This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/1/97424470C7D54F881BCE937CD5129F6A6F1340E1.mft
File:                     97424470C7D54F881BCE937CD5129F6A6F1340E1.mft (raw, json)
Hash identifier:          36MDaEdbylpfriOEam/oP8AkiWLW3gi1Aoc+eKhEhcc=
Subject key identifier:   B1:20:C8:61:BD:C2:DA:47:1B:89:58:D7:AD:21:77:72:40:6F:B0:5F
Authority key identifier: 97:42:44:70:C7:D5:4F:88:1B:CE:93:7C:D5:12:9F:6A:6F:13:40:E1
Certificate issuer:       /CN=97424470C7D54F881BCE937CD5129F6A6F1340E1
Certificate serial:       2211C2DAACFFDFB74F32AB5380F6ABADCBF267ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97424470C7D54F881BCE937CD5129F6A6F1340E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/1/97424470C7D54F881BCE937CD5129F6A6F1340E1.mft
Manifest number:          033E
Signing time:             Fri 19 Dec 2025 05:23:30 +0000
Manifest this update:     Fri 19 Dec 2025 05:18:30 +0000
Manifest next update:     Sat 20 Dec 2025 08:49:30 +0000
Files and hashes:         1: 97424470C7D54F881BCE937CD5129F6A6F1340E1.crl (hash: iaYd6k1F3z/21VcZYQsY9WSm7D4K/IylNMPl+We2aCU=)
                          2: 323830343a363763383a3a2f33322d3438203d3e20323639363530.roa (hash: uWe0YYPD2q9GFLIelzfAMf8yM5vAGF/0HnyGSpNcYQQ=)
                          3: 34352e3139302e3230302e302f32322d3234203d3e20323639363530.roa (hash: 87n1rmrKqN2N9DdSAMj81EKcuaL/5vvuWwVcPHVJRwM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/1/97424470C7D54F881BCE937CD5129F6A6F1340E1.crl
                          rsync://rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/1/97424470C7D54F881BCE937CD5129F6A6F1340E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97424470C7D54F881BCE937CD5129F6A6F1340E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 08:49:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:11:c2:da:ac:ff:df:b7:4f:32:ab:53:80:f6:ab:ad:cb:f2:67:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97424470C7D54F881BCE937CD5129F6A6F1340E1
        Validity
            Not Before: Dec 19 05:18:30 2025 GMT
            Not After : Dec 20 08:49:30 2025 GMT
        Subject: CN=B120C861BDC2DA471B8958D7AD217772406FB05F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:17:69:7d:48:00:52:0d:10:71:c4:68:96:86:
                    cc:5b:da:f3:e9:9a:6e:65:f5:e6:80:fe:d8:46:63:
                    00:13:51:96:3e:85:a4:4e:ca:33:44:65:f0:4a:12:
                    4a:f4:07:40:b6:9f:62:1a:c6:14:6b:71:c6:3a:7e:
                    9c:97:e8:c9:f5:c4:ef:33:1f:de:f3:56:87:2e:aa:
                    ec:36:9a:c8:7c:c0:6d:a6:2f:38:e7:7f:d3:01:f6:
                    2f:5e:ec:99:31:c1:81:7f:c3:a8:b9:02:3c:13:30:
                    e0:00:a9:71:f8:45:5f:ae:e9:82:bb:d9:29:cd:cc:
                    90:15:e8:78:45:d4:e3:5e:53:79:2a:10:3f:4c:34:
                    8a:dc:51:b6:09:01:9b:f0:a1:3f:c3:85:5e:5f:8c:
                    69:89:4d:93:54:d9:d2:fc:e9:e3:fc:f1:2d:c5:d2:
                    20:f5:13:1b:51:98:62:2d:29:a8:0b:ae:69:2c:a0:
                    e1:a7:ce:a0:3d:24:2b:5c:bc:68:f3:f8:40:d8:93:
                    9c:d6:8b:e8:c4:3c:47:09:09:e7:c2:04:65:b5:96:
                    a8:8f:35:be:ef:45:72:f6:68:e4:d0:07:26:6e:38:
                    7d:8e:9c:97:e2:18:24:24:bd:c1:f8:0f:f4:83:36:
                    cd:f3:8c:2d:24:54:d8:ac:f9:4a:9c:64:c7:2c:f1:
                    6d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:20:C8:61:BD:C2:DA:47:1B:89:58:D7:AD:21:77:72:40:6F:B0:5F
            X509v3 Authority Key Identifier:
                keyid:97:42:44:70:C7:D5:4F:88:1B:CE:93:7C:D5:12:9F:6A:6F:13:40:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/1/97424470C7D54F881BCE937CD5129F6A6F1340E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97424470C7D54F881BCE937CD5129F6A6F1340E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/1/97424470C7D54F881BCE937CD5129F6A6F1340E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:1e:13:64:bf:10:36:97:dd:28:75:54:a7:2d:c6:ba:b9:75:
         20:23:a7:1e:ff:35:63:78:0c:c4:23:51:28:49:f4:45:30:f6:
         46:9f:39:c1:96:e9:50:f3:9b:2e:ac:21:4d:c1:6f:2b:c6:a1:
         44:fc:52:60:fe:5b:b5:85:e6:de:71:a0:e1:4c:1b:39:ac:4e:
         ca:9d:3a:e4:e4:1b:d1:90:4d:e7:90:61:5c:60:17:67:1d:e7:
         3f:0b:50:9c:08:b5:6a:a0:e4:9b:8e:cc:d1:88:98:3f:24:94:
         50:d0:bf:43:77:a7:c0:52:76:6c:94:e6:d3:eb:1f:2c:8b:03:
         d8:74:f7:18:25:d0:c9:b9:60:dd:39:11:93:10:47:0b:15:08:
         eb:82:25:d6:bd:ae:cf:27:15:24:e3:ca:37:0c:79:61:c9:b8:
         7e:de:71:b0:9a:4d:59:2e:9b:57:63:13:bf:db:c6:c1:1d:94:
         4e:c4:27:90:c8:24:c2:e0:00:ee:a0:16:58:c2:6a:12:8f:df:
         42:f2:a9:27:d1:a1:58:b1:c5:27:99:13:b9:85:c5:32:1b:9a:
         68:10:37:8f:30:2b:d7:63:3d:99:f9:f5:6e:37:a0:e4:ac:6b:
         fb:e0:e0:94:a1:59:fb:82:b1:f2:a8:22:02:a1:05:f7:db:36:
         3d:6f:54:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:39:41 2025 by rpki-client