This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/99CBE612CF987BC19B2EBFA775C37AA88704A02A.mft
File:                     99CBE612CF987BC19B2EBFA775C37AA88704A02A.mft (raw, json)
Hash identifier:          K5WRmqwZSwdDv2jGseqg/QH3/fPZgedhI9taelWGoKs=
Subject key identifier:   99:20:BB:73:8C:B0:3C:81:C3:B4:AD:92:8B:B9:FE:7F:3D:31:8D:48
Authority key identifier: 99:CB:E6:12:CF:98:7B:C1:9B:2E:BF:A7:75:C3:7A:A8:87:04:A0:2A
Certificate issuer:       /CN=99CBE612CF987BC19B2EBFA775C37AA88704A02A
Certificate serial:       3C1BFB0098B9B1906887580EB256E340445B944E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99CBE612CF987BC19B2EBFA775C37AA88704A02A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/99CBE612CF987BC19B2EBFA775C37AA88704A02A.mft
Manifest number:          0121
Signing time:             Sat 06 Dec 2025 10:40:47 +0000
Manifest this update:     Sat 06 Dec 2025 10:35:47 +0000
Manifest next update:     Sun 07 Dec 2025 13:41:47 +0000
Files and hashes:         1: 99CBE612CF987BC19B2EBFA775C37AA88704A02A.crl (hash: wDNTM+DdF58bF2QIjgAQRdaaf2b/ybVBHLdYTxG9A0o=)
                          2: 34352e3137372e342e302f32332d3332203d3e20323638393433.roa (hash: 0+kYLD8yHBn8SEvHZmP6Lna69QmTu4oRBPJPDeUnb5c=)
                          3: 34352e3137362e3133362e302f32322d3332203d3e20323638393433.roa (hash: Vrt0CzEyM2PFJe+InYR1IwnM+I67HCAmxDrqTTmERvo=)
                          4: 323830343a356366383a3a2f33322d313238203d3e20323638393433.roa (hash: GcYsJrCgHMe99NpgpZuWCzNu1TQaO1J+BqBAsKQkiDU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/99CBE612CF987BC19B2EBFA775C37AA88704A02A.crl
                          rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/99CBE612CF987BC19B2EBFA775C37AA88704A02A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99CBE612CF987BC19B2EBFA775C37AA88704A02A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 11:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:1b:fb:00:98:b9:b1:90:68:87:58:0e:b2:56:e3:40:44:5b:94:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99CBE612CF987BC19B2EBFA775C37AA88704A02A
        Validity
            Not Before: Dec  6 10:35:47 2025 GMT
            Not After : Dec  7 13:41:47 2025 GMT
        Subject: CN=9920BB738CB03C81C3B4AD928BB9FE7F3D318D48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7d:c1:6a:26:ed:9b:53:86:02:82:04:af:48:
                    f1:34:1c:91:bf:d6:93:59:37:68:63:ec:e6:7a:cd:
                    ed:0d:67:90:95:d1:e2:14:7a:82:ee:a8:a1:4d:97:
                    af:e8:4e:35:78:0e:76:ce:ba:44:a4:6e:fc:3d:49:
                    b8:e4:28:03:f8:83:ee:8b:92:3b:de:64:48:27:b2:
                    50:68:9f:cf:13:ac:0f:4d:48:16:5b:ae:07:fc:ed:
                    ca:eb:e2:d8:aa:ea:eb:0f:1d:9b:1b:55:ab:f1:97:
                    5d:d3:fb:07:97:f7:f9:04:a0:32:cd:ec:98:2e:2c:
                    f5:bb:cd:7c:fd:03:8e:5f:53:49:da:37:9a:8a:22:
                    24:e8:af:97:ae:bf:82:85:7b:d1:2d:8a:00:9e:72:
                    34:f2:8d:fa:9a:53:fa:8a:93:07:5c:87:88:2c:df:
                    3c:ad:04:16:e5:0a:f3:eb:07:ae:a0:25:6b:a8:3c:
                    84:7c:83:56:91:8f:55:bf:fc:4f:05:0d:3d:76:d7:
                    ea:1f:e9:b3:6d:a6:71:01:14:14:1f:88:19:89:a9:
                    da:62:44:01:00:87:9f:6b:7c:88:df:f3:07:48:e2:
                    c7:29:b7:7e:2f:5e:7e:19:68:74:66:99:58:7e:6a:
