This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft
File:                     DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft (raw, json)
Hash identifier:          MEXhiScoAu6AXl5JQt4Y34dXVoM0rj9LVzjj4GSIHJM=
Subject key identifier:   AD:2D:C2:CF:48:2E:6C:89:4F:F2:86:0D:C3:3B:17:63:9C:6C:A5:DE
Authority key identifier: DF:34:AF:E4:C3:52:59:EA:0E:0A:B9:3A:34:0D:F1:39:E8:6B:8D:B7
Certificate issuer:       /CN=DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7
Certificate serial:       18B9E3B7F7026046A864AC292B6B039C979FF71C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft
Manifest number:          E4
Signing time:             Wed 24 Dec 2025 11:20:11 +0000
Manifest this update:     Wed 24 Dec 2025 11:15:11 +0000
Manifest next update:     Thu 25 Dec 2025 13:42:11 +0000
Files and hashes:         1: DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.crl (hash: 8HLmy5PktEMsMEhVE6Lwe1rezP/LzZf9O1TIivPoQKM=)
                          2: 323830343a386532303a3a2f33322d313238203d3e20323733343034.roa (hash: +rQtNxAInELK5ARSncrEa6aoX0jAyBJS0K9vEo2MC/M=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.crl
                          rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 13:42:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b9:e3:b7:f7:02:60:46:a8:64:ac:29:2b:6b:03:9c:97:9f:f7:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7
        Validity
            Not Before: Dec 24 11:15:11 2025 GMT
            Not After : Dec 25 13:42:11 2025 GMT
        Subject: CN=AD2DC2CF482E6C894FF2860DC33B17639C6CA5DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:75:dc:d0:20:97:fa:7e:25:3a:d3:d8:95:12:
                    aa:5a:34:70:6d:c4:e0:71:c5:e0:10:43:43:e3:47:
                    4f:6f:ef:b7:62:fa:9a:1b:cd:4e:09:69:76:25:2b:
                    29:44:5e:bf:33:14:fb:0c:07:80:6c:94:68:9e:c7:
                    41:72:b5:4c:60:eb:26:08:dc:cb:6e:9b:f9:21:89:
                    fe:89:3b:bb:19:c3:3d:28:be:3d:ca:48:7d:d2:a3:
                    e6:5f:9e:a1:70:14:5e:b8:0d:f1:aa:ae:5f:0c:c4:
                    49:3f:b3:c8:0b:74:31:33:cf:1a:b0:f2:6e:c6:74:
                    3e:9e:2c:1c:a8:37:73:cd:0e:c8:27:96:0b:34:d6:
                    5e:ed:c5:ae:ea:ab:1f:6f:cb:4c:9f:50:1a:d7:d0:
                    e3:b0:e2:d9:4a:06:9b:a0:9e:58:a7:34:d2:c3:0c:
                    ae:54:6e:ec:4b:9e:50:77:98:ca:19:6b:4d:6b:7f:
                    1e:a0:71:a6:4d:e5:98:e1:39:42:43:02:65:21:4f:
                    9b:12:80:7b:1f:76:60:38:3a:ba:a4:63:a1:68:9e:
                    db:c3:6e:bf:72:f0:27:9c:0a:c3:12:e8:d0:4d:49:
                    dc:c7:76:7d:01:83:95:f6:d7:3e:5f:d1:0d:f1:e9:
                    e1:56:05:60:1c:82:44:2d:e4:50:1f:6f:fe:4a:17:
                    c8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:2D:C2:CF:48:2E:6C:89:4F:F2:86:0D:C3:3B:17:63:9C:6C:A5:DE
            X509v3 Authority Key Identifier:
                keyid:DF:34:AF:E4:C3:52:59:EA:0E:0A:B9:3A:34:0D:F1:39:E8:6B:8D:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:6a:1b:49:a4:55:bb:cb:68:21:54:7c:5b:bb:10:b1:58:85:
         45:98:8f:6f:12:fa:87:d1:02:2e:47:ea:0b:86:4a:13:4d:d3:
         dd:9e:d8:a6:2d:29:d2:ca:ac:43:c6:f9:d0:ef:d0:eb:06:a9:
         e1:48:c9:34:81:43:b1:cc:91:8a:9b:3f:dc:61:3c:b2:18:88:
         08:46:56:5f:9b:bb:42:65:08:77:1d:33:b0:38:7b:08:a3:c2:
         04:6a:23:57:a3:9c:d5:c7:e7:d5:b9:19:28:44:3c:b5:18:7b:
         61:59:7c:a5:6d:49:b8:d7:55:bf:34:f0:4a:87:f4:42:c0:22:
         ce:21:5f:7e:60:02:b2:25:b7:f8:83:62:47:e7:5d:46:0f:be:
         01:98:2a:fa:46:c9:85:0b:e3:4a:90:18:da:0c:39:7a:bc:eb:
         62:d5:c2:54:b9:33:7c:da:7d:05:88:73:b4:94:8a:54:3a:82:
         a4:d7:67:92:15:92:e4:e6:ac:a8:74:f6:a2:da:d4:08:ac:32:
         dc:01:04:d0:13:db:cb:30:7f:fa:72:91:41:10:45:f7:f4:f4:
         42:ce:f2:00:eb:dc:0d:36:da:ee:69:4f:ff:0f:1b:62:d9:0a:
         1f:c5:23:99:94:31:71:17:73:1c:4f:1a:30:35:52:09:be:7e:
         16:e6:6d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----