This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DXgYNwxKSrSTxEJcenyDc8qvCmFTwszhARWKG7sgkFew/0/12C134EB24E98B21A2D6816B023560C23DA02BE0.mft
File:                     12C134EB24E98B21A2D6816B023560C23DA02BE0.mft (raw, json)
Hash identifier:          NxIGgUXjYeiUzG+xw6Ar9WV1RQVGS7Lrmcx/hdCiqMo=
Subject key identifier:   38:D1:23:6F:D9:4B:15:F7:D8:C7:2D:D6:31:AE:A1:9C:B8:BD:38:FD
Authority key identifier: 12:C1:34:EB:24:E9:8B:21:A2:D6:81:6B:02:35:60:C2:3D:A0:2B:E0
Certificate issuer:       /CN=12C134EB24E98B21A2D6816B023560C23DA02BE0
Certificate serial:       1F20536F61F3B071212CEFF821B09209581945D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12C134EB24E98B21A2D6816B023560C23DA02BE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXgYNwxKSrSTxEJcenyDc8qvCmFTwszhARWKG7sgkFew/0/12C134EB24E98B21A2D6816B023560C23DA02BE0.mft
Manifest number:          CD
Signing time:             Wed 24 Dec 2025 13:22:07 +0000
Manifest this update:     Wed 24 Dec 2025 13:17:07 +0000
Manifest next update:     Thu 25 Dec 2025 15:02:07 +0000
Files and hashes:         1: 323830343a366239383a3a2f33322d313238203d3e20323730343131.roa (hash: 5QA4lA3mV4VufAyce7gjqSGby0WktCUzJE2IVoqw5wk=)
                          2: 3139302e38392e3232372e302f32342d3234203d3e20323730343131.roa (hash: NxytjmURymebGL31JFRgY2udtswSy6yPTMjYE3TflOM=)
                          3: 12C134EB24E98B21A2D6816B023560C23DA02BE0.crl (hash: Xt3lli9mjXpQ5hk24hNuPH68qOYRGS0n9LOA46avFW8=)
                          4: 3139302e38392e3232362e302f32342d3234203d3e20323730343131.roa (hash: NJVWbpLNridAhJR3SjF9E5vS731j4d/YSPFV3sfOThg=)
                          5: 3139302e38392e3232342e302f32332d3234203d3e20323730343131.roa (hash: F0mXnXF+35TeEZ/qII3RJYuYeqfQxRlLRt/ww5m1WtA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DXgYNwxKSrSTxEJcenyDc8qvCmFTwszhARWKG7sgkFew/0/12C134EB24E98B21A2D6816B023560C23DA02BE0.crl
                          rsync://rpki-repo.registro.br/repo/DXgYNwxKSrSTxEJcenyDc8qvCmFTwszhARWKG7sgkFew/0/12C134EB24E98B21A2D6816B023560C23DA02BE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12C134EB24E98B21A2D6816B023560C23DA02BE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 15:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:20:53:6f:61:f3:b0:71:21:2c:ef:f8:21:b0:92:09:58:19:45:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12C134EB24E98B21A2D6816B023560C23DA02BE0
        Validity
            Not Before: Dec 24 13:17:07 2025 GMT
            Not After : Dec 25 15:02:07 2025 GMT
        Subject: CN=38D1236FD94B15F7D8C72DD631AEA19CB8BD38FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7e:5a:15:b5:be:17:ff:ae:32:a5:47:7c:1f:
                    14:67:12:29:5e:33:df:2a:5a:b2:0a:1a:eb:64:a1:
                    6f:10:09:2d:d7:fd:c4:dd:19:00:c6:95:a2:6f:ae:
                    62:e3:c0:ab:7c:5b:15:1d:e0:bd:dc:7c:b8:ef:8e:
                    cd:76:31:2c:cc:b0:9c:23:c1:ef:5c:e2:06:b1:b7:
                    53:2e:55:bc:b7:81:5d:7e:b7:b4:33:0c:48:51:94:
                    6b:e2:d1:d7:2f:e8:30:5d:51:09:bf:a4:9e:a5:ca:
                    23:17:c7:43:67:3c:53:73:c4:13:fa:ce:1a:c8:fd:
                    fb:6f:9c:8f:85:30:d5:8a:ce:76:83:c3:0f:8f:2e:
                    a1:c4:00:9c:be:4d:38:d7:f6:b8:de:66:8e:f8:96:
                    09:f0:b9:46:d3:3b:dc:8f:e4:d2:b5:01:4e:48:97:
                    86:63:50:b6:50:70:50:cd:d3:16:d2:0a:94:ef:3f:
                    77:71:df:ae:7b:bf:f8:35:0c:d5:2e:a5:bf:d5:d5:
                    3f:c9:36:ed:74:62:00:32:cb:e6:48:f5:5b:5f:29:
                    7d:52:f2:f7:56:ad:4e:4b:be:f1:e2:05:cb:44:af:
                    e6:07:6c:42:90:63:7f:ba:99:4d:08:0e:ab:83:15:
                    b9:53:91:b0:c6:c8:d0:d3:40:3f:f0:e9:9c:bb:32:
                    1a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D1:23:6F:D9:4B:15:F7:D8:C7:2D:D6:31:AE:A1:9C:B8:BD:38:FD
            X509v3 Authority Key Identifier:
                keyid:12:C1:34:EB:24:E9:8B:21:A2:D6:81:6B:02:35:60:C2:3D:A0:2B:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXgYNwxKSrSTxEJcenyDc8qvCmFTwszhARWKG7sgkFew/0/12C134EB24E98B21A2D6816B023560C23DA02BE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12C134EB24E98B21A2D6816B023560C23DA02BE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXgYNwxKSrSTxEJcenyDc8qvCmFTwszhARWKG7sgkFew/0/12C134EB24E98B21A2D6816B023560C23DA02BE0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:f6:69:26:e4:6f:54:aa:31:3e:1f:d4:30:67:ff:37:03:3c:
         a1:5c:c3:97:f9:a7:04:dd:ce:8c:5c:94:2c:b3:65:f4:58:49:
         56:d1:34:cf:5a:a5:c4:f9:c4:ec:9c:20:80:11:8a:1d:af:85:
         cb:cd:32:bc:0e:86:fe:2e:63:9a:04:8e:45:f9:47:57:93:0a:
         3d:d0:fd:81:d7:4b:f1:ab:ac:6a:19:e4:fe:c3:53:6f:b2:21:
         a8:c4:6e:c1:0f:f1:67:c4:da:47:10:03:07:54:0e:b8:0c:3b:
         01:ca:8b:d7:52:76:01:81:04:75:95:0f:63:ee:55:93:a4:c5:
         13:a2:33:3a:63:2e:cc:45:6d:e5:75:dd:3c:77:3c:1b:f6:c5:
         c6:c4:dc:52:24:2f:ad:0b:b0:a2:5c:03:39:f8:aa:10:27:fa:
         b4:69:4a:83:04:44:ae:36:4e:e5:0b:a0:ec:86:f4:3b:f0:b3:
         54:54:41:10:6c:ff:b6:9d:73:42:72:ed:cb:97:43:da:52:0c:
         25:df:6a:16:0c:b1:72:96:ca:2e:8c:db:8b:63:d4:17:a1:93:
         82:50:36:c2:a3:88:29:5e:ee:f1:4f:d9:bb:d8:a0:7a:75:36:
         5f:54:a5:2e:b6:20:58:6a:6c:3a:ac:a1:31:e5:2a:17:cc:12:
         e9:ac:cf:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:21:48 2025 by rpki-client