This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.mft
File:                     D296B69B93C13271557656EE54E2511823349A12.mft (raw, json)
Hash identifier:          aOAgGKysNbb/o/Kq2jE3LJm2M33RdWScY95ivwv1rwQ=
Subject key identifier:   A1:45:D3:5E:EC:D2:0E:15:82:7A:FA:B2:62:13:F8:23:1E:53:0E:AC
Authority key identifier: D2:96:B6:9B:93:C1:32:71:55:76:56:EE:54:E2:51:18:23:34:9A:12
Certificate issuer:       /CN=D296B69B93C13271557656EE54E2511823349A12
Certificate serial:       169AA293E28F45479EDFE67E0B1435E94430C568
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D296B69B93C13271557656EE54E2511823349A12.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.mft
Manifest number:          03B0
Signing time:             Wed 24 Dec 2025 03:02:00 +0000
Manifest this update:     Wed 24 Dec 2025 02:57:00 +0000
Manifest next update:     Thu 25 Dec 2025 03:02:00 +0000
Files and hashes:         1: D296B69B93C13271557656EE54E2511823349A12.crl (hash: ck0XUfUtbKrpgLYna7SLGSxLyxlzzqUr5jiXqcYGFsk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.crl
                          rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D296B69B93C13271557656EE54E2511823349A12.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 03:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:9a:a2:93:e2:8f:45:47:9e:df:e6:7e:0b:14:35:e9:44:30:c5:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D296B69B93C13271557656EE54E2511823349A12
        Validity
            Not Before: Dec 24 02:57:00 2025 GMT
            Not After : Dec 31 03:02:00 2025 GMT
        Subject: CN=3082010A0282010100EAEBF151FF9F9B4F986E35F80BDD7348324BCC71FCBEE9D3A9229CDBF2EE1BEB8C39C4021C474BCBF5343B1FDF64BB4CDBB7E0AB33C150783FA3FCE9BAA9D9979F7EEED38435D8700A7D8CD693FB4AB6FBBACBFAF9D3616E343CC58841F0393743DF4A77979F496AD04F4B173C4E7CC2CF4DD08A54E5B05A583CB3EFF49CB21744D6490E0A5A14BB77E85729F978E21FAF5DDF6DE783D1D86BD50141EC95A106E67CFC918AF997786C4D96BE97D2047C60A14D69191752529CBD7ABE267EBCFE3B6ABBC271FFA7B14278485051A65A2AD21949DAF4B712E8F6C986BE8E8D7EA4A310FB5A7129D68C8152204F2BE6CA4D8B3434C4A47726B3510E8E909D6EEA8B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:eb:f1:51:ff:9f:9b:4f:98:6e:35:f8:0b:dd:
                    73:48:32:4b:cc:71:fc:be:e9:d3:a9:22:9c:db:f2:
                    ee:1b:eb:8c:39:c4:02:1c:47:4b:cb:f5:34:3b:1f:
                    df:64:bb:4c:db:b7:e0:ab:33:c1:50:78:3f:a3:fc:
                    e9:ba:a9:d9:97:9f:7e:ee:d3:84:35:d8:70:0a:7d:
                    8c:d6:93:fb:4a:b6:fb:ba:cb:fa:f9:d3:61:6e:34:
                    3c:c5:88:41:f0:39:37:43:df:4a:77:97:9f:49:6a:
                    d0:4f:4b:17:3c:4e:7c:c2:cf:4d:d0:8a:54:e5:b0:
                    5a:58:3c:b3:ef:f4:9c:b2:17:44:d6:49:0e:0a:5a:
                    14:bb:77:e8:57:29:f9:78:e2:1f:af:5d:df:6d:e7:
                    83:d1:d8:6b:d5:01:41:ec:95:a1:06:e6:7c:fc:91:
                    8a:f9:97:78:6c:4d:96:be:97:d2:04:7c:60:a1:4d:
                    69:19:17:52:52:9c:bd:7a:be:26:7e:bc:fe:3b:6a:
                    bb:c2:71:ff:a7:b1:42:78:48:50:51:a6:5a:2a:d2:
                    19:49:da:f4:b7:12:e8:f6:c9:86:be:8e:8d:7e:a4:
                    a3:10:fb:5a:71:29:d6:8c:81:52:20:4f:2b:e6:ca:
                    4d:8b:34:34:c4:a4:77:26:b3:51:0e:8e:90:9d:6e:
                    ea:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:45:D3:5E:EC:D2:0E:15:82:7A:FA:B2:62:13:F8:23:1E:53:0E:AC
            X509v3 Authority Key Identifier:
                keyid:D2:96:B6:9B:93:C1:32:71:55:76:56:EE:54:E2:51:18:23:34:9A:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D296B69B93C13271557656EE54E2511823349A12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:16:41:27:27:b2:07:9e:55:26:cf:cd:69:24:b4:c7:5c:5c:
         81:bb:72:88:3e:6a:48:73:8a:42:da:1c:5c:5a:7c:5e:8e:92:
         ea:c4:c5:a7:cb:02:11:92:5d:57:2d:f4:28:c9:b5:33:bd:fc:
         87:49:71:18:ef:ef:86:8b:55:14:b9:81:9a:fd:e8:4d:81:da:
         4e:ed:29:90:70:ca:7b:f7:27:e8:67:65:57:c3:13:51:e7:29:
         78:94:fc:63:54:5a:e3:34:c4:f4:44:99:38:3b:03:6e:c2:b0:
         8b:2c:10:2d:26:76:f2:2c:7c:b0:cc:4a:6c:af:49:94:05:c8:
         2a:a7:ae:39:2f:fa:65:86:26:1d:97:ff:ff:26:9f:32:4b:46:
         3e:82:ee:4f:7d:12:f7:8c:c7:fc:ba:65:f9:12:3c:77:75:88:
         c8:3e:01:60:e4:03:05:9d:e9:01:75:52:13:02:59:2c:41:4b:
         81:c5:d8:da:ab:23:43:d3:b7:fc:50:94:e3:ac:3c:52:3e:bd:
         9a:22:db:3a:2a:bd:e2:09:dc:8c:79:fd:97:64:88:7b:04:59:
         92:7f:8b:1b:d8:22:9e:5e:a7:33:a1:c9:97:a1:59:7a:d1:30:
         a3:92:c1:c8:be:ce:cc:ba:54:06:32:05:a7:a8:f4:b1:15:b5:
         2d:8a:25:a8
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUFpqik+KPRUee3+Z+CxQ16UQwxWgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDI5NkI2OUI5M0MxMzI3MTU1NzY1NkVFNTRFMjUxMTgy
MzM0OUExMjAeFw0yNTEyMjQwMjU3MDBaFw0yNTEyMzEwMzAyMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRUFFQkYxNTFGRjlGOUI0Rjk4
NkUzNUY4MEJERDczNDgzMjRCQ0M3MUZDQkVFOUQzQTkyMjlDREJGMkVFMUJFQjhD
MzlDNDAyMUM0NzRCQ0JGNTM0M0IxRkRGNjRCQjRDREJCN0UwQUIzM0MxNTA3ODNG
QTNGQ0U5QkFBOUQ5OTc5RjdFRUVEMzg0MzVEODcwMEE3RDhDRDY5M0ZCNEFCNkZC
QkFDQkZBRjlEMzYxNkUzNDNDQzU4ODQxRjAzOTM3NDNERjRBNzc5NzlGNDk2QUQw
NEY0QjE3M0M0RTdDQzJDRjRERDA4QTU0RTVCMDVBNTgzQ0IzRUZGNDlDQjIxNzQ0
RDY0OTBFMEE1QTE0QkI3N0U4NTcyOUY5NzhFMjFGQUY1RERGNkRFNzgzRDFEODZC
RDUwMTQxRUM5NUExMDZFNjdDRkM5MThBRjk5Nzc4NkM0RDk2QkU5N0QyMDQ3QzYw
QTE0RDY5MTkxNzUyNTI5Q0JEN0FCRTI2N0VCQ0ZFM0I2QUJCQzI3MUZGQTdCMTQy
Nzg0ODUwNTFBNjVBMkFEMjE5NDlEQUY0QjcxMkU4RjZDOTg2QkU4RThEN0VBNEEz
MTBGQjVBNzEyOUQ2OEM4MTUyMjA0RjJCRTZDQTREOEIzNDM0QzRBNDc3MjZCMzUx
MEU4RTkwOUQ2RUVBOEIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA6uvxUf+fm0+YbjX4C91zSDJLzHH8vunTqSKc2/LuG+uMOcQCHEdL
y/U0Ox/fZLtM27fgqzPBUHg/o/zpuqnZl59+7tOENdhwCn2M1pP7Srb7usv6+dNh
bjQ8xYhB8Dk3Q99Kd5efSWrQT0sXPE58ws9N0IpU5bBaWDyz7/ScshdE1kkOCloU
u3foVyn5eOIfr13fbeeD0dhr1QFB7JWhBuZ8/JGK+Zd4bE2WvpfSBHxgoU1pGRdS
Upy9er4mfrz+O2q7wnH/p7FCeEhQUaZaKtIZSdr0txLo9smGvo6NfqSjEPtacSnW
jIFSIE8r5spNizQ0xKR3JrNRDo6QnW7qiwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FKFF017s0g4Vgnr6smIT+CMeUw6sMB8GA1UdIwQYMBaAFNKWtpuTwTJxVXZW7lTi
URgjNJoSMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FxZVhLaHh0a3VreHpO
V3l0TkhjM0t4aXVVeThyaEVrWmtEM25CUGdDR1RoLzEvRDI5NkI2OUI5M0MxMzI3
MTU1NzY1NkVFNTRFMjUxMTgyMzM0OUExMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9EMjk2QjY5QjkzQzEzMjcxNTU3NjU2RUU1NEUyNTExODIzMzQ5
QTEyLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FxZVhLaHh0a3VreHpOV3l0Tkhj
M0t4aXVVeThyaEVrWmtEM25CUGdDR1RoLzEvRDI5NkI2OUI5M0MxMzI3MTU1NzY1
NkVFNTRFMjUxMTgyMzM0OUExMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEIWQScnsgeeVSbPzWkktMdc
XIG7cog+akhzikLaHFxafF6OkurExafLAhGSXVct9CjJtTO9/IdJcRjv74aLVRS5
gZr96E2B2k7tKZBwynv3J+hnZVfDE1HnKXiU/GNUWuM0xPREmTg7A27CsIssEC0m
dvIsfLDMSmyvSZQFyCqnrjkv+mWGJh2X//8mnzJLRj6C7k99EveMx/y6ZfkSPHd1
iMg+AWDkAwWd6QF1UhMCWSxBS4HF2NqrI0PTt/xQlOOsPFI+vZoi2zoqveIJ3Ix5
/ZdkiHsEWZJ/ixvYIp5epzOhyZehWXrRMKOSwci+zsy6VAYyBaeo9LEVtS2KJag=
-----END CERTIFICATE-----