This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/F8A5885612DC8F082016099D6959B32B90C3706E.mft
File:                     F8A5885612DC8F082016099D6959B32B90C3706E.mft (raw, json)
Hash identifier:          8SVb4AM+nqMvBE5uA99V7YzlxlCFw/nOxApg90hJpJM=
Subject key identifier:   14:1C:C9:47:22:E4:9F:1B:22:2F:D5:F5:4B:94:E2:50:B3:A3:AA:CB
Authority key identifier: F8:A5:88:56:12:DC:8F:08:20:16:09:9D:69:59:B3:2B:90:C3:70:6E
Certificate issuer:       /CN=F8A5885612DC8F082016099D6959B32B90C3706E
Certificate serial:       253CA1EAA9A3AFB54E9946B3B85139B12CA25C1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A5885612DC8F082016099D6959B32B90C3706E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/F8A5885612DC8F082016099D6959B32B90C3706E.mft
Manifest number:          A2
Signing time:             Sat 06 Dec 2025 11:49:37 +0000
Manifest this update:     Sat 06 Dec 2025 11:44:37 +0000
Manifest next update:     Sun 07 Dec 2025 12:26:37 +0000
Files and hashes:         1: 3138362e3235302e3136302e302f32322d3232203d3e20323632383138.roa (hash: VKfmss/RLI6UDlqgEr0NgoeZSvQWQ6QOLPZDe/6lMfg=)
                          2: F8A5885612DC8F082016099D6959B32B90C3706E.crl (hash: pfUMZm6hEfrNAMKuKO7avlxtRa4MvuaMf8+OyDJKOWs=)
                          3: 3138362e3235302e3136302e302f32342d3234203d3e20323632383138.roa (hash: mSwIkgwv27QgLezHehCCveIg6XAwpCdnR193OBsG8y0=)
                          4: 323830343a333434633a3a2f33322d3332203d3e20323632383138.roa (hash: dHKGgTfwFlcJ0qjhRg3sgfCG3a4xae7Doeyc2YsGrKY=)
                          5: 323830343a333434633a633030303a3a2f33342d3334203d3e20323632383138.roa (hash: nnBybxtK3+vJwSSULgy62Eg2e+vSqbyFDwJwvFjtFbo=)
                          6: 3138362e3235302e3136312e302f32342d3234203d3e20323632383138.roa (hash: DoHkXGYDjE1u/2j4a4WSgeVCDa2a9rEVRFQ8XjJHWrw=)
                          7: 323830343a333434633a383030303a3a2f33332d3333203d3e20323632383138.roa (hash: g04kJh3ad2cd1eQTnK7MuD1BKnBh1Ia/7prAp4r30jo=)
                          8: 323830343a333434633a3a2f33332d3333203d3e20323632383138.roa (hash: klaqpFyEgae9tu/nglP2bssidu/OXkGksLzRwi04cdo=)
                          9: 323830343a333434633a383030303a3a2f33342d3334203d3e20323632383138.roa (hash: Py0PF40ph1j5z7kJfQp3+AYT5f2egmqvTglysyWA3v4=)
                          10: 3138362e3235302e3136332e302f32342d3234203d3e20323632383138.roa (hash: UN03158w/3yr2Z+4dj4HrJxwzFVa91tnpBwYIMawdQY=)
                          11: 3138362e3235302e3136322e302f32342d3234203d3e20323632383138.roa (hash: dwr5LtB96a4Y9E4T0mMP6sn0uGhWZaPcbNGPF0oeZKA=)
                          12: 323830343a333434633a3a2f33342d3334203d3e20323632383138.roa (hash: ppnxWvwyeliMV/sJSlRsVruXM/XQrj2qCQ7gjXiB574=)
                          13: 323830343a333434633a343030303a3a2f33342d3334203d3e20323632383138.roa (hash: n2glyWXnEK6g0o9ZNmVitaPWGFcqmb+iqpICG5u2MYY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/F8A5885612DC8F082016099D6959B32B90C3706E.crl
