This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.mft
File:                     AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.mft (raw, json)
Hash identifier:          bEahIl+FcVhONRO2N8/xLvj70DEJrS2f8qksB2jbt1o=
Subject key identifier:   43:5F:68:BA:A3:62:94:D6:E2:8D:CC:E5:B2:B9:C3:42:98:16:01:DA
Authority key identifier: AE:25:EE:F7:E6:EE:89:4C:19:7D:BD:78:37:CB:3C:05:DF:B9:E8:E0
Certificate issuer:       /CN=AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0
Certificate serial:       7B37EF79434466542F6E4EDCA417CEB5D3EF5717
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.mft
Manifest number:          76
Signing time:             Sat 06 Dec 2025 14:00:19 +0000
Manifest this update:     Sat 06 Dec 2025 13:55:19 +0000
Manifest next update:     Sun 07 Dec 2025 17:23:19 +0000
Files and hashes:         1: 323830343a373636633a343030303a3a2f33342d3334203d3e20323731313131.roa (hash: aPIIIvH/c9LF0yVeOq0NNSMlt5q01C0vZ8XqoflYfPk=)
                          2: AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.crl (hash: WRdLuXrRFodRcK6WdjHn+wU6IMHdnI/3cIRfjTaMvWE=)
                          3: 3139322e3134302e38342e302f32322d3232203d3e20323731313131.roa (hash: x90+A6PCgRTCnj5MxgkPN8v77D+QZ6eDur/AiajiT60=)
                          4: 3139322e3134302e38372e302f32342d3234203d3e20323731313131.roa (hash: xBlV8Ip5/YGRTOQc7yczbFRYcWfaWhVQ26IOppqm2pE=)
                          5: 3139322e3134302e38342e302f32342d3234203d3e20323731313131.roa (hash: 40yWUprjSO8lUdHk+XLCEfb/C5/c1v/dtf+zo0En5KU=)
                          6: 323830343a373636633a3a2f33332d3333203d3e20323731313131.roa (hash: IqVEG5ONbGERCzXtKylhkKs/GqcPQf07vdzqWbRA8Hk=)
                          7: 3139322e3134302e38362e302f32342d3234203d3e20323731313131.roa (hash: w7+J5TbX/BEtxhthzPu08pEsfTS2LyBGd78Y6Fm0Be4=)
                          8: 3139322e3134302e38352e302f32342d3234203d3e20323731313131.roa (hash: FWZ3ripVTBysTD64be5SCnjZettB/hGaEup19vCH8Wg=)
                          9: 323830343a373636633a633030303a3a2f33342d3334203d3e20323731313131.roa (hash: Ec/4xM1+cCmYj2LU70Mz6SKyBGF6OTDJ/xwAZZDe+/E=)
                          10: 3139322e3134302e38342e302f32332d3233203d3e20323731313131.roa (hash: uhG2VeMZIfvKAfESzJmEpErETWUb/ufuBdWf3RvRRkg=)
                          11: 3139322e3134302e38362e302f32332d3233203d3e20323731313131.roa (hash: keS07TT8SirZJX0cDvxmbSZSzapkbb8zXO9WjGBwQrY=)
                          12: 323830343a373636633a3a2f33322d3332203d3e20323731313131.roa (hash: nSDoX21RcdJRvs8D3ez8f4mamhKaht+5ZVYtziWcPYU=)
                          13: 323830343a373636633a383030303a3a2f33332d3333203d3e20323731313131.roa (hash: u6Br5xfZvsknVXUknVn9b47QGzFA1qZXVZHocGqJ8IY=)
                          14: 323830343a373636633a383030303a3a2f33342d3334203d3e20323731313131.roa (hash: 79IVv8Fhimc2zzZjzUEV820c1ZPF7Onkt5fUL7VCFMQ=)
                          15: 323830343a373636633a3a2f33342d3334203d3e20323731313131.roa (hash: ibh278nDonXdNtDsY4DkunHTq6TECZsBkhLxs8TLqTM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.crl
                          rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 17:23:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:37:ef:79:43:44:66:54:2f:6e:4e:dc:a4:17:ce:b5:d3:ef:57:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0
        Validity
            Not Before: Dec  6 13:55:19 2025 GMT
            Not After : Dec  7 17:23:19 2025 GMT
        Subject: CN=435F68BAA36294D6E28DCCE5B2B9C342981601DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6b:c7:73:39:13:97:fd:b5:58:81:ea:70:a1:
                    b1:d3:74:b0:25:36:e3:12:48:59:d6:d8:d0:05:b5:
                    93:df:39:26:76:c3:75:23:1a:59:c1:4f:ef:fa:a6:
                    db:00:3f:72:03:d1:92:38:ef:72:5b:39:fc:6e:d9:
                    13:bf:12:2d:06:11:b1:ba:de:75:42:31:cf:7c:98:
                    02:5b:37:3b:82:56:be:04:c4:d7:ac:79:d9:c6:8a:
                    97:61:bd:0d:a4:ea:16:09:3a:97:d2:7b:ea:8c:da:
                    10:c6:0a:16:a4:2e:5a:af:e9:79:7b:e1:4c:28:0c:
                    be:2a:29:25:b4:06:f2:99:12:83:80:b0:16:01:74:
                    86:38:4a:89:07:21:80:74:e9:43:6d:87:30:46:cc:
                    0b:4c:60:d4:1e:57:71:62:7a:24:75:af:32:17:0f:
                    b8:19:89:1f:5b:35:91:d2:77:ad:04:5c:03:5c:ec:
                    15:ea:23:6c:32:ab:0d:81:f7:00:c6:63:17:2c:72:
                    95:b9:5b:3d:7b:c2:30:77:5e:71:3e:ac:e7:5d:82:
                    c6:a1:18:33:69:c4:ce:75:7e:e1:3e:8f:b5:82:51:
                    b9:5c:60:94:64:a2:00:3b:80:8b:95:fa:18:c8:35:
                    31:c1:19:94:5f:d6:5b:40:a5:ca:93:a0:ea:04:2c:
                    25:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:5F:68:BA:A3:62:94:D6:E2:8D:CC:E5:B2:B9:C3:42:98:16:01:DA
            X509v3 Authority Key Identifier:
                keyid:AE:25:EE:F7:E6:EE:89:4C:19:7D:BD:78:37:CB:3C:05:DF:B9:E8:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:3f:2e:79:30:99:f9:03:7e:03:d5:25:f9:2b:83:18:d2:2c:
         82:2c:17:fe:be:ab:92:7b:ce:9f:4c:70:57:20:d7:00:11:c7:
         6d:fd:41:d6:71:7b:f9:37:43:bb:6a:b5:ee:c4:f2:7a:9a:30:
         a8:66:f0:88:d7:b7:21:f7:07:71:92:73:fb:24:cf:7d:1b:72:
         fc:ea:30:27:d0:b6:5f:0b:1b:2f:a4:d4:44:31:98:f6:d6:37:
         ac:13:2c:17:0a:f9:ab:ad:fb:51:4f:0e:43:ff:f2:e8:2f:a3:
         8f:59:e9:ae:16:10:4b:9f:e7:b2:2e:ea:98:a5:13:30:4b:8b:
         37:2a:76:5a:0e:bf:6d:35:dd:38:b3:19:cb:51:3e:9c:bf:c0:
         51:6e:da:9a:fa:22:a9:0c:52:a9:ef:2f:cb:5b:ac:df:a6:3f:
         95:bc:50:3e:98:45:51:1e:cd:36:ce:59:ad:e2:0a:18:4a:5e:
         7f:5c:f1:99:7c:b9:57:e5:39:6e:84:14:d8:cf:4e:aa:f8:80:
         e1:7a:b4:bc:23:60:4f:88:a9:77:ff:3b:c6:db:93:f5:da:8b:
         f2:8f:ee:52:3f:c8:3c:09:46:38:ee:33:b3:9c:81:e9:fd:42:
         bd:27:ea:f6:5a:93:05:6c:24:74:4d:b2:8a:cb:70:91:51:eb:
         c3:5b:94:7f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUezfveUNEZlQvbk7cpBfOtdPvVxcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUyNUVFRjdFNkVFODk0QzE5N0RCRDc4MzdDQjNDMDVE
RkI5RThFMDAeFw0yNTEyMDYxMzU1MTlaFw0yNTEyMDcxNzIzMTlaMDMxMTAvBgNV
BAMTKDQzNUY2OEJBQTM2Mjk0RDZFMjhEQ0NFNUIyQjlDMzQyOTgxNjAxREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3a8dzOROX/bVYgepwobHTdLAl
NuMSSFnW2NAFtZPfOSZ2w3UjGlnBT+/6ptsAP3ID0ZI473JbOfxu2RO/Ei0GEbG6
3nVCMc98mAJbNzuCVr4ExNesednGipdhvQ2k6hYJOpfSe+qM2hDGChakLlqv6Xl7
4UwoDL4qKSW0BvKZEoOAsBYBdIY4SokHIYB06UNthzBGzAtMYNQeV3FieiR1rzIX
D7gZiR9bNZHSd60EXANc7BXqI2wyqw2B9wDGYxcscpW5Wz17wjB3XnE+rOddgsah
GDNpxM51fuE+j7WCUblcYJRkogA7gIuV+hjINTHBGZRf1ltApcqToOoELCVhAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUQ19ouqNilNbijczlsrnDQpgWAdowHwYDVR0j
BBgwFoAUriXu9+buiUwZfb14N8s8Bd+56OAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkhrTGdjZ0JGVFdHU2NOYk0zb1NCNHRSakJVUm1xYUV5Y2lxRXlvRDJ5
NmIvMC9BRTI1RUVGN0U2RUU4OTRDMTk3REJENzgzN0NCM0MwNURGQjlFOEUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFMjVFRUY3RTZFRTg5NEMx
OTdEQkQ3ODM3Q0IzQzA1REZCOUU4RTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RkhrTGdjZ0JGVFdHU2NOYk0zb1NCNHRSakJVUm1xYUV5Y2lxRXlvRDJ5NmIvMC9B
RTI1RUVGN0U2RUU4OTRDMTk3REJENzgzN0NCM0MwNURGQjlFOEUwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHz8ueTCZ+QN+A9Ul+SuDGNIsgiwX/r6rknvOn0xwVyDXABHHbf1B1nF7+TdD
u2q17sTyepowqGbwiNe3IfcHcZJz+yTPfRty/OowJ9C2XwsbL6TURDGY9tY3rBMs
Fwr5q637UU8OQ//y6C+jj1nprhYQS5/nsi7qmKUTMEuLNyp2Wg6/bTXdOLMZy1E+
nL/AUW7amvoiqQxSqe8vy1us36Y/lbxQPphFUR7NNs5ZreIKGEpef1zxmXy5V+U5
boQU2M9OqviA4Xq0vCNgT4ipd/87xtuT9dqL8o/uUj/IPAlGOO4zs5yB6f1CvSfq
9lqTBWwkdE2yistwkVHrw1uUfw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:24:41 2025 by rpki-client