This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EX9Ai4d7ZcnsBRZWQMshqjuMiM3dWQSrmK4NtLfrafDj/0/1C4067D9FC8880CD844526B4C8268B525C75BAEF.mft
File:                     1C4067D9FC8880CD844526B4C8268B525C75BAEF.mft (raw, json)
Hash identifier:          cLTRrZjHCMl301NbEqtkRwPHdRb2I6b0KJr5iE9UG60=
Subject key identifier:   52:B1:E2:2F:B0:52:FE:1C:97:06:36:4F:7A:48:E3:84:15:EF:E2:D1
Authority key identifier: 1C:40:67:D9:FC:88:80:CD:84:45:26:B4:C8:26:8B:52:5C:75:BA:EF
Certificate issuer:       /CN=1C4067D9FC8880CD844526B4C8268B525C75BAEF
Certificate serial:       6F5B8D48B886636697BCC2B2901F1894D8CB838B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C4067D9FC8880CD844526B4C8268B525C75BAEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EX9Ai4d7ZcnsBRZWQMshqjuMiM3dWQSrmK4NtLfrafDj/0/1C4067D9FC8880CD844526B4C8268B525C75BAEF.mft
Manifest number:          027D
Signing time:             Sat 06 Dec 2025 01:14:05 +0000
Manifest this update:     Sat 06 Dec 2025 01:09:05 +0000
Manifest next update:     Sun 07 Dec 2025 03:05:05 +0000
Files and hashes:         1: 3137372e3230302e3232382e302f32322d3332203d3e20323730363035.roa (hash: IFEckCwoB8Z55hrB0cIzDmwXqQiVlP3FQFUuZEzRuyE=)
                          2: 323830343a366539303a3a2f33322d3332203d3e20323730363035.roa (hash: zw6UCq4MOPS2SDzuqoD0dsraoU4SV05cUlyk16FJOes=)
                          3: 1C4067D9FC8880CD844526B4C8268B525C75BAEF.crl (hash: HFqFVK4SRN8lTXGnx2EdKgvqRTlPBmDUQlN3hsSa5c4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EX9Ai4d7ZcnsBRZWQMshqjuMiM3dWQSrmK4NtLfrafDj/0/1C4067D9FC8880CD844526B4C8268B525C75BAEF.crl
                          rsync://rpki-repo.registro.br/repo/EX9Ai4d7ZcnsBRZWQMshqjuMiM3dWQSrmK4NtLfrafDj/0/1C4067D9FC8880CD844526B4C8268B525C75BAEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C4067D9FC8880CD844526B4C8268B525C75BAEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 03:05:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:5b:8d:48:b8:86:63:66:97:bc:c2:b2:90:1f:18:94:d8:cb:83:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C4067D9FC8880CD844526B4C8268B525C75BAEF
        Validity
            Not Before: Dec  6 01:09:05 2025 GMT
            Not After : Dec  7 03:05:05 2025 GMT
        Subject: CN=52B1E22FB052FE1C9706364F7A48E38415EFE2D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:97:21:0f:63:67:fb:1e:78:90:83:51:e6:7b:
                    45:9f:9f:85:c7:d2:9a:16:9f:75:2d:01:30:69:c1:
                    63:58:40:e8:ba:ba:ec:5d:85:66:80:ed:04:19:c9:
                    e5:50:7a:29:94:b9:9e:8d:06:a0:ce:d0:a9:c9:f8:
                    c4:e6:02:69:c8:d6:ef:10:91:f5:3a:be:86:7b:35:
                    b0:06:ac:61:ed:9d:e6:c7:18:e9:db:5e:36:f8:63:
                    3b:3e:69:0c:57:bc:21:69:6a:04:b9:93:ed:30:ac:
                    c7:b8:ec:10:9a:e4:cd:8e:01:35:d5:40:b9:b0:b6:
                    7b:26:6d:43:a9:44:ec:3c:d9:b0:5c:be:1b:03:26:
                    40:1a:3e:ee:99:04:68:19:b4:24:4c:da:02:e3:b1:
                    61:55:27:43:2a:3c:60:2b:77:5d:65:9f:cd:e4:ba:
                    84:8b:81:8d:5f:37:94:fc:31:42:b1:68:0e:cf:6d:
                    5e:52:df:59:4e:05:50:5f:a1:63:f6:b0:20:13:7c:
                    3d:4b:3c:64:7c:85:77:17:4d:ae:1b:e6:36:0d:ed:
                    0a:ef:90:75:f0:6d:3b:f9:c0:7c:99:ec:8f:99:de:
                    7c:7a:57:c4:d6:cb:67:83:d4:e1:25:ba:24:4e:ac:
