This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/D88B454BC594C5A1800134E375B465D91C070DFD.mft
File:                     D88B454BC594C5A1800134E375B465D91C070DFD.mft (raw, json)
Hash identifier:          GZrIcROPt/EsIqz75tmSeIgAmEL812G4kZ+jWWaKglg=
Subject key identifier:   86:4D:C9:76:9B:E3:9D:0E:2A:16:02:8D:35:7A:C5:E1:1E:E9:FF:06
Authority key identifier: D8:8B:45:4B:C5:94:C5:A1:80:01:34:E3:75:B4:65:D9:1C:07:0D:FD
Certificate issuer:       /CN=D88B454BC594C5A1800134E375B465D91C070DFD
Certificate serial:       34800CAB0CCEAC718532B1E07748D426E5945F7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D88B454BC594C5A1800134E375B465D91C070DFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/D88B454BC594C5A1800134E375B465D91C070DFD.mft
Manifest number:          FB
Signing time:             Sat 06 Dec 2025 09:34:39 +0000
Manifest this update:     Sat 06 Dec 2025 09:29:39 +0000
Manifest next update:     Sun 07 Dec 2025 12:06:39 +0000
Files and hashes:         1: D88B454BC594C5A1800134E375B465D91C070DFD.crl (hash: 8delrP8f66tAToSzLBeZw6ntRTeWraHzVzXK876B0qQ=)
                          2: 323830343a326564343a3a2f33322d313238203d3e20323635333639.roa (hash: CMPuVa43M/mtSeZmA5q7/xTl8XIpukeF40GbTH+b8DU=)
                          3: 3136382e3230352e3130302e302f32322d3332203d3e20323635333639.roa (hash: JYM/ddqp6VUTUxpc3tV7MQMhhwucHwZ22I/OI4yVnUs=)
                          4: 32342e3135322e3130382e302f32322d3332203d3e20323635333639.roa (hash: B0g0/6dpDwpXEPB2OXlQQy2yzhoKUdtgY5moX7NXSJg=)
                          5: 3133382e3131382e34342e302f32322d3332203d3e20323635333639.roa (hash: KbZ+qNpkBGT3I9oVhnyT8DmgMDvWtfrQzIY/Ox8k91U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/D88B454BC594C5A1800134E375B465D91C070DFD.crl
                          rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/D88B454BC594C5A1800134E375B465D91C070DFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D88B454BC594C5A1800134E375B465D91C070DFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 11:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:80:0c:ab:0c:ce:ac:71:85:32:b1:e0:77:48:d4:26:e5:94:5f:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D88B454BC594C5A1800134E375B465D91C070DFD
        Validity
            Not Before: Dec  6 09:29:39 2025 GMT
            Not After : Dec  7 12:06:39 2025 GMT
        Subject: CN=864DC9769BE39D0E2A16028D357AC5E11EE9FF06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c8:0a:da:ef:d9:00:73:e5:b8:1a:a7:21:f2:
                    7a:4f:32:26:82:f2:f8:fc:1e:17:e0:90:7e:51:20:
                    f9:d5:d4:7b:5c:f2:07:6e:b3:d7:48:fb:75:ef:40:
                    ad:2e:e6:a1:61:e6:89:5f:e0:88:08:aa:77:36:83:
                    b7:35:72:05:fb:16:5b:cd:69:4f:84:b4:a3:fa:3e:
                    ed:13:b5:9e:de:3f:d0:18:6f:65:e3:c6:d8:4f:12:
                    b8:64:9a:69:13:f3:4d:9f:7e:61:d7:2c:df:b9:14:
                    6c:bc:61:0c:cb:7e:5e:b9:e4:02:ea:c5:d1:b3:49:
                    2e:82:c3:01:b1:96:a3:72:d1:78:b7:ea:a4:a1:76:
                    0c:62:6e:89:e7:a6:87:ad:3e:10:71:7e:58:bb:bc:
                    a2:7b:59:0d:d7:80:70:21:9b:24:52:81:19:71:00:
                    29:28:69:6a:c2:3d:a8:8d:cb:69:7f:84:58:17:41:
                    4e:9a:6b:d2:92:8c:b3:05:9b:59:0e:95:cf:13:df:
                    0c:bb:6d:77:86:92:54:d5:4a:38:15:e2:48:7c:81:
                    61:6c:fc:c0:bd:48:7d:38:9e:ce:84:ac:4a:0d:db:
                    30:b0:96:20:e1:37:4a:fa:6a:68:ab:77:20:54:69:
                    c1:27:e2:87:16:9e:21:a7:55:eb:a2:0f:d8:67:2b:
                    80:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:4D:C9:76:9B:E3:9D:0E:2A:16:02:8D:35:7A:C5:E1:1E:E9:FF:06
            X509v3 Authority Key Identifier:
                keyid:D8:8B:45:4B:C5:94:C5:A1:80:01:34:E3:75:B4:65:D9:1C:07:0D:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/D88B454BC594C5A1800134E375B465D91C070DFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D88B454BC594C5A1800134E375B465D91C070DFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/D88B454BC594C5A1800134E375B465D91C070DFD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:56:36:25:e7:e9:06:7c:db:1b:64:02:2f:4e:4b:61:a1:aa:
         e8:f8:e9:91:20:08:0c:7a:26:f3:dc:47:26:f5:fc:a7:aa:00:
         02:00:48:18:0e:af:67:c6:82:a7:a9:89:a0:e0:fe:5f:e1:b4:
         07:8b:77:14:4b:33:75:66:1f:74:7f:da:15:f2:9b:0c:24:01:
         15:30:42:2b:0e:05:0e:c9:96:22:6c:eb:85:fd:ab:c4:54:c9:
         a7:07:9f:bc:1b:ce:45:3a:64:3c:a0:14:82:2c:0d:07:8c:53:
         a7:6b:6e:b9:97:f3:38:4b:c8:da:61:48:c7:dd:32:cb:8f:55:
         83:d6:09:dd:b0:57:92:6d:f9:54:a2:94:61:47:6b:ce:dc:37:
         c7:76:cb:8a:07:f1:78:63:23:56:fe:62:41:b4:e9:08:bf:22:
         e6:b7:2a:cc:5b:3a:78:e8:04:63:b6:79:4a:27:6f:04:8c:15:
         04:55:c1:5a:23:51:7c:02:2b:8e:73:d6:9d:cc:d9:f5:ef:f8:
         bd:de:3e:dd:8c:0c:4f:22:1a:95:39:21:8a:97:3e:de:af:14:
         45:55:3d:eb:2d:09:89:8c:f6:2a:5b:b1:70:a0:db:54:9e:6a:
         46:4e:1d:bf:b2:59:1d:33:3d:cf:1d:fa:eb:22:1f:df:c7:ed:
         87:53:50:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:33:00 2025 by rpki-client