This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.mft
File:                     D45D3138F5EB85594C2205AF938DBA4D8D129CC4.mft (raw, json)
Hash identifier:          rZvCyk50B6mKyNW4PX9+Se1HTdj8KyM6wusRZosk0Ek=
Subject key identifier:   DD:6B:2A:9C:DF:6E:96:A9:B4:F5:E8:77:0E:6F:9B:B8:2E:5D:64:27
Authority key identifier: D4:5D:31:38:F5:EB:85:59:4C:22:05:AF:93:8D:BA:4D:8D:12:9C:C4
Certificate issuer:       /CN=D45D3138F5EB85594C2205AF938DBA4D8D129CC4
Certificate serial:       18EE27D1B7084968207277C380A0815627572056
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.mft
Manifest number:          011A
Signing time:             Sat 06 Dec 2025 13:13:27 +0000
Manifest this update:     Sat 06 Dec 2025 13:08:27 +0000
Manifest next update:     Sun 07 Dec 2025 16:48:27 +0000
Files and hashes:         1: 3230302e33362e3231322e302f32322d3234203d3e20323731333833.roa (hash: uYfQM6YKSgvOOW9mte5IfDz0qPNh0BQj/v17JCn1X+c=)
                          2: 323830343a376161343a3a2f33322d3334203d3e20323731333833.roa (hash: vxQxmFCt9E0nxYJOt/0X0YNotaJuOGuDeX1OIJZ7JpA=)
                          3: D45D3138F5EB85594C2205AF938DBA4D8D129CC4.crl (hash: cUkrpXqvIzMnqzwOsMaqTR+w5XNv1zYEHPfJye34EKA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.crl
                          rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 16:48:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ee:27:d1:b7:08:49:68:20:72:77:c3:80:a0:81:56:27:57:20:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D45D3138F5EB85594C2205AF938DBA4D8D129CC4
        Validity
            Not Before: Dec  6 13:08:27 2025 GMT
            Not After : Dec  7 16:48:27 2025 GMT
        Subject: CN=DD6B2A9CDF6E96A9B4F5E8770E6F9BB82E5D6427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1e:cb:6e:a3:fb:30:3f:cb:00:f3:56:31:81:
                    3f:34:e9:f2:5c:21:58:d5:48:44:5a:c3:10:5d:a1:
                    b2:15:a5:d9:4b:20:54:7f:b5:dd:1e:61:cd:3a:0d:
                    a6:2f:a3:61:8d:b7:a5:e1:a3:96:f6:65:c0:1b:ea:
                    1a:96:50:d1:f0:8e:7a:6c:e4:94:45:09:d1:bb:ff:
                    39:51:66:52:2c:ec:77:a8:1d:5a:66:fb:d3:9f:f6:
                    54:82:1a:6e:89:3c:a6:7b:ea:84:e0:05:ab:63:e9:
                    3c:8d:c3:23:14:11:22:51:78:3a:25:c3:15:25:db:
                    ea:c9:f6:91:44:d4:a3:7e:84:c8:70:55:50:2f:7e:
                    b0:c6:8c:71:55:e4:f9:d9:9f:7a:43:04:23:96:f0:
                    a2:e2:f6:4f:0e:8d:0c:4c:ca:64:0a:09:16:f4:e2:
                    4f:52:c1:ec:c5:a6:57:2f:1a:bb:9e:75:51:ce:6e:
                    95:f0:89:16:40:bb:20:c2:67:a1:8c:51:c0:79:18:
                    6e:23:da:a5:99:94:10:dc:3a:b3:ab:90:ae:59:d1:
                    73:97:75:99:38:07:ad:33:2e:db:ab:ca:12:a3:74:
                    eb:a3:c0:f0:8c:12:b4:fa:66:9e:2f:58:29:7e:ce:
                    ea:da:87:78:9d:9f:b9:53:3f:6a:09:ea:8e:d4:06:
                    00:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6B:2A:9C:DF:6E:96:A9:B4:F5:E8:77:0E:6F:9B:B8:2E:5D:64:27
            X509v3 Authority Key Identifier:
                keyid:D4:5D:31:38:F5:EB:85:59:4C:22:05:AF:93:8D:BA:4D:8D:12:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:de:30:5b:1b:b5:bb:30:a0:bc:2e:1b:5b:34:15:44:06:59:
         9f:2e:15:42:fd:81:97:19:bf:f7:36:c5:0d:2d:d2:3c:3a:87:
         ae:57:2a:39:c9:44:0a:9a:0b:e4:02:fa:44:9f:fb:2a:1f:5c:
         e8:b4:61:a1:8c:bb:a2:fa:29:1d:bd:68:14:9c:ae:a1:f8:42:
         c4:bb:d6:1c:38:b6:01:3e:9c:83:09:7e:dd:0d:12:6c:af:dd:
         c7:2a:55:94:9e:5a:27:3f:97:91:48:70:bb:3a:d0:43:24:3a:
         04:18:27:95:d6:0a:46:14:8c:5a:79:11:f0:89:3b:07:79:4d:
         47:74:d2:e9:06:27:11:53:5a:20:e0:45:e0:ab:47:94:7a:08:
         6c:3e:26:82:58:ed:e8:fa:ec:dc:7b:d1:4c:b8:2c:41:53:84:
         9a:21:c4:48:e3:a9:c3:42:fd:f0:62:67:9a:a7:3f:13:c9:e8:
         87:e9:04:60:a1:78:6b:9a:92:51:0d:10:bb:d1:ec:e3:f4:46:
         dc:24:36:a7:18:85:8b:3b:24:cd:46:3b:9d:6d:0e:ee:0b:02:
         c8:15:4d:c7:f5:30:40:a1:08:75:17:c4:16:61:2b:4d:19:76:
         9a:01:16:3f:4a:ff:05:60:64:32:7a:24:40:23:2e:b6:c3:f8:
         57:0e:83:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:26:48 2025 by rpki-client