This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.mft
File:                     966DD797B84E59CAE6227ED4FB1D4D52011EBA29.mft (raw, json)
Hash identifier:          rPPwTlMyOAMwSxLadDA1lzEAh6g5KTQCjoKYbdUiSbs=
Subject key identifier:   DB:6F:97:BD:B5:25:75:BB:17:0C:47:7D:E8:BF:F5:CC:EF:ED:92:05
Authority key identifier: 96:6D:D7:97:B8:4E:59:CA:E6:22:7E:D4:FB:1D:4D:52:01:1E:BA:29
Certificate issuer:       /CN=966DD797B84E59CAE6227ED4FB1D4D52011EBA29
Certificate serial:       7EC5B34F490FF38ED5896ADD15CF15E0E8C878DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.mft
Manifest number:          78
Signing time:             Sat 20 Dec 2025 10:37:31 +0000
Manifest this update:     Sat 20 Dec 2025 10:32:31 +0000
Manifest next update:     Sun 21 Dec 2025 11:27:31 +0000
Files and hashes:         1: 966DD797B84E59CAE6227ED4FB1D4D52011EBA29.crl (hash: zwrrPlfJAYSyhCuLwOgCgzk9dCYoriSHi6SD1mkuBlY=)
                          2: 3136382e3230352e3132382e302f32322d3332203d3e20323635333635.roa (hash: UTHo9EEFQO4ipEo8t4TSyRqw0gIG4N/wl0NEzcGwaTQ=)
                          3: 323830343a326563343a3a2f33322d313238203d3e20323635333635.roa (hash: H63jKCVxvmkQQ3aMkx/LepjKsbCBpKcsiVsNBAOyuH0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.crl
                          rsync://rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 11:27:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c5:b3:4f:49:0f:f3:8e:d5:89:6a:dd:15:cf:15:e0:e8:c8:78:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=966DD797B84E59CAE6227ED4FB1D4D52011EBA29
        Validity
            Not Before: Dec 20 10:32:31 2025 GMT
            Not After : Dec 21 11:27:31 2025 GMT
        Subject: CN=DB6F97BDB52575BB170C477DE8BFF5CCEFED9205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:db:44:bf:06:70:d1:7c:e2:b0:9f:8c:75:62:
                    a0:fb:d4:61:06:28:ac:c4:9e:60:88:8b:cf:65:64:
                    1f:1b:5b:c0:dd:0e:31:4b:ed:59:ea:d8:dd:6b:54:
                    3b:72:d7:0c:c9:45:0f:15:3d:cc:58:75:9d:a0:a5:
                    ab:75:b3:25:a3:14:0f:a2:73:c3:75:d4:8f:14:6f:
                    50:78:bd:79:8b:c1:24:f7:3d:a1:02:d8:68:7d:52:
                    64:90:ac:b2:40:0e:e3:38:53:30:87:aa:c1:1f:7b:
                    80:5a:2b:4c:e3:34:08:91:0d:52:ee:d6:55:25:ed:
                    ec:6f:bb:ba:9a:ab:27:9b:cf:e7:e1:f9:d8:c5:c3:
                    c0:cb:2d:29:6c:0b:ce:24:c6:91:59:13:db:60:7a:
                    02:e6:51:66:36:69:73:96:ad:46:5b:3d:92:52:47:
                    32:6c:33:25:7a:64:2b:24:9a:cb:1d:b2:86:d1:6b:
                    64:a2:be:54:bb:07:fd:c6:67:25:30:c5:8d:af:87:
                    0e:c3:49:77:34:68:9e:f8:5f:e1:e6:48:3e:44:b3:
                    d8:bb:ee:bd:45:32:6f:b4:62:43:cd:c6:3b:af:45:
                    0a:f3:9c:40:9b:59:b0:b3:81:2d:5b:d6:2f:df:fb:
                    64:52:f0:31:13:26:8e:8c:e4:b6:bb:02:7b:0d:35:
                    29:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:6F:97:BD:B5:25:75:BB:17:0C:47:7D:E8:BF:F5:CC:EF:ED:92:05
            X509v3 Authority Key Identifier:
                keyid:96:6D:D7:97:B8:4E:59:CA:E6:22:7E:D4:FB:1D:4D:52:01:1E:BA:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:cd:db:81:5a:74:e9:55:f5:a7:5f:f0:32:7f:40:8e:46:e1:
         e5:d5:e1:c8:77:e1:a3:9f:66:75:28:b5:e1:06:e2:55:48:2e:
         a2:50:cd:bb:af:5a:8a:c3:92:9d:d8:b7:1b:a0:e7:a8:22:26:
         da:6c:f2:a4:35:c7:97:6a:20:97:19:e9:5c:04:e9:f4:c8:93:
         d7:79:79:6d:7f:48:42:cd:f6:01:27:be:70:52:8d:10:97:63:
         35:6b:ae:b9:80:f4:66:db:d9:19:88:d3:89:4e:07:86:f3:ea:
         b4:1f:e3:df:0b:09:a8:0a:34:f8:d5:e8:cf:2c:22:ac:ce:72:
         c2:ff:a6:63:c8:61:8c:1c:5c:a4:61:81:e8:a0:fd:4e:ab:f5:
         0e:1c:7b:4d:b9:12:bb:09:93:28:74:96:24:c7:e7:76:02:cb:
         ed:28:7d:dc:29:31:ea:9d:3f:b7:63:c6:45:01:ab:24:d0:c8:
         43:0c:da:60:2c:a6:88:c4:22:7c:b3:88:79:f9:61:5a:70:1b:
         0e:ba:92:cd:03:61:b5:ca:1f:8d:d2:f4:16:ce:49:8e:3a:0d:
         df:bf:d9:43:ba:24:4f:3e:72:b1:e4:80:16:3a:e0:bf:0c:6d:
         87:f8:8a:38:4b:75:6a:4e:85:79:72:8a:3a:e3:b9:3b:50:0b:
         63:75:5a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 19:55:38 2025 by rpki-client