                    ff:01:a9:12:4c:e4:c0:a3:80:86:17:c4:8c:88:1d:
                    c8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B1:E2:2F:B0:52:FE:1C:97:06:36:4F:7A:48:E3:84:15:EF:E2:D1
            X509v3 Authority Key Identifier:
                keyid:1C:40:67:D9:FC:88:80:CD:84:45:26:B4:C8:26:8B:52:5C:75:BA:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EX9Ai4d7ZcnsBRZWQMshqjuMiM3dWQSrmK4NtLfrafDj/0/1C4067D9FC8880CD844526B4C8268B525C75BAEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C4067D9FC8880CD844526B4C8268B525C75BAEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EX9Ai4d7ZcnsBRZWQMshqjuMiM3dWQSrmK4NtLfrafDj/0/1C4067D9FC8880CD844526B4C8268B525C75BAEF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:2e:87:14:2e:67:0f:df:de:3a:b2:fa:56:9d:4a:fb:c3:9f:
         15:0a:63:38:df:59:0a:9b:8b:c0:39:70:59:08:2f:11:66:84:
         c4:a0:4c:eb:4c:7d:38:eb:08:05:41:f0:a9:f3:bd:d1:3a:94:
         4e:34:db:6f:76:2e:3c:26:56:e4:a4:ec:2e:23:5c:8d:7f:1a:
         41:d7:4b:cd:3e:e8:1f:b8:da:cd:da:6a:d7:dd:bd:dc:dc:2c:
         d8:9c:55:f7:bc:3a:76:b5:a6:3e:8a:33:17:25:91:a6:c4:22:
         78:56:48:9e:60:bc:d3:14:50:e1:63:7e:e3:89:95:1d:22:b2:
         7c:97:f6:48:56:55:f7:2c:4b:c1:22:a5:4e:98:57:b3:78:94:
         62:7e:90:f9:d4:02:f7:65:92:7e:ba:0d:b6:6c:f7:a0:de:67:
         90:96:d7:f4:82:ec:a7:77:da:50:e3:17:6f:49:13:c4:8d:b5:
         ce:24:6b:fb:26:98:69:75:73:b5:75:67:28:c4:f8:cd:87:a3:
         09:0e:60:b9:3f:35:b1:ae:de:66:8b:c9:5c:dd:93:b3:4f:a7:
         35:b5:2d:6e:b0:f8:b0:bf:6b:0b:bf:8f:7d:12:a6:ab:61:66:
         51:d9:14:a8:42:55:63:19:86:30:4f:79:01:68:66:86:1f:da:
         50:f1:4d:25
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUb1uNSLiGY2aXvMKykB8YlNjLg4swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM0MDY3RDlGQzg4ODBDRDg0NDUyNkI0QzgyNjhCNTI1
Qzc1QkFFRjAeFw0yNTEyMDYwMTA5MDVaFw0yNTEyMDcwMzA1MDVaMDMxMTAvBgNV
BAMTKDUyQjFFMjJGQjA1MkZFMUM5NzA2MzY0RjdBNDhFMzg0MTVFRkUyRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSlyEPY2f7HniQg1Hme0Wfn4XH
0poWn3UtATBpwWNYQOi6uuxdhWaA7QQZyeVQeimUuZ6NBqDO0KnJ+MTmAmnI1u8Q
kfU6voZ7NbAGrGHtnebHGOnbXjb4Yzs+aQxXvCFpagS5k+0wrMe47BCa5M2OATXV
QLmwtnsmbUOpROw82bBcvhsDJkAaPu6ZBGgZtCRM2gLjsWFVJ0MqPGArd11ln83k
uoSLgY1fN5T8MUKxaA7PbV5S31lOBVBfoWP2sCATfD1LPGR8hXcXTa4b5jYN7Qrv
kHXwbTv5wHyZ7I+Z3nx6V8TWy2eD1OEluiROrP8BqRJM5MCjgIYXxIyIHcjpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUUrHiL7BS/hyXBjZPekjjhBXv4tEwHwYDVR0j
BBgwFoAUHEBn2fyIgM2ERSa0yCaLUlx1uu8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVg5QWk0ZDdaY25zQlJaV1FNc2hxanVNaU0zZFdRU3JtSzROdExmcmFm
RGovMC8xQzQwNjdEOUZDODg4MENEODQ0NTI2QjRDODI2OEI1MjVDNzVCQUVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDNDA2N0Q5RkM4ODgwQ0Q4
NDQ1MjZCNEM4MjY4QjUyNUM3NUJBRUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RVg5QWk0ZDdaY25zQlJaV1FNc2hxanVNaU0zZFdRU3JtSzROdExmcmFmRGovMC8x
QzQwNjdEOUZDODg4MENEODQ0NTI2QjRDODI2OEI1MjVDNzVCQUVGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOi6HFC5nD9/eOrL6Vp1K+8OfFQpjON9ZCpuLwDlwWQgvEWaExKBM60x9OOsI
BUHwqfO90TqUTjTbb3YuPCZW5KTsLiNcjX8aQddLzT7oH7jazdpq19293Nws2JxV
97w6drWmPoozFyWRpsQieFZInmC80xRQ4WN+44mVHSKyfJf2SFZV9yxLwSKlTphX
s3iUYn6Q+dQC92WSfroNtmz3oN5nkJbX9ILsp3faUOMXb0kTxI21ziRr+yaYaXVz
tXVnKMT4zYejCQ5guT81sa7eZovJXN2Ts0+nNbUtbrD4sL9rC7+PfRKmq2FmUdkU
qEJVYxmGME95AWhmhh/aUPFNJQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:11:28 2025 by rpki-client