This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8Tv8E1WdRdmtU5chgLgbC4N2inR2BmUjd4AoCn5P2pQ9/0/DCEDD606E5DF583760013C3A374BF806DB1E2D84.mft
File:                     DCEDD606E5DF583760013C3A374BF806DB1E2D84.mft (raw, json)
Hash identifier:          +O36EH6EzZXdpO6hHWMSgJlTzXq/yHIjE3w+Sp7U2QM=
Subject key identifier:   EF:A2:02:92:D3:9E:AE:FB:29:6D:21:43:46:48:7A:9A:7B:42:2F:9B
Authority key identifier: DC:ED:D6:06:E5:DF:58:37:60:01:3C:3A:37:4B:F8:06:DB:1E:2D:84
Certificate issuer:       /CN=DCEDD606E5DF583760013C3A374BF806DB1E2D84
Certificate serial:       757E9DCC8F43E1D4B06B0EE176907F2125649AA2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCEDD606E5DF583760013C3A374BF806DB1E2D84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Tv8E1WdRdmtU5chgLgbC4N2inR2BmUjd4AoCn5P2pQ9/0/DCEDD606E5DF583760013C3A374BF806DB1E2D84.mft
Manifest number:          0233
Signing time:             Tue 23 Dec 2025 04:55:43 +0000
Manifest this update:     Tue 23 Dec 2025 04:50:43 +0000
Manifest next update:     Wed 24 Dec 2025 06:11:43 +0000
Files and hashes:         1: 3139302e38392e35322e302f32322d3234203d3e20323730333536.roa (hash: yBVEI01VIMIELpO8fUtxASfWL6CgiDXXgLrMCvmRLuA=)
                          2: DCEDD606E5DF583760013C3A374BF806DB1E2D84.crl (hash: ztsCnYKLMODonPvYasNTdoT6OqmUmcbwkxtkK3OuNvc=)
                          3: 323830343a366162633a3a2f33322d3438203d3e20323730333536.roa (hash: 6fnXok5lx2mFsu6fTCPPGEyBKCRFr8WF8tYOyj45vQU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Tv8E1WdRdmtU5chgLgbC4N2inR2BmUjd4AoCn5P2pQ9/0/DCEDD606E5DF583760013C3A374BF806DB1E2D84.crl
                          rsync://rpki-repo.registro.br/repo/8Tv8E1WdRdmtU5chgLgbC4N2inR2BmUjd4AoCn5P2pQ9/0/DCEDD606E5DF583760013C3A374BF806DB1E2D84.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCEDD606E5DF583760013C3A374BF806DB1E2D84.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 06:11:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:7e:9d:cc:8f:43:e1:d4:b0:6b:0e:e1:76:90:7f:21:25:64:9a:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCEDD606E5DF583760013C3A374BF806DB1E2D84
        Validity
            Not Before: Dec 23 04:50:43 2025 GMT
            Not After : Dec 24 06:11:43 2025 GMT
        Subject: CN=EFA20292D39EAEFB296D214346487A9A7B422F9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2d:b1:ff:14:be:e1:80:bf:6e:d9:e1:c9:e3:
                    41:f2:8d:db:cd:b5:c0:c9:ee:0f:b7:64:8f:0d:5c:
                    fc:03:1c:1f:6f:1f:50:ce:38:8d:9d:58:ee:4c:01:
                    df:e2:41:f3:0e:3a:72:62:5d:ba:7c:34:99:1f:e1:
                    43:8e:a1:7c:40:39:9e:ce:dc:27:62:fc:83:44:2b:
                    bc:7d:83:6c:35:e0:fb:7b:e2:cc:c2:af:f4:ba:3f:
                    78:5c:c9:ce:81:36:de:2b:89:6f:31:09:f9:f9:f2:
                    21:f6:1b:d5:fa:e8:f0:ef:d6:0b:dd:b0:89:f1:0f:
                    d1:58:49:14:a6:aa:4a:c5:b2:92:6a:88:d1:21:aa:
                    71:0e:60:a9:47:71:d8:fb:b7:e9:cb:1b:c6:18:74:
                    fc:8d:c5:ed:4f:3d:da:b4:86:a5:8a:3e:f2:ad:59:
                    63:cf:12:27:d4:4d:d7:29:87:3d:f4:59:a9:46:a0:
                    5d:22:e7:cd:98:85:88:8c:8b:19:66:b8:31:cc:1e:
                    6a:e0:01:8d:47:38:da:19:6c:29:af:16:33:81:b8:
                    68:ac:be:73:82:46:29:f7:2d:86:0c:b6:73:69:af:
                    86:07:98:d3:3b:eb:a5:71:18:d5:0b:bf:e1:18:90:
                    4a:fa:28:26:ce:07:97:49:97:57:d1:35:c0:44:36:
                    21:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A2:02:92:D3:9E:AE:FB:29:6D:21:43:46:48:7A:9A:7B:42:2F:9B
            X509v3 Authority Key Identifier:
                keyid:DC:ED:D6:06:E5:DF:58:37:60:01:3C:3A:37:4B:F8:06:DB:1E:2D:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Tv8E1WdRdmtU5chgLgbC4N2inR2BmUjd4AoCn5P2pQ9/0/DCEDD606E5DF583760013C3A374BF806DB1E2D84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCEDD606E5DF583760013C3A374BF806DB1E2D84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Tv8E1WdRdmtU5chgLgbC4N2inR2BmUjd4AoCn5P2pQ9/0/DCEDD606E5DF583760013C3A374BF806DB1E2D84.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:7c:a9:e7:7f:51:df:b5:03:47:42:98:6b:69:71:f6:63:69:
         a8:96:c8:ed:3a:f4:ef:4e:37:9e:52:51:d4:d1:0e:b9:30:6e:
         46:2e:88:9e:4d:42:fa:2a:57:52:fd:b3:7e:2c:02:d2:3f:85:
         ce:5d:dc:4a:fb:98:e9:2d:d3:09:c5:4f:61:63:28:1d:35:99:
         72:63:9c:77:4a:3a:44:2c:38:90:a7:f5:57:bd:5d:51:92:56:
         27:a3:bb:f2:3d:43:b2:c7:c1:53:61:37:f8:de:99:d5:08:4e:
         4d:5a:17:e2:d1:46:dc:9d:68:6e:14:98:10:bd:34:94:44:78:
         af:6d:23:20:55:9b:db:9f:e8:b1:e9:39:40:a1:c8:c7:10:63:
         ad:08:9e:e7:b7:0a:47:9e:df:7d:91:a4:7e:be:e6:56:7a:3c:
         28:71:20:b4:11:65:72:08:94:ed:a7:08:ff:c3:d7:0f:c3:1e:
         17:bb:54:49:64:43:8a:e1:b0:48:6d:f8:12:b0:d7:2a:8a:a9:
         80:47:7b:82:fe:c2:2e:b1:f3:fd:0c:be:63:40:d0:c2:71:19:
         12:c9:4d:ce:ce:84:9f:44:06:88:d7:16:ee:f8:c5:ab:57:c6:
         08:47:fb:b0:7f:ab:2b:38:27:b7:37:2d:0b:bb:ff:11:09:7b:
         d9:a2:60:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 16:17:29 2025 by rpki-client