This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.mft
File:                     DA32161651B9F9E5E58F4DC96D7517F0D8023D21.mft (raw, json)
Hash identifier:          ibwGhid52y5/8AmFVNKfvzmNjNUa2EWxilg8TZa3X5E=
Subject key identifier:   CF:80:A9:37:01:C4:EC:08:C3:A6:D2:EC:22:51:E4:2B:48:C7:8C:D3
Authority key identifier: DA:32:16:16:51:B9:F9:E5:E5:8F:4D:C9:6D:75:17:F0:D8:02:3D:21
Certificate issuer:       /CN=DA32161651B9F9E5E58F4DC96D7517F0D8023D21
Certificate serial:       791C66EE743917711B48DC9E2AF22BD7657FA4BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.mft
Manifest number:          84
Signing time:             Sat 20 Dec 2025 06:22:30 +0000
Manifest this update:     Sat 20 Dec 2025 06:17:30 +0000
Manifest next update:     Sun 21 Dec 2025 09:38:30 +0000
Files and hashes:         1: 323830343a356131303a3a2f33342d3334203d3e20323638373436.roa (hash: 9o7lavwjulV3fpAGiQXqev5sOTLeTgQMz9g4ia+BMMA=)
                          2: 323830343a356131303a623030303a3a2f33362d3336203d3e20323638373436.roa (hash: Jav0xLM6Is9afXmhGsCCehbVr+haDaSC4bRoiJlo08g=)
                          3: 34352e3137312e3233312e302f32342d3234203d3e20323638373436.roa (hash: Ay5Yt9PP4Vo/O07n8aNGtvM97N5DN5sYV1Evi2Fqm8E=)
                          4: 323830343a356131303a633030303a3a2f33342d3334203d3e20323638373436.roa (hash: z+3ohN7ys6qvVZHYtT1mUj5ysj5Np0arhMhZnrmaBdg=)
                          5: 34352e3137312e3232382e302f32342d3234203d3e20323638373436.roa (hash: 0sOOVSe32U0lldiIM2aJzoYhRCwuAoLPywGqK1VRF6E=)
                          6: DA32161651B9F9E5E58F4DC96D7517F0D8023D21.crl (hash: JruldSGOWEFrYzeciKhMp5Y4foB9LwLavbsB7j1ikHQ=)
                          7: 323830343a356131303a343030303a3a2f33342d3334203d3e20323638373436.roa (hash: w4Nml5oEApym7dAms2mz08q+PHPJy9+nc+HSFUCIXIQ=)
                          8: 323830343a356131303a3a2f33322d3332203d3e20323638373436.roa (hash: eGZD7+eskYzZyFUSN4zLdCIvAQZ1VuGOy0ALN38lsYQ=)
                          9: 34352e3137312e3232392e302f32342d3234203d3e20323638373436.roa (hash: 053II39czKoDlFApN81A+GOzp4hI6thaDDCXVCdNib8=)
                          10: 323830343a356131303a383030303a3a2f33342d3334203d3e20323638373436.roa (hash: kVm0VIVBjTNJy5YqaBSoeHi2G45/6/NLZ0FjoV6k0AY=)
                          11: 34352e3137312e3233302e302f32342d3234203d3e20323638373436.roa (hash: wE4EBqNlO7eVDZImnzy21QRjaxM6N+Dt8TzyrD5gslw=)
                          12: 34352e3137312e3232382e302f32332d3233203d3e20323638373436.roa (hash: YdarR+QaZ9yj1i7HuzBXmedG2+MATOll3jGHoyY0qa8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.crl
                          rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 09:38:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:1c:66:ee:74:39:17:71:1b:48:dc:9e:2a:f2:2b:d7:65:7f:a4:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA32161651B9F9E5E58F4DC96D7517F0D8023D21
