This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.mft
File:                     10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.mft (raw, json)
Hash identifier:          MlTAyzACqyDDbQoZrN3FXWuc2nTe87UHD+GZcWWIMbs=
Subject key identifier:   84:A6:AC:D8:9A:09:55:00:8C:BA:ED:45:AE:6D:0F:00:92:B0:22:5B
Authority key identifier: 10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8
Certificate issuer:       /CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
Certificate serial:       7DFC53E194D2A1CBA68162C9B3C2A779068F522A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.mft
Manifest number:          027A
Signing time:             Sat 06 Dec 2025 02:19:33 +0000
Manifest this update:     Sat 06 Dec 2025 02:14:33 +0000
Manifest next update:     Sun 07 Dec 2025 05:49:33 +0000
Files and hashes:         1: 3230302e33342e3231372e302f32342d3234203d3e203631363839.roa (hash: uivicO+WxNeHSbZi3VDHCKox0HsKFmIQDYpR2bZucDM=)
                          2: 3230302e33342e3231382e302f32342d3234203d3e203631363839.roa (hash: DZgpMh/XDSsY4KR5pk+DjFRI80eDO3uG+VeUcdfhaSc=)
                          3: 323830343a316430343a3430313a3a2f34382d3438203d3e203631363839.roa (hash: YVF7zdhIXJcUp9rSmOQKpkaLT6VxvxEyIUMD0aWNrQQ=)
                          4: 10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl (hash: qaD1ocVvvi0WYhQ1He+IZ3EveAeQVqI/BAwcB+puGX4=)
                          5: 323830343a316430343a663030303a3a2f33362d3336203d3e203631363839.roa (hash: eb7mfnVxiLNwPZQxs3SjtebMzmQg1hxxOb3fu4xHFbw=)
                          6: 323830343a316430343a383030303a3a2f33362d3336203d3e203631363839.roa (hash: 82mAvuloh9qSPMBujifoGa2S0i3aymF171XrLA5dUEQ=)
                          7: 323830343a316430343a353030303a3a2f33362d3336203d3e203631363839.roa (hash: 0kYV5GGBkIBUkN5EO8Hn90Gz+TNdOvKe8mz4WDcVZ1c=)
                          8: 323830343a316430343a3a2f34382d3438203d3e203631363839.roa (hash: G5Yh1E+Bzs2qbMSb5DbJuWGION6XenrHh/N1zmIg4w8=)
                          9: 323830343a316430343a3430303a3a2f34382d3438203d3e203631363839.roa (hash: Nt3312Jyd+MOcuUk6bzcZwwh2CuaHoVJjXZDckw3rhs=)
                          10: 3230302e33342e3231382e302f32332d3233203d3e203631363839.roa (hash: enAWJhcAvUyzYJDGBJyDU5CoUBpxGjYRhoKQ+o2/SB8=)
                          11: 323830343a316430343a3a2f33322d3332203d3e203631363839.roa (hash: qgVQm5moA9pCnfplA1mg6pE27lAvpE1TZZxffs96R8k=)
                          12: 323830343a316430343a333030303a3a2f33362d3336203d3e203631363839.roa (hash: 6a8yy0r6CK4l1TXNUQzM3zb9CahYHSvBK2E5lFfmAcA=)
                          13: 323830343a316430343a3a2f33362d3336203d3e203631363839.roa (hash: 2kXocEERlpwEQrZoFJek1/gvAOK5FYVyfQOwonzy6CA=)
                          14: 323830343a316430343a623030303a3a2f33362d3336203d3e203631363839.roa (hash: KMU+XvyTpYt1VI6D+SjiU9CQEc3EVneCtokK8N3tt2o=)
                          15: 323830343a316430343a353a3a2f34382d3438203d3e203631363839.roa (hash: hAhHwKerYs43yMnQC386m41KR8yVB+IsokXwu1cQdzE=)
                          16: 323830343a316430343a633030303a3a2f33362d3336203d3e203631363839.roa (hash: 2iN7yEAsJo7Vw/WC06Lv5d8kXsyvaUw5EJv0LILk2fc=)
                          17: 3230302e33342e3231362e302f32342d3234203d3e203631363839.roa (hash: qF5e/j43vFVU0Rakjs77MNMnu63OVmULX8ahRcW9xQ0=)
