This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.mft
File:                     68EC60223DF10BE63B7A84464ACF2A9697173D75.mft (raw, json)
Hash identifier:          COmEmJwUf/+gSyC4542VIDpDvElHv1VwCcpt1H4/P3I=
Subject key identifier:   40:53:6D:A0:18:3B:AC:EC:06:10:42:15:67:BC:E4:CF:09:B6:FA:17
Authority key identifier: 68:EC:60:22:3D:F1:0B:E6:3B:7A:84:46:4A:CF:2A:96:97:17:3D:75
Certificate issuer:       /CN=68EC60223DF10BE63B7A84464ACF2A9697173D75
Certificate serial:       140C76A3AFA77AAE55C0599D15C2D58E5541E20F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68EC60223DF10BE63B7A84464ACF2A9697173D75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.mft
Manifest number:          031F
Signing time:             Sat 06 Dec 2025 00:42:57 +0000
Manifest this update:     Sat 06 Dec 2025 00:37:57 +0000
Manifest next update:     Sun 07 Dec 2025 03:39:57 +0000
Files and hashes:         1: 323830343a326233343a3a2f33322d3336203d3e20323635313430.roa (hash: e293ucudGtZaweGXAccg++hTWsDiYVPUspL2krLmXvw=)
                          2: 3134332e3235352e302e302f32322d3234203d3e20323635313430.roa (hash: jO+j2ycSSgUqX/c6R4D4iMxvnJVHoWNPsmxQHR/K7WA=)
                          3: 68EC60223DF10BE63B7A84464ACF2A9697173D75.crl (hash: Tcsq95TktMeZ/9+6rSd78G8B0lSLNvQkqEysxVImie8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.crl
                          rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68EC60223DF10BE63B7A84464ACF2A9697173D75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 03:39:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:0c:76:a3:af:a7:7a:ae:55:c0:59:9d:15:c2:d5:8e:55:41:e2:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68EC60223DF10BE63B7A84464ACF2A9697173D75
        Validity
            Not Before: Dec  6 00:37:57 2025 GMT
            Not After : Dec  7 03:39:57 2025 GMT
        Subject: CN=40536DA0183BACEC0610421567BCE4CF09B6FA17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9b:8b:c8:14:e3:ff:1b:58:4e:22:37:4f:3b:
                    78:5f:e9:55:d6:79:e9:7d:17:30:f4:3a:90:79:14:
                    2f:82:0f:3b:8c:4a:40:8a:40:40:47:76:31:3a:b9:
                    c5:2f:31:90:6f:da:c1:66:b9:73:6f:23:7b:8f:87:
                    ff:11:d0:58:cc:c5:e8:68:5b:8f:18:dd:ff:88:dd:
                    7e:a4:7f:ea:77:2b:0d:32:0f:32:01:eb:53:01:c2:
                    23:63:db:7e:88:4e:85:72:57:60:2d:4c:ff:59:ed:
                    a4:e6:e5:ac:0b:a2:b9:5c:eb:01:7d:6c:85:b2:7c:
                    20:5f:3a:b6:ab:ae:dc:1b:57:8a:26:f6:44:17:bc:
                    e8:b1:ff:f6:80:ca:ea:41:07:6d:a1:f3:af:3a:d9:
                    bd:ba:df:e4:f5:60:68:70:54:64:4e:78:b7:e3:62:
                    70:9f:e5:e4:89:36:a3:df:73:9d:a8:19:49:3d:61:
                    14:f5:d5:2f:86:81:28:94:3d:d6:5c:c2:f0:d6:a2:
                    2f:df:8c:c7:e1:f8:eb:b9:1f:52:b8:8c:f9:72:f3:
                    3e:e0:e4:49:f3:12:00:3a:9c:8b:a2:cd:69:4c:0d:
                    44:2e:4f:d8:85:49:dd:a7:2e:6a:a0:4b:eb:ca:a0:
                    85:0d:2d:65:42:1e:b8:54:35:88:7b:ad:b8:d4:33:
                    23:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:53:6D:A0:18:3B:AC:EC:06:10:42:15:67:BC:E4:CF:09:B6:FA:17
            X509v3 Authority Key Identifier:
                keyid:68:EC:60:22:3D:F1:0B:E6:3B:7A:84:46:4A:CF:2A:96:97:17:3D:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68EC60223DF10BE63B7A84464ACF2A9697173D75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:83:53:54:00:c8:a3:3a:43:38:d4:65:7f:03:e1:ee:7e:3f:
         08:e9:c0:76:8e:a2:d5:d3:2c:7f:96:2b:0a:26:b0:17:e8:23:
         fd:7b:2b:b7:fe:3e:b0:37:f7:32:19:6e:32:d5:6d:a2:07:54:
         62:7b:9e:fd:56:87:0e:15:e9:22:e3:ce:d7:7a:eb:64:1f:e1:
         d4:80:8b:c5:a1:89:3f:05:cc:45:26:9c:21:af:a0:a8:cf:6b:
         2a:48:1e:4b:ce:3f:4d:13:f6:09:4f:6d:e8:c0:c4:1e:14:79:
         7b:63:a2:37:be:e3:d1:6b:c1:be:ae:f7:82:25:42:4d:6a:d3:
         12:35:e3:c2:fa:1f:27:34:69:76:93:c3:0b:f0:df:86:a1:d9:
         74:91:42:a0:05:ff:96:a7:9a:e7:88:ee:a4:16:09:ba:d4:5a:
         e0:9e:89:dc:14:0b:ab:70:cd:29:c0:d8:0d:77:53:48:90:6c:
         52:65:fe:46:d2:39:03:fd:44:78:f2:9f:a5:da:6b:34:aa:e9:
         d1:95:93:44:df:03:42:34:67:83:7b:52:00:23:f3:e8:99:09:
         a2:d8:0c:b9:92:5a:07:01:8a:7e:b8:a7:00:dd:32:0b:65:27:
         f7:86:fc:66:33:d2:71:bc:23:27:1f:b2:c1:7e:f0:47:73:ed:
         60:77:27:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:49:40 2025 by rpki-client