                    20:3c:02:95:bd:f6:5d:6d:8f:64:b7:7a:f8:60:a8:
                    75:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:20:BB:73:8C:B0:3C:81:C3:B4:AD:92:8B:B9:FE:7F:3D:31:8D:48
            X509v3 Authority Key Identifier:
                keyid:99:CB:E6:12:CF:98:7B:C1:9B:2E:BF:A7:75:C3:7A:A8:87:04:A0:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/99CBE612CF987BC19B2EBFA775C37AA88704A02A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99CBE612CF987BC19B2EBFA775C37AA88704A02A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/99CBE612CF987BC19B2EBFA775C37AA88704A02A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:d2:a1:90:67:06:f6:cb:a5:3c:8d:84:f7:12:29:da:e9:01:
         5f:f4:70:f8:5e:22:31:7a:ce:08:5d:de:bb:1b:c3:95:ea:2a:
         61:64:b5:a6:8c:63:6e:2a:60:4b:d1:3e:db:20:1b:0f:cd:23:
         55:9d:86:11:01:2f:ee:75:19:fa:e5:0b:df:e2:d2:be:55:0c:
         dd:58:93:e5:af:d0:23:aa:f8:79:79:88:85:69:42:21:49:bd:
         1d:72:e4:0e:b5:84:f5:18:23:4f:69:1c:02:ff:ac:27:67:b7:
         da:38:31:3f:21:5d:a4:e1:e7:27:02:16:47:d8:c8:4b:31:f4:
         76:83:68:a6:f4:b2:76:61:71:bf:3d:16:4a:2a:cd:08:b1:ca:
         18:9f:1a:35:51:ba:30:4a:e8:f9:70:b8:e6:dc:7a:1a:a4:ad:
         0e:5b:c0:75:a7:c7:ce:c5:14:31:e8:74:fa:b2:6e:09:5a:3e:
         c1:59:95:5f:3c:0d:3d:d2:78:d4:cf:0a:45:db:f8:28:08:0d:
         70:6e:7a:53:7a:df:e4:9e:b4:a8:e7:c4:80:2b:84:0a:35:b9:
         17:50:9d:bd:ad:18:fb:14:94:85:e1:e7:14:11:b4:28:df:d0:
         d4:05:f9:39:d8:0d:82:66:cf:b8:ab:71:cf:e3:0b:cd:6e:ee:
         59:1b:90:5a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPBv7AJi5sZBoh1gOslbjQERblE4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlDQkU2MTJDRjk4N0JDMTlCMkVCRkE3NzVDMzdBQTg4
NzA0QTAyQTAeFw0yNTEyMDYxMDM1NDdaFw0yNTEyMDcxMzQxNDdaMDMxMTAvBgNV
BAMTKDk5MjBCQjczOENCMDNDODFDM0I0QUQ5MjhCQjlGRTdGM0QzMThENDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6fcFqJu2bU4YCggSvSPE0HJG/
1pNZN2hj7OZ6ze0NZ5CV0eIUeoLuqKFNl6/oTjV4DnbOukSkbvw9SbjkKAP4g+6L
kjveZEgnslBon88TrA9NSBZbrgf87crr4tiq6usPHZsbVavxl13T+weX9/kEoDLN
7JguLPW7zXz9A45fU0naN5qKIiTor5euv4KFe9EtigCecjTyjfqaU/qKkwdch4gs
3zytBBblCvPrB66gJWuoPIR8g1aRj1W//E8FDT121+of6bNtpnEBFBQfiBmJqdpi
RAEAh59rfIjf8wdI4scpt34vXn4ZaHRmmVh+aiA8ApW99l1tj2S3evhgqHXVAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUmSC7c4ywPIHDtK2Si7n+fz0xjUgwHwYDVR0j
BBgwFoAUmcvmEs+Ye8GbLr+ndcN6qIcEoCowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjY1aGt2V1JtUEFnVTZGaU1uTDF3aTEyRmttZUNrZXlRQWRDM0RvUkZz
QzQvMC85OUNCRTYxMkNGOTg3QkMxOUIyRUJGQTc3NUMzN0FBODg3MDRBMDJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5Q0JFNjEyQ0Y5ODdCQzE5
QjJFQkZBNzc1QzM3QUE4ODcwNEEwMkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NjY1aGt2V1JtUEFnVTZGaU1uTDF3aTEyRmttZUNrZXlRQWRDM0RvUkZzQzQvMC85
OUNCRTYxMkNGOTg3QkMxOUIyRUJGQTc3NUMzN0FBODg3MDRBMDJBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAT9KhkGcG9sulPI2E9xIp2ukBX/Rw+F4iMXrOCF3euxvDleoqYWS1poxjbipg
S9E+2yAbD80jVZ2GEQEv7nUZ+uUL3+LSvlUM3ViT5a/QI6r4eXmIhWlCIUm9HXLk
DrWE9RgjT2kcAv+sJ2e32jgxPyFdpOHnJwIWR9jISzH0doNopvSydmFxvz0WSirN
CLHKGJ8aNVG6MEro+XC45tx6GqStDlvAdafHzsUUMeh0+rJuCVo+wVmVXzwNPdJ4
1M8KRdv4KAgNcG56U3rf5J60qOfEgCuECjW5F1Cdva0Y+xSUheHnFBG0KN/Q1AX5
OdgNgmbPuKtxz+MLzW7uWRuQWg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:20:15 2025 by rpki-client