                          rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/F8A5885612DC8F082016099D6959B32B90C3706E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A5885612DC8F082016099D6959B32B90C3706E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 12:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:3c:a1:ea:a9:a3:af:b5:4e:99:46:b3:b8:51:39:b1:2c:a2:5c:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8A5885612DC8F082016099D6959B32B90C3706E
        Validity
            Not Before: Dec  6 11:44:37 2025 GMT
            Not After : Dec  7 12:26:37 2025 GMT
        Subject: CN=141CC94722E49F1B222FD5F54B94E250B3A3AACB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:84:5c:6e:f3:9b:7b:6b:61:cb:a8:55:f3:3e:
                    03:0f:da:88:8c:40:ff:84:1b:a3:c6:f3:0a:94:73:
                    1a:e7:8f:d3:57:50:ae:6f:95:cc:d6:3d:f9:51:46:
                    24:65:49:2a:7a:9e:d3:35:38:97:f6:c1:ca:a7:1c:
                    d7:6e:31:35:96:bb:51:11:99:95:d3:4a:6f:9d:96:
                    02:03:59:ca:da:d7:70:9f:1d:83:59:e3:f3:09:cf:
                    bb:f8:e5:58:27:f5:59:00:d8:b1:0f:ab:15:b3:49:
                    66:9b:8a:d8:af:f7:11:3e:c2:96:0f:f1:bd:be:ab:
                    7c:87:b7:4e:b4:75:64:e9:58:2b:d7:bd:46:3e:38:
                    28:12:4c:d0:13:11:58:25:31:00:d5:3a:46:90:8d:
                    43:e2:96:66:da:70:dd:70:5d:26:56:e6:22:20:af:
                    d0:61:29:f0:58:3a:e3:ca:ed:3e:cf:c0:55:42:aa:
                    b9:cb:bc:4c:69:52:ba:8d:69:db:62:22:0a:23:42:
                    ae:c0:a0:bc:f5:c0:98:e5:ee:ae:35:42:de:b4:f1:
                    03:f7:31:e1:82:16:a9:01:fe:53:27:cc:33:78:14:
                    b9:e0:2b:42:0a:7b:4e:78:a1:b4:b1:e8:15:13:d0:
                    63:01:f2:13:0d:2e:19:8f:76:16:b1:2e:25:a6:ba:
                    6d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:1C:C9:47:22:E4:9F:1B:22:2F:D5:F5:4B:94:E2:50:B3:A3:AA:CB
            X509v3 Authority Key Identifier:
                keyid:F8:A5:88:56:12:DC:8F:08:20:16:09:9D:69:59:B3:2B:90:C3:70:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/F8A5885612DC8F082016099D6959B32B90C3706E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A5885612DC8F082016099D6959B32B90C3706E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/F8A5885612DC8F082016099D6959B32B90C3706E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:81:da:b8:79:93:06:c9:73:9f:9e:a5:4e:11:ec:92:43:53:
         c7:1c:48:ff:b2:81:2e:8e:7e:b8:9e:65:fb:77:c8:52:63:f8:
         6e:7f:d9:c8:7b:49:ac:e1:ff:74:83:70:7e:e5:7b:3e:c3:39:
         b8:5e:1a:9d:b1:ec:69:64:21:7a:7a:67:d5:63:50:18:06:aa:
         1b:50:9c:ee:05:b7:a8:17:b0:ed:81:86:ae:89:b7:4b:07:88:
         9a:73:91:3b:6d:9c:a7:30:88:0d:7e:e7:88:0d:69:4a:f0:96:
         47:b9:52:c5:3e:e5:55:b6:ec:69:9d:17:bd:cf:bc:19:8b:34:
         70:45:c5:a6:47:7c:b7:d1:9f:14:f4:3d:bc:c0:a7:89:67:2c:
         c2:64:2b:92:b8:cd:d3:e4:98:5b:cc:51:e6:2d:6b:46:1b:f9:
         4e:83:a5:6c:4c:1d:fa:ae:71:ac:48:ab:ee:72:c6:86:ba:b2:
         94:68:08:ad:71:27:ea:33:2c:6e:1f:be:5a:55:04:52:d2:f2:
         b2:16:79:21:90:27:80:8b:8d:8f:b0:b7:13:f4:1c:70:fe:72:
         47:9e:f1:09:1d:76:8f:be:74:da:b2:8d:7b:34:86:bb:5a:88:
         44:25:c7:87:3a:ca:32:b4:bd:cb:67:26:67:c0:ef:20:26:28:
         d8:75:19:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:38:24 2025 by rpki-client