This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.mft
File:                     23C0ACADA70321EB3942F0FF030B70AD9904DCAD.mft (raw, json)
Hash identifier:          dOK09ZM+qX9Q1Ujw/N5XneUotopsEHvog36Iebrpw3M=
Subject key identifier:   54:25:03:55:0F:B1:B9:62:D1:0C:0C:BF:A5:F5:65:03:3C:64:17:49
Authority key identifier: 23:C0:AC:AD:A7:03:21:EB:39:42:F0:FF:03:0B:70:AD:99:04:DC:AD
Certificate issuer:       /CN=23C0ACADA70321EB3942F0FF030B70AD9904DCAD
Certificate serial:       08398C885AAA39954B8B22D03626D0FE3DF3A6DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.mft
Manifest number:          0172
Signing time:             Fri 05 Dec 2025 19:13:00 +0000
Manifest this update:     Fri 05 Dec 2025 19:08:00 +0000
Manifest next update:     Sat 06 Dec 2025 20:56:00 +0000
Files and hashes:         1: 3230302e3131352e36342e302f32322d3234203d3e20323730383932.roa (hash: OV2uokFJtII8YGfyjdpA+Gxu38CgOM5DTIjyKyhHqJA=)
                          2: 323830343a373330633a3a2f33322d3334203d3e20323730383932.roa (hash: 25HfBB+yrVqfXG5hgm/wReJjkNqFdEgoiPCBzOf68Bo=)
                          3: 23C0ACADA70321EB3942F0FF030B70AD9904DCAD.crl (hash: x07Zipj5shx7RDYQHa4My01yOdDJe9g5p6ZQHRVf6mk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.crl
                          rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 20:56:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:39:8c:88:5a:aa:39:95:4b:8b:22:d0:36:26:d0:fe:3d:f3:a6:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23C0ACADA70321EB3942F0FF030B70AD9904DCAD
        Validity
            Not Before: Dec  5 19:08:00 2025 GMT
            Not After : Dec  6 20:56:00 2025 GMT
        Subject: CN=542503550FB1B962D10C0CBFA5F565033C641749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3a:4f:8c:d4:e7:d1:9f:98:5c:23:8e:59:a4:
                    bd:a1:1d:d4:57:3b:12:55:f1:ea:43:b7:36:e9:1e:
                    96:e4:c3:eb:83:cc:5e:0c:93:91:03:d9:81:d1:f2:
                    25:89:14:b7:2b:f6:c6:e5:ad:54:d7:c1:e7:8f:6c:
                    0b:d3:ed:a2:e3:08:41:c5:d9:df:57:db:42:ab:14:
                    ce:02:36:20:70:2e:5b:8e:d6:d3:ac:63:30:51:da:
                    4d:83:26:80:6f:d4:e5:70:48:85:39:3b:2f:a5:fa:
                    c9:e0:7a:76:e5:36:ae:46:4f:4b:a5:e3:5e:c8:b3:
                    a2:8c:01:15:17:37:89:7b:52:4b:0e:f4:28:a8:18:
                    b3:cf:26:b2:96:30:3d:49:23:ba:e9:28:93:7a:a7:
                    54:b7:23:89:2a:8c:43:b1:3f:cf:07:e2:1f:09:b4:
                    ae:2b:52:8e:9a:39:c0:ad:c3:14:5e:55:5e:e3:52:
                    1d:42:ea:c3:45:08:4d:31:c8:ca:cb:11:d5:45:7e:
                    b8:2a:01:ec:8c:ab:8b:cf:4e:5a:ee:42:f8:ea:2c:
                    db:95:32:8c:dc:49:e5:6b:6f:1b:ea:55:80:87:48:
                    ce:8b:c6:2d:6d:d8:75:8a:79:4b:3c:c6:26:99:20:
                    ff:da:3d:9b:a3:7a:31:69:15:63:98:da:0f:b4:09:
