This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DhMPqgihgHogyDaWMfd5yEvbxXoNFQHWLfH5KcigwFNc/0/CDFEB6D9C1260E03DCF13C463D3B957509643F51.mft
File:                     CDFEB6D9C1260E03DCF13C463D3B957509643F51.mft (raw, json)
Hash identifier:          t8OphJxgElVhmQtfEKsVkeJl3hkChulPYCEK5EJDOaY=
Subject key identifier:   25:53:41:97:A4:8A:B7:BF:EA:1F:EB:08:78:8F:39:A2:79:16:31:B4
Authority key identifier: CD:FE:B6:D9:C1:26:0E:03:DC:F1:3C:46:3D:3B:95:75:09:64:3F:51
Certificate issuer:       /CN=CDFEB6D9C1260E03DCF13C463D3B957509643F51
Certificate serial:       5151B310354BD8CE58A36406CD0248C019FDA2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDFEB6D9C1260E03DCF13C463D3B957509643F51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhMPqgihgHogyDaWMfd5yEvbxXoNFQHWLfH5KcigwFNc/0/CDFEB6D9C1260E03DCF13C463D3B957509643F51.mft
Manifest number:          64
Signing time:             Wed 24 Dec 2025 10:01:11 +0000
Manifest this update:     Wed 24 Dec 2025 09:56:11 +0000
Manifest next update:     Thu 25 Dec 2025 10:43:11 +0000
Files and hashes:         1: CDFEB6D9C1260E03DCF13C463D3B957509643F51.crl (hash: E8l/tbd2FYpYSfWjWbVljCKVpaOP1HIG2fXFf1Ux5p4=)
                          2: 3138312e3232342e36302e302f32322d3234203d3e20323731343035.roa (hash: 2Cre0KABK0W8NVNBrUAbZosqorQPvF1HvLKY7xYZ0pE=)
                          3: 323830343a376230303a3a2f33322d3438203d3e20323731343035.roa (hash: hM/YFnEsuBwr+mO8uMeGduG/8Lxb6GshqYsUHLXYjak=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhMPqgihgHogyDaWMfd5yEvbxXoNFQHWLfH5KcigwFNc/0/CDFEB6D9C1260E03DCF13C463D3B957509643F51.crl
                          rsync://rpki-repo.registro.br/repo/DhMPqgihgHogyDaWMfd5yEvbxXoNFQHWLfH5KcigwFNc/0/CDFEB6D9C1260E03DCF13C463D3B957509643F51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDFEB6D9C1260E03DCF13C463D3B957509643F51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 10:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:51:b3:10:35:4b:d8:ce:58:a3:64:06:cd:02:48:c0:19:fd:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDFEB6D9C1260E03DCF13C463D3B957509643F51
        Validity
            Not Before: Dec 24 09:56:11 2025 GMT
            Not After : Dec 25 10:43:11 2025 GMT
        Subject: CN=25534197A48AB7BFEA1FEB08788F39A2791631B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a8:f4:6f:53:be:8a:f0:d0:70:d6:0e:a3:2a:
                    b7:ba:28:78:c8:f4:7c:6a:01:ee:c9:40:7f:95:cd:
                    72:2a:06:4e:0b:5e:a3:c6:98:3c:da:af:1e:79:f0:
                    5f:14:52:ee:cc:02:c0:4d:af:1d:d6:71:85:ba:cf:
                    da:25:13:d3:20:3f:0f:29:e7:9d:e6:8e:9a:ae:29:
                    93:0d:6f:ef:13:20:0d:6e:74:7b:aa:0f:73:35:59:
                    e6:06:ce:91:6f:33:f4:d7:bb:8c:52:22:31:c5:d9:
                    98:af:26:72:37:ad:54:f7:48:c9:ac:57:69:ac:59:
                    e7:4c:96:98:04:0f:0e:eb:b6:00:ea:d9:4e:c1:f5:
                    be:08:fa:47:d7:bb:ee:aa:bd:4a:d7:34:03:af:a9:
                    ff:5d:b2:ad:86:89:5c:7b:3b:eb:7a:9b:49:31:d3:
                    c3:ca:3c:d7:0b:49:83:a2:91:a0:cf:d2:55:0f:16:
                    cf:fe:3b:b2:88:0b:fe:fe:4e:f9:44:4e:b4:3e:94:
                    b6:e8:a2:b1:bd:71:bf:36:59:2c:f1:56:94:e9:ab:
                    14:e5:b1:a4:3b:c0:48:a1:6b:f9:28:94:0a:ab:5a:
                    3a:c3:87:31:b4:b9:09:2b:fe:58:d6:76:9c:cb:dc:
                    a2:3e:4c:90:8f:e7:0b:d0:43:5a:0f:39:1c:ea:94:
                    b5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:53:41:97:A4:8A:B7:BF:EA:1F:EB:08:78:8F:39:A2:79:16:31:B4
            X509v3 Authority Key Identifier:
                keyid:CD:FE:B6:D9:C1:26:0E:03:DC:F1:3C:46:3D:3B:95:75:09:64:3F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhMPqgihgHogyDaWMfd5yEvbxXoNFQHWLfH5KcigwFNc/0/CDFEB6D9C1260E03DCF13C463D3B957509643F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDFEB6D9C1260E03DCF13C463D3B957509643F51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhMPqgihgHogyDaWMfd5yEvbxXoNFQHWLfH5KcigwFNc/0/CDFEB6D9C1260E03DCF13C463D3B957509643F51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:a5:ba:c6:29:91:69:1e:4a:16:7d:79:1a:68:b4:33:f8:1a:
         3d:78:6d:21:10:60:c3:51:99:2b:a4:4b:36:7e:42:55:04:81:
         ec:c7:80:bf:17:e2:a3:b4:e2:86:90:f9:98:95:cf:6d:94:a9:
         d2:f7:f4:7c:9e:10:f2:2b:a7:99:1c:82:a3:2b:88:99:0e:09:
         c3:48:21:66:8c:43:dd:86:ac:35:cb:66:47:2b:a6:1d:05:3e:
         8e:4a:70:27:ea:75:68:46:71:55:c4:08:6f:76:f9:54:0d:c7:
         42:c6:ed:a7:37:9f:76:4f:aa:c0:4a:59:97:04:15:dc:df:04:
         75:c8:79:a4:8e:eb:f6:da:31:f8:f0:76:7c:17:fe:81:0b:19:
         3c:74:c7:fd:04:f1:35:77:3f:af:1d:34:49:40:cd:d8:00:fa:
         22:89:e2:87:82:3e:97:7e:56:60:5e:4a:fb:e6:76:9f:05:3f:
         42:b2:fb:39:02:24:5f:ca:0a:96:06:72:41:1b:e8:f8:30:5d:
         53:22:7f:2b:f2:81:9c:49:4d:ed:ab:78:ce:30:52:c0:5b:50:
         d4:ea:bc:bb:73:3d:ad:03:1a:01:82:1e:b0:53:8f:46:dc:80:
         7c:e0:85:0d:7b:d8:b9:43:07:00:b6:1a:2e:14:b0:90:83:bd:
         ea:2d:bb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:25:21 2025 by rpki-client