This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft
File:                     890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft (raw, json)
Hash identifier:          xEi7N8QTswxVjMTM4HzBnSRycYhd9eB9/sCo5+lsOQ4=
Subject key identifier:   6D:02:1C:A4:73:EC:E6:03:A1:74:E4:B1:2A:6E:D1:A9:F5:EA:2C:C1
Authority key identifier: 89:0A:D5:84:C8:3D:44:FF:B2:DF:FF:95:5D:1B:D1:C7:2F:F0:F6:29
Certificate issuer:       /CN=890AD584C83D44FFB2DFFF955D1BD1C72FF0F629
Certificate serial:       29369F1A7C38C68787C104B4ED0AF877D7275102
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft
Manifest number:          0344
Signing time:             Sat 20 Dec 2025 17:05:24 +0000
Manifest this update:     Sat 20 Dec 2025 17:00:24 +0000
Manifest next update:     Sun 21 Dec 2025 17:40:24 +0000
Files and hashes:         1: 323830343a336135383a3a2f33322d3332203d3e20323636303834.roa (hash: sEDi9DwKH3RgvOw8jDr36sB6k6gHWPRVR+WX1w3q6W4=)
                          2: 890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl (hash: XpeNFGJ72PK+Slftmpvp2pd3yY48ALFHB4rrWusubb4=)
                          3: 34352e352e38382e302f32322d3232203d3e20323636303834.roa (hash: K84xCId8+1cs5H3nmPDltEdVWLmM3+PGwnAlVZb81fo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl
                          rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 17:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:36:9f:1a:7c:38:c6:87:87:c1:04:b4:ed:0a:f8:77:d7:27:51:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=890AD584C83D44FFB2DFFF955D1BD1C72FF0F629
        Validity
            Not Before: Dec 20 17:00:24 2025 GMT
            Not After : Dec 21 17:40:24 2025 GMT
        Subject: CN=6D021CA473ECE603A174E4B12A6ED1A9F5EA2CC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fc:1f:06:73:bc:bc:a8:5a:0b:b9:5c:d8:79:
                    81:55:1d:f5:af:98:90:75:41:11:82:c4:a4:3a:b9:
                    bc:17:37:59:85:53:18:77:44:30:fc:e7:c9:c3:81:
                    8d:2d:e0:15:dc:bd:01:b4:aa:0a:f7:f9:98:ca:f2:
                    df:7d:ae:b4:23:8c:4e:42:7b:ba:ab:91:7b:a4:b6:
                    fd:24:f1:57:4f:2f:92:41:fc:b5:dd:d7:28:b1:fa:
                    d0:6b:90:60:fb:51:c8:17:71:8d:68:c3:20:88:05:
                    9d:0b:14:b1:b5:7f:79:5b:cb:60:dc:d7:96:d8:a1:
                    72:a4:d3:b8:4c:8e:57:d7:b7:67:13:4a:8c:0f:55:
                    0a:6a:d5:9b:47:98:3b:6a:e3:28:fc:3e:01:c9:b9:
                    1d:20:9a:67:8c:3b:4a:7c:57:36:84:dd:95:d8:65:
                    bb:2a:95:8a:a9:15:de:e5:b3:80:e9:ee:1b:22:98:
                    49:c0:7c:37:2a:02:25:36:e3:11:48:50:37:68:71:
                    e9:c1:56:59:62:90:ad:34:35:f1:d0:0e:42:e1:52:
                    b3:ee:00:0a:f5:2b:b7:42:06:b0:69:4a:c1:c8:90:
                    61:c2:20:9e:1d:ed:62:45:93:d4:3e:26:ea:a5:91:
                    fe:4c:6c:00:b1:86:37:a9:82:c6:68:c9:77:d9:bd:
                    03:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:02:1C:A4:73:EC:E6:03:A1:74:E4:B1:2A:6E:D1:A9:F5:EA:2C:C1
            X509v3 Authority Key Identifier:
                keyid:89:0A:D5:84:C8:3D:44:FF:B2:DF:FF:95:5D:1B:D1:C7:2F:F0:F6:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:28:db:34:8c:5f:62:97:dc:ef:a6:0b:a7:32:26:6a:db:92:
         4e:d8:4e:a5:b5:24:af:1a:ed:54:13:65:68:73:38:ad:bf:71:
         bd:a6:80:c7:17:36:7b:94:cf:16:a6:d4:7b:42:00:f2:7d:ed:
         bc:9e:48:6e:99:95:0e:25:72:e7:8c:1f:e3:32:50:cd:c1:64:
         f2:b7:07:3c:3f:a3:de:16:bc:f0:f8:03:dc:ee:53:7e:02:f7:
         30:f6:2c:4c:68:15:42:7c:86:6b:6c:58:37:b9:2d:67:57:10:
         38:f9:9f:2d:ec:79:d7:fc:8b:e8:5d:c5:a1:e9:80:c3:d7:08:
         e4:c1:b3:81:6e:4c:8b:75:09:96:8b:e8:f6:02:4c:26:13:1b:
         66:f3:ee:c8:e1:0b:50:4e:26:77:c5:96:30:c0:33:95:75:43:
         1c:85:1a:7c:2b:95:4a:3d:1d:a2:62:47:03:24:83:40:0a:e4:
         ae:6f:92:bd:ad:a2:d4:d6:99:ed:16:73:3d:f1:b7:44:18:93:
         bc:93:81:ad:bd:4d:fd:90:98:05:e2:35:3e:da:8d:be:a9:72:
         73:a1:55:24:f4:a6:72:d4:6e:4f:8d:0a:44:ed:af:19:c0:66:
         10:c4:4a:4d:b3:8c:e2:7f:9e:73:ca:3a:04:d8:a9:d0:66:f9:
         13:f5:1e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:24:03 2025 by rpki-client