                    4b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:25:03:55:0F:B1:B9:62:D1:0C:0C:BF:A5:F5:65:03:3C:64:17:49
            X509v3 Authority Key Identifier:
                keyid:23:C0:AC:AD:A7:03:21:EB:39:42:F0:FF:03:0B:70:AD:99:04:DC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:5a:ae:b9:46:6d:4b:41:44:0b:a4:fd:be:61:ca:13:80:94:
         70:b4:51:46:52:65:97:d1:70:e7:6c:3e:f4:e3:e6:72:a9:c0:
         17:24:8e:d7:75:56:17:f0:ff:76:1a:95:95:fc:11:89:66:f7:
         19:5c:e3:53:12:bb:ca:26:8b:ca:c9:8e:fc:fe:e2:21:83:12:
         a7:b1:ee:5f:f4:e9:9f:ce:19:05:9d:55:35:f4:27:42:a2:82:
         dc:38:96:0f:e9:06:a0:05:71:a9:c4:4f:66:e0:8f:f9:7e:6c:
         69:98:2e:8d:fb:51:4d:32:a6:58:be:95:b2:e2:34:09:97:cd:
         51:f4:91:3d:0f:76:26:96:9b:8d:10:cf:16:17:4a:08:3c:1f:
         74:35:d4:24:ef:96:6a:5d:0d:ee:a8:70:23:f0:45:45:18:85:
         27:b6:10:82:47:72:28:38:9d:5e:5b:82:2f:a5:1f:5d:c4:90:
         b8:66:a4:de:7f:64:8e:9f:75:be:34:8c:ac:f1:d6:10:0d:c3:
         51:04:c1:6a:f0:47:74:57:c5:c9:76:65:ee:3b:3b:04:df:eb:
         1c:f3:c0:a9:28:9e:76:e6:de:cb:48:52:15:49:bc:dc:fe:91:
         02:83:ab:f7:ad:86:5c:80:9f:7e:4c:52:75:f5:78:4a:b5:f5:
         99:99:a0:64
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUCDmMiFqqOZVLiyLQNibQ/j3zptowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjNDMEFDQURBNzAzMjFFQjM5NDJGMEZGMDMwQjcwQUQ5
OTA0RENBRDAeFw0yNTEyMDUxOTA4MDBaFw0yNTEyMDYyMDU2MDBaMDMxMTAvBgNV
BAMTKDU0MjUwMzU1MEZCMUI5NjJEMTBDMENCRkE1RjU2NTAzM0M2NDE3NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxOk+M1OfRn5hcI45ZpL2hHdRX
OxJV8epDtzbpHpbkw+uDzF4Mk5ED2YHR8iWJFLcr9sblrVTXweePbAvT7aLjCEHF
2d9X20KrFM4CNiBwLluO1tOsYzBR2k2DJoBv1OVwSIU5Oy+l+sngenblNq5GT0ul
417Is6KMARUXN4l7UksO9CioGLPPJrKWMD1JI7rpKJN6p1S3I4kqjEOxP88H4h8J
tK4rUo6aOcCtwxReVV7jUh1C6sNFCE0xyMrLEdVFfrgqAeyMq4vPTlruQvjqLNuV
MozcSeVrbxvqVYCHSM6Lxi1t2HWKeUs8xiaZIP/aPZujejFpFWOY2g+0CUs7AgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUVCUDVQ+xuWLRDAy/pfVlAzxkF0kwHwYDVR0j
BBgwFoAUI8CsracDIes5QvD/AwtwrZkE3K0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby96bWlmamYzN21uUHFzSnpmYzdaZWJ6WkNQQTdHWEFLN1lMUzZYR2o3YUNF
LzAvMjNDMEFDQURBNzAzMjFFQjM5NDJGMEZGMDMwQjcwQUQ5OTA0RENBRC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yM0MwQUNBREE3MDMyMUVCMzk0
MkYwRkYwMzBCNzBBRDk5MDREQ0FELmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3pt
aWZqZjM3bW5QcXNKemZjN1plYnpaQ1BBN0dYQUs3WUxTNlhHajdhQ0UvMC8yM0Mw
QUNBREE3MDMyMUVCMzk0MkYwRkYwMzBCNzBBRDk5MDREQ0FELm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
fFquuUZtS0FEC6T9vmHKE4CUcLRRRlJll9Fw52w+9OPmcqnAFySO13VWF/D/dhqV
lfwRiWb3GVzjUxK7yiaLysmO/P7iIYMSp7HuX/Tpn84ZBZ1VNfQnQqKC3DiWD+kG
oAVxqcRPZuCP+X5saZgujftRTTKmWL6VsuI0CZfNUfSRPQ92JpabjRDPFhdKCDwf
dDXUJO+Wal0N7qhwI/BFRRiFJ7YQgkdyKDidXluCL6UfXcSQuGak3n9kjp91vjSM
rPHWEA3DUQTBavBHdFfFyXZl7js7BN/rHPPAqSiedubey0hSFUm83P6RAoOr962G
XICffkxSdfV4SrX1mZmgZA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:56:27 2025 by rpki-client