This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/DB2688671EBDA340920F7F274ED0C3C3DFE38026.mft
File:                     DB2688671EBDA340920F7F274ED0C3C3DFE38026.mft (raw, json)
Hash identifier:          KM2so3aoVeIDx/RPKlH3QyQj2nvQ7hO/hLe0Ba1Ui5E=
Subject key identifier:   8F:4B:84:7D:AE:BA:7A:04:EE:0E:03:CC:D9:57:BD:12:DD:6A:26:AA
Authority key identifier: DB:26:88:67:1E:BD:A3:40:92:0F:7F:27:4E:D0:C3:C3:DF:E3:80:26
Certificate issuer:       /CN=DB2688671EBDA340920F7F274ED0C3C3DFE38026
Certificate serial:       58D926B02A043772F25A4C57C92BD8C5492DD264
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB2688671EBDA340920F7F274ED0C3C3DFE38026.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/DB2688671EBDA340920F7F274ED0C3C3DFE38026.mft
Manifest number:          60
Signing time:             Wed 24 Dec 2025 04:34:37 +0000
Manifest this update:     Wed 24 Dec 2025 04:29:37 +0000
Manifest next update:     Thu 25 Dec 2025 05:57:37 +0000
Files and hashes:         1: 323830343a343535343a3a2f33322d313238203d3e20323636393139.roa (hash: 4tAaveoCXdDcpHp2LFl8RU4V7u4EaA1z6K9jhZ1hLbU=)
                          2: 34352e3232342e3136382e302f32322d3332203d3e20323636393139.roa (hash: JrUEQFjfe4G5l/Qyw/wlPVbLvelmbWX+UdfuCtyaabI=)
                          3: DB2688671EBDA340920F7F274ED0C3C3DFE38026.crl (hash: OTS0Rt2r5GG3y6l91JcXNlHPyqSUDnEwnRiRKTaQi1A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/DB2688671EBDA340920F7F274ED0C3C3DFE38026.crl
                          rsync://rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/DB2688671EBDA340920F7F274ED0C3C3DFE38026.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB2688671EBDA340920F7F274ED0C3C3DFE38026.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 05:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d9:26:b0:2a:04:37:72:f2:5a:4c:57:c9:2b:d8:c5:49:2d:d2:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB2688671EBDA340920F7F274ED0C3C3DFE38026
        Validity
            Not Before: Dec 24 04:29:37 2025 GMT
            Not After : Dec 25 05:57:37 2025 GMT
        Subject: CN=8F4B847DAEBA7A04EE0E03CCD957BD12DD6A26AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d0:7b:82:0e:d8:6d:4b:d1:d2:cd:ad:81:93:
                    e9:1f:d3:43:8b:42:73:88:57:05:ae:c6:a2:32:19:
                    70:12:3f:f4:34:4e:a9:e8:b8:ca:73:be:9f:21:99:
                    b3:d5:0c:de:82:7a:b2:3f:d6:34:16:80:c3:f9:34:
                    7d:23:61:67:c2:01:98:7b:c1:66:20:69:fa:a9:6c:
                    d7:94:cb:77:77:c1:62:df:d9:29:60:68:06:f5:9b:
                    3d:f8:c4:bb:73:8b:50:c7:76:c9:3d:91:c2:d4:1a:
                    73:09:51:08:6b:35:ee:1a:51:e9:75:b3:af:09:41:
                    a5:80:df:3e:8f:c4:94:2e:a2:ec:6c:c3:63:28:fb:
                    cb:39:cf:ba:71:c8:b8:8e:f6:f1:6a:3f:54:9e:d5:
                    c0:3a:dd:b7:00:10:8a:c6:a2:e8:b2:6b:9b:cc:11:
                    0c:ca:0e:82:05:22:89:3f:45:3c:ae:d4:0e:a9:e8:
                    90:45:fe:45:a5:16:80:b2:a4:4f:13:ef:b9:ba:13:
                    b9:c0:3b:23:28:65:d9:1f:52:f1:68:62:c4:92:67:
                    be:1f:7b:1a:d4:36:93:e8:f7:1b:0e:aa:0b:8f:f3:
                    99:cc:12:57:b7:81:51:be:9c:8f:07:3a:25:cc:ad:
                    90:da:d9:a0:93:5a:20:88:34:66:bd:df:1f:53:3f:
                    f5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4B:84:7D:AE:BA:7A:04:EE:0E:03:CC:D9:57:BD:12:DD:6A:26:AA
            X509v3 Authority Key Identifier:
                keyid:DB:26:88:67:1E:BD:A3:40:92:0F:7F:27:4E:D0:C3:C3:DF:E3:80:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/DB2688671EBDA340920F7F274ED0C3C3DFE38026.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB2688671EBDA340920F7F274ED0C3C3DFE38026.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/DB2688671EBDA340920F7F274ED0C3C3DFE38026.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:6e:dd:30:04:bb:12:ac:51:39:d8:f8:41:61:a2:20:a6:c2:
         62:61:ba:ec:cf:85:79:63:84:fd:5f:e2:80:b9:23:13:9e:f1:
         58:61:ca:fb:c8:58:aa:25:e4:9a:d3:a1:b1:4a:17:a1:99:81:
         ea:4c:66:82:25:d4:e0:b6:37:81:f8:fa:4a:53:de:50:cb:bf:
         e7:33:06:cb:99:7e:90:2a:7a:28:3b:73:3f:e8:f4:87:0d:a4:
         ad:4e:bb:b5:96:c6:07:6c:f3:a1:91:98:4f:3c:7b:9e:17:03:
         5b:0d:d8:ba:e9:15:d1:2f:17:2a:23:97:cb:49:06:f9:99:d6:
         53:f0:c3:bd:a4:79:fa:3c:91:46:e4:1b:1d:f4:23:2a:c6:25:
         db:88:17:77:25:d8:71:9f:a9:7c:f4:0a:c9:17:d0:7c:29:55:
         84:5d:50:97:da:31:97:93:d5:aa:6d:31:15:59:ed:ee:7a:24:
         ea:2b:55:34:44:52:d7:2c:04:a6:78:cb:ec:42:90:79:1a:14:
         bf:9e:6a:d3:c1:31:bb:b7:64:0d:73:65:b5:3c:38:02:53:1b:
         44:ae:a0:c9:7e:4c:18:7d:34:dd:eb:55:9e:b3:b9:2a:b8:d6:
         f8:7f:dc:ac:fc:92:54:81:31:ef:98:46:31:13:2e:14:46:e7:
         3a:2f:e8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:16:27 2025 by rpki-client