This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft
File:                     A1E6749C09E9E32D11C15678D45C1B936D525291.mft (raw, json)
Hash identifier:          vuBs39blVcNNyRUU+jGxGCMIyvErEKMMA/JGnunkx6Q=
Subject key identifier:   17:33:85:32:E3:94:49:7B:B3:5C:0D:9E:6E:F3:09:8C:B7:6C:8C:E4
Authority key identifier: A1:E6:74:9C:09:E9:E3:2D:11:C1:56:78:D4:5C:1B:93:6D:52:52:91
Certificate issuer:       /CN=A1E6749C09E9E32D11C15678D45C1B936D525291
Certificate serial:       55E99D70C0719428B8BD4B63C0AE15FBA4E816C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft
Manifest number:          031B
Signing time:             Sat 20 Dec 2025 13:20:34 +0000
Manifest this update:     Sat 20 Dec 2025 13:15:34 +0000
Manifest next update:     Sun 21 Dec 2025 14:44:34 +0000
Files and hashes:         1: 34352e3138302e3235322e302f32322d3234203d3e20323633323530.roa (hash: ORMMmfGrpHZXNdiWY4NkF0L84UkSb+i4s3EBcHiCyW8=)
                          2: 323830343a313763343a3a2f33322d3438203d3e20323633323530.roa (hash: CYHN9rK1skgLKugPUzgZGszwHwGA3WFLBGl49tYzvoY=)
                          3: 3137372e3233342e3136302e302f31392d3234203d3e20323633323530.roa (hash: wlPnqD7qa81i/u0GABiCUaJGTeP2DvD2cJaBWTo4WcI=)
                          4: A1E6749C09E9E32D11C15678D45C1B936D525291.crl (hash: L3Ms8UUBIPXEBB97/3DNxNs2LVEIgtZapmGj09q0RxI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.crl
                          rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 14:44:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e9:9d:70:c0:71:94:28:b8:bd:4b:63:c0:ae:15:fb:a4:e8:16:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1E6749C09E9E32D11C15678D45C1B936D525291
        Validity
            Not Before: Dec 20 13:15:34 2025 GMT
            Not After : Dec 21 14:44:34 2025 GMT
        Subject: CN=17338532E394497BB35C0D9E6EF3098CB76C8CE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:45:12:0d:88:77:c9:35:32:30:fd:d1:0a:69:
                    49:95:67:dd:42:00:9a:d3:35:2b:ed:21:19:51:57:
                    a8:d4:cd:06:e3:5b:5a:c4:af:92:63:67:c2:51:84:
                    a1:0e:92:94:24:72:4b:31:32:a6:f4:7f:0f:f4:06:
                    37:69:3d:a8:02:40:4c:e0:5c:29:d4:55:74:ef:7c:
                    13:2d:bb:92:00:13:9f:6b:ca:35:38:48:f4:eb:ca:
                    ed:63:97:04:98:14:99:dc:09:d5:36:76:04:3d:37:
                    6b:87:b4:26:d9:f6:d4:90:de:c9:6a:5b:c7:49:5c:
                    67:08:c6:ce:f1:95:d1:45:8b:da:28:5e:79:87:3d:
                    09:14:dc:d7:5d:29:8f:c2:01:58:fc:a7:e5:51:dc:
                    26:f7:07:45:19:b6:09:b1:e3:42:fd:01:57:d9:50:
                    fc:90:2e:15:8c:f7:79:33:84:14:95:6d:47:28:5c:
                    44:9f:2d:1d:c3:42:90:22:ad:5e:62:36:ea:0b:b7:
                    66:42:30:3b:1e:16:55:6d:43:a1:d8:05:45:bc:53:
                    87:75:53:db:0d:91:22:22:9e:20:4c:26:f6:6a:a0:
                    bb:69:67:09:72:05:d8:4d:f9:9d:9a:e6:d4:b2:1f:
                    7d:7d:dd:8a:b6:db:64:e8:96:88:89:53:c5:21:0a:
                    65:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:33:85:32:E3:94:49:7B:B3:5C:0D:9E:6E:F3:09:8C:B7:6C:8C:E4
            X509v3 Authority Key Identifier:
                keyid:A1:E6:74:9C:09:E9:E3:2D:11:C1:56:78:D4:5C:1B:93:6D:52:52:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:24:5b:18:11:39:72:1d:b6:87:e8:9c:f9:57:70:68:5e:1b:
         1e:1f:49:57:3b:45:8b:1b:9f:3a:5a:7f:fb:37:7d:b3:45:9e:
         0b:3a:20:53:9f:c6:fa:d2:3a:c6:ff:ce:15:f5:b5:e4:cd:28:
         1f:1d:18:a6:9c:53:90:b2:f5:c4:9c:02:9a:e4:74:e8:ae:c8:
         6d:f6:7a:9f:12:d6:d2:cf:03:bb:89:7f:0d:09:20:68:28:02:
         dc:80:3e:8c:57:3c:19:3d:cf:9c:e2:1d:c2:00:1e:0c:03:15:
         ab:02:80:52:60:a4:3c:25:69:fb:ca:1b:06:40:12:30:74:2f:
         88:5a:77:c9:e2:e6:84:db:31:e5:24:e8:ae:67:d7:18:0b:d7:
         97:7d:c9:a9:22:98:82:9b:fb:4d:89:93:1b:35:4c:73:95:94:
         fc:f3:53:73:84:de:47:08:f2:8b:eb:e9:39:0e:61:81:5c:a4:
         d7:86:5f:80:35:1a:e8:8d:e7:19:32:ed:9a:81:11:1a:c8:dc:
         40:c1:d2:1b:01:83:6e:a0:29:d6:5d:90:7d:6a:6f:31:60:80:
         49:04:b3:21:2f:60:e1:2e:51:31:31:04:3f:3e:2a:bd:be:64:
         4e:95:88:97:ba:37:fa:78:9f:d1:b7:4e:35:bc:ad:ce:8d:4f:
         13:a3:6a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:13:52 2025 by rpki-client