This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.mft
File:                     68EC60223DF10BE63B7A84464ACF2A9697173D75.mft (raw, json)
Hash identifier:          FPCf2M5f2qhpKKLffznRHD/Gtb6slC7LYjPMUJ2ymTo=
Subject key identifier:   F0:57:A3:C9:99:43:FE:B9:6A:2A:E9:D2:22:9B:40:5D:29:B1:37:D2
Authority key identifier: 68:EC:60:22:3D:F1:0B:E6:3B:7A:84:46:4A:CF:2A:96:97:17:3D:75
Certificate issuer:       /CN=68EC60223DF10BE63B7A84464ACF2A9697173D75
Certificate serial:       C0A278D76C321371983EAB04309BAC42A00A59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68EC60223DF10BE63B7A84464ACF2A9697173D75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.mft
Manifest number:          0333
Signing time:             Sat 20 Dec 2025 19:17:57 +0000
Manifest this update:     Sat 20 Dec 2025 19:12:57 +0000
Manifest next update:     Sun 21 Dec 2025 20:38:57 +0000
Files and hashes:         1: 3134332e3235352e302e302f32322d3234203d3e20323635313430.roa (hash: jKf9Vk2YfC8ukz9g1OK429wD3IUbFlCEsk6xy7G4mRU=)
                          2: 68EC60223DF10BE63B7A84464ACF2A9697173D75.crl (hash: 4qgjhb8KjkorBkQIq5wjC9Su1n5yK1ZoU6MVR+2cgxM=)
                          3: 323830343a326233343a3a2f33322d3336203d3e20323635313430.roa (hash: e293ucudGtZaweGXAccg++hTWsDiYVPUspL2krLmXvw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.crl
                          rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68EC60223DF10BE63B7A84464ACF2A9697173D75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 19:45:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c0:a2:78:d7:6c:32:13:71:98:3e:ab:04:30:9b:ac:42:a0:0a:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68EC60223DF10BE63B7A84464ACF2A9697173D75
        Validity
            Not Before: Dec 20 19:12:57 2025 GMT
            Not After : Dec 21 20:38:57 2025 GMT
        Subject: CN=F057A3C99943FEB96A2AE9D2229B405D29B137D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:86:ed:a1:86:36:49:f1:65:51:66:2f:a5:d6:
                    ca:65:14:5b:10:20:af:1c:6c:da:31:56:07:b1:33:
                    a1:fa:3c:20:52:04:05:f0:67:6b:77:52:0d:38:52:
                    13:b7:34:9e:e7:02:3c:79:aa:59:9f:0e:08:3c:40:
                    17:12:2c:8a:8f:85:ba:a6:81:64:40:01:f6:24:62:
                    1b:14:d0:67:62:05:6a:75:c1:0c:37:a0:c4:be:f6:
                    2c:74:af:9f:65:9a:e1:51:cd:4b:cf:ba:6b:9d:b3:
                    87:11:55:17:fd:8b:2c:53:ab:a9:e8:3f:7a:b7:7c:
                    b4:bd:b2:76:d1:6b:df:d4:47:9d:df:b2:12:41:24:
                    97:f0:3d:01:91:1f:0b:09:6e:a8:e4:b5:91:d3:73:
                    b3:dc:f2:97:61:57:b4:f6:01:6b:87:9f:e9:84:7a:
                    86:e6:03:9d:97:25:ea:8f:de:b7:a0:4a:6a:58:cd:
                    94:74:af:e6:15:7a:00:75:fb:e0:19:49:22:f6:53:
                    91:5e:af:48:1c:4c:8e:f7:1c:e6:64:71:e1:16:c6:
                    f0:37:c2:8e:52:dc:99:3c:14:e4:d0:a3:70:cf:ac:
                    86:0e:99:a0:4e:e8:c0:d7:bc:9b:ac:ac:f8:2f:f2:
                    b9:95:90:9c:df:5e:e6:03:2e:c5:b6:a2:52:9c:e4:
                    22:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:57:A3:C9:99:43:FE:B9:6A:2A:E9:D2:22:9B:40:5D:29:B1:37:D2
            X509v3 Authority Key Identifier:
                keyid:68:EC:60:22:3D:F1:0B:E6:3B:7A:84:46:4A:CF:2A:96:97:17:3D:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68EC60223DF10BE63B7A84464ACF2A9697173D75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:38:3c:9e:c8:91:0d:1f:db:c4:5b:55:24:4f:89:3d:68:73:
         b9:da:e9:4f:21:e0:c8:ad:8d:e4:51:1c:d2:a9:48:0f:df:a9:
         7d:33:9b:b2:71:a0:b0:ef:05:18:22:9e:c2:4c:44:bd:ae:3c:
         e4:72:af:6b:57:16:12:64:65:cc:a7:a1:97:67:eb:7a:63:3d:
         2f:41:20:7b:47:bc:2b:9f:37:e0:14:70:b7:6b:91:1f:86:db:
         2a:77:35:cc:80:f5:fb:08:63:84:f2:c7:2f:1c:37:16:4c:ab:
         f6:14:45:26:c9:59:d2:45:77:74:d8:87:83:04:4e:50:85:05:
         7a:96:39:77:bd:95:e6:c4:dc:b6:6c:d9:14:ab:8f:2c:3e:ea:
         9c:d3:2b:25:f0:b0:85:53:d6:ea:7a:63:0b:08:98:ed:71:dd:
         60:9d:10:68:64:ba:65:b6:36:e5:15:fa:d3:b3:47:9a:6e:27:
         4e:7e:86:0b:0e:c5:fd:cd:c8:f1:a5:d6:1e:c1:cc:9f:9c:6d:
         f3:1c:17:d8:5f:e2:6c:b6:57:8d:0b:95:ea:45:82:51:ea:98:
         fe:61:00:08:85:75:aa:27:00:43:3b:3f:f3:1f:86:ca:14:70:
         1c:d7:8a:fe:3a:24:d2:d2:e1:3c:4d:68:42:a0:bd:3c:27:65:
         ed:a0:c7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:30:00 2025 by rpki-client