This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft
File:                     88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft (raw, json)
Hash identifier:          1bzTvegWpNklC+Su0PP8mJLUH9P33SiuntChbsVNaGg=
Subject key identifier:   F9:AD:44:06:D0:16:79:1A:8B:D4:81:26:BA:14:1D:20:ED:C5:AE:E1
Authority key identifier: 88:D1:B2:07:D5:AA:97:28:17:32:04:A8:DC:EB:8A:A6:E4:5B:BC:0A
Certificate issuer:       /CN=88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A
Certificate serial:       4C8873F5BF90A6A31AE3A72C7439146CAB7CFE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft
Manifest number:          57
Signing time:             Mon 08 Dec 2025 06:13:55 +0000
Manifest this update:     Mon 08 Dec 2025 06:08:55 +0000
Manifest next update:     Tue 09 Dec 2025 09:03:55 +0000
Files and hashes:         1: 88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.crl (hash: YFZyP4XGeKsNiyY6LH/lWctytDHIk4uHPHFN1ZqpsiY=)
                          2: 34352e3137352e3234342e302f32322d3332203d3e20323638393233.roa (hash: Qdy1QzKRsq9JYXWTrNZjwInIzn0toipLNQD8MA3MD+g=)
                          3: 34352e3137352e3234342e302f32322d3234203d3e20313938393439.roa (hash: iSOokv3jMzPeBY9ADgHRNBxwlvxvdXV1IcX7gZrelOU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.crl
                          rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Dec 2025 09:03:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:88:73:f5:bf:90:a6:a3:1a:e3:a7:2c:74:39:14:6c:ab:7c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A
        Validity
            Not Before: Dec  8 06:08:55 2025 GMT
            Not After : Dec  9 09:03:55 2025 GMT
        Subject: CN=F9AD4406D016791A8BD48126BA141D20EDC5AEE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:89:c1:af:3f:27:b0:dc:36:81:dc:8b:8d:21:
                    79:2e:c7:88:28:1a:ce:86:bd:4e:5c:46:c8:50:89:
                    63:90:89:0d:47:fa:ce:9c:fc:4e:29:cc:d3:28:c6:
                    ca:28:24:b8:31:3f:4c:60:68:05:d5:c6:e3:42:92:
                    36:fe:11:64:cd:59:b2:67:76:00:b9:9f:c9:cf:7d:
                    0e:01:00:9c:bb:d6:9e:7c:71:36:8b:3e:cf:96:bc:
                    2d:82:8c:0b:16:fb:62:b9:e7:f7:4a:5f:b1:58:ee:
                    de:b1:44:2f:62:d4:bb:34:da:80:29:79:57:4e:aa:
                    02:53:00:4f:4e:d6:fa:1e:4f:d8:2e:08:9c:94:5b:
                    1f:62:35:06:5f:e3:bf:8d:18:7a:2d:dd:f4:f4:39:
                    9f:f5:9b:f0:a8:39:97:c4:4f:ae:f2:d8:90:9d:69:
                    7d:ae:7f:d5:aa:02:89:97:01:92:e5:15:fc:e1:e9:
                    b8:4e:ad:55:2b:d5:79:aa:1f:f6:a1:c6:b2:54:c4:
                    e3:7a:1e:3d:51:47:68:d1:16:08:31:34:96:ec:db:
                    1d:1f:bb:67:a7:af:75:fd:12:1b:ec:67:08:e5:d5:
                    3f:5c:63:42:ec:8a:48:93:d4:76:2c:80:5f:f5:2a:
                    c7:b9:28:66:e3:74:5c:a8:c9:fd:fc:df:cf:88:d8:
                    3d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:AD:44:06:D0:16:79:1A:8B:D4:81:26:BA:14:1D:20:ED:C5:AE:E1
            X509v3 Authority Key Identifier:
                keyid:88:D1:B2:07:D5:AA:97:28:17:32:04:A8:DC:EB:8A:A6:E4:5B:BC:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:b8:d6:e5:bd:c2:3d:56:0a:4f:ad:0a:ab:3b:b6:e1:eb:89:
         50:77:3f:f2:be:c8:f4:a2:64:65:a6:1a:39:43:8e:b5:84:1a:
         60:c3:87:3d:28:e0:44:a5:c7:7e:f2:b5:e6:4e:06:7b:0f:fb:
         b0:eb:11:b7:c6:0d:1a:a6:3e:86:c2:e3:96:e1:c5:70:de:d5:
         d0:09:4c:6b:f4:83:91:c5:52:f8:df:10:b2:f8:98:51:5d:75:
         ce:62:ec:83:3f:3c:95:1c:40:04:c3:2d:93:8d:53:be:02:70:
         17:49:bb:68:e7:0e:6d:cc:2c:17:fb:a4:8d:b7:c8:45:f9:b0:
         58:a3:21:4b:18:97:a0:47:89:69:54:e5:33:78:eb:45:ac:86:
         5d:aa:4b:af:62:7f:9c:69:58:66:cd:bc:b2:12:6c:76:cf:7e:
         78:df:ab:1d:de:5c:6a:bb:8f:36:73:cf:80:fa:2a:50:89:b4:
         05:db:84:c8:d1:03:82:02:b2:16:e0:ba:83:11:a4:98:77:96:
         8e:c5:12:e2:1f:30:cd:43:d6:60:1f:38:06:a8:ac:3f:48:ae:
         40:3a:3d:da:95:87:f1:09:ec:d0:32:83:12:1c:00:c6:01:43:
         c8:fd:61:9f:02:14:de:9f:29:c2:31:b0:f6:1e:c2:20:34:88:
         4a:81:73:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 22:04:24 2025 by rpki-client