This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft
File:                     068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft (raw, json)
Hash identifier:          ZaOs1XYT2UVszOs2+yhzuIPQnPT1LGJexa1ZymWGWDQ=
Subject key identifier:   1C:56:5A:92:71:6A:68:2D:B7:F8:99:75:21:12:BA:07:8A:D8:4C:DC
Authority key identifier: 06:8F:DF:C5:A2:B7:BE:13:87:BD:BD:BF:1E:8D:51:EA:F4:D2:0F:2D
Certificate issuer:       /CN=068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D
Certificate serial:       11AB7416F26A9D92FD64AD073BF067656DCE009E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft
Manifest number:          0330
Signing time:             Fri 05 Dec 2025 20:16:04 +0000
Manifest this update:     Fri 05 Dec 2025 20:11:04 +0000
Manifest next update:     Sat 06 Dec 2025 20:32:04 +0000
Files and hashes:         1: 3137302e38342e3131362e302f32322d3234203d3e20323634393933.roa (hash: uQbx9J4xqOZ9ulDsiq8PH8RnyLqo6V/EHfZIYzuiAOU=)
                          2: 323830343a333131633a3a2f33322d3438203d3e20323634393933.roa (hash: Bzk4dZzrNC2Jl6ZUDrTLxTfoojkN5yomvgAkgomW3v0=)
                          3: 068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.crl (hash: oX9OPtvOCZoZT/d61DO194BcpCS87uPP5v97x5R//cE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.crl
                          rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 20:32:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ab:74:16:f2:6a:9d:92:fd:64:ad:07:3b:f0:67:65:6d:ce:00:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D
        Validity
            Not Before: Dec  5 20:11:04 2025 GMT
            Not After : Dec  6 20:32:04 2025 GMT
        Subject: CN=1C565A92716A682DB7F899752112BA078AD84CDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:83:7d:0d:34:26:2a:ee:61:53:7f:35:1e:ac:
                    3e:33:c7:7b:73:30:8e:02:fc:d0:41:8b:dd:d5:1f:
                    10:43:05:bd:c5:dd:27:e7:42:e5:15:62:b6:5e:03:
                    c9:f0:3e:02:91:04:a9:d8:36:7b:79:72:29:df:28:
                    8f:8c:60:4c:f2:31:e3:b5:4f:d9:c2:bf:ca:4f:b7:
                    0d:fb:e9:66:d5:b2:c1:97:11:dd:68:e4:5b:0b:22:
                    45:77:1c:55:ce:54:7f:e6:8e:26:c4:cd:c3:b3:0a:
                    1d:31:ea:b2:b4:21:90:2d:d9:54:a0:84:86:9a:a8:
                    da:24:2f:fb:21:1c:db:c1:c9:dc:6d:ab:57:c0:16:
                    74:7c:7d:46:44:32:af:97:0c:ad:6b:87:07:c4:1d:
                    06:70:e6:ad:ef:5e:22:8c:4b:b1:a6:3d:88:fd:06:
                    dd:20:d5:d3:0d:13:99:9f:32:cc:b9:55:5c:d9:ae:
                    a8:ea:2a:6a:5e:fd:99:f5:0f:26:ce:60:b3:1c:4b:
                    3e:1c:dc:c5:45:c8:d6:b3:41:49:83:e0:61:15:b8:
                    e0:8d:23:74:82:15:85:36:1e:f0:e3:76:2c:87:c4:
                    5b:ec:51:d3:d3:b0:3d:66:2d:57:40:90:1b:26:56:
                    b0:a8:f6:03:8e:a6:13:fc:f0:f5:26:9a:da:ab:69:
                    b1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:56:5A:92:71:6A:68:2D:B7:F8:99:75:21:12:BA:07:8A:D8:4C:DC
            X509v3 Authority Key Identifier:
                keyid:06:8F:DF:C5:A2:B7:BE:13:87:BD:BD:BF:1E:8D:51:EA:F4:D2:0F:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:cc:51:8e:c3:b9:50:8a:23:96:0a:d4:49:48:24:6f:77:01:
         a7:29:34:ce:c6:81:e3:9d:36:04:94:f9:44:fb:df:0b:27:0f:
         01:88:b4:33:2a:a4:25:fe:34:89:41:03:25:f7:5d:02:ef:ba:
         ee:db:d8:b9:bc:46:8d:3c:14:fe:bd:96:ed:f4:be:74:61:58:
         f5:ee:8c:d9:c0:4b:05:2d:29:7a:10:6d:61:fe:b3:f3:8a:d8:
         20:02:79:d3:41:e2:d7:d6:29:4e:c3:0f:b0:45:c0:f3:74:10:
         de:6a:cb:c6:d8:17:97:8f:97:57:55:71:76:ec:40:1e:1f:cd:
         98:c0:cf:b8:5d:a4:4a:61:83:ff:33:90:0f:24:2d:47:ea:9d:
         d3:0d:61:27:31:c4:e5:31:4b:5c:af:f2:79:0d:ae:b4:7f:23:
         81:4f:b3:46:f1:55:56:d5:33:f1:49:d8:4f:c5:ae:4a:28:d8:
         1a:ec:57:cd:11:30:1d:14:8b:0d:b9:46:f9:fb:be:f5:5c:48:
         b2:e2:8d:0c:81:a3:7a:f4:63:0c:14:ca:06:e2:11:eb:3b:dd:
         b7:b1:bb:a8:ba:01:1e:03:32:c9:38:47:76:bb:36:94:1c:f3:
         10:20:7d:e0:97:0f:23:4a:b2:a5:9b:f1:f1:8c:f5:23:8b:cd:
         00:54:38:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:57:33 2025 by rpki-client