This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft
File:                     95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft (raw, json)
Hash identifier:          pEEzpuFPh/IBmf0d05wyTTg7v16ehtzrbBNl/n/ta9w=
Subject key identifier:   25:A7:C5:5F:96:6D:33:DC:3E:DF:55:9F:25:77:45:96:9E:13:81:2F
Authority key identifier: 95:F2:AC:B3:83:DE:FB:23:DF:BE:E3:45:AD:99:82:FF:D0:EF:B7:81
Certificate issuer:       /CN=95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781
Certificate serial:       0E7B3825BB2526947F5117FFFB49E66406C765C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft
Manifest number:          0176
Signing time:             Fri 05 Dec 2025 19:18:23 +0000
Manifest this update:     Fri 05 Dec 2025 19:13:23 +0000
Manifest next update:     Sat 06 Dec 2025 20:08:23 +0000
Files and hashes:         1: 323830343a386631343a3a2f33322d313238203d3e20323733343636.roa (hash: Q1uCgwZfNBNhk73GGmjGIKG7UN4bvWqo7yS4gO0jUSU=)
                          2: 95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.crl (hash: AaBVotonAiEXgDiiQfj1qlFmMnwcbY6oTCNPX/lti6E=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.crl
                          rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 20:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:7b:38:25:bb:25:26:94:7f:51:17:ff:fb:49:e6:64:06:c7:65:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781
        Validity
            Not Before: Dec  5 19:13:23 2025 GMT
            Not After : Dec  6 20:08:23 2025 GMT
        Subject: CN=25A7C55F966D33DC3EDF559F257745969E13812F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:18:54:9d:27:50:33:10:0d:57:3c:87:c0:1b:
                    ee:06:78:ec:b8:2c:4b:56:d8:46:b9:3e:c9:46:a2:
                    97:5a:f0:b0:db:a0:dc:ac:1f:4d:ee:f6:12:fb:54:
                    2d:bb:f0:8a:b8:dd:47:36:32:06:df:fe:12:74:21:
                    19:63:87:e9:77:bd:30:31:2f:ff:8c:88:28:6c:dd:
                    10:5a:a4:3c:cd:d5:fc:08:60:2f:d6:ce:a7:38:08:
                    1e:df:ef:bc:c4:3c:0c:8a:62:bc:f2:4e:74:9f:ac:
                    b3:7d:68:52:7b:8b:a0:0c:a3:4f:db:c3:6d:c1:c1:
                    5f:c4:6c:26:8c:7d:4d:41:5b:9c:15:1e:0c:d2:6c:
                    fc:61:b9:c0:14:9f:ef:33:11:a9:6a:25:b7:62:62:
                    09:3e:d4:66:90:f5:4c:68:d5:50:47:a3:72:7e:f1:
                    62:e4:e1:55:76:66:44:7b:fb:f0:ae:9c:6c:e8:62:
                    b8:37:3f:cf:06:90:58:92:b2:af:76:a7:82:7a:ab:
                    8f:10:11:f7:c6:45:33:1e:e1:44:ad:d8:47:05:d6:
                    4d:c0:69:70:18:5f:ce:9c:80:f7:60:f7:54:01:f4:
                    cf:8b:6f:a0:63:a0:f4:1d:7f:fa:52:ef:26:08:2c:
                    65:72:de:dc:1c:c5:ac:3e:83:01:df:9b:a4:3d:8c:
                    76:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A7:C5:5F:96:6D:33:DC:3E:DF:55:9F:25:77:45:96:9E:13:81:2F
            X509v3 Authority Key Identifier:
                keyid:95:F2:AC:B3:83:DE:FB:23:DF:BE:E3:45:AD:99:82:FF:D0:EF:B7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:a1:3e:95:22:4f:ed:09:80:0e:aa:22:ba:78:f9:fa:52:3e:
         11:52:54:52:7d:aa:47:ff:70:a6:78:4a:e6:09:a5:43:aa:cf:
         91:3a:ac:75:bd:21:19:05:b8:86:26:fd:ea:cc:fd:2b:f5:da:
         0c:5c:59:15:4a:3b:1e:7b:47:e3:04:58:40:21:2a:c7:d5:87:
         f4:95:0c:79:43:29:1a:87:91:94:33:ff:c8:b0:6b:34:ad:76:
         fe:ec:c2:8c:85:e7:5a:b2:d7:47:93:81:0d:00:a3:14:fd:c7:
         d0:3f:b4:72:40:f0:f1:6c:82:8e:43:12:81:4f:53:c6:2e:9a:
         19:0f:ef:a4:aa:87:b2:06:4a:1e:bc:63:23:57:6b:0e:78:30:
         ce:fd:46:b5:6c:12:00:6f:11:28:bb:d9:df:41:a8:fc:b4:fd:
         6e:24:1d:38:65:f7:b9:f7:1b:1c:f2:91:1a:6b:8e:0e:e7:eb:
         d6:80:cf:6a:65:cf:11:42:5c:10:d7:27:14:ce:84:03:2b:48:
         d1:b9:d8:ee:7f:5e:51:7c:1f:29:e1:85:d1:41:a5:65:50:70:
         ce:b3:48:cf:0e:f6:51:a3:c0:7b:5d:01:6e:5f:25:29:90:aa:
         1a:41:3e:ed:e4:79:1c:48:1d:9e:8d:8a:47:2e:50:31:65:11:
         2c:4b:d3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:13:30 2025 by rpki-client