:4d:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE
        Validity
            Not Before: Dec  6 09:28:51 2025 GMT
            Not After : Dec  7 10:53:51 2025 GMT
        Subject: CN=F2A64F6E4117979F0CDF8404067E272649097C5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:25:ee:14:8c:79:8b:d8:3b:d1:75:ce:96:8d:
                    17:a0:73:c2:78:0c:77:a0:79:46:94:f9:97:74:1e:
                    96:e8:91:de:1f:4b:88:5b:b9:fb:85:87:ed:1a:3a:
                    e0:12:ca:a5:8f:0c:98:8b:f6:fe:7d:05:88:4e:59:
                    f6:36:c0:bc:f0:51:35:9a:1e:35:74:1d:73:83:12:
                    b1:12:6c:03:20:8d:c4:aa:94:02:c1:a6:56:34:6d:
                    59:b5:2d:a6:5b:02:f0:9b:70:93:e1:35:80:37:21:
                    86:92:92:df:c7:4c:88:a1:01:94:98:61:a0:c0:29:
                    cd:bd:2c:dd:86:4a:28:d3:6d:62:2f:33:f6:27:16:
                    f6:32:e5:a2:8b:03:9d:6e:e2:12:7e:66:c8:6d:b6:
                    6e:bd:60:3e:eb:0c:8b:db:3f:2b:2f:92:2a:ae:9d:
                    36:40:f9:96:30:dd:1e:4b:db:16:c1:0e:99:49:ae:
                    2d:27:1c:50:15:45:16:a3:6f:c6:34:3f:87:f5:a4:
                    5c:e0:ba:08:4c:56:93:2a:ab:2f:62:00:58:c7:c9:
                    ae:c9:14:38:d6:62:e5:63:98:f5:ff:f2:7c:7b:2b:
                    62:0c:75:3c:a1:98:92:3a:73:2b:ed:89:e8:b5:fb:
                    35:d4:6c:2c:25:44:0d:78:cc:27:b7:fd:e5:d5:9b:
                    13:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A6:4F:6E:41:17:97:9F:0C:DF:84:04:06:7E:27:26:49:09:7C:5E
            X509v3 Authority Key Identifier:
                keyid:F0:C1:0B:CB:9F:02:D8:24:7A:A0:2A:3E:DE:A9:4D:D4:B3:B9:9E:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ab:15:76:c9:cc:91:df:83:4b:e2:34:b9:bb:2c:5b:75:d5:
         07:21:9f:52:05:39:7c:76:18:14:55:68:05:88:ce:f2:76:6b:
         35:92:61:1e:61:f5:6e:93:0b:2d:e3:34:cc:71:16:0c:60:a3:
         51:5d:c7:bd:81:b1:38:34:6a:93:aa:1a:23:8c:94:62:60:6b:
         aa:d7:18:81:45:cc:b0:59:78:a4:08:34:30:b0:37:f0:af:f4:
         26:fc:14:02:12:fb:ab:de:b7:55:d0:d0:06:2b:b8:a2:28:37:
         ca:30:88:34:69:ee:b0:d6:f6:bf:f3:52:3f:10:a0:4a:74:d7:
         ed:b1:53:88:f9:b9:5e:3d:08:87:03:11:d5:2a:79:a5:e6:b5:
         8e:84:3d:49:d9:c7:70:71:62:7d:ca:50:db:09:c8:2a:4c:7a:
         5f:2b:19:8d:7b:89:af:3d:34:f8:54:84:a6:05:d0:df:83:9c:
         64:12:4b:d3:aa:56:dd:f2:4d:d4:02:cb:f7:ea:36:9e:5f:5f:
         92:c0:9f:ac:8b:ac:f0:cd:bc:86:dd:f6:fe:5c:3d:5f:1d:75:
         ba:b2:d2:82:04:d5:d0:11:ae:e3:c7:33:d5:68:4d:00:ae:c6:
         a9:e0:fb:f1:78:dd:9e:2b:55:83:ed:21:4f:8b:01:77:7c:68:
         15:50:ff:b8
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUT9xn1PwwFT/cxg7IuO2dDFtrTR4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjBDMTBCQ0I5RjAyRDgyNDdBQTAyQTNFREVBOTRERDRC
M0I5OUVCRTAeFw0yNTEyMDYwOTI4NTFaFw0yNTEyMDcxMDUzNTFaMDMxMTAvBgNV
BAMTKEYyQTY0RjZFNDExNzk3OUYwQ0RGODQwNDA2N0UyNzI2NDkwOTdDNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBJe4UjHmL2DvRdc6WjRegc8J4
DHegeUaU+Zd0Hpbokd4fS4hbufuFh+0aOuASyqWPDJiL9v59BYhOWfY2wLzwUTWa
HjV0HXODErESbAMgjcSqlALBplY0bVm1LaZbAvCbcJPhNYA3IYaSkt/HTIihAZSY
YaDAKc29LN2GSijTbWIvM/YnFvYy5aKLA51u4hJ+Zshttm69YD7rDIvbPysvkiqu
nTZA+ZYw3R5L2xbBDplJri0nHFAVRRajb8Y0P4f1pFzgughMVpMqqy9iAFjHya7J
FDjWYuVjmPX/8nx7K2IMdTyhmJI6cyvtiei1+zXUbCwlRA14zCe3/eXVmxMRAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU8qZPbkEXl58M34QEBn4nJkkJfF4wHwYDVR0j
BBgwFoAU8MELy58C2CR6oCo+3qlN1LO5nr4wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby81ZGt0d3B0M1FFWG4zb0NXenB0ZkoxTHpQS1JIbUtuS25rb3JLMTd5WWpq
LzEvRjBDMTBCQ0I5RjAyRDgyNDdBQTAyQTNFREVBOTRERDRCM0I5OUVCRS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9GMEMxMEJDQjlGMDJEODI0N0FB
MDJBM0VERUE5NERENEIzQjk5RUJFLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVk
a3R3cHQzUUVYbjNvQ1d6cHRmSjFMelBLUkhtS25LbmtvcksxN3lZamovMS9GMEMx
MEJDQjlGMDJEODI0N0FBMDJBM0VERUE5NERENEIzQjk5RUJFLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
aqsVdsnMkd+DS+I0ubssW3XVByGfUgU5fHYYFFVoBYjO8nZrNZJhHmH1bpMLLeM0
zHEWDGCjUV3HvYGxODRqk6oaI4yUYmBrqtcYgUXMsFl4pAg0MLA38K/0JvwUAhL7
q963VdDQBiu4oig3yjCINGnusNb2v/NSPxCgSnTX7bFTiPm5Xj0IhwMR1Sp5pea1
joQ9SdnHcHFifcpQ2wnIKkx6XysZjXuJrz00+FSEpgXQ34OcZBJL06pW3fJN1ALL
9+o2nl9fksCfrIus8M28ht32/lw9Xx11urLSggTV0BGu48cz1WhNAK7GqeD78Xjd
nitVg+0hT4sBd3xoFVD/uA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:51:05 2025 by rpki-client