This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.mft
File:                     CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.mft (raw, json)
Hash identifier:          KomhuCdZ9cNpIHMd3VnoxSUXNaqqGs8m1hNEqtkFjxw=
Subject key identifier:   60:70:0A:E6:4B:03:42:29:2E:B2:32:A2:56:B5:41:1C:B7:CD:54:ED
Authority key identifier: CE:24:98:E8:CE:7B:48:8E:BF:B1:05:BF:E2:A0:48:76:60:0C:B5:A3
Certificate issuer:       /CN=CE2498E8CE7B488EBFB105BFE2A04876600CB5A3
Certificate serial:       7DD7D107CFA24DC17C8EAF255ECA5F14F0BFD3AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.mft
Manifest number:          A8
Signing time:             Sat 06 Dec 2025 05:02:28 +0000
Manifest this update:     Sat 06 Dec 2025 04:57:28 +0000
Manifest next update:     Sun 07 Dec 2025 05:36:28 +0000
Files and hashes:         1: 3230312e3133312e32342e302f32312d3234203d3e20323632353139.roa (hash: mP9+5bqfsDm/dmjMQXVlmyWNr6uSZK6tCq5xBi+Kc8Q=)
                          2: 323830343a3939633a3a2f33322d3336203d3e20323632353139.roa (hash: gTiVAYf6/KXw1jjv/9yejWK3xD+mYu/04AQI9+Lo66Q=)
                          3: 3136382e3230352e3130342e302f32322d3234203d3e20323632353139.roa (hash: u7jFTziinpjWAlsLMJk9e+7JdYhWkIUNYw3qzq5Fx8c=)
                          4: CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.crl (hash: d5svKrUyGLSWoRFkdJJxKk7bwDnMvPI8CReHIZxKZXo=)
                          5: 3137372e36372e3132382e302f32312d3234203d3e20323632353139.roa (hash: fYY0WES9YoeoCKQ/AV0YzDdZUnBg9K2Sc6Z9kqWN/Sg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.crl
                          rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:36:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d7:d1:07:cf:a2:4d:c1:7c:8e:af:25:5e:ca:5f:14:f0:bf:d3:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE2498E8CE7B488EBFB105BFE2A04876600CB5A3
        Validity
            Not Before: Dec  6 04:57:28 2025 GMT
            Not After : Dec  7 05:36:28 2025 GMT
        Subject: CN=60700AE64B0342292EB232A256B5411CB7CD54ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a8:65:72:78:cc:71:14:54:8f:5f:a6:2d:59:
                    8f:4f:00:ab:07:8e:55:77:9f:0c:13:be:50:ba:ba:
                    66:85:bd:b2:fe:a3:6a:f3:2f:5f:3d:7d:c8:58:27:
                    3f:f6:36:fa:71:5e:84:26:e7:06:f7:33:c2:fa:df:
                    ea:5d:1a:e9:70:e6:c3:19:66:69:57:8b:ab:9f:3c:
                    7b:1b:36:a4:c8:aa:3a:c3:92:4c:a0:be:5d:0c:47:
                    eb:d9:1b:76:b5:05:fc:42:8a:80:5f:cd:f7:8e:95:
                    98:23:3c:79:c1:10:6b:c3:15:81:2e:92:6a:02:47:
                    3a:63:f2:d1:6e:b4:55:ab:ea:f0:ce:6c:2d:fb:0c:
                    af:53:1d:7a:33:0e:74:c7:55:3c:e5:b3:20:21:5e:
                    af:d6:b4:7c:c6:ca:36:56:c1:70:c6:39:83:3f:5d:
                    af:8f:7c:a4:5b:f3:0c:85:19:4c:ed:49:4a:5a:9d:
                    c4:e6:71:d9:9c:1e:9f:0d:de:6b:eb:f2:df:77:34:
                    8d:4e:a5:8b:a1:ce:88:9a:0f:b4:69:d5:0f:90:28:
                    d0:6e:c4:2e:23:26:de:b6:db:94:8c:1c:bb:80:af:
                    95:5c:e4:54:9c:4e:9a:c1:40:fe:b9:7b:3a:3d:e7:
                    c4:ae:79:a9:19:a1:ba:f5:d0:2c:5b:84:24:73:0b:
                    1c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:70:0A:E6:4B:03:42:29:2E:B2:32:A2:56:B5:41:1C:B7:CD:54:ED
            X509v3 Authority Key Identifier:
                keyid:CE:24:98:E8:CE:7B:48:8E:BF:B1:05:BF:E2:A0:48:76:60:0C:B5:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:5f:a5:51:9a:22:00:5f:75:7b:89:ac:17:02:3e:20:fb:34:
         56:32:2a:64:d5:a8:b5:f7:38:f0:90:cf:0a:4d:96:b9:7b:12:
         10:2c:e0:6b:ef:fb:61:31:a9:a3:ef:f0:13:46:7f:91:68:a1:
         0b:bb:aa:9b:21:74:0d:8a:d8:65:a3:a6:91:03:38:87:ed:05:
         e7:2c:64:81:2c:f1:cf:a9:cb:4a:ca:90:6b:50:61:57:3d:f5:
         6f:20:a0:89:c9:ea:92:53:7c:c2:e2:1b:ca:d1:cb:94:40:79:
         39:30:43:e5:26:62:f6:72:85:8a:4e:9a:60:27:6f:cd:65:f5:
         6c:40:fd:46:19:e9:44:1c:07:02:b2:d4:65:fa:09:c7:12:8f:
         09:82:27:24:57:a6:8f:ad:a5:c8:82:2d:80:95:9d:e3:89:81:
         3a:7e:1f:25:45:57:13:8b:f7:4a:67:ba:58:c8:68:21:c4:75:
         8f:86:1f:31:f8:09:bc:dc:d5:9d:3f:bd:42:f9:e4:6a:37:41:
         d0:36:96:93:3f:99:2e:d2:2a:c4:a8:86:61:6a:35:0e:18:a4:
         d0:56:3d:2a:94:b9:d8:35:7c:7a:99:6e:a2:eb:04:2e:8e:a6:
         5a:e8:03:82:37:ea:97:9b:96:bb:30:3f:fa:25:d0:f6:ee:bc:
         1b:a8:1e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:12:54 2025 by rpki-client