This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft
File:                     D1FFDF44055E16082D529730642377D751467152.mft (raw, json)
Hash identifier:          2tejkUhaVvixLcO4K+lxOiBYFI/X6RW0KG7TLjd1DAE=
Subject key identifier:   D1:6A:F6:6D:97:23:5D:C6:CC:3B:39:95:46:2E:5A:00:96:99:71:59
Authority key identifier: D1:FF:DF:44:05:5E:16:08:2D:52:97:30:64:23:77:D7:51:46:71:52
Certificate issuer:       /CN=D1FFDF44055E16082D529730642377D751467152
Certificate serial:       761DBEC24DBF1DEC65A00EC1063B46306E51CA20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft
Manifest number:          01E5
Signing time:             Mon 15 Dec 2025 22:33:16 +0000
Manifest this update:     Mon 15 Dec 2025 22:28:16 +0000
Manifest next update:     Wed 17 Dec 2025 02:22:16 +0000
Files and hashes:         1: 34352e3137322e3234302e302f32322d3234203d3e20323638373832.roa (hash: iyFn8dmCWg3WyydJEml+Y2v5BY14GrWXyZ7/DRDXmgA=)
                          2: 323830343a356139343a3a2f33322d3438203d3e20323638373832.roa (hash: ymgJuTMZWv+63/VwPVmOxio8KOfxsIABsf+i4ONWEss=)
                          3: D1FFDF44055E16082D529730642377D751467152.crl (hash: DTc/dO0YY0+6YOsNK9UoZxlqmdqxZY06gAYKp498JWU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.crl
                          rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Dec 2025 02:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:1d:be:c2:4d:bf:1d:ec:65:a0:0e:c1:06:3b:46:30:6e:51:ca:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1FFDF44055E16082D529730642377D751467152
        Validity
            Not Before: Dec 15 22:28:16 2025 GMT
            Not After : Dec 17 02:22:16 2025 GMT
        Subject: CN=D16AF66D97235DC6CC3B3995462E5A0096997159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f8:6e:db:80:3f:b8:0d:2b:93:3d:49:05:c4:
                    d8:9c:70:20:27:01:85:4e:49:07:72:a7:4b:d6:86:
                    85:81:49:45:9b:a8:24:5e:4d:39:f1:4f:f4:96:34:
                    ca:8a:f2:e6:94:5a:d7:88:31:c9:c0:77:20:67:26:
                    07:eb:32:58:f5:f6:a5:c0:3b:7c:89:ab:4e:93:a4:
                    0f:2e:08:50:b0:cd:a5:7e:82:1f:84:45:41:57:8a:
                    40:68:70:ed:c5:a1:8a:fd:87:99:88:a8:40:29:14:
                    ca:61:64:26:9b:ca:44:13:6c:a8:cb:9a:bc:1b:71:
                    9d:c1:ac:9c:d8:d4:9f:58:f5:b2:be:68:76:ea:97:
                    0a:1e:1e:70:99:76:68:d2:38:eb:67:c1:69:90:0f:
                    3f:96:35:c5:4c:2c:c1:d3:e9:7e:37:b4:8b:f2:cd:
                    75:34:f1:15:55:4e:bc:68:2f:32:b1:89:7b:78:c8:
                    11:8c:60:78:e3:a5:90:fb:db:68:1f:72:0f:d2:43:
                    f3:ce:df:d2:74:41:66:eb:97:d0:91:02:9c:88:26:
                    e0:e3:b6:21:53:06:94:ab:bf:3f:40:5e:a4:e1:52:
                    5c:85:1d:fd:ff:1a:bd:73:7b:e2:56:77:6a:f0:a1:
                    f3:59:5f:bf:99:a6:05:9d:15:3d:6e:79:05:6b:cf:
                    95:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:6A:F6:6D:97:23:5D:C6:CC:3B:39:95:46:2E:5A:00:96:99:71:59
            X509v3 Authority Key Identifier:
                keyid:D1:FF:DF:44:05:5E:16:08:2D:52:97:30:64:23:77:D7:51:46:71:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:32:af:d3:98:50:88:53:2e:46:c2:6f:68:d7:7e:47:9e:bf:
         cd:0c:1f:61:14:d4:8c:16:44:ef:38:8c:25:d7:fe:9f:24:35:
         54:9f:5a:a9:11:ca:97:57:15:9c:03:08:e4:8e:6e:45:b6:30:
         70:6f:a6:b0:8f:ca:98:1d:69:61:81:0d:d2:81:fd:74:cf:83:
         1a:c7:0f:cb:91:7f:5e:52:ba:06:30:6f:90:fb:03:20:89:fe:
         76:31:51:3d:80:da:dd:9b:34:fc:26:b8:ac:5d:3e:2a:51:f2:
         23:20:29:c8:a5:8d:ad:8f:8c:73:d7:cb:52:3b:29:f0:a8:5a:
         44:83:b2:c1:b1:28:6f:5e:70:6b:20:e6:fe:a8:9f:6c:5c:21:
         48:6e:c6:4c:e2:2c:90:ff:ef:d1:bb:de:4a:40:aa:fa:d7:db:
         15:0f:bc:d5:44:61:e9:3f:7f:5a:89:8a:d3:a5:59:bb:e8:cf:
         2b:e0:fa:63:28:07:4a:ed:41:a7:9f:4d:be:28:ae:36:07:f8:
         71:a7:2a:6f:7b:77:1c:3f:6c:19:6e:a6:5c:b5:78:42:a3:8f:
         b5:24:a1:92:e5:b2:de:3c:39:ca:c9:83:cc:06:f7:bd:e1:01:
         38:41:98:81:d4:cf:51:6b:8f:ba:9f:d2:1b:97:e9:e2:2a:57:
         83:56:b8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 08:04:25 2025 by rpki-client