This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325.mft
File:                     E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325.mft (raw, json)
Hash identifier:          0J1sOqLdn34leyRiYpErlOyHOdTHER4RIQ7QtVKixjU=
Subject key identifier:   B0:99:88:8E:44:F9:34:52:49:EB:CD:EA:78:52:A2:BC:FE:A2:4C:7D
Authority key identifier: E0:F9:CE:BF:1B:40:D8:FC:1A:5E:2C:82:B0:39:57:0C:93:49:F3:25
Certificate issuer:       /CN=E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325
Certificate serial:       3150B90202972A63ABF473A6F671EED0234DD2AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325.mft
Manifest number:          78
Signing time:             Sat 06 Dec 2025 22:30:33 +0000
Manifest this update:     Sat 06 Dec 2025 22:25:33 +0000
Manifest next update:     Sun 07 Dec 2025 23:00:33 +0000
Files and hashes:         1: 34352e3232362e39322e302f32322d3332203d3e20323636393932.roa (hash: tGtZGahHyRDdT4wps0iiTI4ennMfoo4Is3Y2F9jKOn8=)
                          2: 323830343a343637633a3a2f33322d313238203d3e20323636393932.roa (hash: FG9yedBaRW69iKWQ5vrW8liVhEjSF+gYfzKeBeedf5w=)
                          3: E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325.crl (hash: zQ2jXICPnT7G3Jf5nItzX9jwoISONHG/ylR3jWTo99U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325.crl
                          rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 23:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:50:b9:02:02:97:2a:63:ab:f4:73:a6:f6:71:ee:d0:23:4d:d2:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325
        Validity
            Not Before: Dec  6 22:25:33 2025 GMT
            Not After : Dec  7 23:00:33 2025 GMT
        Subject: CN=B099888E44F9345249EBCDEA7852A2BCFEA24C7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a9:9d:03:a7:83:d6:59:56:16:a4:f9:95:dd:
                    a5:fc:4c:f8:da:69:ad:36:b9:9f:4f:de:49:16:4b:
                    8e:a7:51:47:a9:04:ef:36:8c:22:8f:da:de:f8:29:
                    2f:2f:73:42:6f:fc:ba:cd:eb:41:e5:ad:67:93:50:
                    60:82:d1:82:3c:78:1a:71:0d:a3:7a:3d:1b:fe:ac:
                    9e:cc:59:21:3c:aa:d4:82:21:be:80:0e:72:74:38:
                    00:23:0b:ef:b3:a7:d8:f4:51:71:5a:ba:95:3a:0e:
                    7d:bd:ba:c6:7c:c5:27:cf:03:72:eb:c9:76:95:23:
                    ec:18:99:44:9e:71:68:b6:6a:88:e7:8b:a2:7d:f1:
                    65:74:fc:64:6d:dc:05:d9:83:9d:06:7d:27:ba:c0:
                    50:8d:fa:3a:81:45:19:9b:79:9e:ef:2f:38:81:c0:
                    3e:04:c0:50:f8:f8:05:dd:81:83:57:99:aa:3b:ec:
                    ba:99:15:ed:47:96:c7:d0:1d:e0:5d:67:ae:f8:dd:
                    ab:16:41:a0:ea:c8:54:2e:ab:c4:38:e2:e2:8e:9e:
                    6f:bd:2a:79:67:b0:6d:de:37:02:2c:03:24:43:ee:
                    69:46:c2:07:ac:0f:c7:99:14:92:7f:34:cc:c0:68:
                    9b:6f:4f:f7:ac:fb:b8:35:1d:41:88:ee:50:77:e9:
                    67:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:99:88:8E:44:F9:34:52:49:EB:CD:EA:78:52:A2:BC:FE:A2:4C:7D
            X509v3 Authority Key Identifier:
                keyid:E0:F9:CE:BF:1B:40:D8:FC:1A:5E:2C:82:B0:39:57:0C:93:49:F3:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:0e:b2:2d:26:16:c0:7f:52:3f:a7:cb:f9:04:5b:0c:f7:40:
         ad:b3:39:1a:4a:f9:a0:c7:0c:3b:34:b7:86:af:07:e9:1a:1d:
         ee:60:da:40:00:82:eb:84:82:57:db:b2:af:f0:e1:30:e3:a3:
         0a:d9:40:ef:c2:6d:71:4a:d5:a4:5d:f2:91:9e:d7:6e:84:b5:
         5c:8e:e2:bb:83:33:7a:a6:cb:27:b0:25:ae:db:fb:ca:2f:69:
         16:b4:71:14:7b:f4:67:c3:b4:d8:05:94:7c:c6:80:38:2c:22:
         85:2e:4d:54:0a:14:14:83:f4:3f:34:82:6e:f3:24:50:9e:bd:
         ee:c4:40:97:a6:e7:78:2e:e7:2e:5e:ef:c3:ec:e2:c6:05:62:
         dd:8a:99:09:3a:d4:08:7d:67:3c:df:a8:cf:c5:d8:a9:8a:8a:
         58:63:10:09:e3:9a:fa:53:d9:42:36:08:2d:bc:f2:e2:79:12:
         59:45:51:c4:fb:85:b9:04:94:f0:5c:67:29:c9:d9:71:fc:77:
         38:05:76:d5:95:2d:27:c1:39:fe:1b:c2:99:34:d5:f9:36:2e:
         02:28:9f:9e:3a:d0:77:33:0f:81:9d:ab:87:2c:60:a2:0b:0f:
         bc:47:8c:d4:58:42:82:5a:5f:f2:dd:b1:3f:75:9a:d8:cc:23:
         77:f4:e5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:58:08 2025 by rpki-client