This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.mft
File:                     DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.mft (raw, json)
Hash identifier:          TR1NGTCqn7T+Kq+UGlugA1+9GU9GaYKfff+7YWVyejI=
Subject key identifier:   D9:50:A1:1A:1C:33:B2:14:E1:8C:D9:A5:1B:CC:64:E3:38:A2:F1:DA
Authority key identifier: DD:D2:FE:CE:1A:49:F1:54:6C:35:5A:F0:8B:4A:32:02:AC:6B:4C:C4
Certificate issuer:       /CN=DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4
Certificate serial:       1CFA26423CC12FA906FD452B4048EC2F0B1CB57D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.mft
Manifest number:          0123
Signing time:             Fri 19 Dec 2025 04:42:24 +0000
Manifest this update:     Fri 19 Dec 2025 04:37:24 +0000
Manifest next update:     Sat 20 Dec 2025 05:10:24 +0000
Files and hashes:         1: DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.crl (hash: DQPr3vSExShw7cJqcKKFfyO4GA8fWQmEfRPaJr23YNY=)
                          2: 3137302e3135302e3230302e302f32322d3234203d3e20323635303338.roa (hash: +2p9wnelJvyIdVwZ5qUKRl86p9f5kfdKUAcjXUn447w=)
                          3: 323830343a333163633a3a2f33322d3334203d3e20323635303338.roa (hash: Hf5yARcahJxd2qwBIlcKhy0tIV/SIDbTzFn9LXhXI0Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.crl
                          rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 05:10:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:fa:26:42:3c:c1:2f:a9:06:fd:45:2b:40:48:ec:2f:0b:1c:b5:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4
        Validity
            Not Before: Dec 19 04:37:24 2025 GMT
            Not After : Dec 20 05:10:24 2025 GMT
        Subject: CN=D950A11A1C33B214E18CD9A51BCC64E338A2F1DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4a:e6:27:92:71:f1:26:9e:dc:ce:30:83:da:
                    2b:76:3f:45:2f:ce:05:ae:fe:02:a6:d5:f0:05:2b:
                    79:a0:d3:65:24:de:68:65:c6:dd:62:f6:e1:69:cc:
                    f3:10:c3:ba:66:75:1c:8f:8c:25:f2:8f:ce:cd:80:
                    22:25:c3:c7:ee:b1:5a:28:1e:d9:05:ef:c8:53:9f:
                    5e:ac:7a:8f:db:5d:41:10:e9:80:f3:6c:74:f2:99:
                    88:cb:00:08:06:86:c4:69:c1:ae:94:56:b8:27:d4:
                    20:9a:73:b1:49:3f:98:12:2e:26:4f:df:16:58:cd:
                    9d:91:53:b9:24:52:42:04:82:91:36:70:f7:c5:57:
                    82:a0:7e:49:12:0f:ea:b3:76:75:c9:f0:d7:7d:83:
                    aa:c7:43:31:ec:b9:da:b0:af:fb:07:4a:9b:2f:58:
                    65:06:a9:60:15:cc:a3:f2:db:74:94:56:04:1a:a9:
                    1c:c6:26:3e:16:cb:49:22:e1:be:4e:29:f7:33:6d:
                    7c:05:7e:6b:53:03:03:1a:93:1a:84:5e:18:04:81:
                    a5:81:0a:fa:35:c7:c1:16:40:25:da:35:90:8b:37:
                    38:98:07:a1:01:38:cc:8b:0b:ac:bb:28:a0:ae:85:
                    f2:7e:a0:df:49:11:ec:2d:fe:e7:26:b4:0d:f6:59:
                    e9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:50:A1:1A:1C:33:B2:14:E1:8C:D9:A5:1B:CC:64:E3:38:A2:F1:DA
            X509v3 Authority Key Identifier:
                keyid:DD:D2:FE:CE:1A:49:F1:54:6C:35:5A:F0:8B:4A:32:02:AC:6B:4C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:dc:ff:41:7b:87:33:d0:4c:4e:2f:d1:ab:20:c6:f2:79:49:
         bd:d6:0e:8d:49:e6:29:32:74:c0:13:90:97:82:d2:53:cd:36:
         09:fc:a6:93:03:10:43:d8:de:fa:cd:97:7a:76:e5:a1:79:dc:
         6c:4c:03:c7:95:f3:8a:8c:7a:07:2b:0c:f3:2b:e1:c5:f3:db:
         52:34:5a:51:77:0b:fe:e5:68:09:bd:c5:f3:18:57:7b:25:22:
         39:ec:ea:b0:f0:4b:5a:25:f7:f6:f9:c3:13:1a:26:57:77:1f:
         29:cd:19:8d:c8:6d:d8:70:9b:89:74:93:d3:ba:25:31:ba:d6:
         15:49:56:1b:de:a4:71:79:68:2e:d3:24:2b:e6:fe:53:4a:c6:
         e3:67:d4:a4:62:12:c3:17:4c:a4:87:73:8e:c1:d3:87:9c:cf:
         70:a8:1d:29:f5:b4:a1:9c:2d:a3:ba:bc:44:b3:eb:a3:fb:1d:
         f3:11:e2:e6:6d:72:24:3f:56:ac:9f:ef:0f:06:73:7a:3a:3f:
         17:68:cd:2a:35:50:24:27:9b:64:35:35:c1:7d:8c:e1:4f:36:
         a7:b0:55:9a:82:8a:4e:03:f3:e2:96:99:92:cc:66:47:0a:38:
         e8:9d:36:25:d6:64:c7:a5:46:7c:84:ba:2d:ea:7d:40:01:6c:
         ea:42:8a:15
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUHPomQjzBL6kG/UUrQEjsLwsctX0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREREMkZFQ0UxQTQ5RjE1NDZDMzU1QUYwOEI0QTMyMDJB
QzZCNENDNDAeFw0yNTEyMTkwNDM3MjRaFw0yNTEyMjAwNTEwMjRaMDMxMTAvBgNV
BAMTKEQ5NTBBMTFBMUMzM0IyMTRFMThDRDlBNTFCQ0M2NEUzMzhBMkYxREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnSuYnknHxJp7czjCD2it2P0Uv
zgWu/gKm1fAFK3mg02Uk3mhlxt1i9uFpzPMQw7pmdRyPjCXyj87NgCIlw8fusVoo
HtkF78hTn16seo/bXUEQ6YDzbHTymYjLAAgGhsRpwa6UVrgn1CCac7FJP5gSLiZP
3xZYzZ2RU7kkUkIEgpE2cPfFV4KgfkkSD+qzdnXJ8Nd9g6rHQzHsudqwr/sHSpsv
WGUGqWAVzKPy23SUVgQaqRzGJj4Wy0ki4b5OKfczbXwFfmtTAwMakxqEXhgEgaWB
Cvo1x8EWQCXaNZCLNziYB6EBOMyLC6y7KKCuhfJ+oN9JEewt/ucmtA32WenpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU2VChGhwzshThjNmlG8xk4zii8dowHwYDVR0j
BBgwFoAU3dL+zhpJ8VRsNVrwi0oyAqxrTMQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmpnckZROU5XQjc2dGduS2F3WVVqNVAyQTZHc3ZoWnA5bWtyeDIzU1J1
cEEvMC9EREQyRkVDRTFBNDlGMTU0NkMzNTVBRjA4QjRBMzIwMkFDNkI0Q0M0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RERDJGRUNFMUE0OUYxNTQ2
QzM1NUFGMDhCNEEzMjAyQUM2QjRDQzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QmpnckZROU5XQjc2dGduS2F3WVVqNVAyQTZHc3ZoWnA5bWtyeDIzU1J1cEEvMC9E
REQyRkVDRTFBNDlGMTU0NkMzNTVBRjA4QjRBMzIwMkFDNkI0Q0M0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAS9z/QXuHM9BMTi/RqyDG8nlJvdYOjUnmKTJ0wBOQl4LSU802CfymkwMQQ9je
+s2XenbloXncbEwDx5Xziox6BysM8yvhxfPbUjRaUXcL/uVoCb3F8xhXeyUiOezq
sPBLWiX39vnDExomV3cfKc0Zjcht2HCbiXST07olMbrWFUlWG96kcXloLtMkK+b+
U0rG42fUpGISwxdMpIdzjsHTh5zPcKgdKfW0oZwto7q8RLPro/sd8xHi5m1yJD9W
rJ/vDwZzejo/F2jNKjVQJCebZDU1wX2M4U82p7BVmoKKTgPz4paZksxmRwo46J02
JdZkx6VGfIS6Lep9QAFs6kKKFQ==
-----END CERTIFICATE-----
Generated at Fri Dec 19 10:24:48 2025 by rpki-client