This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8xMA26XVpRpguUSQWiUwam12enNn5A4nMALVAfj2PBBy/0/2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.mft
File:                     2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.mft (raw, json)
Hash identifier:          MzziPpjVstFHfrc2bW8mJ4SjYV+J2/m0pNj5EssTcfA=
Subject key identifier:   D3:CB:6E:D1:F4:0C:65:1E:9B:F6:2D:15:3B:A4:C1:FA:47:71:5B:B9
Authority key identifier: 2F:C7:BA:5E:AF:88:32:D3:E4:27:36:C6:41:F0:60:7E:50:EC:6D:2D
Certificate issuer:       /CN=2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D
Certificate serial:       4F925449E0B2B6C3E9D70AD2F77DC039BAA5AA18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8xMA26XVpRpguUSQWiUwam12enNn5A4nMALVAfj2PBBy/0/2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.mft
Manifest number:          0188
Signing time:             Fri 05 Dec 2025 20:54:57 +0000
Manifest this update:     Fri 05 Dec 2025 20:49:57 +0000
Manifest next update:     Sat 06 Dec 2025 23:00:57 +0000
Files and hashes:         1: 323830343a356165343a3a2f33322d3332203d3e20323638383033.roa (hash: gwpcB+w0ZBxp+kKwLgU4PO+nW8DKWb+2iDR7WUvcftk=)
                          2: 34352e3137332e39342e302f32342d3234203d3e20323638383033.roa (hash: 3bWz/eEJlvmqx3wkB8crv6X2xvnGqnCQBN4BFxfoyD4=)
                          3: 323830343a356165343a666630303a3a2f34342d3434203d3e20323638383033.roa (hash: uzLU+5x44XjnLxwSJWWzxHrR6LovbDPTAOrXEpBMohE=)
                          4: 34352e3137332e39332e302f32342d3234203d3e20323638383033.roa (hash: Ucipg8u275L2oTt7ZEPcWM3hyujm9bZLyOjcqnO+O3I=)
                          5: 2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.crl (hash: 76JC71AQzkHPYPYmtJrTxDuRiJS29uIDg2gEWRhbIcI=)
                          6: 323830343a356165343a666631303a3a2f34342d3434203d3e20323638383033.roa (hash: hfiphG3F+FKme9b7YKF856PRaojw+FK44VpaNeeUD3Q=)
                          7: 34352e3137332e39322e302f32342d3234203d3e20323638383033.roa (hash: ATPMqQPnNqfBh9qRn1z+4Ztfz/ao39FZWB07nABi2WY=)
                          8: 34352e3137332e39352e302f32342d3234203d3e20323638383033.roa (hash: Wtxj+dBrpGbeliu4iSQnbfSUpsLYVWH6nHGUjxF6F2A=)
                          9: 34352e3137332e39342e302f32332d3233203d3e20323638383033.roa (hash: aWlncSeKPy04EbQVT6azw0S1sJ7Zrd1OAZ+t/p9szQQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8xMA26XVpRpguUSQWiUwam12enNn5A4nMALVAfj2PBBy/0/2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.crl
                          rsync://rpki-repo.registro.br/repo/8xMA26XVpRpguUSQWiUwam12enNn5A4nMALVAfj2PBBy/0/2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 23:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:92:54:49:e0:b2:b6:c3:e9:d7:0a:d2:f7:7d:c0:39:ba:a5:aa:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D
        Validity
            Not Before: Dec  5 20:49:57 2025 GMT
            Not After : Dec  6 23:00:57 2025 GMT
        Subject: CN=D3CB6ED1F40C651E9BF62D153BA4C1FA47715BB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1b:91:2a:f2:5d:7b:30:d7:8c:bb:2c:7c:3e:
                    69:d7:76:5a:e8:42:01:28:2b:a7:3c:d6:ae:54:a2:
                    95:b2:1a:e8:0a:d3:97:36:35:59:81:b2:c4:5e:6d:
                    a0:1b:0d:26:f0:30:5e:05:bd:59:84:b9:b2:8a:41:
                    ae:10:d2:cd:f6:e8:b8:a1:ee:97:7d:5b:cc:50:2b:
                    8a:02:0c:12:59:1a:eb:25:3d:19:9e:73:c9:cc:19:
                    32:88:cd:6b:13:4d:d4:0d:04:1f:d7:27:d4:be:bd:
                    43:54:27:6e:e5:e1:99:cc:31:ef:5b:01:af:30:6c:
                    fb:f9:90:9d:8b:8d:ee:be:03:c5:3f:7d:01:e0:89:
                    a5:70:88:14:e0:00:8c:bd:5b:0c:92:77:58:9c:dd:
                    8c:c1:6c:5f:cd:84:a0:8b:6f:5a:32:63:93:3f:e9:
                    7d:0d:ff:8e:df:e1:eb:8a:10:e7:25:c5:bd:3f:d1:
                    6a:ff:95:65:65:ec:c1:bc:f0:40:e3:dc:dd:3f:e8:
                    ff:ae:53:dd:3c:0c:40:54:0a:5e:d4:3c:b8:15:32:
                    58:42:90:08:54:28:70:d1:02:68:04:8c:f7:83:d7:
                    98:cb:7c:42:1b:7a:35:ee:1d:98:3f:a4:e7:66:02:
                    a9:87:ed:d7:a3:01:0e:81:29:29:74:4e:b8:21:54:
                    5e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:CB:6E:D1:F4:0C:65:1E:9B:F6:2D:15:3B:A4:C1:FA:47:71:5B:B9
            X509v3 Authority Key Identifier:
                keyid:2F:C7:BA:5E:AF:88:32:D3:E4:27:36:C6:41:F0:60:7E:50:EC:6D:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8xMA26XVpRpguUSQWiUwam12enNn5A4nMALVAfj2PBBy/0/2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8xMA26XVpRpguUSQWiUwam12enNn5A4nMALVAfj2PBBy/0/2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:67:8f:33:33:74:97:6b:1d:73:d5:8f:5b:78:b4:3f:a1:02:
         78:5b:6e:09:07:8b:5c:b9:af:cd:8b:80:4a:f8:2a:00:af:14:
         eb:86:46:55:ec:85:57:81:69:44:c0:43:01:53:76:15:e5:97:
         66:79:d8:8e:e9:91:24:6b:4a:0b:85:5f:aa:c5:7d:7b:2d:7b:
         42:f2:ff:a1:8b:a9:a1:b3:87:38:38:b6:7b:d2:e3:e0:93:4a:
         9d:bb:3e:7a:0a:6e:f8:9d:24:04:45:29:91:f4:2f:74:d2:57:
         70:fe:e4:e1:b6:97:87:a9:93:8e:05:65:9e:d9:ed:7a:a4:eb:
         c1:e0:59:6b:54:2a:95:a1:b9:53:c5:13:e3:97:2d:cb:91:ef:
         93:97:56:25:55:c1:1e:0c:c6:a0:93:f6:ed:40:e5:86:a0:cc:
         30:22:a1:d7:25:8e:9b:cb:80:d4:2c:04:b6:82:b4:32:4c:4c:
         d2:47:8e:fa:28:4c:a4:5e:97:5e:e2:39:46:db:ed:c6:44:05:
         79:b6:34:d1:21:57:74:a0:74:c4:4e:9e:ef:70:f2:cc:81:9b:
         47:d3:58:37:62:c4:90:2f:ec:fc:06:f4:80:88:19:a0:42:de:
         a3:d0:2d:43:95:ba:fd:40:94:4e:95:ff:7d:6d:1b:b4:ed:78:
         c5:88:22:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:55:34 2025 by rpki-client