                          18: 3230302e33342e3231392e302f32342d3234203d3e203631363839.roa (hash: wrXpg6SvSen7mQHQmN5CTLtxO1EXWtb8C2AgPH9+0yA=)
                          19: 3230302e33342e3231362e302f32332d3233203d3e203631363839.roa (hash: 9iRfxjbOTFpmKKzcHe3XlASDLXeHKHNBwN27kVX0v4w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl
                          rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:49:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:fc:53:e1:94:d2:a1:cb:a6:81:62:c9:b3:c2:a7:79:06:8f:52:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
        Validity
            Not Before: Dec  6 02:14:33 2025 GMT
            Not After : Dec  7 05:49:33 2025 GMT
        Subject: CN=84A6ACD89A0955008CBAED45AE6D0F0092B0225B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c5:8e:e4:a6:e0:29:de:5a:e2:78:7e:39:37:
                    34:0b:d2:5d:ac:7e:de:4c:c8:9c:8c:d1:71:c1:a7:
                    14:97:34:a1:0c:dd:4c:b2:9f:9b:c2:61:6f:90:6f:
                    9c:42:82:63:9e:de:22:79:6d:78:b1:2c:68:f4:c3:
                    5e:20:a0:8a:1d:f0:c2:0d:28:8a:50:49:90:84:78:
                    fd:c7:67:d9:d0:34:49:65:13:28:20:5c:10:2b:fc:
                    83:00:b3:c3:64:5c:19:5f:dd:ce:4f:24:24:22:5b:
                    ea:1c:32:75:6e:c1:79:73:3a:03:e1:fa:a2:60:43:
                    ba:c0:00:ff:fe:2d:e9:8c:7b:e3:53:65:90:66:e1:
                    78:23:a4:92:6a:d0:c5:d2:cd:da:79:37:36:05:d7:
                    2c:12:bf:2a:ae:a0:ef:9e:0c:b2:90:aa:bf:76:2d:
                    99:27:c8:ef:a9:cf:70:f2:6c:ee:03:20:5b:34:1a:
                    c0:22:dd:fe:14:31:4a:f2:7f:58:c0:15:33:f0:83:
                    95:48:4c:50:d1:6d:c0:f7:61:10:fb:c3:de:76:03:
                    8b:4b:2c:b2:ad:62:86:a4:9b:17:68:c4:90:ca:38:
                    04:23:80:5b:dd:61:07:d1:e2:9d:a5:3c:a8:9f:f3:
                    55:4d:04:b6:bb:83:de:ab:d3:b6:95:98:66:4e:60:
                    02:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A6:AC:D8:9A:09:55:00:8C:BA:ED:45:AE:6D:0F:00:92:B0:22:5B
            X509v3 Authority Key Identifier:
                keyid:10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:5a:b8:2d:f8:19:fd:cf:94:77:70:a4:63:da:ec:6e:93:b6:
         22:a3:8b:51:2e:3c:32:79:b0:39:97:d9:ee:2b:a1:30:1e:fa:
         44:47:df:ee:0e:82:c3:31:3d:57:14:ed:c1:a3:da:c8:f0:76:
         c2:f5:5e:01:ca:40:01:bd:86:31:d9:e2:6b:06:68:32:60:61:
         90:18:26:56:d1:9a:d7:3d:b1:25:3d:33:3d:ba:65:f9:5e:e8:
         bd:2b:5b:85:9d:32:7c:3e:3c:d7:75:eb:18:ee:bf:cc:02:67:
         c2:34:18:43:ea:f2:3c:45:8b:35:43:f9:ae:23:36:06:80:c6:
         74:74:e3:70:56:e8:9c:b2:0e:91:f0:89:8d:7f:05:7d:52:19:
         97:9d:eb:42:cd:78:4e:db:3c:81:31:19:e9:ee:34:7e:b1:81:
         f1:14:20:96:5d:24:5d:3e:bb:25:75:1a:00:88:e3:b3:59:d3:
         4a:a3:c4:c4:ca:0b:17:35:31:a7:7c:70:d1:08:08:8a:8c:01:
         c7:9a:c1:ac:fb:16:08:2d:34:20:7f:f6:f1:bc:86:6f:e4:e5:
         70:b2:4c:5e:e3:90:03:98:9d:39:37:91:8e:b1:6d:d8:81:27:
         24:90:e1:1b:1b:d4:4c:33:85:3b:66:fd:57:9f:c0:98:e4:2e:
         00:86:9c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:04:52 2025 by rpki-client