This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.mft
File:                     2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.mft (raw, json)
Hash identifier:          HTZ1YZkFr68qyTIR/WxQNohazpUREdohT2HHij2Bzvc=
Subject key identifier:   40:4A:C9:97:46:DA:18:62:33:0E:CA:99:D2:E2:0C:D6:BD:6F:8A:0F
Authority key identifier: 23:14:FD:91:7B:0F:2B:87:53:A2:D4:CC:8D:7F:F8:7B:D1:D0:8D:BF
Certificate issuer:       /CN=2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF
Certificate serial:       575308DE070ED9C153B3FF0373A034DA48F7148D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.mft
Manifest number:          8F
Signing time:             Sat 06 Dec 2025 16:11:41 +0000
Manifest this update:     Sat 06 Dec 2025 16:06:41 +0000
Manifest next update:     Sun 07 Dec 2025 20:07:41 +0000
Files and hashes:         1: 3137372e37332e38342e302f32332d3233203d3e203532373030.roa (hash: CYCzjjz7vC2HSH+XTLuo+vyMZyKi4b1Smps4Q5cy2OM=)
                          2: 3139312e3234302e3136322e302f32332d3233203d3e203532373030.roa (hash: 8MDEQl+yPhZo9TbGxEvJ7Z9q9GZQ/7R0QUKvrOJM0tw=)
                          3: 3137372e37332e38362e302f32332d3233203d3e203532373030.roa (hash: K/BShfZp8G3dIY9wbJZbZYBIWRmB6ZEclPx8K6R6zpY=)
                          4: 323830343a313130633a3a2f33332d3333203d3e203532373030.roa (hash: mmV7GFSq3gySCXfWiizSlGNhf0aDIyNl4boHYym3qfQ=)
                          5: 2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.crl (hash: 4gMltco3i2ImE+UgaR1HjBAAD8IooQLsMXF4GM2g2Uc=)
                          6: 3137372e37332e38342e302f32322d3232203d3e203532373030.roa (hash: nTazRvFGEOckqEyvdd44CN8VtzCgdbuW3fTjJyvE19Q=)
                          7: 323830343a313130633a383030303a3a2f33332d3333203d3e203532373030.roa (hash: zsQbNhEsA2MBcRJzGIKX7kD5kKHasqGIUE5X6OuxKRM=)
                          8: 3139312e3234302e3136302e302f32322d3232203d3e203532373030.roa (hash: 3zcCjARIdLk6IrcUYECCiayoHTBLnsHJ9XjI28dhe7w=)
                          9: 3139312e3234302e3136302e302f32332d3233203d3e203532373030.roa (hash: N6QnEbH+R5FQ/47yXEOVIXnS4Y6rYv42kd7tW3S7Yks=)
                          10: 323830343a313130633a3a2f33322d3332203d3e203532373030.roa (hash: SAWaM2Lpc4NjmrwoIBB5LWFN+Bt95hR69JS4j0WM6OI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.crl
                          rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 20:07:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:53:08:de:07:0e:d9:c1:53:b3:ff:03:73:a0:34:da:48:f7:14:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF
        Validity
            Not Before: Dec  6 16:06:41 2025 GMT
            Not After : Dec  7 20:07:41 2025 GMT
        Subject: CN=404AC99746DA1862330ECA99D2E20CD6BD6F8A0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:73:8f:5f:d0:7e:7b:6f:65:22:3f:1f:3d:6f:
                    60:70:ae:fe:df:35:6c:c3:04:d4:6b:36:40:fd:cf:
                    48:d4:fb:ed:98:ee:ea:6c:84:d9:6b:b4:e0:08:8d:
                    5e:52:ed:45:37:d6:ef:11:4b:a4:73:cd:8c:ef:d3:
                    30:e1:59:bd:bf:dc:ba:90:16:2d:b4:77:dc:a2:75:
                    27:b1:11:f0:a1:31:c7:a0:58:6a:2b:5c:6d:f1:23:
                    43:28:ca:23:be:e2:5d:cf:30:07:64:40:7a:52:e8:
                    c4:63:ec:66:6d:17:5a:e6:f2:08:90:df:9f:75:f9:
                    a9:b1:cc:e0:35:7f:b4:14:ee:0f:36:f7:be:44:32:
                    c5:d8:d6:23:7c:5f:70:b7:74:23:03:dc:8c:80:e2:
                    88:ea:38:c7:7e:a4:62:9d:7e:c3:1a:fa:2d:ec:50:
                    49:69:77:f0:e7:65:d2:50:b5:ba:af:99:bd:80:09:
                    91:57:5e:83:4e:76:ab:d7:fe:49:fb:cf:59:87:4b:
                    44:8c:e4:b3:87:02:1e:db:ef:0b:06:ad:2e:47:8f:
                    eb:a1:2c:a8:cc:af:1b:3c:49:8d:e3:ea:9b:1e:e0:
                    b6:43:db:84:06:14:c6:c0:07:8f:26:05:f7:66:14:
                    98:3a:01:80:8e:70:ac:4f:4f:dc:95:68:c9:46:7b:
                    6f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4A:C9:97:46:DA:18:62:33:0E:CA:99:D2:E2:0C:D6:BD:6F:8A:0F
            X509v3 Authority Key Identifier:
                keyid:23:14:FD:91:7B:0F:2B:87:53:A2:D4:CC:8D:7F:F8:7B:D1:D0:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:29:2d:ce:1d:66:71:d9:31:92:9a:6b:c7:0b:d2:26:59:fd:
         6c:ec:f9:eb:36:2a:fd:22:17:f9:47:fc:c9:a1:d8:ee:88:4b:
         cc:a1:97:de:87:a8:77:0b:d2:2a:cb:7b:e8:87:98:cf:58:27:
         9a:21:de:3d:1f:d4:a9:5c:ac:8b:94:26:dd:f4:78:4e:95:df:
         6b:2b:64:58:de:4e:23:24:3b:e0:b2:50:e0:60:d0:df:ad:59:
         c2:1f:6a:36:15:31:57:eb:af:10:ea:e5:99:77:87:45:35:03:
         4b:e2:60:f5:02:81:d4:f3:95:b6:f6:cc:e1:69:8f:b1:7e:2e:
         9a:d1:87:79:21:77:12:3d:5a:d7:75:8f:41:78:6c:c9:5b:7a:
         ac:e8:92:eb:c3:80:8d:ec:63:0d:6d:ec:c1:6d:32:74:e1:7c:
         62:a0:b2:72:c3:b1:2b:60:10:a1:83:11:70:98:c9:bb:33:04:
         e6:66:fe:53:0b:63:0c:d6:6f:e2:df:54:0e:fe:3c:6c:9e:f0:
         b3:1b:ed:cb:3f:7c:79:0e:14:b5:f8:0b:b3:93:c6:c8:df:ed:
         68:4b:d5:35:5d:8d:1b:4e:22:15:d0:3d:a5:7a:c8:5f:32:b8:
         25:28:03:d6:52:63:f4:29:58:4b:18:86:52:4f:93:99:09:fb:
         30:5d:50:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:28:44 2025 by rpki-client