This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/208F84112F1A4B695E56F4EB839321D9C18D523D.mft
File:                     208F84112F1A4B695E56F4EB839321D9C18D523D.mft (raw, json)
Hash identifier:          PMmZ6ETZiF37CoSVAloPnrMeKSZBqJ0pPT22+vsHZ24=
Subject key identifier:   50:37:CA:18:BD:10:6E:19:73:6F:9B:F0:75:E8:27:AE:24:D2:45:EC
Authority key identifier: 20:8F:84:11:2F:1A:4B:69:5E:56:F4:EB:83:93:21:D9:C1:8D:52:3D
Certificate issuer:       /CN=208F84112F1A4B695E56F4EB839321D9C18D523D
Certificate serial:       186E974C689579123445889DA216F041E7CFB842
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/208F84112F1A4B695E56F4EB839321D9C18D523D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/208F84112F1A4B695E56F4EB839321D9C18D523D.mft
Manifest number:          01D0
Signing time:             Fri 05 Dec 2025 14:24:08 +0000
Manifest this update:     Fri 05 Dec 2025 14:19:08 +0000
Manifest next update:     Sat 06 Dec 2025 17:10:08 +0000
Files and hashes:         1: 208F84112F1A4B695E56F4EB839321D9C18D523D.crl (hash: 06lx7L99xqf9eW9SEjW7KHqb0ce/Zqbg1pIN4ek9PZ0=)
                          2: 34352e3139312e31322e302f32322d3332203d3e20323730323538.roa (hash: y1DOoRZ2jRrfbJDP3KGlI04eqvq1vu59qC0FEwtqWO4=)
                          3: 323830343a363934303a3a2f33322d313238203d3e20323730323538.roa (hash: 3tsYT8SUMOVUQyEdwK16B3lt0iXoYtumoCmOphT0MOo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/208F84112F1A4B695E56F4EB839321D9C18D523D.crl
                          rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/208F84112F1A4B695E56F4EB839321D9C18D523D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/208F84112F1A4B695E56F4EB839321D9C18D523D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 17:10:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:6e:97:4c:68:95:79:12:34:45:88:9d:a2:16:f0:41:e7:cf:b8:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208F84112F1A4B695E56F4EB839321D9C18D523D
        Validity
            Not Before: Dec  5 14:19:08 2025 GMT
            Not After : Dec  6 17:10:08 2025 GMT
        Subject: CN=5037CA18BD106E19736F9BF075E827AE24D245EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:72:a1:08:5b:85:4b:87:5b:ef:da:84:2d:94:
                    15:18:b1:68:e2:ad:04:8c:ad:ab:62:9b:fa:99:db:
                    b2:6e:a6:fa:eb:cf:50:97:78:e6:b5:0a:95:87:55:
                    f7:70:8b:d9:12:f2:2d:8d:ae:19:4d:a1:bb:8b:6f:
                    7b:dd:ca:89:de:e6:cc:4f:6b:98:5c:3e:a1:3f:ff:
                    53:1a:26:08:6b:46:28:05:17:13:f4:2d:be:cf:a1:
                    12:c9:7b:0a:02:e4:72:07:19:03:eb:87:d6:90:d9:
                    fb:c6:09:f4:5f:b2:c4:5d:35:41:b3:49:42:37:4d:
                    c4:95:fa:bd:35:0c:21:bf:1f:61:b6:2a:a3:12:8b:
                    c5:56:61:3f:18:4d:d0:6e:ca:ee:88:1b:5d:a2:83:
                    40:25:c6:b0:f3:99:41:7b:d4:96:09:7a:e9:28:6e:
                    78:f7:da:b8:7f:90:67:27:db:a0:e4:a9:4b:98:be:
                    6d:93:c8:50:ff:d8:6a:e6:4d:5b:85:5d:2b:75:a5:
                    fb:9f:7f:ab:39:27:ac:44:ee:e6:68:ac:33:3a:44:
                    5d:2f:d5:54:6d:71:2e:fc:0d:ee:39:a3:b4:fb:68:
                    bf:22:c4:53:68:0e:27:4c:7e:d9:28:ac:5f:3c:5a:
                    04:53:7f:5f:6c:81:e3:f2:f8:8d:6e:03:a7:e8:f2:
                    d6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:37:CA:18:BD:10:6E:19:73:6F:9B:F0:75:E8:27:AE:24:D2:45:EC
            X509v3 Authority Key Identifier:
                keyid:20:8F:84:11:2F:1A:4B:69:5E:56:F4:EB:83:93:21:D9:C1:8D:52:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/208F84112F1A4B695E56F4EB839321D9C18D523D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/208F84112F1A4B695E56F4EB839321D9C18D523D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/208F84112F1A4B695E56F4EB839321D9C18D523D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:c5:fa:8f:a0:96:13:bd:49:54:a3:25:a6:f1:b3:4e:88:5e:
         75:42:ea:d9:e7:15:be:a4:c8:45:46:6e:16:74:fe:04:59:58:
         69:7a:78:40:28:f4:a6:ab:8d:5b:bd:d4:dd:b2:66:bc:6a:2e:
         cd:79:3d:a5:eb:f2:99:8f:ed:52:94:7f:8c:21:85:65:4b:1e:
         aa:f8:4e:fb:30:13:b7:7a:0f:c8:0c:9f:e8:3d:24:4d:72:a5:
         d8:eb:b7:64:62:83:39:ea:e3:d5:d7:6f:66:bf:00:b2:09:de:
         ed:20:da:20:9f:60:8b:ac:a9:0e:db:b6:34:4a:7f:76:05:b9:
         b6:4b:54:84:01:93:45:c0:8d:b7:5a:7e:23:3f:9b:06:20:84:
         42:2c:e1:cd:00:40:a7:27:58:59:cf:ba:56:8a:1b:1f:70:f0:
         0a:05:38:1f:ed:08:e4:23:54:ec:b2:7c:5b:c3:54:23:40:08:
         2b:cc:89:04:64:18:74:a9:58:46:ea:a3:da:0b:fd:c3:b7:f6:
         8b:b6:24:42:0a:d0:80:61:04:de:c6:e8:bd:6c:68:26:4f:d0:
         ef:f7:5a:95:62:e0:a4:a9:bd:19:e2:61:31:99:96:99:a3:a6:
         24:c7:ff:e6:6f:83:58:3f:0c:e1:b6:96:b3:1f:c8:d7:e9:57:
         5e:14:1f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:15:49 2025 by rpki-client