        Validity
            Not Before: Dec 20 06:17:30 2025 GMT
            Not After : Dec 21 09:38:30 2025 GMT
        Subject: CN=CF80A93701C4EC08C3A6D2EC2251E42B48C78CD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9f:4d:c2:03:ef:ca:1e:56:29:4c:c9:e6:7e:
                    e2:c8:42:32:d0:f1:a7:37:09:2c:ae:d6:cb:84:14:
                    71:63:a7:98:81:ec:de:5f:90:99:df:b7:35:e9:2d:
                    c2:32:c3:99:31:74:29:26:0d:92:40:6b:92:93:dc:
                    52:f8:28:00:d7:6b:f5:c3:22:d1:a4:03:b2:9f:91:
                    95:07:79:23:2a:03:61:da:b8:8d:33:35:28:57:a5:
                    54:d4:6c:39:02:a8:47:f2:43:06:44:85:89:43:73:
                    9b:07:64:cb:32:16:22:3d:5f:9f:14:15:9b:36:32:
                    94:7f:8e:ac:0a:70:61:9e:aa:65:40:42:5b:3b:90:
                    b9:76:7d:4d:46:9c:94:4c:58:d8:d7:b6:b6:8a:9c:
                    bc:6a:c1:3b:1d:e2:9f:25:c9:4d:54:ca:60:16:4f:
                    1e:38:0e:28:2d:33:e1:26:f7:0f:75:5c:f9:64:fb:
                    15:1c:0f:af:db:7c:c2:08:47:66:24:b1:88:89:c2:
                    43:16:50:d3:d6:fb:50:f7:b9:66:4e:d8:3e:22:37:
                    8b:88:be:08:51:8b:a2:b7:04:c8:3b:bd:9b:c0:26:
                    ac:f9:75:7f:a4:aa:4a:d5:94:5c:31:04:b0:9a:0f:
                    65:5c:2a:e4:7e:95:74:f4:ce:fe:3b:af:a0:e9:03:
                    e8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:80:A9:37:01:C4:EC:08:C3:A6:D2:EC:22:51:E4:2B:48:C7:8C:D3
            X509v3 Authority Key Identifier:
                keyid:DA:32:16:16:51:B9:F9:E5:E5:8F:4D:C9:6D:75:17:F0:D8:02:3D:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ef:45:e7:9c:5d:e2:3b:86:db:96:57:a6:88:87:ac:e0:43:
         2f:02:30:29:65:6c:ce:c9:6f:8d:6a:6c:a2:fc:76:54:d2:d2:
         ba:74:10:aa:2e:cb:4a:22:0d:61:6a:12:60:94:22:64:24:e4:
         03:e0:59:ce:70:dd:c5:bb:4e:57:4d:71:af:b4:00:7f:0e:9e:
         ad:46:31:43:8e:7b:70:bf:5a:ed:b9:82:dc:2b:06:f9:aa:3a:
         49:e2:e6:86:bf:88:46:cb:89:bc:0d:e8:5c:22:ef:5f:d6:6c:
         7f:19:f8:3b:31:5e:65:fa:09:a2:7a:dc:f5:23:ff:41:7e:d8:
         c0:97:13:36:a4:4a:9a:0c:11:b9:36:d6:9e:12:0c:86:a5:3f:
         c8:82:fa:2c:1f:98:56:e7:28:d2:f6:f6:67:5b:08:97:d9:41:
         3b:a0:b0:84:63:db:c9:ea:be:88:49:e1:8a:41:5c:b7:78:92:
         08:cd:ec:10:be:95:51:a6:7c:fc:d6:cc:49:ae:9e:ab:45:61:
         58:9e:c6:03:0d:f2:42:51:b7:10:db:34:90:51:35:40:92:6d:
         e6:82:ae:52:72:05:5f:29:93:91:fa:94:da:88:b4:ff:a2:b6:
         40:48:cb:40:49:2b:c8:ea:75:58:3d:29:2e:7e:1a:54:9f:c8:
         aa:98:ab:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:55:52 2025 by rpki-client