This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/2/1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3.mft
File:                     1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3.mft (raw, json)
Hash identifier:          vx7g4lnINnM3lEYyDA043Zhdf7dTaJC37kfe7IW6ujg=
Subject key identifier:   89:7E:66:8B:4D:F5:76:AE:1A:FE:1E:B6:03:87:67:05:C0:A9:61:BB
Authority key identifier: 1D:D3:EF:11:1F:81:64:1C:8B:BB:14:F0:B1:A2:FA:CB:16:E6:73:E3
Certificate issuer:       /CN=1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3
Certificate serial:       40C35D61E0CEDF770AFAFB355D6EBED17EF72A3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/2/1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3.mft
Manifest number:          5F
Signing time:             Fri 05 Dec 2025 19:08:48 +0000
Manifest this update:     Fri 05 Dec 2025 19:03:48 +0000
Manifest next update:     Sat 06 Dec 2025 21:55:48 +0000
Files and hashes:         1: 34352e352e3134302e302f32322d3234203d3e20323639363333.roa (hash: /34JmMpLaB5gJO+Bdme705yqnHRF1zJXlJd4k50TR0A=)
                          2: 34352e3139302e34302e302f32322d3234203d3e20323639363333.roa (hash: oGgYgBFd9ASID+xoV1xwnWGtbrt+cdGIGMMgkSjuEV0=)
                          3: 1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3.crl (hash: CZJt+1wrOhiRi65CRDasFlT5HwIILUc1pQg6spXURVA=)
                          4: 323830343a363738343a3a2f33322d3438203d3e20323639363333.roa (hash: hjCqZgjh6U5euHUSypQobO6iZOKi4DB1cG3F9jAiqAU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/2/1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3.crl
                          rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/2/1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 21:55:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c3:5d:61:e0:ce:df:77:0a:fa:fb:35:5d:6e:be:d1:7e:f7:2a:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3
        Validity
            Not Before: Dec  5 19:03:48 2025 GMT
            Not After : Dec  6 21:55:48 2025 GMT
        Subject: CN=897E668B4DF576AE1AFE1EB603876705C0A961BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:bd:16:e6:e2:25:1a:f9:91:a7:ed:44:e8:95:
                    b8:0b:4d:6c:73:3d:b4:0d:b4:0e:63:be:b3:93:14:
                    79:68:85:ae:df:d2:9f:8b:c5:e7:23:6f:30:90:87:
                    0b:b9:f8:f5:78:02:b1:b5:92:bd:f0:fc:f8:2f:6f:
                    41:e2:fb:bd:68:dc:1a:71:f0:90:5d:31:61:c5:0d:
                    7a:f6:a3:35:a6:f2:33:ae:59:8b:e5:f2:67:ee:9b:
                    f9:fd:3e:85:e7:91:e0:fc:84:a5:6c:05:c2:de:b3:
                    8d:fc:b3:a6:f6:5a:5b:8e:f6:60:bf:35:09:fe:33:
                    7a:e1:77:a3:78:77:52:7c:10:8b:0a:54:18:1b:87:
                    e1:0e:b7:27:39:bf:a1:d8:65:35:a8:33:e9:8d:8c:
                    41:1c:0e:c3:f8:44:c9:4b:b2:16:f8:f2:26:e9:9b:
                    35:0b:5c:75:26:38:18:bd:b6:ec:54:c2:1a:41:50:
                    6c:e4:58:25:4f:ce:3f:2e:31:ad:6d:0d:e8:5e:35:
                    62:b5:c2:a4:53:5d:23:f8:e0:34:e0:9d:50:fb:4e:
                    c9:fe:5d:f3:cd:07:e3:07:10:3b:c8:96:b0:5f:21:
                    51:25:62:10:df:ae:77:79:fe:fc:4d:35:3d:ea:24:
                    41:4e:fa:17:15:a9:30:ce:81:04:91:8e:28:8a:3e:
                    ee:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:7E:66:8B:4D:F5:76:AE:1A:FE:1E:B6:03:87:67:05:C0:A9:61:BB
            X509v3 Authority Key Identifier:
                keyid:1D:D3:EF:11:1F:81:64:1C:8B:BB:14:F0:B1:A2:FA:CB:16:E6:73:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/2/1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/2/1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:8f:fc:4f:24:af:93:aa:56:08:e9:25:0d:6a:bd:a4:b2:9c:
         f4:3b:10:95:ab:19:94:10:f5:c0:45:50:66:f9:4e:09:63:1e:
         ca:0b:c5:17:04:27:c8:be:ce:7e:5f:aa:f7:17:4c:40:21:5f:
         b2:4a:3c:67:2d:b6:15:c2:04:6e:1a:9c:05:8a:6c:ec:06:c5:
         5f:8e:d1:b3:a0:ae:67:76:ed:ce:4d:81:30:a1:67:c6:d5:a9:
         fb:b2:a6:9e:65:b8:9d:6a:6f:39:15:44:8a:34:ce:33:72:66:
         fb:94:7b:ca:4c:96:31:34:4d:a5:8a:33:bb:a7:c1:fd:9f:51:
         6d:b3:1a:c4:66:c9:88:c1:8b:b5:ed:a7:44:1c:4e:a5:91:b2:
         7b:19:9b:f1:9c:57:9e:33:78:6a:dc:7f:de:2b:70:56:5f:87:
         a7:6f:e9:c3:d1:6c:b8:7d:f2:64:3b:d1:02:69:ab:e9:dc:70:
         d1:f4:af:5b:c2:96:ab:49:c4:f9:1d:f2:f5:a8:db:e6:05:cb:
         2a:f7:cb:42:b9:4e:8f:ee:d6:f2:56:f1:b5:7b:f2:a9:99:e5:
         c0:92:fa:cd:f2:ee:1a:72:d6:a5:d1:57:27:07:c3:10:1e:a8:
         fb:41:b2:91:3c:af:02:04:db:8d:d8:41:ed:7e:fd:8e:0a:33:
         ec:01:f3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:59:04 2025 by rpki-client