This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft
File:                     DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft (raw, json)
Hash identifier:          rf1zn3lgebhHLOFdV/uXCPcmJqRWLYHce17DVTCvnMw=
Subject key identifier:   13:BC:05:89:9C:B9:7A:0A:BC:0C:DE:46:BA:EF:14:BA:99:0B:71:F9
Authority key identifier: DA:48:CA:C1:AD:92:76:8B:5C:BC:61:21:9D:BA:6F:EB:CD:8A:22:3F
Certificate issuer:       /CN=DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F
Certificate serial:       01355F9CCD7C12E965A40B41ACE607D197679C52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft
Manifest number:          033E
Signing time:             Mon 22 Dec 2025 19:59:44 +0000
Manifest this update:     Mon 22 Dec 2025 19:54:44 +0000
Manifest next update:     Tue 23 Dec 2025 22:24:44 +0000
Files and hashes:         1: 3137302e38342e39362e302f32322d3234203d3e20323634393932.roa (hash: wNMrZaU8aUZouPKty7zWuzFcAqfI9Vza8zAIQ/rQ9/g=)
                          2: 323830343a333131383a3a2f33322d3438203d3e20323634393932.roa (hash: DzRsY8gKF0BWS3fC42Y03Map2xKST/W63/0XfL2297o=)
                          3: DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl (hash: k+TvFaJYSPXoxEVcm3mkvzv2KYGjkcvrIfRH5imCeg0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl
                          rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 22:24:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:35:5f:9c:cd:7c:12:e9:65:a4:0b:41:ac:e6:07:d1:97:67:9c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F
        Validity
            Not Before: Dec 22 19:54:44 2025 GMT
            Not After : Dec 23 22:24:44 2025 GMT
        Subject: CN=13BC05899CB97A0ABC0CDE46BAEF14BA990B71F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:9a:b1:7d:2f:8a:d5:b1:86:da:4e:9c:b3:43:
                    3e:33:76:dd:ee:95:22:3c:3b:34:3a:16:d4:17:fb:
                    1b:79:de:ac:e9:7d:55:2a:1e:cc:c0:e1:f9:8f:2d:
                    dc:6d:a1:02:90:6d:7c:33:51:37:7b:6b:c8:74:84:
                    42:c7:6c:f6:5a:03:f1:72:49:57:02:92:fb:4a:75:
                    7b:43:fe:ae:9f:f1:d2:0c:5d:fb:7f:1e:47:c2:e5:
                    9d:91:30:d2:d7:40:2e:85:d4:78:b6:bf:8c:3b:ef:
                    cb:ba:e4:4c:ce:e0:c1:a7:95:66:ce:37:44:be:cc:
                    7b:17:ad:92:0c:6a:d0:6b:08:67:7c:2a:1c:aa:a7:
                    dc:8e:96:8a:04:4a:ca:0d:6e:60:cf:e5:f6:88:60:
                    ad:88:b8:ee:5c:16:a3:00:8d:dd:3e:ee:73:87:09:
                    6c:72:a6:c8:f0:6a:fe:b3:57:b8:5d:ec:80:3e:01:
                    90:a0:a2:7c:f5:2c:cb:c6:ef:8b:0c:47:f1:08:06:
                    22:c8:74:7c:08:cf:8c:6a:cb:cc:fb:20:1e:54:61:
                    45:47:a5:2e:c1:50:45:0f:e1:9a:4f:72:6f:d2:d1:
                    af:d8:a7:01:0f:64:c7:3c:c7:32:d8:3b:e3:dc:d1:
                    e2:c4:87:2e:69:92:3b:68:83:df:52:bc:7e:4b:57:
                    30:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:BC:05:89:9C:B9:7A:0A:BC:0C:DE:46:BA:EF:14:BA:99:0B:71:F9
            X509v3 Authority Key Identifier:
                keyid:DA:48:CA:C1:AD:92:76:8B:5C:BC:61:21:9D:BA:6F:EB:CD:8A:22:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:77:67:b6:08:c6:03:33:4e:0f:56:99:32:e7:f8:d4:b6:79:
         fe:c7:d2:29:2f:12:54:76:1e:28:70:a6:a8:87:50:e8:76:e4:
         ec:0f:2b:91:13:8f:65:d0:27:a5:4a:57:78:a1:c5:52:7b:30:
         53:8f:cf:eb:3b:d4:9f:58:22:23:bb:69:5b:df:06:f2:3d:b6:
         fd:32:0e:b0:66:93:b2:f0:31:33:1f:dc:15:56:ca:15:9d:a2:
         7a:49:50:0b:ac:fa:84:36:07:09:1e:27:12:7a:e6:63:d5:c0:
         8d:00:c1:47:27:40:71:0d:f1:db:e4:ed:c9:9c:b8:67:82:b7:
         74:cd:e9:6d:67:45:41:2a:43:8f:03:33:b9:15:fe:8c:4e:4d:
         58:fc:e3:c9:d6:b9:a5:b3:36:78:d7:6c:23:fe:0b:21:c7:5e:
         89:96:e2:9d:20:ae:fb:5d:67:db:72:55:97:57:66:c1:dc:ab:
         0a:63:9d:7b:9e:42:37:fb:ae:fd:35:b1:20:f8:87:64:e0:e9:
         d5:95:be:a0:d2:15:48:54:a6:cd:77:80:c7:e8:ac:b3:82:89:
         4a:08:30:01:1c:dd:a2:58:69:e8:1d:e8:77:41:eb:12:3d:35:
         b8:8c:35:24:5f:13:9f:0b:22:ea:f5:d2:cf:40:15:60:70:8b:
         59:c3:01:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 04:15:13 2025 by rpki-client