This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.mft
File:                     59D97368930A28A43621D32020C3E70B26E79708.mft (raw, json)
Hash identifier:          9QmkLZfaZiIEDvNqBy5tI+EKJYppzsf0ISfDMQrAoRY=
Subject key identifier:   28:28:A5:83:B4:1B:F9:EB:D7:1E:D2:ED:45:D0:05:C7:B2:12:C3:B3
Authority key identifier: 59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08
Certificate issuer:       /CN=59D97368930A28A43621D32020C3E70B26E79708
Certificate serial:       2ACCC682A82CB77555BC5F1CF3E21102F131B309
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.mft
Manifest number:          0343
Signing time:             Sun 21 Dec 2025 13:06:58 +0000
Manifest this update:     Sun 21 Dec 2025 13:01:57 +0000
Manifest next update:     Mon 22 Dec 2025 16:00:57 +0000
Files and hashes:         1: 3137302e37382e3136342e302f32322d3234203d3e203238363538.roa (hash: ILaUv5LheA82BLcRiTZ4J5bL4j6PSH8fBcs/nV/+rG4=)
                          2: 3138392e38342e3234302e302f32302d3234203d3e203238363538.roa (hash: 9qxkubjTORA/BlgZHwJqZivoPzfJL/VWVvi2/D/DSeU=)
                          3: 3138392e33392e3234302e302f32302d3234203d3e203238363538.roa (hash: oI0u9eR8AtfamD35SHgTK8+hk/YuvmDp94alNIrcnOg=)
                          4: 3137372e3130372e3234302e302f32302d3234203d3e203238363538.roa (hash: m5SIvTjxno/L9m4MOMAwBwEwk2nm3TH9u4uz0qKedRk=)
                          5: 3138362e3233372e33322e302f32302d3234203d3e203238363538.roa (hash: TJ92yvDvdzsH6b6NbF1EmGBprdatBKdRKffT+RjKG2U=)
                          6: 3138372e39342e3131322e302f32302d3234203d3e203238363538.roa (hash: m8qv20RKj7KJcqyy13RHH8WuiFSL5q5mPKCVRt8+0Wc=)
                          7: 323830343a316537383a3a2f33322d3438203d3e203238363538.roa (hash: YD/9KcQBH7q0IFL6sELyEdc8fLrkSFXfeHXiojqxrHY=)
                          8: 323830343a3562633a3a2f33322d3438203d3e203238363538.roa (hash: MXlqrAy0Z1MDXDxyWe8n1QH3s9g2TOIHThPwaMg5+ys=)
                          9: 59D97368930A28A43621D32020C3E70B26E79708.crl (hash: 5McF+VtLyQ6stblDqeHAh08dZeQCMJ6NoSgocQZ3BVM=)
                          10: 3138372e36332e302e302f32302d3234203d3e203238363538.roa (hash: g3+o7IN8s9cG27XBYZ/RI/NkbaOI4vSvbHwbPlpaJKg=)
                          11: 3138392e312e34382e302f32302d3234203d3e203238363538.roa (hash: WVcNM0hE8ID+MC5ev5cQpMF4L/Q5NKUjV2QfoCXVQjA=)
                          12: 3137372e3130372e3232342e302f32302d3234203d3e203238363538.roa (hash: eXaBB5ydcpPNHj5tgt/2PtMEOXSf2jNpxRRQQ4aEZvE=)
                          13: 3137302e3234342e3135322e302f32322d3234203d3e203238363538.roa (hash: Am6rIkDleCfRLPnHVAi2dM4thUJO+uHw961iV8Cvph4=)
                          14: 3133312e3232312e3230382e302f32322d3234203d3e203238363538.roa (hash: bHyaJC+ezoJVgFNgTfZl7YtfPUwDSiTr2LcXD2o7O/A=)
                          15: 3138372e33332e39362e302f32302d3234203d3e203238363538.roa (hash: U6tpXhqD+PfQbYWCiH3hH2m4VrjsUl1QxpVaZrVHJQI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl
                          rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 16:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:cc:c6:82:a8:2c:b7:75:55:bc:5f:1c:f3:e2:11:02:f1:31:b3:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59D97368930A28A43621D32020C3E70B26E79708
        Validity
            Not Before: Dec 21 13:01:57 2025 GMT
            Not After : Dec 22 16:00:57 2025 GMT
        Subject: CN=2828A583B41BF9EBD71ED2ED45D005C7B212C3B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b0:5b:26:f9:54:8e:9b:c6:30:63:d3:d6:f7:
                    65:b8:da:d0:8e:89:76:6d:f0:07:a9:f7:83:07:89:
                    df:92:d0:63:45:12:8d:fc:17:5b:4f:d2:d0:f7:df:
                    b7:a1:b9:50:9b:01:52:9e:8d:07:4e:6a:99:35:58:
                    76:48:77:1d:db:8d:50:6b:6f:07:2e:d4:4c:a2:ec:
                    36:96:c4:a5:78:51:50:06:1f:4a:1a:43:78:6a:fe:
                    22:93:84:fd:e0:94:24:fd:72:dc:c0:12:2b:e1:50:
                    2e:67:cb:88:b1:21:09:c5:06:8e:64:0e:ea:2c:91:
                    04:88:ba:16:b6:28:17:9f:04:11:83:11:41:89:2d:
                    11:eb:af:bc:75:99:fa:2b:1d:d8:53:a4:70:a8:2e:
                    12:7f:c7:fa:0f:a3:51:1b:7e:bb:37:af:8c:b2:86:
                    b4:c2:8c:e3:6b:fa:0c:6e:98:48:85:2c:89:96:87:
                    8f:26:bf:27:82:f2:81:ff:e5:ed:51:c0:90:20:64:
                    05:7d:f6:8d:70:a2:2d:6c:f1:f8:d7:28:ab:01:7e:
                    da:c7:ff:f2:1e:e3:61:79:8a:11:5f:dd:1f:2f:ac:
                    61:51:97:32:6c:bd:02:2d:1a:5d:47:11:7d:81:4e:
                    27:dd:d9:38:e0:fc:93:ef:09:54:03:12:62:3d:f4:
                    f2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:28:A5:83:B4:1B:F9:EB:D7:1E:D2:ED:45:D0:05:C7:B2:12:C3:B3
            X509v3 Authority Key Identifier:
                keyid:59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:7c:49:55:f0:0a:06:53:1c:95:67:4e:f2:c8:23:e3:74:f5:
         64:2c:fc:92:37:76:d4:c0:80:da:0e:91:2f:5f:8c:9c:c2:3c:
         65:64:c2:7e:fd:80:2f:94:39:89:2a:75:85:49:7d:3b:b8:5c:
         17:38:ef:54:d5:56:28:24:1a:ce:47:a8:f6:22:3f:bc:0d:fa:
         d8:dc:a6:df:49:43:1f:54:a1:7c:a4:27:e5:9b:cc:41:94:26:
         ca:bf:d5:c4:5c:77:8e:51:af:1c:fe:b6:0a:25:05:84:d7:5c:
         c7:24:31:6d:95:d2:1b:fb:e4:2b:31:94:b8:7d:2a:16:45:e1:
         03:18:45:3e:9f:f7:60:57:72:0f:77:3e:c4:e6:cf:c1:73:e8:
         9c:e5:3e:c8:0d:53:83:0f:52:d6:59:03:9f:ab:c7:9c:c4:25:
         59:d7:b9:94:d7:a4:1e:5a:26:4d:02:92:c2:0e:23:8d:f6:a3:
         1c:a7:9e:1d:78:8d:3a:de:ef:a2:20:92:de:83:06:34:b6:58:
         58:ac:c2:1b:a5:c7:47:b3:e9:60:54:62:71:8d:f2:5c:c5:57:
         5f:74:9f:ea:29:d9:60:04:5a:e1:67:e1:eb:fd:e5:36:ba:e9:
         aa:18:85:bd:2c:34:45:36:9c:02:36:5a:d8:1c:ad:52:2e:e7:
         1a:67:71:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 19:31:28 2025 by rpki-client