This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/DD96C22DA79157384B8F68AB1845AAF1E794A86D.mft
File:                     DD96C22DA79157384B8F68AB1845AAF1E794A86D.mft (raw, json)
Hash identifier:          Wu8/i5d2d+nfl4tiGCF7IH/m2n/UyK5wdRSTNCKS7yc=
Subject key identifier:   70:54:F2:35:E0:24:AD:14:09:1B:27:5F:63:D8:D4:09:12:EE:57:E7
Authority key identifier: DD:96:C2:2D:A7:91:57:38:4B:8F:68:AB:18:45:AA:F1:E7:94:A8:6D
Certificate issuer:       /CN=DD96C22DA79157384B8F68AB1845AAF1E794A86D
Certificate serial:       2CE89C017EED7BF224FF8D39C2D40E0C1BBF4E88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD96C22DA79157384B8F68AB1845AAF1E794A86D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/DD96C22DA79157384B8F68AB1845AAF1E794A86D.mft
Manifest number:          024E
Signing time:             Sat 06 Dec 2025 04:50:08 +0000
Manifest this update:     Sat 06 Dec 2025 04:45:08 +0000
Manifest next update:     Sun 07 Dec 2025 05:34:08 +0000
Files and hashes:         1: 34352e3138322e3231322e302f32322d3332203d3e20323639323531.roa (hash: xSMmFAAWq1u+fIRT1VfC0jFrGbToGjtqVCKo6TuGZ48=)
                          2: DD96C22DA79157384B8F68AB1845AAF1E794A86D.crl (hash: v/A6CtSQvOgnlDe8yYs4qsTdzqw6LfqkG21kHRGdTeI=)
                          3: 323830343a363162343a3a2f33322d313238203d3e20323639323531.roa (hash: vTMSQ0NcGNW7SwsUL0mwA0ATgC9+9p6vx7LJ6LWK5rc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/DD96C22DA79157384B8F68AB1845AAF1E794A86D.crl
                          rsync://rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/DD96C22DA79157384B8F68AB1845AAF1E794A86D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD96C22DA79157384B8F68AB1845AAF1E794A86D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:34:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:e8:9c:01:7e:ed:7b:f2:24:ff:8d:39:c2:d4:0e:0c:1b:bf:4e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD96C22DA79157384B8F68AB1845AAF1E794A86D
        Validity
            Not Before: Dec  6 04:45:08 2025 GMT
            Not After : Dec  7 05:34:08 2025 GMT
        Subject: CN=7054F235E024AD14091B275F63D8D40912EE57E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f9:02:9f:ab:78:e4:e4:df:83:12:a8:f7:02:
                    55:47:af:36:77:4f:f5:61:d6:60:48:ee:9b:2f:04:
                    a6:a7:5c:b4:28:fe:ad:e7:17:2d:dd:bf:38:57:7b:
                    d9:e7:71:10:5e:ee:a8:75:20:23:f5:d8:04:da:c7:
                    34:83:d6:7b:0c:85:eb:e0:f4:e0:4e:8e:30:6f:59:
                    3a:bc:34:66:47:e6:b8:98:cd:30:f3:56:bd:a1:2b:
                    fe:a8:0b:9e:ae:23:55:3a:62:cf:94:c0:12:1b:9f:
                    dd:78:a4:79:b3:68:de:15:13:87:1e:e1:40:d8:7c:
                    6e:0b:79:53:fb:3e:9b:b8:b3:87:f0:b1:0a:34:c2:
                    c8:d6:cc:1f:73:50:4c:ff:68:73:e1:a7:ea:e2:b2:
                    ca:a8:8e:55:e5:b8:64:65:96:7f:56:73:b0:d4:d1:
                    16:ed:99:ed:68:3c:1b:90:a6:53:47:b1:11:c0:c1:
                    5b:8f:e0:be:fc:fa:4b:fa:32:72:64:bb:9a:72:97:
                    fa:ad:80:50:1b:98:6f:13:e8:af:04:1b:24:64:56:
                    6b:5a:4c:73:8b:fe:38:00:af:68:27:c4:ff:46:a3:
                    f6:b3:68:10:84:55:1f:2e:34:66:d0:80:de:c4:5a:
                    05:8f:15:bf:ba:b7:ab:c7:cd:05:e0:0b:c7:ee:7d:
                    2d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:54:F2:35:E0:24:AD:14:09:1B:27:5F:63:D8:D4:09:12:EE:57:E7
            X509v3 Authority Key Identifier:
                keyid:DD:96:C2:2D:A7:91:57:38:4B:8F:68:AB:18:45:AA:F1:E7:94:A8:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/DD96C22DA79157384B8F68AB1845AAF1E794A86D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD96C22DA79157384B8F68AB1845AAF1E794A86D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/DD96C22DA79157384B8F68AB1845AAF1E794A86D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ad:14:26:63:cf:49:1e:3b:13:82:9e:db:e6:2c:34:d6:44:
         f9:1a:38:2f:e3:cc:16:f0:4d:31:76:38:4e:5d:c4:00:85:ae:
         c0:07:db:cc:13:a1:fa:fe:ee:f4:52:b4:74:e3:91:f0:55:7b:
         43:78:9c:4e:42:e5:47:b6:64:08:74:f4:90:e8:d9:54:fa:fb:
         c7:5a:2f:f2:02:c6:3a:fd:36:33:c5:14:58:30:2b:df:00:35:
         19:c3:c2:28:0d:5a:65:7e:31:58:3e:cb:57:85:3e:eb:6e:c5:
         f8:95:ac:8c:dc:77:d2:40:3f:e8:fb:58:4f:f0:d1:40:10:c0:
         13:38:12:91:7f:f0:66:f4:75:05:18:c3:42:b7:2c:73:d6:40:
         81:6d:e0:16:6d:4b:91:d7:65:dc:c4:11:7d:9e:45:c3:0d:5e:
         15:4f:c3:f5:ff:de:65:4a:78:9a:72:8b:b5:63:e3:08:61:3f:
         50:51:2a:09:2a:6f:28:be:c5:87:0b:47:87:86:ff:21:ce:67:
         b6:27:96:ab:68:65:f7:3d:02:ee:c8:dd:10:c1:e5:c9:2f:8f:
         c3:84:1d:12:3b:44:7c:3e:ec:21:da:31:43:18:f9:02:46:dc:
         64:60:f2:83:a4:3d:98:fc:5d:51:79:d8:c3:a7:63:20:7c:19:
         39:a9:be:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:34:36 2025 by rpki-client