This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/D1D35D39498F93F9C9E8E1411E361CC7878B222A.mft
File:                     D1D35D39498F93F9C9E8E1411E361CC7878B222A.mft (raw, json)
Hash identifier:          eupa4lMx6UwZZcfR4LSItzmejafOCKN+WM20IcIJpeY=
Subject key identifier:   C1:A2:A4:43:F5:38:A0:2F:AA:79:84:58:CE:FE:2A:02:41:5F:52:82
Authority key identifier: D1:D3:5D:39:49:8F:93:F9:C9:E8:E1:41:1E:36:1C:C7:87:8B:22:2A
Certificate issuer:       /CN=D1D35D39498F93F9C9E8E1411E361CC7878B222A
Certificate serial:       7DCC7932A7DF102617E3FB6EA0B813D1AAC205DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1D35D39498F93F9C9E8E1411E361CC7878B222A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/D1D35D39498F93F9C9E8E1411E361CC7878B222A.mft
Manifest number:          018B
Signing time:             Thu 18 Dec 2025 19:35:18 +0000
Manifest this update:     Thu 18 Dec 2025 19:30:18 +0000
Manifest next update:     Fri 19 Dec 2025 21:15:18 +0000
Files and hashes:         1: 323830343a353039343a3a2f33322d3438203d3e20323638333937.roa (hash: Z1boymgadhqyXxNZYF1q8FyV3V5e6woWlxKOcxmjbuo=)
                          2: D1D35D39498F93F9C9E8E1411E361CC7878B222A.crl (hash: 1Z1QkrnpB4WuGAT4ByX4byay1OS+qdyUUGwjWsLgf7A=)
                          3: 34352e3136302e3130342e302f32322d3234203d3e20323638333937.roa (hash: ptuJoYLp6LWJYUuBLCNA+GGCucIYgkuS8u4dzQ3LBiU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/D1D35D39498F93F9C9E8E1411E361CC7878B222A.crl
                          rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/D1D35D39498F93F9C9E8E1411E361CC7878B222A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1D35D39498F93F9C9E8E1411E361CC7878B222A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 21:15:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:cc:79:32:a7:df:10:26:17:e3:fb:6e:a0:b8:13:d1:aa:c2:05:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1D35D39498F93F9C9E8E1411E361CC7878B222A
        Validity
            Not Before: Dec 18 19:30:18 2025 GMT
            Not After : Dec 19 21:15:18 2025 GMT
        Subject: CN=C1A2A443F538A02FAA798458CEFE2A02415F5282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7a:9a:c9:31:eb:8b:28:31:9f:ed:11:3a:25:
                    36:a1:30:9f:20:2b:4d:d1:37:a2:dd:80:f7:15:5d:
                    70:d9:60:76:21:27:ee:d4:e4:35:8e:2d:2e:92:1a:
                    e0:37:90:57:65:0f:4d:49:98:25:7f:72:5b:65:de:
                    24:fd:ae:e5:93:39:bd:43:1f:83:ae:92:c1:23:ca:
                    ed:80:68:bf:bd:e8:a3:9d:da:5a:47:d3:76:55:85:
                    37:56:27:92:83:6f:09:05:7c:c8:46:41:fd:4f:df:
                    13:34:19:88:46:02:ad:57:54:8f:49:fd:da:99:46:
                    ef:52:88:3b:7b:5d:8d:dc:f1:ce:79:98:da:41:1c:
                    1c:48:17:26:fc:1e:ae:f9:4d:f1:16:28:c3:0d:a9:
                    03:8c:37:5d:bc:b0:d9:82:32:da:b9:b2:3b:7d:70:
                    75:a0:20:85:44:75:e9:72:3b:75:5c:87:79:39:cb:
                    82:30:8e:57:15:78:1f:2b:6b:1d:15:d0:20:cf:95:
                    ad:72:83:cd:fa:c0:37:da:c3:5f:86:08:fa:85:b9:
                    50:bc:cc:8b:b0:a3:85:19:93:51:c2:19:48:fa:2a:
                    94:15:bb:1a:d4:89:02:59:2d:82:3b:54:30:aa:db:
                    3e:57:56:96:09:a4:2f:9f:cd:ca:65:1b:43:25:41:
                    d0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A2:A4:43:F5:38:A0:2F:AA:79:84:58:CE:FE:2A:02:41:5F:52:82
            X509v3 Authority Key Identifier:
                keyid:D1:D3:5D:39:49:8F:93:F9:C9:E8:E1:41:1E:36:1C:C7:87:8B:22:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/D1D35D39498F93F9C9E8E1411E361CC7878B222A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1D35D39498F93F9C9E8E1411E361CC7878B222A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/D1D35D39498F93F9C9E8E1411E361CC7878B222A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:ec:51:82:19:5c:4d:69:db:f1:2d:66:d5:de:ae:b7:9c:bb:
         5f:58:23:5e:6b:2a:86:8c:ee:59:03:e7:cf:9f:d3:af:60:d0:
         eb:e7:65:c3:a7:4f:76:9d:a7:d6:bb:82:a5:dd:3d:69:d2:4f:
         a1:a6:87:93:fe:87:d8:d8:db:ff:b3:f8:3f:85:ac:3d:2c:ea:
         e4:e0:08:31:e7:58:59:3d:70:7e:4b:c3:69:49:2a:99:7a:6c:
         1b:54:bc:a4:4f:87:a4:69:c5:7a:af:62:01:da:82:6f:34:f4:
         f6:01:db:f9:1b:73:1d:8c:2c:06:79:12:39:da:a7:8f:44:8c:
         35:17:5b:82:0c:0b:9a:95:b5:8f:05:de:31:00:36:0e:4a:77:
         fd:c8:ca:ab:40:f1:c9:bd:4e:53:33:e2:56:a4:30:2c:63:1e:
         a7:97:52:58:59:8d:b3:31:6d:86:ad:28:dc:c9:c0:b7:f3:e6:
         9b:79:f7:bb:fb:e3:6f:80:99:30:25:1e:49:14:e9:0d:43:e8:
         1f:33:cb:cf:0d:b6:8f:b5:dc:1a:d6:9d:11:71:66:70:63:30:
         82:ec:9b:6d:ff:88:8e:ec:86:e2:2d:fa:90:8f:b3:c2:f9:8a:
         56:35:71:0a:0a:b4:1f:85:3c:ea:a2:5c:50:be:68:8f:9b:ba:
         17:b8:4e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----