This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.mft
File:                     23A22E67C9FE9B589275D5C14902FF7C51DADBF6.mft (raw, json)
Hash identifier:          cFeI4sTxlbwGt8O/Ul1whmmc0ap95D13m2KUXgKQeT8=
Subject key identifier:   2E:81:2E:56:F3:F9:E3:F2:B1:F2:95:D6:75:78:2D:06:47:14:DD:B5
Authority key identifier: 23:A2:2E:67:C9:FE:9B:58:92:75:D5:C1:49:02:FF:7C:51:DA:DB:F6
Certificate issuer:       /CN=23A22E67C9FE9B589275D5C14902FF7C51DADBF6
Certificate serial:       4F63CF7AD8C746C6191CAC9DE942CBA5986B66F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.mft
Manifest number:          0171
Signing time:             Fri 05 Dec 2025 22:52:11 +0000
Manifest this update:     Fri 05 Dec 2025 22:47:11 +0000
Manifest next update:     Sun 07 Dec 2025 00:15:11 +0000
Files and hashes:         1: 323830343a386166383a633030303a3a2f33342d3334203d3e20323733373034.roa (hash: qAf22STPntaWt88qJT4dHNuQuRpFDP4chhOnFhx0vko=)
                          2: 323830343a386166383a343030303a3a2f33342d3334203d3e20323733373034.roa (hash: sTMl5oOR+PB27IkCFATLub4H/wVGJc4jQBSRkZbaLIo=)
                          3: 323830343a386166383a383030303a3a2f33342d3334203d3e20323733373034.roa (hash: HYoFVQcqZGemQ3ppyPtnBcGaTkZRv9Y586oS+HeRgn0=)
                          4: 323830343a386166383a3a2f33322d3332203d3e20323733373034.roa (hash: 9q+3WZCQelpJ82GHGMPZnl7Km+15Ep1MFsxC6afmR5c=)
                          5: 323830343a386166383a3a2f33342d3334203d3e20323733373034.roa (hash: QXrOFT2cUsRU2r0pxCN+XM3aulT9UCyMbe+iqjUwCNQ=)
                          6: 3137372e38342e33312e302f32342d3234203d3e20323733373034.roa (hash: YTpdZsMpLF8I+1J7/jW48bSzCvcUNVp1vm4xp3Q7+BU=)
                          7: 23A22E67C9FE9B589275D5C14902FF7C51DADBF6.crl (hash: 10Qevt6KWKK6NshZimcZ2VXUytRHBJskQX/zNA4ILXk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.crl
                          rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 00:15:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:63:cf:7a:d8:c7:46:c6:19:1c:ac:9d:e9:42:cb:a5:98:6b:66:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23A22E67C9FE9B589275D5C14902FF7C51DADBF6
        Validity
            Not Before: Dec  5 22:47:11 2025 GMT
            Not After : Dec  7 00:15:11 2025 GMT
        Subject: CN=2E812E56F3F9E3F2B1F295D675782D064714DDB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:eb:c9:43:58:9f:66:ae:7b:85:29:c1:fc:ef:
                    18:3c:8a:18:7f:94:a1:7d:37:fd:d1:b2:d9:2e:a4:
                    7b:5a:f2:1d:a3:89:96:a3:7b:b3:1b:5d:c2:c4:4c:
                    0a:df:53:ae:34:7b:4a:80:81:9d:49:0b:4d:be:33:
                    c3:6a:6b:4a:18:24:86:7e:4f:e7:e9:03:7e:cf:79:
                    6a:ae:d1:27:7c:08:39:69:1e:77:75:7c:9a:04:58:
                    ea:25:9d:e9:7e:60:46:bb:dc:3a:b1:21:0a:a8:88:
                    50:72:b5:3f:cd:29:80:45:61:3c:78:e6:94:47:0a:
                    4c:20:da:2e:e6:5f:f6:9c:bc:96:27:9c:15:e3:d1:
                    a5:c2:8e:36:02:3f:86:45:22:7f:d3:1b:fd:4a:8e:
                    f9:ef:16:f1:02:38:99:ca:08:f6:58:42:da:f8:d5:
                    86:f2:2c:a6:c0:a0:46:5d:e1:60:ca:71:86:92:8f:
                    ec:2e:bd:97:34:7d:0f:2d:97:4a:0f:2b:41:7f:bf:
                    17:dd:47:d3:a1:8f:49:1e:89:a2:01:95:13:55:2d:
                    4a:13:08:45:1e:4e:ee:3c:5e:8a:c4:81:08:65:35:
                    71:67:49:a4:cc:63:94:78:37:25:48:bc:b1:3a:41:
                    05:2c:7b:78:c5:49:b8:1e:c1:88:1a:17:cb:56:0d:
                    51:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:81:2E:56:F3:F9:E3:F2:B1:F2:95:D6:75:78:2D:06:47:14:DD:B5
            X509v3 Authority Key Identifier:
                keyid:23:A2:2E:67:C9:FE:9B:58:92:75:D5:C1:49:02:FF:7C:51:DA:DB:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:5e:aa:30:8a:66:d5:1e:ec:d2:66:eb:75:22:9a:8d:33:c0:
         ed:d9:9e:ee:7c:b0:8d:63:7b:bb:99:b6:6e:8b:9f:a5:4d:e0:
         d0:dd:59:46:2c:f9:d9:ae:61:84:40:23:83:70:a8:f1:54:96:
         f7:19:0e:63:2e:4a:20:83:50:e4:8f:6c:58:b7:a6:d0:b8:9f:
         15:f9:6c:85:e0:b6:e6:02:b9:8b:8e:36:45:66:2d:cb:3c:5e:
         55:6e:be:1b:b5:a1:7f:3e:f6:d9:81:08:70:b2:33:3a:1a:fe:
         e7:b6:3e:20:44:73:a1:6c:0a:85:cc:a4:22:7c:4d:94:42:8f:
         31:47:71:b9:34:d3:76:08:ed:9a:50:1f:87:f7:95:7b:42:46:
         70:05:83:ae:a2:8c:2a:99:ec:b2:ce:f4:9c:ee:b4:ed:e1:9a:
         03:9b:96:93:c2:da:b3:97:ac:2b:f9:14:e5:2a:ce:7e:4f:1c:
         6c:12:34:53:58:de:1c:aa:87:4a:d4:14:60:d5:91:fe:bb:08:
         6a:6d:5b:f9:86:99:b2:97:db:29:6f:b4:d5:96:89:b7:0e:0d:
         ff:dd:04:19:54:cb:2b:c6:d0:83:79:90:83:d2:70:2b:61:2b:
         4b:0a:ab:04:ba:35:8c:6a:3c:c0:f7:62:72:62:a3:40:13:f6:
         e5:f0:61:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:52:51 2025 by rpki-client