This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/59D79079ECD031F0A1D0E88BA326755415EE0813.mft
File:                     59D79079ECD031F0A1D0E88BA326755415EE0813.mft (raw, json)
Hash identifier:          wg9odZT9oJOiAfnRKSJFoekbOU8JsbR+1+bYkInrd1I=
Subject key identifier:   D3:7D:3B:A1:B5:33:45:94:2F:FF:8A:82:BA:6D:85:64:1D:DC:39:DB
Authority key identifier: 59:D7:90:79:EC:D0:31:F0:A1:D0:E8:8B:A3:26:75:54:15:EE:08:13
Certificate issuer:       /CN=59D79079ECD031F0A1D0E88BA326755415EE0813
Certificate serial:       0FD2A449926C05C4FF098BB6B5E5485F562DE314
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D79079ECD031F0A1D0E88BA326755415EE0813.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/59D79079ECD031F0A1D0E88BA326755415EE0813.mft
Manifest number:          0336
Signing time:             Sun 21 Dec 2025 09:50:54 +0000
Manifest this update:     Sun 21 Dec 2025 09:45:54 +0000
Manifest next update:     Mon 22 Dec 2025 12:53:54 +0000
Files and hashes:         1: 323830343a343939383a3a2f33322d3438203d3e20323637313932.roa (hash: rpvinbCa/xsk5ZhS8SmIPSXZKq8nf8iM6hxn8Uq4z84=)
                          2: 34352e3233312e39362e302f32322d3234203d3e20323637313932.roa (hash: lgzL5rXljUN5kQykUFmKsCEdHcXqe1U+y18cfI07HXo=)
                          3: 59D79079ECD031F0A1D0E88BA326755415EE0813.crl (hash: swakot5nWXgiSZxPpFVNS/1kO1idY1wV+j+UQVPzy1U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/59D79079ECD031F0A1D0E88BA326755415EE0813.crl
                          rsync://rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/59D79079ECD031F0A1D0E88BA326755415EE0813.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D79079ECD031F0A1D0E88BA326755415EE0813.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 12:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:d2:a4:49:92:6c:05:c4:ff:09:8b:b6:b5:e5:48:5f:56:2d:e3:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59D79079ECD031F0A1D0E88BA326755415EE0813
        Validity
            Not Before: Dec 21 09:45:54 2025 GMT
            Not After : Dec 22 12:53:54 2025 GMT
        Subject: CN=D37D3BA1B53345942FFF8A82BA6D85641DDC39DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3b:ca:f5:21:68:a7:96:aa:30:6c:db:22:15:
                    0e:fb:5d:e4:de:d0:7e:39:ad:ad:d0:9c:94:1c:44:
                    c2:68:78:15:28:5c:b6:69:44:35:29:d4:ae:1a:2e:
                    bb:49:68:88:35:7d:4d:07:93:1f:6e:ab:0a:9d:f9:
                    76:f8:f5:aa:1c:cc:8e:a1:8f:22:db:56:d8:d6:df:
                    1b:71:f7:bc:01:a6:fc:61:6e:41:3d:cc:d2:c6:ca:
                    69:c8:82:2c:de:e7:5c:e3:f8:71:aa:33:d3:2c:c7:
                    d2:e0:9a:1a:91:62:62:82:fc:36:73:1b:a2:7f:77:
                    53:5e:fe:e4:74:11:cd:1f:d9:81:71:ca:ee:d4:8f:
                    50:97:ba:70:c8:60:ca:8f:e3:60:db:07:78:98:71:
                    57:bf:4d:99:37:e0:17:ad:87:ea:b2:62:b4:fd:88:
                    0f:e4:1e:d0:b2:4d:22:b6:63:64:84:7f:6b:90:1b:
                    90:0c:92:b0:07:d7:f5:a5:67:ac:9a:8d:9e:a9:c2:
                    62:c0:dd:39:9f:14:74:a0:a4:2f:82:28:5c:18:21:
                    0a:e9:25:ed:a3:7b:56:83:a2:5e:b3:df:f4:60:59:
                    e1:77:96:c1:10:ff:12:26:58:61:b0:a6:99:94:16:
                    7c:91:b0:5c:10:51:f9:1f:8a:9c:b9:ce:46:f3:28:
                    a7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:7D:3B:A1:B5:33:45:94:2F:FF:8A:82:BA:6D:85:64:1D:DC:39:DB
            X509v3 Authority Key Identifier:
                keyid:59:D7:90:79:EC:D0:31:F0:A1:D0:E8:8B:A3:26:75:54:15:EE:08:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/59D79079ECD031F0A1D0E88BA326755415EE0813.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D79079ECD031F0A1D0E88BA326755415EE0813.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/59D79079ECD031F0A1D0E88BA326755415EE0813.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:50:54:61:d6:99:c5:08:6f:cc:0b:98:c8:7e:f9:a2:a3:a3:
         e1:22:3a:0f:92:0e:29:ed:a9:de:e9:34:9b:be:4f:aa:d7:7e:
         c0:96:93:4a:53:f9:db:1f:37:1b:94:52:90:78:6c:76:18:00:
         56:da:27:9a:6e:2e:74:e1:c2:28:0b:6b:f6:00:8c:75:7e:9a:
         74:6b:d6:8e:c7:94:8e:b9:89:a7:71:da:74:c1:2b:53:e3:0a:
         aa:e1:06:a5:f6:d9:fa:8c:67:f6:94:74:b5:31:44:27:ba:24:
         74:88:d8:8d:7e:cc:a4:0b:59:2a:f1:f0:ff:73:54:fd:a0:f9:
         b1:18:6c:48:67:92:c9:94:75:e5:bb:bc:11:b6:ef:9e:1e:14:
         c2:2a:dc:8b:4c:90:21:28:9e:0c:61:95:93:93:89:1b:20:9d:
         ff:a2:11:b0:b8:c7:8f:3b:73:02:33:72:c0:55:fa:da:0f:ee:
         d7:69:5e:c8:ca:16:0b:6c:20:69:99:f0:23:85:20:37:43:38:
         fb:9e:a1:30:65:d2:6b:65:39:d6:74:72:89:96:aa:7b:97:1a:
         0a:fd:ad:7a:73:ae:dd:2d:81:70:8d:da:f7:ea:e6:d4:e2:96:
         6f:c3:f8:5c:8f:23:eb:a9:d0:94:3f:dd:34:b9:cb:df:db:d8:
         d1:31:5a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 23:01:14 2025 by rpki-client