This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft
File:                     DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft (raw, json)
Hash identifier:          VUwTvgCi5Ap+6giy5UYWOu41FMuaUBFXNI2qPXvKaV8=
Subject key identifier:   48:9B:9A:04:49:93:57:04:72:33:19:C9:E8:39:9E:37:6B:8C:D1:02
Authority key identifier: DF:D4:20:BE:EE:86:65:8C:69:BF:7B:F0:25:AB:DE:B3:5F:72:3B:3D
Certificate issuer:       /CN=DFD420BEEE86658C69BF7BF025ABDEB35F723B3D
Certificate serial:       35D33181CCCBA123DD5831574B0D716939BB9795
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft
Manifest number:          0344
Signing time:             Sat 20 Dec 2025 21:50:44 +0000
Manifest this update:     Sat 20 Dec 2025 21:45:44 +0000
Manifest next update:     Mon 22 Dec 2025 00:42:44 +0000
Files and hashes:         1: DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.crl (hash: HYCLsIaPSMZC4d3Gh6NJLcFNnvfuntl2wRMWNyG2h0Q=)
                          2: 323830343a386230303a3a2f33322d3438203d3e20323733373036.roa (hash: Mfi2YXsn4usozNTkApzXZOTp/npyplnvShsrNKnIPOg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.crl
                          rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 00:42:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d3:31:81:cc:cb:a1:23:dd:58:31:57:4b:0d:71:69:39:bb:97:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFD420BEEE86658C69BF7BF025ABDEB35F723B3D
        Validity
            Not Before: Dec 20 21:45:44 2025 GMT
            Not After : Dec 22 00:42:44 2025 GMT
        Subject: CN=489B9A0449935704723319C9E8399E376B8CD102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:26:af:d7:a9:21:5b:24:87:9e:f8:c7:9c:54:
                    c0:00:65:a3:8e:18:fd:ea:d6:91:f3:ec:b4:af:8e:
                    9c:f3:3a:c5:25:51:9a:0f:db:a3:6d:ca:5b:59:ea:
                    98:65:69:6c:9b:e4:75:f7:88:9d:cb:2d:15:23:2a:
                    13:9a:f1:f1:55:2e:6c:0c:89:b7:20:c7:76:8e:a3:
                    6c:5a:8c:bd:dd:24:56:c1:a6:e4:7c:c1:15:07:20:
                    d9:0d:68:90:df:ae:e7:71:f0:fa:80:d4:1f:56:3a:
                    49:d3:91:74:fe:80:91:95:70:5b:c1:56:ca:4c:48:
                    e2:d1:78:a2:38:08:ca:53:db:e5:d2:90:79:64:fb:
                    f5:74:32:6d:db:16:7d:3e:70:eb:c4:0c:b3:db:6b:
                    63:7b:35:1f:c0:55:76:8d:64:82:56:f2:ea:99:9a:
                    3d:71:e4:29:91:f6:16:f1:db:63:07:62:54:5a:ed:
                    48:0e:f6:af:ad:7f:d0:56:81:80:af:73:e7:03:e7:
                    d1:11:9d:dd:44:a6:f2:0e:96:19:d1:9e:49:46:9f:
                    0e:00:86:92:c8:a3:f4:d4:fd:39:63:b1:d3:40:bc:
                    29:61:37:dd:dc:22:97:82:34:4a:f1:9d:b7:e4:a3:
                    66:70:97:73:d6:3c:bd:80:6f:52:5a:c2:47:e8:a8:
                    8c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9B:9A:04:49:93:57:04:72:33:19:C9:E8:39:9E:37:6B:8C:D1:02
