This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.mft
File:                     66DCAA5522EEEC15CC978DE673986E897244B698.mft (raw, json)
Hash identifier:          UZFU40y9iosbqLdKNNqE5orT8wpATsYNgIJq6ysv6Xc=
Subject key identifier:   DE:CF:53:9E:82:68:58:5F:25:A2:BA:C3:8C:FF:0D:DE:15:38:14:56
Authority key identifier: 66:DC:AA:55:22:EE:EC:15:CC:97:8D:E6:73:98:6E:89:72:44:B6:98
Certificate issuer:       /CN=66DCAA5522EEEC15CC978DE673986E897244B698
Certificate serial:       614838E528FE8C7D2D5F9C09CACC601604EE97B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66DCAA5522EEEC15CC978DE673986E897244B698.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.mft
Manifest number:          0319
Signing time:             Tue 23 Dec 2025 22:15:16 +0000
Manifest this update:     Tue 23 Dec 2025 22:10:16 +0000
Manifest next update:     Thu 25 Dec 2025 01:52:16 +0000
Files and hashes:         1: 66DCAA5522EEEC15CC978DE673986E897244B698.crl (hash: tu357a390ZwWc6D6R8oUBEzlzqAzCl8XgnubXPgbrHM=)
                          2: 323830343a346363343a3a2f33322d3438203d3e20323637333930.roa (hash: hv7GJnPJJH69UkfbyS/UqD3tSNA9O787umB0YeWkrcY=)
                          3: 34352e3233352e302e302f32322d3234203d3e20323637333930.roa (hash: xxkzZlzNnmqYTshl6Uai4i2lv96/YrTBJknS6dRLNbA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.crl
                          rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66DCAA5522EEEC15CC978DE673986E897244B698.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 01:52:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:48:38:e5:28:fe:8c:7d:2d:5f:9c:09:ca:cc:60:16:04:ee:97:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66DCAA5522EEEC15CC978DE673986E897244B698
        Validity
            Not Before: Dec 23 22:10:16 2025 GMT
            Not After : Dec 25 01:52:16 2025 GMT
        Subject: CN=DECF539E8268585F25A2BAC38CFF0DDE15381456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:65:b9:b1:2b:e5:6a:54:07:da:3c:f6:bf:2d:
                    be:1f:86:96:b2:d1:7f:4c:cc:e0:9a:18:50:b6:72:
                    5d:c3:57:40:ed:02:79:64:46:e5:62:e6:11:b3:de:
                    3c:0c:5e:b5:a1:d1:24:f1:23:45:01:b1:c5:d9:56:
                    d9:03:a0:67:5c:7c:f4:33:4e:74:70:45:21:71:48:
                    e0:5a:80:2e:03:c7:15:9e:bf:74:84:82:dd:58:55:
                    f4:75:38:93:7e:98:3c:92:3a:2b:ad:c1:3b:3e:76:
                    3c:45:d8:e8:e8:a9:12:f6:60:81:ce:de:3f:29:ae:
                    f9:c0:49:c7:42:55:c5:fa:51:ee:6e:b2:90:ce:e8:
                    2e:c3:96:a8:52:30:a7:58:31:96:28:ff:d8:92:cb:
                    dc:33:3a:a8:dc:f8:81:03:90:86:9e:a8:c5:15:14:
                    fc:7d:f8:ce:8c:a3:38:7e:c2:3f:29:7f:77:60:40:
                    bd:33:33:7e:80:54:34:0f:1d:d4:c0:fd:86:d6:b9:
                    6e:4f:f0:9f:e4:6d:ca:23:3a:66:3e:23:e1:0c:0a:
                    26:da:8a:43:36:9e:f7:dd:a5:07:c0:0b:04:a1:63:
                    c0:d2:88:ab:ff:7f:c9:08:21:c4:7d:f9:53:21:4d:
                    42:95:34:c6:f1:01:75:0b:3e:a3:50:41:18:2c:38:
                    e8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:CF:53:9E:82:68:58:5F:25:A2:BA:C3:8C:FF:0D:DE:15:38:14:56
            X509v3 Authority Key Identifier:
                keyid:66:DC:AA:55:22:EE:EC:15:CC:97:8D:E6:73:98:6E:89:72:44:B6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66DCAA5522EEEC15CC978DE673986E897244B698.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:77:cd:f0:07:71:d3:56:e2:a9:77:d8:a4:3a:bf:87:2d:b0:
         df:6e:bc:d7:d9:ff:34:e4:e4:8f:87:65:16:a7:f6:cd:1e:0c:
         68:79:80:bc:5c:f1:7c:ac:44:46:76:cd:a1:09:76:d4:33:71:
         47:16:8c:81:07:83:90:fb:05:3f:69:07:f0:78:77:46:d7:73:
         0d:c5:3b:88:4e:17:d5:bb:72:80:47:d8:58:4d:f0:e4:fe:70:
         5e:24:8c:22:c1:91:13:41:d0:56:a7:69:08:a4:09:af:73:d6:
         38:c5:e1:24:a9:48:d2:dd:2a:d5:7c:7b:81:ce:3c:4e:c2:55:
         77:3a:28:7f:0c:1d:0b:3d:06:7c:b2:52:64:1b:c5:ba:7a:6b:
         65:d0:a7:20:03:42:6a:4b:20:68:e9:39:52:4f:58:5f:2f:0f:
         30:11:a6:de:a0:58:98:21:46:bb:27:43:36:6a:78:7b:4a:37:
         52:b9:7b:d4:8d:b7:f3:74:28:77:c8:46:21:c0:92:37:55:a0:
         10:e5:c5:32:41:cf:77:6f:6f:33:1f:e2:fd:05:a9:25:48:de:
         34:86:65:a7:c9:b2:da:cd:b6:c8:3d:46:47:20:2c:15:90:f6:
         b7:33:bc:ea:ac:e6:49:dd:cc:63:2f:97:af:3a:da:28:bb:8f:
         0c:98:93:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:30:17 2025 by rpki-client