This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.mft
File:                     F0CEA2F7CE08B293FB03B54A2852B51A550560CF.mft (raw, json)
Hash identifier:          k1wuPjsQc9F6KRM9TzDLvnYugtASqraji7C/6SSq9H8=
Subject key identifier:   35:0C:04:C3:23:3B:7D:85:D4:9B:90:58:84:0C:F0:94:DF:D3:2E:9C
Authority key identifier: F0:CE:A2:F7:CE:08:B2:93:FB:03:B5:4A:28:52:B5:1A:55:05:60:CF
Certificate issuer:       /CN=F0CEA2F7CE08B293FB03B54A2852B51A550560CF
Certificate serial:       6D9C696630CEC75F3CF26D5ACB09F5B9F476E098
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.mft
Manifest number:          032B
Signing time:             Fri 05 Dec 2025 19:43:24 +0000
Manifest this update:     Fri 05 Dec 2025 19:38:24 +0000
Manifest next update:     Sat 06 Dec 2025 23:02:24 +0000
Files and hashes:         1: F0CEA2F7CE08B293FB03B54A2852B51A550560CF.crl (hash: 8+04IkG7CFvyZFY8//qnrtEjFi6qIc3XY47az1KFDe4=)
                          2: 323830343a373736633a3a2f33322d3438203d3e20323731313737.roa (hash: Lk2TjinnyRLjYCqIwRiXjdSZRCMZuc0b5mUt24HYAEw=)
                          3: 3137392e35312e3138342e302f32322d3234203d3e20323731313737.roa (hash: YC0vu0BuI7ng429o1rFupIdL7FoaicnQlf+g6aRYZ5Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.crl
                          rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 23:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:9c:69:66:30:ce:c7:5f:3c:f2:6d:5a:cb:09:f5:b9:f4:76:e0:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0CEA2F7CE08B293FB03B54A2852B51A550560CF
        Validity
            Not Before: Dec  5 19:38:24 2025 GMT
            Not After : Dec  6 23:02:24 2025 GMT
        Subject: CN=350C04C3233B7D85D49B9058840CF094DFD32E9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7f:76:3d:27:82:20:de:cf:73:3d:af:66:45:
                    f1:7d:44:ec:19:f7:cf:74:e6:a7:a8:18:22:91:94:
                    a5:78:73:6e:38:91:a1:b4:d0:bd:a5:89:a8:ba:17:
                    13:5a:07:91:ba:fb:3f:03:4e:f3:a9:b2:ed:7d:91:
                    14:75:04:8c:a0:5c:ba:c7:23:aa:10:3e:ad:b0:d8:
                    9f:74:2a:aa:a6:3f:4c:d6:14:4b:ba:7a:12:4a:b1:
                    55:1f:ac:17:95:87:6a:f0:69:90:06:ec:89:39:04:
                    cb:b3:ca:f4:e5:c4:b3:b4:e2:a3:d4:07:07:49:cb:
                    c9:b4:26:8e:d7:d1:7d:a1:18:fe:fe:2a:df:4b:5b:
                    b5:5e:bd:18:ad:fa:6e:7d:00:60:41:d6:03:89:1f:
                    0b:7a:71:88:ad:82:27:26:62:29:1b:93:fe:f0:ef:
                    b7:30:80:12:d4:8e:32:9f:93:79:c9:0d:0f:15:87:
                    d0:12:01:c2:41:78:d9:58:88:41:e9:81:cb:43:be:
                    a8:88:32:04:09:6c:0e:ab:b0:81:1d:24:e1:80:9b:
                    4b:0b:7f:69:1b:47:cf:b2:2c:57:27:cc:c2:6c:02:
                    c3:70:84:90:6e:57:db:1a:20:29:55:d9:d6:ab:73:
                    2d:4f:db:fe:cc:e4:30:15:1f:24:96:c2:0f:45:ea:
                    01:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:0C:04:C3:23:3B:7D:85:D4:9B:90:58:84:0C:F0:94:DF:D3:2E:9C
            X509v3 Authority Key Identifier:
                keyid:F0:CE:A2:F7:CE:08:B2:93:FB:03:B5:4A:28:52:B5:1A:55:05:60:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:e7:65:fc:b8:25:4f:9a:68:22:c8:aa:51:6d:09:6f:52:d6:
         55:87:ad:1d:ad:89:e9:b1:4e:4d:29:be:15:54:eb:7b:ee:a1:
         3d:c2:ca:e5:dd:c6:e4:66:0f:14:61:13:a5:9a:f6:4c:84:e4:
         35:d5:b0:7e:1e:af:c9:1d:76:53:ce:54:7b:8b:d7:5f:8e:e1:
         75:22:bb:df:8c:d2:15:b7:29:05:4a:26:79:a7:60:89:ca:54:
         36:36:4f:39:a6:91:1b:e1:36:de:cd:2a:4b:68:b9:11:e9:ed:
         c8:c6:5b:d6:c7:02:e3:f9:2f:fe:7d:ba:1b:38:8c:e6:e2:0f:
         20:28:5c:bc:79:ff:f5:48:f8:eb:ff:9b:2f:55:cb:c4:dc:93:
         7d:f4:e1:7b:e0:91:7d:9c:82:b9:69:ea:c8:38:08:40:fc:36:
         ba:38:fc:fb:4e:37:5d:11:8e:0a:78:2b:85:33:10:af:88:7f:
         4a:8e:dd:c5:95:fc:45:8e:7f:ba:f9:c5:7f:d8:50:42:7d:b0:
         0a:d0:37:66:d3:bb:5d:ac:7c:a0:1f:66:8c:51:7e:87:62:5b:
         4a:f3:3b:79:72:c3:c9:43:8c:40:3f:b9:d4:17:76:60:2a:72:
         c7:ee:e5:44:a1:2a:51:0c:df:1f:92:2d:34:8d:20:04:44:75:
         fd:c1:82:df
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUbZxpZjDOx1888m1aywn1ufR24JgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjBDRUEyRjdDRTA4QjI5M0ZCMDNCNTRBMjg1MkI1MUE1
NTA1NjBDRjAeFw0yNTEyMDUxOTM4MjRaFw0yNTEyMDYyMzAyMjRaMDMxMTAvBgNV
BAMTKDM1MEMwNEMzMjMzQjdEODVENDlCOTA1ODg0MENGMDk0REZEMzJFOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+f3Y9J4Ig3s9zPa9mRfF9ROwZ
98905qeoGCKRlKV4c244kaG00L2liai6FxNaB5G6+z8DTvOpsu19kRR1BIygXLrH
I6oQPq2w2J90KqqmP0zWFEu6ehJKsVUfrBeVh2rwaZAG7Ik5BMuzyvTlxLO04qPU
BwdJy8m0Jo7X0X2hGP7+Kt9LW7VevRit+m59AGBB1gOJHwt6cYitgicmYikbk/7w
77cwgBLUjjKfk3nJDQ8Vh9ASAcJBeNlYiEHpgctDvqiIMgQJbA6rsIEdJOGAm0sL
f2kbR8+yLFcnzMJsAsNwhJBuV9saIClV2darcy1P2/7M5DAVHySWwg9F6gFhAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUNQwEwyM7fYXUm5BYhAzwlN/TLpwwHwYDVR0j
BBgwFoAU8M6i984IspP7A7VKKFK1GlUFYM8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1pLaU1VSmgyWE1DampNNjdVVlE1VDZ3QnFyQnU1YTZSdXIxTFFlUTFB
TlAvMS9GMENFQTJGN0NFMDhCMjkzRkIwM0I1NEEyODUyQjUxQTU1MDU2MENGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YwQ0VBMkY3Q0UwOEIyOTNG
QjAzQjU0QTI4NTJCNTFBNTUwNTYwQ0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q1pLaU1VSmgyWE1DampNNjdVVlE1VDZ3QnFyQnU1YTZSdXIxTFFlUTFBTlAvMS9G
MENFQTJGN0NFMDhCMjkzRkIwM0I1NEEyODUyQjUxQTU1MDU2MENGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiedl/LglT5poIsiqUW0Jb1LWVYetHa2J6bFOTSm+FVTre+6hPcLK5d3G5GYP
FGETpZr2TITkNdWwfh6vyR12U85Ue4vXX47hdSK734zSFbcpBUomeadgicpUNjZP
OaaRG+E23s0qS2i5EentyMZb1scC4/kv/n26GziM5uIPIChcvHn/9Uj46/+bL1XL
xNyTffThe+CRfZyCuWnqyDgIQPw2ujj8+043XRGOCngrhTMQr4h/So7dxZX8RY5/
uvnFf9hQQn2wCtA3ZtO7Xax8oB9mjFF+h2JbSvM7eXLDyUOMQD+51Bd2YCpyx+7l
RKEqUQzfH5ItNI0gBER1/cGC3w==
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:10:48 2025 by rpki-client