This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.mft
File:                     2A6676986C812A17B00635484B147B51B75ADD4B.mft (raw, json)
Hash identifier:          67bV5TYeZscbGFz/lZpLjapmepB75kUNNLBZu6/Fl6w=
Subject key identifier:   AD:0E:1E:04:D1:FF:D3:01:5A:AF:9B:E5:6F:1F:29:4C:0A:4D:4E:7C
Authority key identifier: 2A:66:76:98:6C:81:2A:17:B0:06:35:48:4B:14:7B:51:B7:5A:DD:4B
Certificate issuer:       /CN=2A6676986C812A17B00635484B147B51B75ADD4B
Certificate serial:       79D8893924971FB66A749787A0DB5C50D00B9D4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.mft
Manifest number:          0223
Signing time:             Fri 05 Dec 2025 13:23:07 +0000
Manifest this update:     Fri 05 Dec 2025 13:18:07 +0000
Manifest next update:     Sat 06 Dec 2025 16:39:07 +0000
Files and hashes:         1: 3133322e3235352e3130362e302f32342d3234203d3e20323633333535.roa (hash: SDfcu7VUWOctoPOCblstxab4npZOkDeJYjjnjzNFOW4=)
                          2: 3133322e3235352e3130342e302f32322d3232203d3e20323633333535.roa (hash: i9QIkQfb2wzF7Z38NeTTuocSSCD/CMwdqXtnAd1lPss=)
                          3: 3133322e3235352e3130372e302f32342d3234203d3e20323633333535.roa (hash: LnbM9hTRuevYj2I9thnRKAUkmkbDVXQapFrxCaV/b64=)
                          4: 3139312e33372e36382e302f32332d3233203d3e20323633333535.roa (hash: gBl1cVZBL9epoMEN1FsxNs+G9G1veszGKPXalic5j7I=)
                          5: 323830343a313464633a3a2f33322d3332203d3e20323633333535.roa (hash: ebyc3yc2hKDi5hX7+b4F5vvsAT+SmF7HRpaQeM6LYcs=)
                          6: 3133322e3235352e3130362e302f32332d3233203d3e20323633333535.roa (hash: 7sl6AdBRQct34gupgWsNPb8VNX1C1zef8eQZ8jGUQKk=)
                          7: 3133322e3235352e3130342e302f32332d3233203d3e20323633333535.roa (hash: QgBIG2wlnDDs7pT+eeS1QkuQU8NjQDDP/itIaczL+3s=)
                          8: 2A6676986C812A17B00635484B147B51B75ADD4B.crl (hash: SqE1A+InPxCyQLfos2qGGXPd8qN8qbm/frzPFdGEUbg=)
                          9: 3139312e33372e37302e302f32332d3233203d3e20323633333535.roa (hash: wU17qgrThJMcRsNj2q4GpwiJGgUBFoZ6KEOuhO3lrM8=)
                          10: 3139312e33372e37312e302f32342d3234203d3e20323633333535.roa (hash: hwTf0EhBE4+dAV9b7BOCMjx74L4FNUGLNqcbqE5J4R4=)
                          11: 3133322e3235352e3130342e302f32342d3234203d3e20323633333535.roa (hash: Vo85GtiBIaoM98Q9ybabyt4YtWCq6zG/FYlrA+WwOSk=)
                          12: 3139312e33372e37302e302f32342d3234203d3e20323633333535.roa (hash: i4mClPEGQhePR1WUMjWiX8fJymFETqon1hhvv6Yx6hA=)
                          13: 3133322e3235352e3130352e302f32342d3234203d3e20323633333535.roa (hash: LzUURigi534t36DSQfmxSa9PinC3HOqRygg0fi3xrBU=)
                          14: 3139312e33372e36382e302f32342d3234203d3e20323633333535.roa (hash: HnBPG9D1nho334Ws215ybQRUj9A706hn50lJF9QhY5I=)
                          15: 3139312e33372e36382e302f32322d3232203d3e20323633333535.roa (hash: HfCOfoln6qcNVvudjZQn1kqOG612UiUHfntBR9tAmwQ=)
