This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.mft
File:                     CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.mft (raw, json)
Hash identifier:          pTMy36wVmq26RiV04k+WVgts/f+gO+AzLk2IlBUDwRY=
Subject key identifier:   A3:49:05:BB:AB:8B:00:D8:CD:73:D4:46:9B:0C:0A:96:3E:56:A0:18
Authority key identifier: CE:68:7B:DF:D3:E8:EB:AC:E7:EE:1E:A8:4F:7F:C1:BB:27:8B:3C:C3
Certificate issuer:       /CN=CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3
Certificate serial:       6861D57042333DF86AA751FC4699F8181F14620D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.mft
Manifest number:          02F6
Signing time:             Wed 17 Dec 2025 21:19:14 +0000
Manifest this update:     Wed 17 Dec 2025 21:14:14 +0000
Manifest next update:     Thu 18 Dec 2025 22:18:14 +0000
Files and hashes:         1: CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.crl (hash: ieeCHmmzo7oW56JTf1b4jh3LuKzbIMQLex0HTCNR4IE=)
                          2: 3137372e39332e3132302e302f32312d3234203d3e203631363236.roa (hash: xJpl633oyi4Zdt/snGoWFzDNEc15Ted1WWS4P38ZqLw=)
                          3: 3134332e3230382e3136302e302f32322d3234203d3e203533303436.roa (hash: 5eFUevr2dE6MZ+8wJXXksud7aRNAfHmV5AsSSz03MCg=)
                          4: 3137372e3130312e31362e302f32302d3234203d3e203533303436.roa (hash: fI57AI6+t6AsMYH6jSm9b/z4WiODEbV9BIhwRdq7GXc=)
                          5: 3230302e33392e36342e302f31392d3234203d3e203533303436.roa (hash: 3gKGNWz1L7Ud1t3Md7ioY7FVTLAni2yRSVDnW2oHytg=)
                          6: 323830343a316630343a3a2f33322d3438203d3e203533303436.roa (hash: 02lwV22koZ8oQZyrbJEv18vRwqbUaxUUMyS+zIDXB5g=)
                          7: 323830343a316635653a3a2f33322d3438203d3e203631363236.roa (hash: QMEJztZ58DrWYob/8PoxTCeDXYAPe/EjSlT01zcppe8=)
                          8: 323830313a38303a333761303a3a2f34382d3438203d3e203631363030.roa (hash: rakqIuuQ+fQPICPRrTDnV98R6tURbK5FHHU86pMLHc0=)
                          9: 323830313a38303a3333303a3a2f34382d3438203d3e203533303436.roa (hash: PDPEW7sXHheN1lkoRvWSLstZ5hLcgDKMJpo3g/12lgE=)
                          10: 34352e3138362e3134332e302f32342d3234203d3e203631363030.roa (hash: nesTxCF5G8p1z6EqmOaP0MAwB+COE8jfI9nS7fqHwEI=)
                          11: 3137372e39332e3132302e302f32312d3234203d3e203533303436.roa (hash: eMo61bvQPDVk8NOg9Q7MaiGFibYYK+jU1Bz/uzZYxvM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.crl
                          rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Dec 2025 22:18:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:61:d5:70:42:33:3d:f8:6a:a7:51:fc:46:99:f8:18:1f:14:62:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3
        Validity
            Not Before: Dec 17 21:14:14 2025 GMT
            Not After : Dec 18 22:18:14 2025 GMT
        Subject: CN=A34905BBAB8B00D8CD73D4469B0C0A963E56A018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d6:29:df:38:05:a0:c4:38:89:5a:9c:ea:e2:
                    8b:cd:09:db:e0:dd:12:17:5f:1e:5b:92:6a:d0:b8:
                    7d:35:40:25:85:c9:96:20:39:54:26:08:93:b2:37:
                    6b:e8:de:24:e1:3f:c6:09:be:79:50:64:d8:be:7d:
                    71:8f:7f:77:1c:13:74:33:94:56:08:b7:00:2b:26:
                    09:28:fc:9d:02:03:f5:b2:78:19:d0:16:b4:a7:ed:
                    3e:54:82:10:17:14:f6:91:2d:5b:1c:f1:47:19:98:
                    30:31:cb:f7:05:80:15:55:5e:35:65:47:d7:9d:24:
                    6e:1a:65:4e:50:8a:6d:c0:60:f5:ec:e7:09:7a:b2:
                    da:aa:22:85:9f:e5:ad:23:03:3b:bb:01:4b:a2:f6:
                    a0:5d:a3:75:45:89:cb:b0:ad:d9:5f:a2:b6:54:38:
                    04:0d:1d:22:46:87:f8:5c:98:ab:0d:bd:3e:94:6e:
                    72:f1:ee:06:c9:9e:b1:ad:a0:fe:cf:b6:da:54:12:
                    43:00:a2:67:7e:ca:0d:f1:39:e5:7e:90:32:67:09:
                    8d:9d:af:75:58:82:cb:46:88:8d:05:7f:0e:ac:8c:
                    39:ec:86:30:f4:75:83:0b:c6:7c:70:cd:04:e7:30:
                    d7:4d:67:11:1c:d7:dc:64:d0:db:61:69:7a:c7:df:
                    1a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:49:05:BB:AB:8B:00:D8:CD:73:D4:46:9B:0C:0A:96:3E:56:A0:18
            X509v3 Authority Key Identifier:
                keyid:CE:68:7B:DF:D3:E8:EB:AC:E7:EE:1E:A8:4F:7F:C1:BB:27:8B:3C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:7f:65:bb:f7:52:d8:59:92:a9:63:8d:13:75:9d:c0:b5:e2:
         10:4a:bb:7f:de:17:12:c3:dc:14:01:3d:06:bb:91:5c:73:26:
         60:0a:69:00:77:f1:dd:6f:00:90:f3:b8:33:a8:9a:53:ff:06:
         87:4a:eb:38:2b:ed:07:43:15:7d:f5:12:f3:70:c0:18:1d:53:
         a9:20:5b:69:56:b9:0f:42:9f:9d:5f:1a:b1:1c:89:bf:2f:44:
         79:7b:44:43:16:8d:d7:5f:b4:89:82:68:b2:1a:3d:87:85:16:
         1e:bb:f4:20:5f:b1:b4:35:25:a4:ed:11:b9:75:e1:54:6f:65:
         91:a5:e5:7c:a8:ba:e1:9c:c1:35:ce:00:23:8b:2d:44:4a:4f:
         34:09:10:02:82:d9:73:3f:78:5d:2f:60:80:6b:06:a2:dc:b9:
         e8:2b:11:b6:4d:6f:22:1c:94:ca:b0:fc:61:64:39:7b:b3:39:
         0e:3d:f7:58:be:b7:0e:02:c6:81:ac:45:09:5b:2d:b8:f3:c8:
         ea:41:ff:5b:55:4e:3e:7d:f4:79:e6:8c:71:15:0c:67:94:26:
         21:ab:39:cf:de:79:c7:69:5c:96:31:e7:01:64:5d:38:93:ac:
         b8:d3:05:6f:96:c5:57:db:f9:bf:11:ba:1f:23:eb:a8:bc:33:
         47:15:96:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 12:44:46 2025 by rpki-client