This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/ACEF8FA1F536657A209246B168B346C65044943D.mft
File:                     ACEF8FA1F536657A209246B168B346C65044943D.mft (raw, json)
Hash identifier:          vZTfTObok4zacGKMsQQHHy7QIspyHWePlXIZ68p9mTI=
Subject key identifier:   D7:5B:21:EC:F7:C5:9E:DD:30:FE:3A:92:4E:71:C3:95:38:75:FF:CF
Authority key identifier: AC:EF:8F:A1:F5:36:65:7A:20:92:46:B1:68:B3:46:C6:50:44:94:3D
Certificate issuer:       /CN=ACEF8FA1F536657A209246B168B346C65044943D
Certificate serial:       494ADDD4A14C5C959B6FC749960DCC753A7412A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACEF8FA1F536657A209246B168B346C65044943D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/ACEF8FA1F536657A209246B168B346C65044943D.mft
Manifest number:          01EE
Signing time:             Thu 18 Dec 2025 15:14:09 +0000
Manifest this update:     Thu 18 Dec 2025 15:09:09 +0000
Manifest next update:     Fri 19 Dec 2025 15:29:09 +0000
Files and hashes:         1: 3136302e3233382e3134342e302f32322d3234203d3e20323636353334.roa (hash: sxe5yirDbez2iY1rLQASF5iHCTpgfZb8DExVYg49l64=)
                          2: 323830343a336437633a3a2f33322d3438203d3e20323636353334.roa (hash: VvzsXJ1P0K2tmrTTpNDGBPavWc+CcDTt5BNXrk6USCo=)
                          3: ACEF8FA1F536657A209246B168B346C65044943D.crl (hash: kPInsJ2jIsZ3IezZqwenqdPgeYa1KL4+kQhqiw9WKkU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/ACEF8FA1F536657A209246B168B346C65044943D.crl
                          rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/ACEF8FA1F536657A209246B168B346C65044943D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACEF8FA1F536657A209246B168B346C65044943D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 15:29:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:4a:dd:d4:a1:4c:5c:95:9b:6f:c7:49:96:0d:cc:75:3a:74:12:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACEF8FA1F536657A209246B168B346C65044943D
        Validity
            Not Before: Dec 18 15:09:09 2025 GMT
            Not After : Dec 19 15:29:09 2025 GMT
        Subject: CN=D75B21ECF7C59EDD30FE3A924E71C3953875FFCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a4:af:fb:67:6a:05:ef:e3:4c:c5:e3:2a:39:
                    c3:88:a4:64:68:84:b1:e4:8a:6a:83:15:6b:83:68:
                    56:00:39:f3:4a:e8:fe:69:b5:7c:76:04:19:1a:42:
                    24:a9:e4:1f:53:b3:b7:3c:d2:c9:47:cf:4e:bf:f5:
                    65:33:57:e4:8a:8b:96:9a:d0:a9:ab:5c:10:ef:23:
                    97:ea:8e:2c:33:d7:5e:50:99:d1:ee:72:70:3f:af:
                    e4:23:3b:0a:bb:63:09:c8:8e:75:b0:c5:77:ed:0d:
                    ae:fb:bd:61:78:ec:ef:b5:2c:ef:b6:c4:2b:6a:80:
                    df:3f:de:a3:d7:85:83:b4:42:6f:c0:1f:d8:7a:f0:
                    9e:e9:3d:e6:61:5a:61:31:e5:9d:2f:98:5e:f7:c3:
                    58:be:a5:b5:92:d1:04:09:e3:6a:33:8c:88:95:36:
                    3f:a6:5d:97:ea:49:5d:4b:5e:fa:af:73:c5:c8:c6:
                    9f:72:25:fe:af:22:08:ce:66:dc:20:ea:7b:c5:f9:
                    e6:15:25:76:c3:52:f9:4d:e5:0b:1a:1a:e7:f0:74:
                    81:52:d1:31:77:5b:94:a3:fc:b4:5c:aa:31:a1:b5:
                    c9:e9:5b:e6:1f:71:42:f6:87:b5:44:ca:38:30:7b:
                    a9:1a:30:7b:09:00:f8:ea:18:3c:69:ed:4d:bb:24:
                    ec:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:5B:21:EC:F7:C5:9E:DD:30:FE:3A:92:4E:71:C3:95:38:75:FF:CF
            X509v3 Authority Key Identifier:
                keyid:AC:EF:8F:A1:F5:36:65:7A:20:92:46:B1:68:B3:46:C6:50:44:94:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/ACEF8FA1F536657A209246B168B346C65044943D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACEF8FA1F536657A209246B168B346C65044943D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/ACEF8FA1F536657A209246B168B346C65044943D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:27:a1:8b:f5:55:16:ef:0e:80:04:68:2d:4f:e1:cd:de:98:
         d0:c9:67:a2:57:27:47:1e:82:87:23:cd:98:42:50:ff:7c:f7:
         4a:11:6a:4b:5e:f4:2e:55:4e:45:fd:b3:e0:ab:c6:be:56:a6:
         d0:5d:6a:0f:b0:19:46:e5:10:c2:96:9f:7d:e5:e4:27:79:6b:
         bc:0e:0d:17:d9:49:00:90:c9:69:b8:23:18:9b:02:e5:9a:15:
         cc:99:94:03:6c:1a:8c:1b:eb:1b:f6:f1:6a:24:16:0b:ff:9f:
         ca:77:67:25:c6:09:f9:dd:eb:30:7b:d4:2f:d1:e5:6e:20:c4:
         05:62:89:30:d2:5d:e2:94:be:bd:e2:1c:3c:83:6f:69:32:ae:
         63:c0:00:1d:ea:03:98:e4:64:61:8b:83:e5:a8:05:a7:1d:db:
         ae:ad:17:27:64:05:1d:8a:9a:32:23:ae:65:bb:b8:fd:6d:eb:
         50:f7:d2:54:47:62:03:c3:25:54:45:c2:d3:3e:70:8c:08:44:
         dc:19:67:b2:66:d6:61:48:97:03:68:6e:12:d0:8c:a5:85:45:
         a1:89:d2:c7:18:f1:05:b1:9f:10:83:da:b4:2a:8a:50:f8:4d:
         41:b1:25:62:b5:c7:33:ed:38:8c:ff:6d:59:86:5c:09:bf:38:
         bc:e9:92:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 19:29:03 2025 by rpki-client