                          16: 3139312e33372e36392e302f32342d3234203d3e20323633333535.roa (hash: 7Q3ghcjm4TNtNw0rEcUF9iLMJOTI1sIOYHRD8XPseME=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.crl
                          rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 16:39:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:d8:89:39:24:97:1f:b6:6a:74:97:87:a0:db:5c:50:d0:0b:9d:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A6676986C812A17B00635484B147B51B75ADD4B
        Validity
            Not Before: Dec  5 13:18:07 2025 GMT
            Not After : Dec  6 16:39:07 2025 GMT
        Subject: CN=AD0E1E04D1FFD3015AAF9BE56F1F294C0A4D4E7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d0:11:5e:a3:43:d8:b1:7a:62:37:af:cf:19:
                    63:77:e7:e3:61:9a:b3:12:82:bf:e0:59:70:ea:50:
                    9f:c3:7b:91:b8:70:8f:19:7c:dc:91:54:30:fc:86:
                    aa:f9:b0:c0:82:a0:1f:c3:8f:8b:99:bb:5b:32:a7:
                    9c:9a:1d:ea:95:a4:8d:c2:0d:ba:b7:40:1c:95:b3:
                    1e:54:be:8d:a5:74:76:cf:75:22:62:d1:03:3c:37:
                    42:92:e9:7f:05:fb:6d:a4:24:be:cd:20:97:22:90:
                    08:43:5f:2e:b7:bd:50:eb:64:dc:7a:7e:77:74:71:
                    da:00:7b:8a:37:0a:c3:a8:1e:0f:75:c8:7c:70:c3:
                    e3:56:51:89:f9:38:ca:a4:4b:a7:3e:f4:aa:4c:c7:
                    23:74:5c:d9:9c:0b:7f:65:3a:1a:36:76:51:34:0d:
                    03:b3:f9:fe:a5:27:f2:10:c2:6d:17:cf:72:17:e9:
                    fb:55:51:2a:83:d2:d8:cf:0d:6a:e5:2f:ba:c1:43:
                    ea:59:a9:58:9d:94:e8:01:72:b4:fc:27:b2:96:66:
                    ef:24:91:25:d0:d6:33:8b:89:9a:3b:c6:22:cc:df:
                    f5:f4:ac:31:fb:1b:25:a2:e3:48:9a:a0:05:4e:6b:
                    7e:14:78:f7:af:21:ce:9d:95:5a:75:6e:3d:b9:a1:
                    9f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:0E:1E:04:D1:FF:D3:01:5A:AF:9B:E5:6F:1F:29:4C:0A:4D:4E:7C
            X509v3 Authority Key Identifier:
                keyid:2A:66:76:98:6C:81:2A:17:B0:06:35:48:4B:14:7B:51:B7:5A:DD:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:af:2c:01:d2:0c:cf:12:18:56:a7:fc:4a:20:28:e4:23:b7:
         84:dd:ab:0d:90:27:bf:5e:18:e6:ea:aa:28:4c:2d:e9:f8:f3:
         31:5a:61:16:18:dc:7e:43:7c:c2:7f:6a:c9:dd:c3:3f:30:a0:
         ae:56:80:d5:ba:9d:fd:48:80:a4:70:f1:90:85:4f:b4:2b:d3:
         9f:c4:92:54:94:b1:ee:6d:40:98:99:45:ea:13:8a:01:a3:8f:
         ad:24:2d:1e:19:f2:e4:34:f1:ad:6d:43:ef:a6:3e:c5:82:2c:
         c0:e0:60:0e:e8:ba:73:fa:37:cb:e1:92:b8:88:fd:8d:63:78:
         a2:08:e3:5d:49:e4:bd:e2:37:f5:ad:75:cd:91:97:ce:0c:4b:
         59:bc:f4:e8:df:e1:a9:52:a2:0d:49:e2:81:78:03:32:0f:e0:
         ab:5d:24:29:3a:e2:8b:af:8b:4d:b8:c2:59:52:31:93:2b:ad:
         46:b6:05:55:8d:a4:a6:09:2f:00:cb:95:3f:5c:72:1c:66:f5:
         03:15:fa:a1:20:6c:82:ab:e6:f1:eb:06:d7:8e:e2:09:02:99:
         32:4e:0e:b6:6f:b1:a0:96:68:a0:90:d4:42:0f:c2:6f:1e:2e:
         ac:ed:94:b6:d2:42:1b:ac:15:93:ae:2a:b4:de:9b:e3:cb:7f:
         78:63:07:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:16:01 2025 by rpki-client