This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.mft
File:                     642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.mft (raw, json)
Hash identifier:          W9yfeHR8ayFJC7/AI3i7oo7UmMfmqqPg4ACqrDZE4nU=
Subject key identifier:   18:FD:8B:32:09:8D:1F:B5:B3:E6:82:48:99:08:18:10:E8:D2:26:35
Authority key identifier: 64:2E:A2:7E:A1:27:6F:A1:CA:55:EF:3F:D8:87:CF:C6:DD:A0:5C:47
Certificate issuer:       /CN=642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47
Certificate serial:       057ED2CFF2249C9F0608C061DCC4FDC2C91419B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.mft
Manifest number:          021D
Signing time:             Sat 20 Dec 2025 17:43:06 +0000
Manifest this update:     Sat 20 Dec 2025 17:38:06 +0000
Manifest next update:     Sun 21 Dec 2025 19:55:06 +0000
Files and hashes:         1: 642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.crl (hash: oIs5B1ekS/+ZTyMAKVPIW/sDpFUJkWXgmoyIe3DQe3s=)
                          2: 323830343a313033343a3a2f33322d3334203d3e20323633363234.roa (hash: TC9J3Nn0ZudRv7S7y2y2+94LDFH1YRi4KkQrwFzS3R8=)
                          3: 3137392e3132342e3231362e302f32312d3234203d3e20323633363234.roa (hash: ySrq0TOlfP8kIAyPYS5kMiMrMoRNNxMUFpLpQKEk7AM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.crl
                          rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 19:55:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:7e:d2:cf:f2:24:9c:9f:06:08:c0:61:dc:c4:fd:c2:c9:14:19:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47
        Validity
            Not Before: Dec 20 17:38:06 2025 GMT
            Not After : Dec 21 19:55:06 2025 GMT
        Subject: CN=18FD8B32098D1FB5B3E6824899081810E8D22635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c9:13:b1:a8:01:6d:84:0e:db:6e:9f:36:2b:
                    f9:4e:4c:f2:c9:28:9d:73:9b:30:e8:2c:47:3c:8e:
                    44:b8:1f:c5:86:b0:26:1b:fd:d6:e3:c1:3f:2e:3f:
                    4a:38:eb:75:07:68:16:8e:34:6a:3b:1c:af:c2:68:
                    4f:3e:8f:16:51:bb:42:81:19:30:d4:bf:32:40:95:
                    e5:96:13:a9:24:78:81:d5:25:28:0f:b9:35:85:b1:
                    64:38:27:f0:c9:c3:47:0d:53:f5:51:d2:c3:75:0e:
                    60:63:7c:e9:2b:79:9b:09:a1:80:60:35:53:70:55:
                    b9:eb:a9:6f:53:02:9e:d1:5c:80:cb:56:25:c8:bd:
                    f2:e1:28:29:b8:ff:4c:8e:e9:47:e3:f1:99:55:79:
                    43:a0:7c:c4:b3:25:13:92:60:71:68:ee:5f:05:e0:
                    77:88:38:19:f7:2b:f8:e1:23:17:93:d9:7d:3a:f6:
                    48:60:6b:92:e9:7f:3a:f2:64:06:61:09:18:ff:d8:
                    a4:a2:93:f1:78:34:6b:33:16:b0:b4:d7:14:4e:b6:
                    f0:92:37:87:e9:23:f3:8f:54:d7:08:fb:64:a7:9c:
                    bb:25:11:1f:35:bf:4c:42:28:41:e1:92:6d:bd:26:
                    c9:65:a7:6b:0a:48:8b:74:7b:32:e8:76:32:9f:6f:
                    ae:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:FD:8B:32:09:8D:1F:B5:B3:E6:82:48:99:08:18:10:E8:D2:26:35
            X509v3 Authority Key Identifier:
                keyid:64:2E:A2:7E:A1:27:6F:A1:CA:55:EF:3F:D8:87:CF:C6:DD:A0:5C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:3b:94:31:aa:73:2f:12:0a:94:0f:18:fe:dd:6a:ff:d5:15:
         ba:f9:b7:3c:40:a1:d5:8a:be:98:10:92:c3:4d:01:ff:1a:5e:
         bd:8a:ca:e2:66:b6:18:5c:4b:11:1f:2f:65:b4:7e:4b:9e:b2:
         5d:ea:72:0a:3d:5d:7e:8f:d9:33:5a:cf:e7:e2:b7:35:ed:34:
         bd:88:7a:6f:b4:93:db:ad:ea:4c:68:ab:a3:07:f8:3a:4b:25:
         4a:93:d9:0f:cd:fc:a2:2c:60:92:a5:af:ce:09:dc:b0:2a:e3:
         c8:8d:ea:61:b4:ab:08:13:30:db:ca:ab:78:a5:a1:f6:a4:36:
         0a:3e:78:d0:00:a7:e4:b7:c4:ba:59:35:c6:09:94:5f:54:52:
         75:57:fd:e1:81:40:03:ca:ab:30:30:d2:d7:bb:88:63:a7:3a:
         29:db:aa:79:b7:5c:2a:d9:c6:18:61:9c:f7:fe:f3:cc:b6:81:
         3d:6d:0f:10:01:b3:50:72:e2:f1:65:3d:ef:ed:35:99:2a:b9:
         f7:73:48:d1:77:41:06:43:51:30:5d:bf:b4:53:98:d2:23:ea:
         85:2f:36:7c:40:d3:3e:4d:e0:62:55:08:43:f9:c5:76:36:31:
         db:19:7d:9f:74:39:da:28:08:47:f5:9a:e0:ab:ab:08:18:8e:
         42:34:3f:c6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBX7Sz/IknJ8GCMBh3MT9wskUGbIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQyRUEyN0VBMTI3NkZBMUNBNTVFRjNGRDg4N0NGQzZE
REEwNUM0NzAeFw0yNTEyMjAxNzM4MDZaFw0yNTEyMjExOTU1MDZaMDMxMTAvBgNV
BAMTKDE4RkQ4QjMyMDk4RDFGQjVCM0U2ODI0ODk5MDgxODEwRThEMjI2MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNyROxqAFthA7bbp82K/lOTPLJ
KJ1zmzDoLEc8jkS4H8WGsCYb/dbjwT8uP0o463UHaBaONGo7HK/CaE8+jxZRu0KB
GTDUvzJAleWWE6kkeIHVJSgPuTWFsWQ4J/DJw0cNU/VR0sN1DmBjfOkreZsJoYBg
NVNwVbnrqW9TAp7RXIDLViXIvfLhKCm4/0yO6Ufj8ZlVeUOgfMSzJROSYHFo7l8F
4HeIOBn3K/jhIxeT2X069khga5LpfzryZAZhCRj/2KSik/F4NGszFrC01xROtvCS
N4fpI/OPVNcI+2SnnLslER81v0xCKEHhkm29Jsllp2sKSIt0ezLodjKfb64xAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUGP2LMgmNH7Wz5oJImQgYEOjSJjUwHwYDVR0j
BBgwFoAUZC6ifqEnb6HKVe8/2IfPxt2gXEcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVpKZFF1RmM1QzM1Z3hkRldEcXMzekVkVkxTNXFlS0p5UWRwWUFES0ZB
aWcvMC82NDJFQTI3RUExMjc2RkExQ0E1NUVGM0ZEODg3Q0ZDNkREQTA1QzQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0MkVBMjdFQTEyNzZGQTFD
QTU1RUYzRkQ4ODdDRkM2RERBMDVDNDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QVpKZFF1RmM1QzM1Z3hkRldEcXMzekVkVkxTNXFlS0p5UWRwWUFES0ZBaWcvMC82
NDJFQTI3RUExMjc2RkExQ0E1NUVGM0ZEODg3Q0ZDNkREQTA1QzQ3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASTuUMapzLxIKlA8Y/t1q/9UVuvm3PECh1Yq+mBCSw00B/xpevYrK4ma2GFxL
ER8vZbR+S56yXepyCj1dfo/ZM1rP5+K3Ne00vYh6b7ST263qTGirowf4OkslSpPZ
D838oixgkqWvzgncsCrjyI3qYbSrCBMw28qreKWh9qQ2Cj540ACn5LfEulk1xgmU
X1RSdVf94YFAA8qrMDDS17uIY6c6KduqebdcKtnGGGGc9/7zzLaBPW0PEAGzUHLi
8WU97+01mSq593NI0XdBBkNRMF2/tFOY0iPqhS82fEDTPk3gYlUIQ/nFdjYx2xl9
n3Q52igIR/Wa4KurCBiOQjQ/xg==
-----END CERTIFICATE-----
Generated at Sun Dec 21 10:35:20 2025 by rpki-client