This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.mft
File:                     DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.mft (raw, json)
Hash identifier:          w7EIdWz0QkuiAeLrjaBtUF1IlZ4wfF2LaJjnCXLPyK0=
Subject key identifier:   BE:58:D4:04:4F:D7:B8:1F:C4:B7:60:DA:FB:AE:6A:3C:51:16:32:3A
Authority key identifier: DA:2C:3B:25:72:C3:BC:A9:22:5E:87:2B:77:D7:EB:EC:51:E4:A0:1A
Certificate issuer:       /CN=DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A
Certificate serial:       1BA404D610FF9A84DF95B4E239138FB2718E803D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.mft
Manifest number:          74
Signing time:             Tue 23 Dec 2025 08:17:01 +0000
Manifest this update:     Tue 23 Dec 2025 08:12:01 +0000
Manifest next update:     Wed 24 Dec 2025 09:35:01 +0000
Files and hashes:         1: 3230302e302e36342e302f32342d3234203d3e20323731313830.roa (hash: rtgPsjEvrft8zzHlyyMigdsHOXzeRbr5m37PyhBdAbE=)
                          2: DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.crl (hash: G5GK42LaYRIjzlQiLo0SrB7uvhpSgu/SEAjJ/oDsCGI=)
                          3: 323830343a373737383a3a2f33322d3332203d3e20323731313830.roa (hash: afCsZwiPB5N2fDqRaLCKFhpsL0Zx4SiwNNU+IFHfbU8=)
                          4: 323830343a373737383a3130303a3a2f34302d3430203d3e20323731313830.roa (hash: 78gnsip7r3qOi/EZ5Pk33H7zC5HcnHgzJbHz8JD3Mxs=)
                          5: 3230302e3132352e3132392e302f32342d3234203d3e20323731313830.roa (hash: ntZ1ArAYp3sb9ElbA2pbCEeKkjRFsWYf3g7xNVHvk/0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.crl
                          rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 09:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:a4:04:d6:10:ff:9a:84:df:95:b4:e2:39:13:8f:b2:71:8e:80:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A
        Validity
            Not Before: Dec 23 08:12:01 2025 GMT
            Not After : Dec 24 09:35:01 2025 GMT
        Subject: CN=BE58D4044FD7B81FC4B760DAFBAE6A3C5116323A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7d:b3:fc:1b:29:00:92:d0:bd:0b:a9:aa:8c:
                    fd:6c:96:0e:2d:1e:09:68:05:e5:4f:57:e6:6f:ab:
                    1d:b8:4c:72:29:55:66:c6:26:77:ee:8b:79:85:52:
                    b3:70:cd:3e:63:1a:3a:eb:1f:3c:3f:94:f7:9a:a5:
                    38:2d:35:3c:55:f1:a7:e9:ad:21:66:ed:c6:99:c8:
                    63:09:b5:30:0a:7a:7b:5b:fe:3e:d8:e1:bc:cf:78:
                    71:74:c9:68:6b:3d:1b:82:d9:f9:5c:02:9b:b6:f7:
                    58:be:27:e7:aa:88:53:35:cf:95:97:19:01:0e:a5:
                    3f:e6:00:3a:e8:89:d6:94:5a:8c:04:a5:e6:c4:68:
                    a7:ae:f9:a6:09:fc:50:f8:56:2a:7e:26:1d:06:c1:
                    e3:b7:3d:ef:b2:2a:fc:c7:db:cf:3e:49:8d:bf:87:
                    f1:62:ba:12:d8:99:5a:b7:5a:89:8a:ff:f3:fd:6b:
                    49:87:b0:d9:3b:3e:41:38:93:37:3b:4c:0b:cb:a9:
                    dc:62:d4:99:8d:b8:1f:fe:a0:8a:58:5f:ec:26:2d:
                    ab:6c:d8:16:6e:4b:e1:2d:db:e3:5a:1d:af:c6:25:
                    1f:6d:e4:63:56:7d:88:06:53:5d:83:2d:0c:df:59:
                    7e:44:9f:a1:7b:44:c5:d5:d6:f8:7d:5c:6d:2c:b3:
                    08:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:58:D4:04:4F:D7:B8:1F:C4:B7:60:DA:FB:AE:6A:3C:51:16:32:3A
            X509v3 Authority Key Identifier:
                keyid:DA:2C:3B:25:72:C3:BC:A9:22:5E:87:2B:77:D7:EB:EC:51:E4:A0:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:87:03:e2:a3:3b:58:66:6f:e1:87:c9:f0:40:2d:26:3d:65:
         d2:0d:0e:b3:fc:96:ac:ff:09:a2:ff:2e:ba:11:b9:3b:08:9f:
         58:8e:6d:ce:49:41:4b:65:d5:1e:b5:6b:bb:3b:b1:cd:a9:2c:
         ac:3a:ae:56:27:1c:5a:6e:e8:7c:57:23:41:51:a4:5d:cd:ac:
         89:fc:1b:b3:a4:2b:d4:fa:ad:59:48:68:6f:4b:ae:79:ae:df:
         80:07:4b:bc:4d:98:66:19:a7:39:9d:2f:85:98:8b:6d:0f:2f:
         09:82:10:a7:f2:e5:f8:61:61:13:06:77:07:6e:48:2c:39:6b:
         3d:60:fe:20:04:fa:44:11:46:7a:80:21:0b:ca:68:44:1b:4b:
         7d:94:9f:00:40:fd:37:7a:d8:69:7a:24:48:e5:cd:35:3b:f5:
         1c:10:36:c1:34:bd:c6:4c:63:6b:a5:fd:af:00:83:68:63:05:
         d0:d1:90:03:27:e6:13:b5:aa:4c:c9:10:6a:74:35:00:62:39:
         b5:d5:94:d2:d7:e2:18:a8:64:e8:70:83:fc:51:01:20:2a:e8:
         3c:79:d7:ba:ee:ce:df:93:27:e1:d8:47:05:20:c7:ce:87:d1:
         03:7d:0c:a3:bf:3b:34:17:f0:be:ef:4c:bc:8f:ad:86:51:43:
         8f:ff:bc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 21:53:44 2025 by rpki-client