This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3U7tgDixHkFD5EH9yzXWuSfE1DAW7shAf3SSoKwvt722/0/D9ED078552BAC279662C7AC0E3D7F6EA67DF5694.mft
File:                     D9ED078552BAC279662C7AC0E3D7F6EA67DF5694.mft (raw, json)
Hash identifier:          72th8wb/xGPR3CwU19gNp6s+EW/bXq86o1+3ZbONRus=
Subject key identifier:   55:3D:25:9F:42:B0:C2:5F:A3:60:F7:70:F7:CA:9B:A3:54:63:A3:FF
Authority key identifier: D9:ED:07:85:52:BA:C2:79:66:2C:7A:C0:E3:D7:F6:EA:67:DF:56:94
Certificate issuer:       /CN=D9ED078552BAC279662C7AC0E3D7F6EA67DF5694
Certificate serial:       06089823AD7E977D2F55EBF31916774BE514D5BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9ED078552BAC279662C7AC0E3D7F6EA67DF5694.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3U7tgDixHkFD5EH9yzXWuSfE1DAW7shAf3SSoKwvt722/0/D9ED078552BAC279662C7AC0E3D7F6EA67DF5694.mft
Manifest number:          EC
Signing time:             Wed 24 Dec 2025 02:32:06 +0000
Manifest this update:     Wed 24 Dec 2025 02:27:06 +0000
Manifest next update:     Thu 25 Dec 2025 05:19:06 +0000
Files and hashes:         1: D9ED078552BAC279662C7AC0E3D7F6EA67DF5694.crl (hash: tn4vAP1bpZn4kZRRm7pBSDXn12qD5Gt72YUbgulkfEk=)
                          2: 34352e3233372e3138302e302f32322d3234203d3e20323638323833.roa (hash: YFN+AEs5n1Eig3C/gtA8yy0FSgyDExbV1tDtPXxZf6A=)
                          3: 323830343a346563633a3a2f33322d3438203d3e20323638323833.roa (hash: 4zMsykUh7NgtSQYcLAQ5SQLWj08ze+POoqFzYTmhZDY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3U7tgDixHkFD5EH9yzXWuSfE1DAW7shAf3SSoKwvt722/0/D9ED078552BAC279662C7AC0E3D7F6EA67DF5694.crl
                          rsync://rpki-repo.registro.br/repo/3U7tgDixHkFD5EH9yzXWuSfE1DAW7shAf3SSoKwvt722/0/D9ED078552BAC279662C7AC0E3D7F6EA67DF5694.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9ED078552BAC279662C7AC0E3D7F6EA67DF5694.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 05:19:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:08:98:23:ad:7e:97:7d:2f:55:eb:f3:19:16:77:4b:e5:14:d5:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9ED078552BAC279662C7AC0E3D7F6EA67DF5694
        Validity
            Not Before: Dec 24 02:27:06 2025 GMT
            Not After : Dec 25 05:19:06 2025 GMT
        Subject: CN=553D259F42B0C25FA360F770F7CA9BA35463A3FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:da:bc:95:39:21:cc:5e:b4:4c:40:ec:1e:75:
                    3f:d1:f0:d3:a6:fe:95:d2:34:08:d2:00:60:c6:9a:
                    5a:cc:9e:31:1d:15:64:b8:ff:b0:e0:57:f0:ba:e2:
                    bc:f2:d3:4a:1a:d2:64:56:b7:93:47:f1:75:11:14:
                    6b:d8:20:43:fb:76:33:00:46:4e:b4:c2:05:af:fe:
                    bd:d2:d7:5c:ed:27:97:68:da:3a:d3:2d:0b:37:04:
                    42:91:33:bd:f7:e2:fb:54:49:1f:2c:07:6b:01:d9:
                    7d:e1:55:4c:da:e2:f3:8c:7c:e4:75:00:7d:5a:e2:
                    17:4a:79:29:62:05:02:c6:e5:90:5e:dd:02:b5:ae:
                    51:7a:ff:e7:88:be:0e:6c:26:72:5a:e9:11:45:8f:
                    d1:1d:f5:0c:f8:b2:47:82:2b:8f:8f:27:64:37:4d:
                    0b:8b:c0:dd:3a:11:fb:6e:a2:86:90:83:40:a3:84:
                    80:33:79:b9:dd:e8:65:08:c7:5a:76:7e:af:9c:2c:
                    a5:f9:95:28:55:78:f0:61:be:fc:4c:00:ff:a0:f6:
                    f3:d4:5a:4a:83:2e:e9:ab:3b:b9:df:ae:4b:05:e8:
                    b1:80:3a:bb:e5:10:5c:ad:57:75:cb:20:b0:d5:f9:
                    25:00:f0:ef:1d:ac:3e:85:92:6c:c4:bf:9d:3b:09:
                    8f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:3D:25:9F:42:B0:C2:5F:A3:60:F7:70:F7:CA:9B:A3:54:63:A3:FF
            X509v3 Authority Key Identifier:
                keyid:D9:ED:07:85:52:BA:C2:79:66:2C:7A:C0:E3:D7:F6:EA:67:DF:56:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3U7tgDixHkFD5EH9yzXWuSfE1DAW7shAf3SSoKwvt722/0/D9ED078552BAC279662C7AC0E3D7F6EA67DF5694.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9ED078552BAC279662C7AC0E3D7F6EA67DF5694.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3U7tgDixHkFD5EH9yzXWuSfE1DAW7shAf3SSoKwvt722/0/D9ED078552BAC279662C7AC0E3D7F6EA67DF5694.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:ff:23:20:29:c9:0e:48:6d:67:33:2c:1e:5a:56:4e:6d:8f:
         f9:eb:9d:d2:00:55:7b:67:f7:33:f4:31:d4:c0:71:75:a4:f3:
         78:ef:a4:c5:09:b8:cf:26:4c:dd:d9:9e:ad:c8:d6:28:65:5f:
         1f:88:c2:f4:00:7b:f0:29:c7:55:9d:78:73:76:28:8c:65:02:
         a8:2b:a3:eb:ac:84:e3:22:56:65:5a:0b:96:ef:da:4d:ea:aa:
         b1:95:54:90:5b:03:f5:40:54:3d:da:9a:ba:9c:e7:fa:88:81:
         1b:78:d5:32:85:36:8a:79:25:f6:88:09:96:0b:95:6e:f4:26:
         23:f0:27:52:a7:57:15:9a:a2:14:e4:5e:01:43:d5:31:3a:83:
         6f:4e:36:2d:6f:d0:8e:ad:51:a1:36:67:e4:ed:79:9b:24:ed:
         f3:a8:fc:43:0a:86:9d:09:48:f8:f5:13:10:5a:14:bb:d4:af:
         1c:4c:8e:8e:25:6e:7a:ab:f6:63:f8:d9:5d:99:14:0c:15:f1:
         1e:52:b2:a0:b0:d7:07:f4:af:27:df:7a:d2:a7:ea:cb:65:49:
         40:78:39:23:2c:b6:f9:57:5d:5b:3d:3d:c0:b7:86:a4:87:e0:
         e6:5f:ae:9f:13:ef:63:c2:2b:11:fb:be:8a:1a:9a:88:0c:1e:
         20:57:93:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:30:19 2025 by rpki-client