This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/DB055820B43AFF7A7173228557B8758637A96D68.mft
File:                     DB055820B43AFF7A7173228557B8758637A96D68.mft (raw, json)
Hash identifier:          +WCo3EjbpguugGPHyHQYHpc+nxZNzpKb604BNPdTS9g=
Subject key identifier:   22:9E:03:B4:B9:CF:90:31:E3:A3:5D:F1:CA:12:DF:4E:A1:6D:CF:84
Authority key identifier: DB:05:58:20:B4:3A:FF:7A:71:73:22:85:57:B8:75:86:37:A9:6D:68
Certificate issuer:       /CN=DB055820B43AFF7A7173228557B8758637A96D68
Certificate serial:       39C8F91D2998CB971E98C851F6A4C28CB5A2D9F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB055820B43AFF7A7173228557B8758637A96D68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/DB055820B43AFF7A7173228557B8758637A96D68.mft
Manifest number:          0124
Signing time:             Fri 05 Dec 2025 23:01:57 +0000
Manifest this update:     Fri 05 Dec 2025 22:56:57 +0000
Manifest next update:     Sun 07 Dec 2025 00:42:57 +0000
Files and hashes:         1: 3136382e3139372e3134342e302f32322d3234203d3e20323635343837.roa (hash: jU4z1nJKKMmBdaxd9tenaKQBBE7ho173YliStjW0h/A=)
                          2: 323830343a333465383a3a2f33322d3438203d3e20323635343837.roa (hash: LsIVEANCiPvmFvtyEEyTYrw++UMIhJnQlPsOjmuXoVk=)
                          3: DB055820B43AFF7A7173228557B8758637A96D68.crl (hash: Pskyn5Zl/5qyamSHh+ZJSyAQ7PZ3xS4vTcpLtZAAP1s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/DB055820B43AFF7A7173228557B8758637A96D68.crl
                          rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/DB055820B43AFF7A7173228557B8758637A96D68.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB055820B43AFF7A7173228557B8758637A96D68.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 00:42:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:c8:f9:1d:29:98:cb:97:1e:98:c8:51:f6:a4:c2:8c:b5:a2:d9:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB055820B43AFF7A7173228557B8758637A96D68
        Validity
            Not Before: Dec  5 22:56:57 2025 GMT
            Not After : Dec  7 00:42:57 2025 GMT
        Subject: CN=229E03B4B9CF9031E3A35DF1CA12DF4EA16DCF84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:16:f2:c5:90:23:55:d0:e1:1f:a9:53:23:cd:
                    cf:ef:34:e7:a6:01:23:03:e3:d7:82:1f:e7:d6:20:
                    87:ec:f0:0a:df:ea:14:57:3a:00:8d:f9:a9:db:a5:
                    1a:82:2b:f5:91:62:39:a7:b2:51:e5:d3:23:67:fe:
                    8d:8d:aa:f1:94:87:c8:f3:8c:69:4f:7c:8c:05:62:
                    da:ac:54:fa:ab:eb:f2:40:5e:5a:78:0b:2d:ed:86:
                    a3:cd:d1:2c:16:de:c2:d2:0a:a0:f7:3d:b7:1b:a8:
                    05:3e:58:6e:7e:83:60:70:72:ca:35:37:cf:38:1c:
                    37:83:99:4d:15:f7:2b:04:a7:73:60:88:92:1d:1c:
                    17:7b:b0:d8:42:65:db:fc:d0:a1:5e:b9:6a:21:66:
                    38:b7:6c:92:36:3c:6f:08:9c:10:80:e7:61:5e:dd:
                    0c:ab:0f:9d:9a:9d:ca:b2:20:d1:cc:b8:54:80:f4:
                    f6:6f:8b:58:7f:16:ef:eb:62:6e:93:1f:b5:31:ea:
                    a4:56:3a:e6:67:15:71:09:48:2c:5d:bc:1e:87:de:
                    53:59:81:8e:09:ea:c7:f5:74:07:b6:6a:fa:6a:fc:
                    9b:c6:50:4c:69:af:e9:60:e4:55:a8:74:5b:74:3e:
                    04:c4:3e:17:2e:2a:51:c9:d1:2a:76:85:3c:99:98:
                    5f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:9E:03:B4:B9:CF:90:31:E3:A3:5D:F1:CA:12:DF:4E:A1:6D:CF:84
            X509v3 Authority Key Identifier:
                keyid:DB:05:58:20:B4:3A:FF:7A:71:73:22:85:57:B8:75:86:37:A9:6D:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/DB055820B43AFF7A7173228557B8758637A96D68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB055820B43AFF7A7173228557B8758637A96D68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/DB055820B43AFF7A7173228557B8758637A96D68.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:4b:51:9a:58:d3:0c:81:42:b5:61:1b:d3:72:e9:81:c1:e0:
         2e:90:0b:70:03:a2:7e:ec:a0:ac:96:1c:56:f2:30:f5:e9:d0:
         ba:6d:78:df:89:34:e3:b5:6c:ec:5a:f1:e5:d9:db:b6:59:69:
         bd:f4:24:c5:d9:61:bb:11:c8:2f:08:e5:92:f5:f2:a1:fb:d5:
         b0:d0:ba:a4:e6:db:73:ea:8d:be:ae:a9:70:6b:53:e6:ce:e0:
         28:0b:6b:49:fd:09:68:b3:cb:47:41:f7:c0:79:51:c9:75:f1:
         74:bb:fa:2e:50:17:f9:bc:67:1a:ad:05:0b:8c:1a:d9:4b:45:
         76:a0:47:e3:d1:09:a6:15:68:b8:80:5b:c8:a2:d5:91:7c:12:
         8d:97:b8:b8:b3:9d:e1:cc:e4:3c:5c:8a:61:87:a2:66:52:89:
         d0:0e:a3:2c:df:38:49:a4:d8:e4:8f:07:22:0c:c3:9c:a3:31:
         92:2c:b0:eb:cb:53:11:be:9e:19:21:f9:37:1c:81:b8:e6:73:
         78:6d:b7:e6:84:5f:89:5b:84:a3:37:0e:3a:70:f5:91:7b:13:
         c5:56:05:69:82:e8:44:ee:3a:4c:5d:cb:99:6d:1b:ba:ff:3f:
         52:10:ff:61:ac:5f:bc:34:6f:b1:e1:9e:b8:28:4e:25:a7:98:
         ea:ae:03:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:24:01 2025 by rpki-client