This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9XenBWbn3N5tcHMbgPoe9zQDyeKPTZ6nomjaXnFqomnp/0/A533BF31ED7FE26A041EB2260858A0F3C9C427A9.mft
File:                     A533BF31ED7FE26A041EB2260858A0F3C9C427A9.mft (raw, json)
Hash identifier:          cSRuv3ViXO3ke3GwjH1+CC9M93iBx6PDklpyosF2Ll4=
Subject key identifier:   17:DD:BE:4D:2B:9A:AE:56:05:D8:24:0E:98:67:30:70:15:64:DF:23
Authority key identifier: A5:33:BF:31:ED:7F:E2:6A:04:1E:B2:26:08:58:A0:F3:C9:C4:27:A9
Certificate issuer:       /CN=A533BF31ED7FE26A041EB2260858A0F3C9C427A9
Certificate serial:       3B0F3A78E9CE87EEE04DCC9ADF3065266802CA9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A533BF31ED7FE26A041EB2260858A0F3C9C427A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XenBWbn3N5tcHMbgPoe9zQDyeKPTZ6nomjaXnFqomnp/0/A533BF31ED7FE26A041EB2260858A0F3C9C427A9.mft
Manifest number:          07
Signing time:             Fri 05 Dec 2025 13:16:46 +0000
Manifest this update:     Fri 05 Dec 2025 13:11:46 +0000
Manifest next update:     Sat 06 Dec 2025 15:57:46 +0000
Files and hashes:         1: A533BF31ED7FE26A041EB2260858A0F3C9C427A9.crl (hash: zBFjPhTtXFjopmAga4ykZ/3S3342wEn4u8KngCNivaE=)
                          2: 323830343a386665633a3a2f33322d313238203d3e20323733353232.roa (hash: CH0c6KD5vS7JIe2oz9tLcd1EbDYa03o+9DuukSxwopY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9XenBWbn3N5tcHMbgPoe9zQDyeKPTZ6nomjaXnFqomnp/0/A533BF31ED7FE26A041EB2260858A0F3C9C427A9.crl
                          rsync://rpki-repo.registro.br/repo/9XenBWbn3N5tcHMbgPoe9zQDyeKPTZ6nomjaXnFqomnp/0/A533BF31ED7FE26A041EB2260858A0F3C9C427A9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A533BF31ED7FE26A041EB2260858A0F3C9C427A9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 15:57:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:0f:3a:78:e9:ce:87:ee:e0:4d:cc:9a:df:30:65:26:68:02:ca:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A533BF31ED7FE26A041EB2260858A0F3C9C427A9
        Validity
            Not Before: Dec  5 13:11:46 2025 GMT
            Not After : Dec  6 15:57:46 2025 GMT
        Subject: CN=17DDBE4D2B9AAE5605D8240E986730701564DF23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:59:c0:be:a9:b1:2f:57:08:a8:24:80:b7:5c:
                    2c:9c:88:2a:cd:1a:26:b8:16:c1:9e:ac:8b:63:f8:
                    f1:e1:f4:4a:dc:74:7b:2d:dc:d4:d3:40:2c:8c:40:
                    72:d7:74:d4:67:c6:e5:33:70:79:6b:af:f6:73:02:
                    24:47:3a:f7:cd:a6:b9:4d:50:9f:a4:0e:50:c7:ea:
                    75:69:2b:8a:2f:cf:f5:50:c6:c8:99:1a:16:68:73:
                    bb:68:ea:db:5b:14:7e:8b:ed:79:0e:81:b7:f9:50:
                    da:bb:2e:6e:0e:d0:ba:d2:8a:64:1d:ba:c1:73:c5:
                    db:55:18:d3:20:79:73:35:34:56:a1:f0:fb:f6:94:
                    24:ab:fd:9a:65:ae:a0:da:4b:b9:10:85:42:33:e3:
                    b0:e3:8b:99:b2:e3:a6:8e:e9:9e:3c:a6:c5:56:2a:
                    aa:63:de:05:a2:a5:60:19:25:18:04:4e:2e:24:ac:
                    32:cc:7a:d4:7f:f6:c5:e8:25:a1:d0:0e:04:fe:17:
                    6d:2a:42:8e:79:ba:e5:2b:5b:3b:cb:ea:c2:f7:64:
                    6b:4c:d1:2a:7d:a6:e8:b3:02:2e:99:06:6c:6d:0e:
                    f7:54:1c:db:32:9d:6d:6f:eb:ee:4f:ee:9c:39:85:
                    e3:6a:fd:0a:92:ac:8b:91:1a:72:6d:c2:51:9d:f7:
                    2a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:DD:BE:4D:2B:9A:AE:56:05:D8:24:0E:98:67:30:70:15:64:DF:23
            X509v3 Authority Key Identifier:
                keyid:A5:33:BF:31:ED:7F:E2:6A:04:1E:B2:26:08:58:A0:F3:C9:C4:27:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XenBWbn3N5tcHMbgPoe9zQDyeKPTZ6nomjaXnFqomnp/0/A533BF31ED7FE26A041EB2260858A0F3C9C427A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A533BF31ED7FE26A041EB2260858A0F3C9C427A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XenBWbn3N5tcHMbgPoe9zQDyeKPTZ6nomjaXnFqomnp/0/A533BF31ED7FE26A041EB2260858A0F3C9C427A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:7b:63:f7:9f:32:de:9c:60:fa:6d:1f:6d:d4:9a:93:4d:6b:
         b2:8c:3d:3c:ca:05:c2:3e:2c:d9:33:b7:ee:09:b2:51:1f:4b:
         7e:27:7b:c8:06:a8:08:3c:ff:81:bb:44:6b:9a:8a:b5:64:bb:
         a5:c8:de:8a:62:f2:79:fa:89:ea:75:e1:fd:ce:e1:b8:c3:63:
         7d:dc:1c:bb:5d:b9:c6:74:20:2e:55:19:52:d4:6f:d5:c9:b9:
         f7:53:ef:e5:35:7b:eb:0d:c6:70:23:35:cb:7d:40:4f:3c:03:
         08:b7:1c:03:9c:f3:3e:f8:eb:9e:28:5b:8e:74:67:7d:b9:cc:
         92:31:22:2e:7c:3c:df:30:0c:ba:93:a2:dd:26:7f:f9:53:d6:
         6a:0a:f1:ae:a9:f1:12:18:9f:b3:79:de:df:75:43:5c:ad:be:
         d5:52:4c:eb:58:5a:e3:7b:fd:6c:8c:0f:cd:7f:56:86:2a:89:
         0a:90:85:ca:0a:e1:16:2f:49:3c:6d:4a:89:b9:e0:99:a7:7f:
         09:23:99:a5:d5:6a:39:5b:fe:ad:96:88:10:76:46:5c:bd:51:
         4a:12:1a:8c:dc:4b:7a:99:14:1f:f7:1c:53:e6:c9:97:cf:32:
         c9:21:be:c5:eb:20:7f:20:61:2d:14:98:28:a5:8f:d0:65:00:
         9a:c7:a4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:55:43 2025 by rpki-client