This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.mft
File:                     8B5B625A528EC464925ACB69248E90494483E3F7.mft (raw, json)
Hash identifier:          Cl+3Gnap6Tknzw4vVZQbUUje6HtqJKzD3SphXTabLEY=
Subject key identifier:   31:DB:14:C6:27:82:3E:C2:1E:2E:DC:C5:9A:C2:5D:1B:31:87:26:94
Authority key identifier: 8B:5B:62:5A:52:8E:C4:64:92:5A:CB:69:24:8E:90:49:44:83:E3:F7
Certificate issuer:       /CN=8B5B625A528EC464925ACB69248E90494483E3F7
Certificate serial:       58741E94797D23DBDDCFE92A70FA81176AA16BB5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B5B625A528EC464925ACB69248E90494483E3F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.mft
Manifest number:          0328
Signing time:             Sat 06 Dec 2025 11:47:42 +0000
Manifest this update:     Sat 06 Dec 2025 11:42:42 +0000
Manifest next update:     Sun 07 Dec 2025 13:26:42 +0000
Files and hashes:         1: 3137302e3233332e3138302e302f32322d3332203d3e20323635303831.roa (hash: ObqAafyNZ+1poxt3i+2GRujB4s5MDqvrCcZ2DXBseOg=)
                          2: 8B5B625A528EC464925ACB69248E90494483E3F7.crl (hash: fFEUAuT51ii8IvxCvpK+mCr9m+DcuQfFdsLDMWcLWk0=)
                          3: 323830343a333237633a3a2f33322d3332203d3e20323635303831.roa (hash: +ywXOGrXavmStWRwGu8rjCt+9m/hLwPwyeyFSJ0U5qM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.crl
                          rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B5B625A528EC464925ACB69248E90494483E3F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 13:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:74:1e:94:79:7d:23:db:dd:cf:e9:2a:70:fa:81:17:6a:a1:6b:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B5B625A528EC464925ACB69248E90494483E3F7
        Validity
            Not Before: Dec  6 11:42:42 2025 GMT
            Not After : Dec  7 13:26:42 2025 GMT
        Subject: CN=31DB14C627823EC21E2EDCC59AC25D1B31872694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2e:43:ef:af:4b:4c:66:25:02:c9:27:c3:5e:
                    42:35:61:bb:64:24:eb:b2:85:1c:2a:12:0d:98:14:
                    84:e1:b9:21:eb:e5:e6:7b:c8:ff:4a:5c:42:9b:f4:
                    db:a6:70:2e:a6:bd:e4:d8:4c:b8:da:0c:5e:02:50:
                    9c:33:25:2c:60:ae:e3:92:c6:c7:cf:14:19:01:7f:
                    59:97:f9:a8:09:52:4f:62:ff:5e:8e:63:14:77:5f:
                    94:d9:1b:22:95:5d:b1:3f:f4:bd:85:d1:ac:d2:65:
                    cd:bb:87:ac:a1:c5:ec:95:4b:74:93:9c:a2:9c:64:
                    dd:1a:24:de:a8:fe:05:da:46:f8:11:bd:1b:c9:36:
                    bf:b7:8a:73:aa:8c:af:a8:ca:d3:ac:65:4f:33:1c:
                    52:00:8a:d0:c6:33:50:23:76:4e:45:a7:43:21:d9:
                    9e:d0:9a:e6:dd:2c:5b:4f:d5:23:46:86:5d:c0:8e:
                    3e:85:7a:f9:42:9c:bf:50:90:83:c1:96:40:ab:b5:
                    a2:31:c4:42:4d:a9:3f:f1:bc:a5:c8:3e:60:8d:58:
                    ee:16:4e:b9:73:37:84:d1:5d:4c:b5:32:60:59:87:
                    d6:46:40:53:f8:e1:01:32:3d:13:a1:35:84:b1:01:
                    ff:5f:e0:01:2b:16:41:ed:fa:1a:f1:5c:3c:27:05:
                    72:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:DB:14:C6:27:82:3E:C2:1E:2E:DC:C5:9A:C2:5D:1B:31:87:26:94
            X509v3 Authority Key Identifier:
                keyid:8B:5B:62:5A:52:8E:C4:64:92:5A:CB:69:24:8E:90:49:44:83:E3:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B5B625A528EC464925ACB69248E90494483E3F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ac:fa:2e:9f:2c:7e:de:45:4f:6c:18:db:8a:96:4a:e0:2a:
         40:f7:c1:e2:f1:14:18:40:cb:74:fe:7a:f9:b0:3b:71:01:93:
         6e:05:46:93:89:e4:1f:9f:95:53:4e:19:80:75:d1:be:ea:08:
         34:8f:f2:97:9e:58:7a:f2:f4:f2:fc:69:55:97:ae:7f:a9:d0:
         35:81:a5:2f:a6:a1:7d:d2:05:79:22:09:6f:70:e5:47:cb:87:
         27:00:a7:43:63:3e:fb:ec:2b:13:f5:f9:b8:a8:6b:8f:fc:6f:
         46:ed:90:02:d4:3b:b2:87:25:da:4b:23:29:eb:48:ac:e0:2e:
         9d:b5:a6:16:d0:13:5e:0c:ff:23:33:72:c9:4d:34:54:db:66:
         d7:a2:b4:3d:65:9b:b1:42:3c:52:0d:22:9a:b5:32:33:bc:79:
         79:76:75:d2:1d:b3:a9:f3:50:fd:8f:e2:c5:58:1c:b3:34:0f:
         e5:57:d3:60:ab:a1:7d:92:b2:54:27:8e:fe:86:69:0a:4f:c4:
         26:c1:36:e2:60:0f:9b:b4:fc:15:13:df:80:3a:5c:0e:9b:2b:
         d4:6a:47:e0:28:7a:e5:68:9f:99:f2:b7:79:f9:ca:dd:b2:46:
         f9:11:aa:51:f8:fd:b3:6d:60:9e:e7:5e:d5:4d:f5:b0:af:9b:
         d7:13:b9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:28:39 2025 by rpki-client