This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft
File:                     D1FFDF44055E16082D529730642377D751467152.mft (raw, json)
Hash identifier:          UCyPl3jGOkdOqraJ1trHIw5f7cbpNnL6AyL72O/Z2xg=
Subject key identifier:   F9:D0:AC:28:16:48:7A:8E:54:50:3F:B4:F8:64:93:74:60:FA:55:C9
Authority key identifier: D1:FF:DF:44:05:5E:16:08:2D:52:97:30:64:23:77:D7:51:46:71:52
Certificate issuer:       /CN=D1FFDF44055E16082D529730642377D751467152
Certificate serial:       7261B7FAD0153C170FE3B460FC3D907879F0936A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft
Manifest number:          01D8
Signing time:             Sat 06 Dec 2025 06:46:16 +0000
Manifest this update:     Sat 06 Dec 2025 06:41:16 +0000
Manifest next update:     Sun 07 Dec 2025 09:20:16 +0000
Files and hashes:         1: 34352e3137322e3234302e302f32322d3234203d3e20323638373832.roa (hash: iyFn8dmCWg3WyydJEml+Y2v5BY14GrWXyZ7/DRDXmgA=)
                          2: 323830343a356139343a3a2f33322d3438203d3e20323638373832.roa (hash: ymgJuTMZWv+63/VwPVmOxio8KOfxsIABsf+i4ONWEss=)
                          3: D1FFDF44055E16082D529730642377D751467152.crl (hash: S45mp0NEQSLQ15YMJjokBDYDfryGhPgOXDfFsnKQKvk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.crl
                          rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 08:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:61:b7:fa:d0:15:3c:17:0f:e3:b4:60:fc:3d:90:78:79:f0:93:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1FFDF44055E16082D529730642377D751467152
        Validity
            Not Before: Dec  6 06:41:16 2025 GMT
            Not After : Dec  7 09:20:16 2025 GMT
        Subject: CN=F9D0AC2816487A8E54503FB4F864937460FA55C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ec:c2:41:bb:4c:a2:46:79:14:31:be:30:68:
                    c8:03:36:34:83:b9:77:54:a9:5e:e5:69:94:64:6b:
                    a4:c6:7d:75:1e:42:67:98:7b:d5:1a:c1:2c:75:cf:
                    2c:2d:e8:88:e9:2b:92:41:4e:f2:5e:b8:3e:05:8b:
                    fd:03:bf:72:aa:50:9b:e2:7d:22:01:27:01:ba:c0:
                    64:af:69:48:a3:29:d5:9c:20:25:7d:67:f0:1d:8a:
                    c1:7b:d7:03:4c:80:ee:4a:d1:69:19:59:57:ba:aa:
                    45:66:ce:47:0f:40:33:57:bd:39:59:10:d7:c8:b6:
                    0f:6f:1a:28:f5:dc:8f:75:da:9e:78:44:70:6a:54:
                    22:90:d0:35:d1:4c:a2:6f:33:fb:13:b6:c5:a1:2a:
                    3e:62:33:86:d8:92:65:bd:2a:24:1f:76:5c:1e:d7:
                    f6:7b:32:b5:c1:c7:21:5e:03:5d:da:10:9d:7c:85:
                    ec:b7:22:f1:fb:47:9e:38:0b:49:4b:81:0e:57:cd:
                    c2:ac:e1:e7:b6:c2:f9:92:b0:20:4b:6a:43:91:3a:
                    38:5e:8a:3a:dd:bc:bc:e4:ad:ab:6f:b2:91:bc:a2:
                    a3:45:da:1c:83:c1:a0:c7:63:8a:ff:07:d8:d2:f6:
                    b0:93:5a:93:4a:d5:b9:2f:76:6b:83:5d:1f:83:fb:
                    9a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D0:AC:28:16:48:7A:8E:54:50:3F:B4:F8:64:93:74:60:FA:55:C9
            X509v3 Authority Key Identifier:
                keyid:D1:FF:DF:44:05:5E:16:08:2D:52:97:30:64:23:77:D7:51:46:71:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e6:e9:3b:8a:67:fd:89:f7:4d:80:9d:00:2f:fb:00:d8:57:
         fe:ab:0f:77:d7:0b:86:d2:8d:68:c0:64:97:d9:50:02:45:62:
         3e:cf:4b:e9:4e:55:51:c7:e9:be:6e:ca:41:b6:d0:f7:1a:70:
         de:74:10:f2:af:cd:57:41:f8:88:8a:ce:4e:3e:02:6a:db:39:
         09:48:1e:cc:de:77:04:c9:cb:f6:0a:6b:6e:b5:4e:1c:c1:4f:
         c1:11:e1:f7:cd:61:79:94:d8:bf:a7:5c:a2:90:2b:0e:7d:ee:
         e9:08:58:ef:ed:60:3f:b1:1d:03:7d:13:ca:c4:7e:38:4c:be:
         08:cf:2e:f5:9b:d1:a6:c7:ad:b3:37:97:68:37:d0:7d:5f:f4:
         eb:1f:ce:b5:19:85:11:a7:9b:ad:4c:11:92:f4:3c:48:d5:3a:
         40:36:cf:54:29:3d:31:2b:eb:70:0f:74:be:31:3e:75:6c:d7:
         ac:c9:7a:1d:4e:51:77:eb:9f:94:11:bb:52:cd:20:5f:b1:e9:
         88:e7:13:6f:d3:d6:26:90:15:20:d1:f5:3b:c6:f7:f1:d0:f0:
         3a:5c:7b:74:3b:00:59:4c:f4:d5:a0:d0:c2:ca:27:97:bf:fe:
         88:4c:9d:40:ca:41:6b:fb:7f:e6:10:e1:b8:9b:ae:25:83:a3:
         b2:14:67:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:18:41 2025 by rpki-client