This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/DA87B164450448E10F6ADFAE2D61A1A4A23DBD7D.mft
File:                     DA87B164450448E10F6ADFAE2D61A1A4A23DBD7D.mft (raw, json)
Hash identifier:          5R/gYl3CH8ywcsw2YxrV1Pi5vzW6c5ClNIGRoJXbadc=
Subject key identifier:   FD:68:4C:6F:48:B9:3E:6E:97:2C:3B:A8:B3:34:58:C0:44:FF:F2:F0
Authority key identifier: DA:87:B1:64:45:04:48:E1:0F:6A:DF:AE:2D:61:A1:A4:A2:3D:BD:7D
Certificate issuer:       /CN=DA87B164450448E10F6ADFAE2D61A1A4A23DBD7D
Certificate serial:       79A1646AD2353421934820C76F9D3278EF82CF8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA87B164450448E10F6ADFAE2D61A1A4A23DBD7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/DA87B164450448E10F6ADFAE2D61A1A4A23DBD7D.mft
Manifest number:          33
Signing time:             Wed 17 Dec 2025 19:53:21 +0000
Manifest this update:     Wed 17 Dec 2025 19:48:21 +0000
Manifest next update:     Thu 18 Dec 2025 22:45:21 +0000
Files and hashes:         1: 3136382e302e302e302f32342d3234203d3e20323635323430.roa (hash: Ysyda/PxrGCzH90TjqRAeZHdll4ijy8H8Pvg6upaPaM=)
                          2: 323830343a326362633a3a2f33352d3335203d3e20323635323430.roa (hash: kxlAXv9O6fYcs03d0BYTEy76k90IASjNlC1Fb99IQos=)
                          3: 3136382e302e312e302f32342d3234203d3e20323635323430.roa (hash: 9qIEtZlXVzFK8rTdlGc8RlsDYR3gzNsbCZlXYbHCDbo=)
                          4: 3136382e302e322e302f32342d3234203d3e20323635323430.roa (hash: Xe6FeBjPI9ZP/RISAnqANuU5uj/b6k4S8UNHh4l4A04=)
                          5: 323830343a326362633a3a2f33362d3336203d3e20323635323430.roa (hash: XU4f3uHP9FzglIVTR7B0yPOno7IN/ky8hf6+EwIfED8=)
                          6: DA87B164450448E10F6ADFAE2D61A1A4A23DBD7D.crl (hash: 4EOkdH+Vf8+dvTlDrTuSFAmU2C6646/x6dG1G6xB+6E=)
                          7: 323830343a326362633a313030303a3a2f33362d3336203d3e20323635323430.roa (hash: fJOnaA0BNj2RwvYb3ci5GzIMrvWtDCNRu/ET4ebX2js=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/DA87B164450448E10F6ADFAE2D61A1A4A23DBD7D.crl
                          rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/DA87B164450448E10F6ADFAE2D61A1A4A23DBD7D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA87B164450448E10F6ADFAE2D61A1A4A23DBD7D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Dec 2025 22:45:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a1:64:6a:d2:35:34:21:93:48:20:c7:6f:9d:32:78:ef:82:cf:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA87B164450448E10F6ADFAE2D61A1A4A23DBD7D
        Validity
            Not Before: Dec 17 19:48:21 2025 GMT
            Not After : Dec 18 22:45:21 2025 GMT
        Subject: CN=FD684C6F48B93E6E972C3BA8B33458C044FFF2F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:47:28:3a:e2:be:3e:42:b7:ff:c9:5a:55:03:
                    cb:b4:90:41:3b:87:20:9f:6c:09:86:b4:48:87:69:
                    16:d5:da:04:2a:85:16:0f:43:e6:e8:9c:18:73:fa:
                    95:db:1b:2a:65:e6:42:84:d5:41:77:99:ea:f4:f3:
                    d9:23:9b:46:4d:13:a7:76:f9:1a:2a:98:c7:21:9e:
                    89:6b:ba:9d:69:0d:19:77:1a:56:42:a0:4e:6d:4e:
                    18:cb:df:bd:c3:96:c6:4d:90:40:ce:85:1b:7f:de:
                    6d:03:3f:86:fd:cd:4c:ce:eb:7b:19:1e:c4:b6:a1:
                    c0:d7:32:be:7b:57:b9:e0:d8:37:6c:cc:d5:fe:32:
                    37:85:bd:31:77:18:07:a2:48:37:87:9a:bb:6b:1a:
                    4f:aa:91:8b:cc:57:73:ef:36:da:3e:1e:00:f3:72:
                    d2:f7:00:b1:88:c4:00:fd:b7:4a:0e:b8:92:ed:6f:
                    1a:69:40:14:31:b4:8d:96:1f:aa:c9:ef:e2:60:76:
                    5b:64:9a:6b:ec:53:64:f8:f9:3b:5c:27:1a:a1:ac:
                    a8:55:24:37:ae:56:6d:5c:c4:40:7f:4a:b3:95:c1:
                    75:7e:93:d8:c7:5b:6b:0c:f2:7a:32:5e:4b:f6:69:
                    21:47:a4:04:f2:25:bc:47:21:6a:dd:90:79:9b:6f:
                    12:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:68:4C:6F:48:B9:3E:6E:97:2C:3B:A8:B3:34:58:C0:44:FF:F2:F0
            X509v3 Authority Key Identifier:
                keyid:DA:87:B1:64:45:04:48:E1:0F:6A:DF:AE:2D:61:A1:A4:A2:3D:BD:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/DA87B164450448E10F6ADFAE2D61A1A4A23DBD7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA87B164450448E10F6ADFAE2D61A1A4A23DBD7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/DA87B164450448E10F6ADFAE2D61A1A4A23DBD7D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:56:c0:53:0f:0f:e1:3f:ff:64:0a:1b:f4:d1:ef:a6:50:96:
         86:3b:45:15:6b:15:95:5f:e5:02:50:4d:7a:f2:66:04:83:f2:
         d3:d6:08:0a:4f:bd:72:6a:df:00:5b:59:94:8d:df:51:37:c8:
         62:f8:de:0f:c7:87:0d:86:f0:ba:20:55:10:8e:bf:e3:47:da:
         1a:80:b5:00:63:ff:8c:7f:38:5a:be:bb:d5:1c:61:ee:35:ec:
         dd:ca:12:f9:66:1f:56:ba:b2:83:60:7a:f3:25:3f:13:67:7c:
         d6:fd:0d:9a:3f:5d:80:08:00:6f:e1:11:98:7f:8f:13:04:d4:
         52:4c:cb:31:fc:94:f6:b4:3f:ce:c3:8e:94:06:ba:6b:f5:57:
         38:82:1d:02:dd:02:64:4f:5e:4b:92:11:a6:fd:71:d6:32:a3:
         23:94:50:93:4b:b7:c2:d1:66:3b:7a:ea:52:ea:21:a5:90:c5:
         6b:18:21:a8:c2:45:28:ef:f4:90:f1:b3:b1:9d:8a:e4:b5:29:
         ba:d3:f5:81:c6:e2:8a:7b:10:96:0b:a0:b0:29:5f:a0:39:6e:
         73:81:9c:bb:d4:cd:17:09:be:cc:42:2b:4e:59:b2:56:c3:72:
         12:04:bf:6b:fa:81:59:b6:cd:b3:df:a2:6e:b9:c9:69:aa:f2:
         7d:6f:42:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 13:35:06 2025 by rpki-client