This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8YkFJuPybsmcpY1oQe7ZTNnsVzeMLkVws4vA2Kvz1NcZ/0/829E9E44626A23C357DBBBEDBFF4769A3F40B87A.mft
File:                     829E9E44626A23C357DBBBEDBFF4769A3F40B87A.mft (raw, json)
Hash identifier:          xqny8hvb+M6wOfaaRHBkvebnpJieiqekyzZQknSzRlA=
Subject key identifier:   D4:4A:A7:11:9A:8F:86:2A:D6:32:5C:21:C1:E1:03:41:EF:42:CF:7B
Authority key identifier: 82:9E:9E:44:62:6A:23:C3:57:DB:BB:ED:BF:F4:76:9A:3F:40:B8:7A
Certificate issuer:       /CN=829E9E44626A23C357DBBBEDBFF4769A3F40B87A
Certificate serial:       2C55461EF6848BC484915EF376A4D96A160F3EF7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/829E9E44626A23C357DBBBEDBFF4769A3F40B87A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YkFJuPybsmcpY1oQe7ZTNnsVzeMLkVws4vA2Kvz1NcZ/0/829E9E44626A23C357DBBBEDBFF4769A3F40B87A.mft
Manifest number:          32
Signing time:             Sat 06 Dec 2025 09:31:17 +0000
Manifest this update:     Sat 06 Dec 2025 09:26:17 +0000
Manifest next update:     Sun 07 Dec 2025 11:21:17 +0000
Files and hashes:         1: 829E9E44626A23C357DBBBEDBFF4769A3F40B87A.crl (hash: cRSsAxrKJhhhCDbi68BwmbjqDY2zZdZdvZgp1N6HsUs=)
                          2: 323830343a393166343a3a2f33322d3438203d3e20323734363738.roa (hash: ghEUttYr177zxqlIFjApVok9ngnyD5oBX76OmMMBEqA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8YkFJuPybsmcpY1oQe7ZTNnsVzeMLkVws4vA2Kvz1NcZ/0/829E9E44626A23C357DBBBEDBFF4769A3F40B87A.crl
                          rsync://rpki-repo.registro.br/repo/8YkFJuPybsmcpY1oQe7ZTNnsVzeMLkVws4vA2Kvz1NcZ/0/829E9E44626A23C357DBBBEDBFF4769A3F40B87A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/829E9E44626A23C357DBBBEDBFF4769A3F40B87A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 11:21:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:55:46:1e:f6:84:8b:c4:84:91:5e:f3:76:a4:d9:6a:16:0f:3e:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=829E9E44626A23C357DBBBEDBFF4769A3F40B87A
        Validity
            Not Before: Dec  6 09:26:17 2025 GMT
            Not After : Dec  7 11:21:17 2025 GMT
        Subject: CN=D44AA7119A8F862AD6325C21C1E10341EF42CF7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:83:1a:cb:67:18:8a:21:9f:e1:96:b4:cd:c2:
                    c7:13:10:07:56:a5:38:61:8f:e9:ce:47:d9:08:92:
                    70:07:68:de:ac:dc:2f:5a:1a:44:4a:b6:41:1e:32:
                    d1:f6:84:f7:f1:5e:11:94:7e:0c:f0:c2:86:cc:cb:
                    1c:c6:de:a8:ed:8f:51:3a:87:bc:a5:97:7f:d9:b2:
                    c1:95:ba:63:d1:98:81:0c:8e:80:ad:e3:64:90:86:
                    d0:f3:14:17:de:fc:4e:3b:9d:7e:02:50:3c:48:67:
                    e9:65:12:76:88:df:6d:29:34:b8:8d:2f:3f:21:87:
                    fb:57:46:52:39:56:32:cc:25:2a:32:55:67:23:03:
                    e4:b6:76:db:91:0a:f5:e4:78:60:99:94:9c:e1:1a:
                    9a:67:47:d1:35:a1:eb:ee:a2:d0:b9:26:96:d1:52:
                    5a:ac:af:df:74:03:f2:12:bd:62:6e:69:b9:07:68:
                    a5:b5:49:20:c7:6b:ab:be:45:33:fe:a7:18:b1:82:
                    c3:51:11:d0:13:33:74:b0:ae:e7:91:bb:a3:78:be:
                    ef:b9:5d:af:0e:2b:50:5e:07:c9:66:e9:00:25:07:
                    14:ef:fb:3f:47:ac:f0:b4:5f:98:70:c5:d0:2d:65:
                    92:76:17:f1:31:98:80:b5:db:20:2e:77:be:27:3f:
                    ab:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4A:A7:11:9A:8F:86:2A:D6:32:5C:21:C1:E1:03:41:EF:42:CF:7B
            X509v3 Authority Key Identifier:
                keyid:82:9E:9E:44:62:6A:23:C3:57:DB:BB:ED:BF:F4:76:9A:3F:40:B8:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YkFJuPybsmcpY1oQe7ZTNnsVzeMLkVws4vA2Kvz1NcZ/0/829E9E44626A23C357DBBBEDBFF4769A3F40B87A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/829E9E44626A23C357DBBBEDBFF4769A3F40B87A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YkFJuPybsmcpY1oQe7ZTNnsVzeMLkVws4vA2Kvz1NcZ/0/829E9E44626A23C357DBBBEDBFF4769A3F40B87A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:19:c5:b6:66:f4:5d:f7:ad:42:f0:5a:dc:73:03:b7:7e:bd:
         5e:5e:ca:a5:c1:0e:43:ba:5f:ee:74:25:7b:f1:9c:bb:b1:6f:
         74:91:2f:9c:8b:19:cb:3a:24:24:b3:11:cf:49:fa:29:65:64:
         fb:ea:ed:24:9f:ab:77:18:6c:30:a4:79:5a:b3:9b:96:01:ab:
         21:61:b9:23:48:a4:aa:25:a1:17:6c:1b:d5:db:ad:66:9a:3a:
         4a:c0:77:e1:f5:99:63:57:02:8d:64:3b:dd:12:3e:75:3e:3d:
         e8:e6:d3:04:0c:91:16:4a:d7:7d:0f:82:93:5c:68:b5:ad:42:
         60:50:b9:db:2b:b4:de:2e:a1:12:8b:4c:46:49:fc:49:2a:24:
         eb:a4:28:f9:48:df:37:34:3f:f9:8a:1c:ab:a6:dc:43:0b:e3:
         17:27:6a:4c:73:dd:86:82:ed:38:15:bd:e0:51:d8:78:39:9e:
         e3:09:29:02:45:6d:1e:49:0f:c4:71:3c:6e:88:3f:34:1a:2a:
         1c:ee:98:de:35:3b:9b:f5:b9:3f:6f:3d:2c:4d:50:48:09:8c:
         70:6b:b6:a0:8e:a0:5b:16:57:1e:80:67:77:3f:99:6a:6a:9f:
         bf:43:c1:62:4d:47:83:b1:4a:10:b5:ab:e7:9f:9f:60:0e:71:
         1b:fa:8a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----