This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8F3TtJRXRKt4VUtVU55hgw4NGRPaG6o4tqmY3GPj3Kiu/0/8C6C46F6D7FA4B1566FAD6079B92B6C7C4F913AA.mft
File:                     8C6C46F6D7FA4B1566FAD6079B92B6C7C4F913AA.mft (raw, json)
Hash identifier:          TUY4Gd1Fgty1fpJaYetR/t4z1Vsc9HszDcN8Joh2myI=
Subject key identifier:   FF:5D:A8:65:E2:2B:41:C0:5E:05:E2:8B:DA:04:9A:AD:71:95:B2:E8
Authority key identifier: 8C:6C:46:F6:D7:FA:4B:15:66:FA:D6:07:9B:92:B6:C7:C4:F9:13:AA
Certificate issuer:       /CN=8C6C46F6D7FA4B1566FAD6079B92B6C7C4F913AA
Certificate serial:       2ABAF9FEC17EAAB8497AF6A6E2E07ED50362C894
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6C46F6D7FA4B1566FAD6079B92B6C7C4F913AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8F3TtJRXRKt4VUtVU55hgw4NGRPaG6o4tqmY3GPj3Kiu/0/8C6C46F6D7FA4B1566FAD6079B92B6C7C4F913AA.mft
Manifest number:          02AE
Signing time:             Sat 06 Dec 2025 07:08:08 +0000
Manifest this update:     Sat 06 Dec 2025 07:03:08 +0000
Manifest next update:     Sun 07 Dec 2025 10:41:08 +0000
Files and hashes:         1: 323830343a376535303a3a2f33322d313238203d3e20323731363136.roa (hash: MSmcAF5Pr7Z6OmK/0SYrvYrYTjy6XmR4fjJwc6jwjFw=)
                          2: 8C6C46F6D7FA4B1566FAD6079B92B6C7C4F913AA.crl (hash: iCZ0YxR+t1Sc0KgoGsghrmEB/eW9t2PpMShdEFoxN3E=)
                          3: 3137392e3132342e3231322e302f32322d3332203d3e20323731363136.roa (hash: 8MOTu8eWxWJdOyb3Rj+44q1aBxu7QzXcDhIUq8fF8wo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8F3TtJRXRKt4VUtVU55hgw4NGRPaG6o4tqmY3GPj3Kiu/0/8C6C46F6D7FA4B1566FAD6079B92B6C7C4F913AA.crl
                          rsync://rpki-repo.registro.br/repo/8F3TtJRXRKt4VUtVU55hgw4NGRPaG6o4tqmY3GPj3Kiu/0/8C6C46F6D7FA4B1566FAD6079B92B6C7C4F913AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6C46F6D7FA4B1566FAD6079B92B6C7C4F913AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 10:41:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ba:f9:fe:c1:7e:aa:b8:49:7a:f6:a6:e2:e0:7e:d5:03:62:c8:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C6C46F6D7FA4B1566FAD6079B92B6C7C4F913AA
        Validity
            Not Before: Dec  6 07:03:08 2025 GMT
            Not After : Dec  7 10:41:08 2025 GMT
        Subject: CN=FF5DA865E22B41C05E05E28BDA049AAD7195B2E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:aa:88:47:bf:9c:ac:14:67:91:ec:33:e6:9c:
                    57:a4:36:00:34:7c:e1:84:e2:59:d3:e8:44:fe:26:
                    69:2a:e1:31:42:a7:2d:26:8b:45:f6:d5:a4:0e:14:
                    7f:40:96:65:41:a3:74:42:8a:eb:8d:17:41:d0:a9:
                    a8:b2:de:f7:44:5e:c5:b4:d0:6b:dd:32:08:2c:f5:
                    fa:0c:45:8c:e8:57:e3:f8:95:11:51:a2:37:eb:83:
                    9e:0e:cc:ab:59:03:ff:9c:2b:cb:2f:d0:b4:fd:ed:
                    37:2a:47:64:94:f0:26:9b:00:94:ba:d1:b0:47:91:
                    59:1e:f3:24:9e:26:c4:6b:1a:db:ac:f2:c8:ba:56:
                    de:71:32:8a:cf:9e:b3:a9:98:ea:77:68:ec:7c:47:
                    46:68:32:08:4e:84:25:6b:14:6b:7f:fc:a5:27:f6:
                    e7:f5:2d:d4:5d:a8:80:6b:5c:aa:a2:eb:05:a3:bc:
                    62:50:3d:1f:a1:17:9a:58:c9:26:a5:2b:40:4b:af:
                    b2:76:41:8b:e0:23:1d:f3:03:17:29:76:95:7c:d7:
                    3f:18:db:01:c5:57:41:5f:38:cf:bc:cd:78:b8:06:
                    04:62:8d:99:7c:84:1d:23:56:fe:aa:c0:fd:99:b5:
                    99:5b:68:54:e5:13:64:bb:a3:e6:ee:94:9a:e7:19:
                    ba:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5D:A8:65:E2:2B:41:C0:5E:05:E2:8B:DA:04:9A:AD:71:95:B2:E8
            X509v3 Authority Key Identifier:
                keyid:8C:6C:46:F6:D7:FA:4B:15:66:FA:D6:07:9B:92:B6:C7:C4:F9:13:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8F3TtJRXRKt4VUtVU55hgw4NGRPaG6o4tqmY3GPj3Kiu/0/8C6C46F6D7FA4B1566FAD6079B92B6C7C4F913AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6C46F6D7FA4B1566FAD6079B92B6C7C4F913AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8F3TtJRXRKt4VUtVU55hgw4NGRPaG6o4tqmY3GPj3Kiu/0/8C6C46F6D7FA4B1566FAD6079B92B6C7C4F913AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:54:02:3c:56:27:4f:a2:b2:59:05:64:8d:56:a9:0b:07:99:
         b0:32:35:34:9b:86:cc:e0:e3:9c:66:eb:ee:2b:66:82:9a:22:
         ab:2f:c9:45:02:75:ed:9f:b1:78:eb:6a:7b:e5:f6:67:45:fb:
         08:d0:fd:93:53:f0:f8:74:85:e0:47:2e:9d:2b:0e:7f:b1:d8:
         12:c6:f2:8d:24:b5:52:34:73:42:33:e9:87:e3:a5:0f:4f:c5:
         36:b2:c1:c3:68:dc:33:13:23:10:78:5a:50:32:e6:87:e3:dd:
         40:48:22:1b:35:49:c4:1d:c0:10:70:bd:44:26:ff:21:f7:3c:
         0d:ca:e7:4a:f6:dc:22:cb:0b:68:ed:e9:3a:83:7b:66:b0:a5:
         b5:7a:56:b4:b6:e7:05:28:e4:37:3a:aa:44:f6:8b:c4:a6:63:
         70:91:c9:38:74:bd:f0:0e:aa:e0:b2:e7:1f:3a:4f:39:73:63:
         cf:e3:85:34:8a:6f:0d:75:84:1b:68:88:6c:02:89:d4:3e:0b:
         d3:a2:af:f9:b5:42:b7:70:9b:73:55:90:e8:d9:cc:2f:ef:ce:
         ac:e4:98:d6:14:73:79:2d:cc:8c:7a:e6:19:68:71:f4:a9:a5:
         d4:e0:8c:27:4e:c0:4a:cd:33:11:dd:22:f8:ce:b9:53:c2:fc:
         b0:97:cb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:36:52 2025 by rpki-client