This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GoeofHi9XokQVyFJctj61yqct1AzTW1omwbkyq5NikZC/0/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.mft
File:                     0E686F37C80B20480C4AE8C509583AA4CDABCA3B.mft (raw, json)
Hash identifier:          feXpkywOnOv7Yd7plsbK+UCf9pn7FypwqIsEcZDXHFo=
Subject key identifier:   0E:19:3E:89:ED:9C:99:D2:01:29:5B:9F:77:76:FD:69:00:F0:F6:FF
Authority key identifier: 0E:68:6F:37:C8:0B:20:48:0C:4A:E8:C5:09:58:3A:A4:CD:AB:CA:3B
Certificate issuer:       /CN=0E686F37C80B20480C4AE8C509583AA4CDABCA3B
Certificate serial:       3996EECCC81CBF13780F83D57CD2920B3CA88465
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoeofHi9XokQVyFJctj61yqct1AzTW1omwbkyq5NikZC/0/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.mft
Manifest number:          02E8
Signing time:             Fri 05 Dec 2025 12:06:17 +0000
Manifest this update:     Fri 05 Dec 2025 12:01:17 +0000
Manifest next update:     Sat 06 Dec 2025 14:53:17 +0000
Files and hashes:         1: 323830343a333832633a3a2f33322d313238203d3e20323636343632.roa (hash: 91VLEnvLUOJrm4b+m2Udcff5+gM5f7rR9XE9JI+TuVc=)
                          2: 3137302e38332e34302e302f32322d3332203d3e20323636343632.roa (hash: aRzeGC6MkrZhgZDy5/miUWPRVDW0dGjNpaxRq3pUWxE=)
                          3: 0E686F37C80B20480C4AE8C509583AA4CDABCA3B.crl (hash: LdzaFtNAXIj3p798RgIuxUAFVtmp1+qFC5Af+ekRy+k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GoeofHi9XokQVyFJctj61yqct1AzTW1omwbkyq5NikZC/0/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.crl
                          rsync://rpki-repo.registro.br/repo/GoeofHi9XokQVyFJctj61yqct1AzTW1omwbkyq5NikZC/0/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 14:53:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:96:ee:cc:c8:1c:bf:13:78:0f:83:d5:7c:d2:92:0b:3c:a8:84:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E686F37C80B20480C4AE8C509583AA4CDABCA3B
        Validity
            Not Before: Dec  5 12:01:17 2025 GMT
            Not After : Dec  6 14:53:17 2025 GMT
        Subject: CN=0E193E89ED9C99D201295B9F7776FD6900F0F6FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2c:27:ca:ad:1c:c7:24:bf:0e:4f:2a:f0:05:
                    1f:3e:7c:ab:e0:9c:11:4f:f4:88:45:38:89:c3:12:
                    d4:e8:74:67:30:1a:3c:93:b1:81:9b:70:d8:32:5b:
                    95:18:07:3c:45:e1:a1:de:63:33:30:66:c2:3f:88:
                    8c:36:e8:e1:bb:17:ac:c3:db:fa:43:37:0a:25:6b:
                    f6:13:14:38:e4:ad:d9:b7:0f:51:8c:56:a1:12:fb:
                    fd:e1:29:a6:17:07:bc:b5:50:1a:56:fa:82:af:f7:
                    a3:c4:45:fa:fb:83:1f:28:dd:6f:4d:d5:8a:8c:79:
                    a0:c1:eb:56:dd:7f:ef:ab:9c:a8:58:15:65:00:51:
                    eb:2b:6d:1a:d1:75:61:3d:b0:53:e6:62:8e:d9:e1:
                    50:dc:1d:15:74:9f:1d:03:43:5c:46:80:4e:ff:aa:
                    07:0d:e0:47:ac:76:bc:53:94:8d:69:f7:04:16:89:
                    14:c1:7f:08:9f:b1:5b:a3:f5:e4:20:f8:17:13:5c:
                    6b:68:1a:91:bc:f2:a3:7c:5e:01:ec:37:85:42:ef:
                    d7:52:97:d0:7c:39:16:ad:31:51:23:7d:48:e1:0c:
                    9c:7a:5b:a9:a5:4b:d9:6b:09:6d:fd:e1:f3:59:7d:
                    df:9b:5c:21:c4:89:88:27:32:c6:ed:b7:44:1e:e0:
                    c1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:19:3E:89:ED:9C:99:D2:01:29:5B:9F:77:76:FD:69:00:F0:F6:FF
            X509v3 Authority Key Identifier:
                keyid:0E:68:6F:37:C8:0B:20:48:0C:4A:E8:C5:09:58:3A:A4:CD:AB:CA:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoeofHi9XokQVyFJctj61yqct1AzTW1omwbkyq5NikZC/0/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoeofHi9XokQVyFJctj61yqct1AzTW1omwbkyq5NikZC/0/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:12:74:c6:ab:88:90:80:1b:3a:aa:46:bb:6b:96:b9:1a:9c:
         f7:c4:d2:46:55:1b:bd:df:11:98:49:50:f7:65:e8:fb:06:61:
         89:4a:7a:fa:61:06:76:23:56:bc:a5:87:5d:f2:2c:4c:67:31:
         e7:2b:81:4e:16:20:bc:8b:9f:e1:af:d2:b6:ad:97:c1:d0:5b:
         f4:4b:23:f6:e9:19:cc:46:f7:15:1d:f5:ab:b0:4b:67:6c:c6:
         7b:c5:58:d1:92:2f:e6:5f:af:62:ca:64:2f:2c:f5:6e:45:65:
         17:bf:f2:33:e9:26:31:8c:52:0e:bb:bf:11:e3:35:d5:d9:36:
         f0:e4:4e:31:a4:e3:ab:a3:1b:98:32:d8:25:d9:77:ff:2f:8c:
         b4:20:49:fa:d8:2b:40:79:a4:c6:9e:70:77:f8:34:c1:9f:3f:
         3c:1e:b7:51:3a:c9:ae:1e:e3:70:4f:a5:9f:53:6b:1f:25:a7:
         cd:e3:55:da:7f:78:66:da:48:02:fe:8e:8d:19:8c:8a:b8:10:
         cf:f2:b7:09:ef:3a:97:4e:e3:e4:de:50:cf:86:fd:b4:33:90:
         b6:26:e4:06:89:57:16:79:8b:59:89:43:17:55:e3:5a:7a:ce:
         ac:78:aa:50:0a:5a:c2:7e:c5:10:f7:cb:2e:03:9d:6a:ff:0c:
         08:d7:b5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:08:45 2025 by rpki-client