This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.mft
File:                     D2EAFBBDD27515C2E642A28C64C61A932A14BD02.mft (raw, json)
Hash identifier:          Mod902cYpe327DJdhvkZb9CIvqR9+se64fyK2j5st0I=
Subject key identifier:   DF:A9:48:54:A0:D9:B2:D0:A7:66:BC:D9:3C:24:78:FF:99:F7:29:DF
Authority key identifier: D2:EA:FB:BD:D2:75:15:C2:E6:42:A2:8C:64:C6:1A:93:2A:14:BD:02
Certificate issuer:       /CN=D2EAFBBDD27515C2E642A28C64C61A932A14BD02
Certificate serial:       4003204CE4740DD800F7CA612FB6A20979DDC305
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.mft
Manifest number:          0279
Signing time:             Mon 22 Dec 2025 21:00:00 +0000
Manifest this update:     Mon 22 Dec 2025 20:55:00 +0000
Manifest next update:     Tue 23 Dec 2025 21:00:00 +0000
Files and hashes:         1: D2EAFBBDD27515C2E642A28C64C61A932A14BD02.crl (hash: UqL0wEpGJxG/SxPCnOi2L+JculRnovt/Gc6nUaRW0Ds=)
                          2: 323830343a393134633a3a2f33322d3332203d3e20323734363332.roa (hash: DvD9mUDQGbID1Fj3RmQTkwTUsJ5MXscX3LhKAmPGVSc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.crl
                          rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:03:20:4c:e4:74:0d:d8:00:f7:ca:61:2f:b6:a2:09:79:dd:c3:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2EAFBBDD27515C2E642A28C64C61A932A14BD02
        Validity
            Not Before: Dec 22 20:55:00 2025 GMT
            Not After : Dec 29 21:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:08:1b:76:1a:c3:ca:dc:96:03:4c:e4:a0:58:
                    a4:c6:b4:9e:17:1f:ee:15:8f:75:45:42:8c:32:b4:
                    33:44:49:55:67:c5:a1:7f:46:c7:5e:29:48:65:43:
                    fd:e1:fe:26:22:c3:a5:06:1e:7f:04:7a:8e:a0:e7:
                    41:56:59:7a:15:83:d5:9d:4f:9d:52:79:bf:3c:89:
                    0e:86:4e:4b:2b:25:45:3a:b6:5d:db:d3:90:44:8f:
                    0b:2f:96:3a:4f:aa:95:55:ba:ce:0f:cc:e4:84:17:
                    c2:75:b5:11:4a:aa:75:6b:a1:09:a8:b0:62:a2:11:
                    3d:32:49:e9:d8:5b:17:14:53:cd:4b:8a:52:3c:ae:
                    50:89:0f:21:93:c7:5f:fb:66:8b:64:41:98:95:b3:
                    96:89:df:c4:55:1e:9b:62:61:fc:6c:2d:4b:95:d6:
                    29:81:a1:5c:d7:27:36:f0:8c:5c:b6:92:e0:6b:02:
                    74:62:9c:84:01:34:df:cf:67:da:06:b0:1b:2c:c9:
                    28:c4:b3:89:ce:45:1e:ba:eb:fc:d9:08:02:fd:2c:
                    52:19:62:a5:4b:f5:ff:67:15:ba:ef:0f:9a:ef:60:
                    55:b1:1d:09:6e:8e:86:d2:0a:82:5f:36:16:38:48:
                    05:d5:10:ef:d9:ff:58:a2:35:c2:27:fc:64:ac:fb:
                    10:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A9:48:54:A0:D9:B2:D0:A7:66:BC:D9:3C:24:78:FF:99:F7:29:DF
            X509v3 Authority Key Identifier:
                keyid:D2:EA:FB:BD:D2:75:15:C2:E6:42:A2:8C:64:C6:1A:93:2A:14:BD:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:7e:07:03:da:1c:6b:c2:20:3d:0d:53:2f:ab:06:d4:b0:ef:
         3c:55:d3:95:4e:e3:4a:6a:b6:7c:7a:de:94:e6:3c:4d:72:21:
         26:24:95:26:ce:e8:60:88:01:ab:a9:74:72:f8:28:e6:11:c6:
         d1:3d:3e:6d:4e:7c:3e:d4:32:e0:2c:e6:18:94:cc:1d:f4:ac:
         92:87:55:a6:54:d2:cc:2a:7b:14:27:60:f7:7a:aa:cc:a2:a5:
         29:23:64:8d:1e:b0:04:70:23:7f:76:98:6f:7f:34:34:be:a6:
         58:85:d3:ff:c5:fc:ef:b9:44:5b:d8:d8:f7:ca:cc:86:71:02:
         15:97:3f:c8:41:2c:06:df:1d:b0:32:10:d7:45:9d:0b:ec:bb:
         cc:7a:54:21:29:21:8e:06:31:f6:77:ea:aa:95:84:91:71:34:
         de:52:78:2a:4d:cc:a7:12:4a:3e:f2:26:9b:ea:19:22:78:42:
         2c:43:e4:43:f0:b3:78:ff:fa:31:99:b4:fa:b2:43:c7:d2:61:
         00:4c:65:fe:99:99:3d:cc:08:9f:6a:ad:7c:b2:51:2f:57:7b:
         cd:0f:84:0b:a2:42:5b:ca:95:96:f3:67:38:6b:08:1b:df:9d:
         aa:35:f3:0f:eb:7b:43:28:07:99:a5:d6:b5:dd:66:6a:95:9e:
         0e:f9:56:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 23:47:49 2025 by rpki-client