            X509v3 Authority Key Identifier:
                keyid:DF:D4:20:BE:EE:86:65:8C:69:BF:7B:F0:25:AB:DE:B3:5F:72:3B:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:0e:0d:98:4b:0a:46:ac:03:0a:94:33:af:e6:b4:ca:90:3d:
         3d:94:62:74:b6:8f:df:80:70:e6:c5:19:4d:e5:90:06:39:79:
         e7:b5:1c:ea:af:d0:96:ad:14:64:57:3a:61:5b:b0:f7:21:bf:
         ed:df:2e:a8:ce:64:d3:3f:bc:96:ba:00:93:46:ae:a0:ca:a1:
         ee:3f:95:4a:47:49:d9:8b:50:2e:52:cf:b3:28:21:f6:ac:4b:
         91:43:2b:5c:ce:60:b7:4f:ab:84:ef:aa:b8:34:ff:7b:96:4f:
         72:73:c7:36:a3:23:a4:e1:9f:ab:bd:71:08:fa:f4:de:0a:b2:
         e1:a5:80:eb:19:de:13:0c:b4:57:88:2c:3f:be:42:47:13:18:
         80:e5:4c:1c:60:64:d5:fd:32:f7:ef:0a:60:5d:b4:e4:31:12:
         79:f3:62:30:e9:a3:e5:bd:a0:db:11:05:76:9c:5d:0d:0a:b8:
         f9:7b:f7:cd:72:0c:48:95:b5:d9:68:77:c6:33:17:12:da:a3:
         77:47:9a:82:c6:49:9d:93:42:d5:e5:43:d3:cf:c9:5b:2c:41:
         04:36:19:56:21:51:3b:b3:4f:ef:53:9e:1a:54:75:52:e8:a1:
         3d:26:4c:8d:a9:6a:0b:da:57:70:a3:e4:2c:60:33:a0:30:75:
         39:76:92:4d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNdMxgczLoSPdWDFXSw1xaTm7l5UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREZENDIwQkVFRTg2NjU4QzY5QkY3QkYwMjVBQkRFQjM1
RjcyM0IzRDAeFw0yNTEyMjAyMTQ1NDRaFw0yNTEyMjIwMDQyNDRaMDMxMTAvBgNV
BAMTKDQ4OUI5QTA0NDk5MzU3MDQ3MjMzMTlDOUU4Mzk5RTM3NkI4Q0QxMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbJq/XqSFbJIee+MecVMAAZaOO
GP3q1pHz7LSvjpzzOsUlUZoP26NtyltZ6phlaWyb5HX3iJ3LLRUjKhOa8fFVLmwM
ibcgx3aOo2xajL3dJFbBpuR8wRUHINkNaJDfrudx8PqA1B9WOknTkXT+gJGVcFvB
VspMSOLReKI4CMpT2+XSkHlk+/V0Mm3bFn0+cOvEDLPba2N7NR/AVXaNZIJW8uqZ
mj1x5CmR9hbx22MHYlRa7UgO9q+tf9BWgYCvc+cD59ERnd1EpvIOlhnRnklGnw4A
hpLIo/TU/TljsdNAvClhN93cIpeCNErxnbfko2Zwl3PWPL2Ab1JawkfoqIzxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUSJuaBEmTVwRyMxnJ6DmeN2uM0QIwHwYDVR0j
BBgwFoAU39Qgvu6GZYxpv3vwJaves19yOz0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTR1SnZwQjJLQXJCeWZTUmNyS1Q0SkRXSDFkSkNOemNtbUx1cGR2U3N0
V3YvMS9ERkQ0MjBCRUVFODY2NThDNjlCRjdCRjAyNUFCREVCMzVGNzIzQjNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGRDQyMEJFRUU4NjY1OEM2
OUJGN0JGMDI1QUJERUIzNUY3MjNCM0QuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OTR1SnZwQjJLQXJCeWZTUmNyS1Q0SkRXSDFkSkNOemNtbUx1cGR2U3N0V3YvMS9E
RkQ0MjBCRUVFODY2NThDNjlCRjdCRjAyNUFCREVCMzVGNzIzQjNELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWA4NmEsKRqwDCpQzr+a0ypA9PZRidLaP34Bw5sUZTeWQBjl557Uc6q/Qlq0U
ZFc6YVuw9yG/7d8uqM5k0z+8lroAk0auoMqh7j+VSkdJ2YtQLlLPsygh9qxLkUMr
XM5gt0+rhO+quDT/e5ZPcnPHNqMjpOGfq71xCPr03gqy4aWA6xneEwy0V4gsP75C
RxMYgOVMHGBk1f0y9+8KYF205DESefNiMOmj5b2g2xEFdpxdDQq4+Xv3zXIMSJW1
2Wh3xjMXEtqjd0eagsZJnZNC1eVD08/JWyxBBDYZViFRO7NP71OeGlR1UuihPSZM
jalqC9pXcKPkLGAzoDB1OXaSTQ==
-----END CERTIFICATE-----
Generated at Sun Dec 21 01:11:23 2025 by rpki-client