This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.mft
File:                     DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.mft (raw, json)
Hash identifier:          1tTR2rvqMWzbH5t//nTFJUvnSUV2vUlJ7RSQ+H6Vavo=
Subject key identifier:   5C:F6:62:86:47:8D:6B:A8:A0:6B:FD:CC:0C:D8:64:F5:2D:CC:41:22
Authority key identifier: DB:E1:CE:EF:D3:F3:F2:C6:EF:ED:44:1B:9E:6C:10:E4:3F:9D:B8:6E
Certificate issuer:       /CN=DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E
Certificate serial:       0DDC4D88BB4E6E40F84297CFC093799F0C5F5FEE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.mft
Manifest number:          0321
Signing time:             Wed 24 Dec 2025 10:17:23 +0000
Manifest this update:     Wed 24 Dec 2025 10:12:23 +0000
Manifest next update:     Thu 25 Dec 2025 13:44:23 +0000
Files and hashes:         1: 34352e3138382e38332e302f32342d3234203d3e20323639353837.roa (hash: HuPGets2yD0kaZS9QAO1gzE2/AZ5Lldb3ma5DeOW8zA=)
                          2: 34352e3138382e38322e302f32342d3234203d3e20323639353837.roa (hash: eFZpq7/lysWMyCeALQauJV3pZgyFoGyONpbY4mt4A3E=)
                          3: DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.crl (hash: iN9QbvIlA0A8qSZGaGCE5l+KrrJgVImhCQOB1X53Jkg=)
                          4: 34352e3138382e38322e302f32332d3233203d3e20323639353837.roa (hash: HoBoo1GA/eR/ql8oBZdRyvEIvJV03tZN4bSv6wnSky8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.crl
                          rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 13:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:dc:4d:88:bb:4e:6e:40:f8:42:97:cf:c0:93:79:9f:0c:5f:5f:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E
        Validity
            Not Before: Dec 24 10:12:23 2025 GMT
            Not After : Dec 25 13:44:23 2025 GMT
        Subject: CN=5CF66286478D6BA8A06BFDCC0CD864F52DCC4122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2c:b6:59:86:93:67:68:c8:0d:0e:65:29:68:
                    d7:f2:67:38:a1:aa:0e:0c:f8:93:58:cf:c5:d2:e4:
                    49:53:f9:a1:bd:f8:ec:5e:27:c9:23:58:3a:eb:6e:
                    ba:c1:4e:7a:6d:fb:b0:ae:b2:ba:52:76:e9:8f:e0:
                    fd:62:e1:0b:d0:f7:e0:97:ad:fb:6f:70:68:5a:0f:
                    1a:d0:61:8b:37:f9:8c:fb:cd:6e:f3:b6:e1:8c:dc:
                    23:c2:57:8f:7e:f1:bc:b0:8e:be:db:aa:53:ce:9d:
                    0b:f6:03:e2:5c:4c:22:41:bc:3e:93:75:99:2d:ac:
                    cb:1c:4a:36:62:4c:6b:1a:3e:82:17:0f:d5:22:b1:
                    5d:a3:a1:94:d4:42:0a:7d:77:3a:db:11:a0:7a:24:
                    81:85:d7:28:25:4a:5d:8d:5c:aa:30:e5:1a:2c:ca:
                    0e:0f:e6:f5:66:01:dd:25:7f:e3:05:ed:e8:de:65:
                    a0:77:4f:2f:be:3a:9a:37:0c:5e:7f:68:5b:05:e1:
                    88:ca:67:de:09:cb:84:93:68:48:3b:86:20:28:d4:
                    ca:be:5a:88:a8:87:21:ba:a0:2e:80:b6:8f:08:64:
                    c2:79:6b:72:6c:cf:fa:0f:65:fe:1f:1e:6c:cb:cb:
                    b9:60:7a:92:48:78:53:ae:9a:e6:b1:44:87:d7:d2:
                    0b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F6:62:86:47:8D:6B:A8:A0:6B:FD:CC:0C:D8:64:F5:2D:CC:41:22
            X509v3 Authority Key Identifier:
                keyid:DB:E1:CE:EF:D3:F3:F2:C6:EF:ED:44:1B:9E:6C:10:E4:3F:9D:B8:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:1b:af:45:04:77:ad:8a:d8:eb:8f:0d:84:fc:6f:e4:a5:9d:
         36:3f:01:ae:71:7a:c4:2c:7b:67:7d:71:ef:46:bf:72:cf:d3:
         78:e4:22:17:a9:ca:8d:f1:e4:4e:54:ea:24:46:a0:9a:a1:b5:
         4f:ff:32:55:fe:4e:3c:e1:4a:0c:0c:37:bd:fc:c6:8d:14:fa:
         af:7c:eb:51:35:3a:88:59:f5:e7:18:f6:c7:a7:57:be:94:be:
         c8:30:58:d0:03:f8:12:9c:6f:c0:60:73:37:db:26:09:44:4f:
         16:44:80:87:b0:96:34:29:03:12:88:64:92:a1:1d:45:82:44:
         97:49:91:ab:6d:e0:9a:7d:f6:65:cd:cf:c1:d1:5f:37:43:29:
         c8:fd:17:60:db:06:da:fa:30:e1:81:66:80:fc:dc:ec:f4:cf:
         8d:3e:74:cc:d4:a7:7e:a8:b2:be:a8:11:99:4f:4e:08:c8:39:
         c7:99:3b:86:2c:45:01:0b:34:d0:46:63:a0:18:0d:f0:e0:0d:
         67:05:a1:21:b8:18:95:a2:99:3e:7d:89:df:b9:57:c2:a3:1b:
         fa:48:7c:62:f7:05:3c:0a:f5:68:1f:e8:4c:e8:d5:a5:a6:71:
         cc:a3:dd:ee:d1:93:e6:17:ea:e8:36:ba:14:25:bd:64:56:8c:
         b4:b4:46:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:16:54 2025 by rpki-client