This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.mft
File:                     8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.mft (raw, json)
Hash identifier:          JkyYg5xE5MTtp6WZ6MVV2IXPCA5dwnr1z19CvM1TXhE=
Subject key identifier:   B1:64:D3:21:68:6F:02:22:6B:C3:8E:BE:81:A4:C5:B7:D7:8D:58:59
Authority key identifier: 8D:E1:EB:F4:EE:33:44:5E:39:8B:F5:5C:7B:FB:B0:54:E8:54:6F:FD
Certificate issuer:       /CN=8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD
Certificate serial:       07DB0C80BA57553BC905F4F1A92F5D13230521E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.mft
Manifest number:          02A9
Signing time:             Sat 06 Dec 2025 08:11:44 +0000
Manifest this update:     Sat 06 Dec 2025 08:06:44 +0000
Manifest next update:     Sun 07 Dec 2025 10:34:44 +0000
Files and hashes:         1: 323830343a336338303a3a2f33322d313238203d3e20323636323136.roa (hash: Joy2sepoO+FIC2vMr6AO34cX5OproAo288/h6AiK80Q=)
                          2: 8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.crl (hash: HQGFnVY9jJ4nPzieX1XvNbSb8Ys2ETd0OWsRuEseGIs=)
                          3: 3230302e37312e37322e302f32322d3332203d3e20323636323136.roa (hash: YvegZmyo9sJ4pcNnNHBjTBF2t5WeDgSktWpePZYDq0g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.crl
                          rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 10:34:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:db:0c:80:ba:57:55:3b:c9:05:f4:f1:a9:2f:5d:13:23:05:21:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD
        Validity
            Not Before: Dec  6 08:06:44 2025 GMT
            Not After : Dec  7 10:34:44 2025 GMT
        Subject: CN=B164D321686F02226BC38EBE81A4C5B7D78D5859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b3:fc:03:09:c3:0e:12:9f:70:06:ac:8f:3a:
                    7f:ab:26:95:ae:45:3f:df:b7:a5:b0:cc:54:d7:09:
                    b8:8e:4c:b1:f9:89:a0:6c:48:43:fd:45:38:ef:56:
                    16:e1:88:45:0e:2d:64:71:44:78:01:c1:0f:3b:f9:
                    a7:a4:40:6f:4e:0a:9b:20:cf:a7:70:b6:2b:23:7b:
                    cd:7d:29:82:ce:b8:48:9e:b6:fe:51:a6:89:2c:e1:
                    8c:e4:65:39:f8:aa:fc:21:bc:73:fe:31:37:c8:24:
                    6d:09:41:fe:42:8b:02:89:37:11:8e:c8:43:24:1a:
                    e6:87:fb:df:e8:59:9c:35:2e:8b:ad:20:77:45:d2:
                    48:2e:c0:7e:eb:52:4f:d8:4e:44:a6:d7:79:0e:ae:
                    f7:85:27:19:6b:fe:3c:14:5b:38:17:fb:71:28:00:
                    6a:10:f4:82:9f:76:e3:2a:08:c6:f3:40:6d:44:e6:
                    75:09:5d:9f:41:b6:5d:55:00:7d:2d:47:e8:dd:37:
                    36:b0:11:84:d3:be:de:71:3b:04:e1:c7:72:60:07:
                    80:b9:78:c2:46:b8:9a:91:3c:43:25:80:6d:a3:1d:
                    5a:26:d6:9e:61:4f:24:f0:9b:60:b8:57:a8:62:b3:
                    1e:06:6a:30:60:84:e6:20:f3:ac:05:34:f8:71:cd:
                    a9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:64:D3:21:68:6F:02:22:6B:C3:8E:BE:81:A4:C5:B7:D7:8D:58:59
            X509v3 Authority Key Identifier:
                keyid:8D:E1:EB:F4:EE:33:44:5E:39:8B:F5:5C:7B:FB:B0:54:E8:54:6F:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:b2:09:64:4f:08:da:54:56:c1:ce:a6:f8:c2:59:b5:93:2e:
         3a:ec:34:1a:77:b3:1a:91:3b:38:a3:74:8d:3b:44:5c:fb:11:
         0a:37:04:fb:0e:e1:a5:95:ee:62:61:42:bf:b2:3d:1e:b4:81:
         15:da:ad:b0:41:41:b9:02:d5:81:9f:4a:70:35:3b:aa:86:6d:
         89:07:5f:cb:bc:e4:fd:39:60:2f:34:38:9c:8a:2c:79:a4:98:
         cd:42:21:d7:3e:13:5f:d4:eb:2e:a2:31:65:eb:a5:2c:cc:10:
         1f:af:42:c1:2a:e8:64:f8:49:b9:e0:24:78:4b:63:f6:4d:1b:
         8b:b9:55:cd:d2:6c:0c:ca:18:e1:33:df:b1:4f:15:8a:f4:95:
         99:04:3d:a8:f9:05:8e:89:0a:78:b7:d9:4e:77:93:11:ef:a4:
         26:da:66:7a:76:92:67:cb:b0:ae:b6:ae:00:60:1e:c5:dc:73:
         d7:87:89:6f:db:d0:9a:ac:b0:e3:8f:bd:4a:21:2e:54:45:ba:
         13:75:83:8d:b7:b1:c5:a8:cf:60:78:1c:dc:fa:93:73:26:ee:
         74:2d:29:42:ae:7b:fb:32:35:31:e2:44:3d:80:78:4a:1d:aa:
         64:fa:24:51:d2:f7:e3:97:f4:a7:d1:dd:bb:6a:be:78:e6:dc:
         f8:ba:31:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:43:09 2025 by rpki-client