This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft
File:                     DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft (raw, json)
Hash identifier:          3kQoTbKC8imT7R5ACbQGMzUwoiFUJXhqHykkzxDCB4k=
Subject key identifier:   68:36:BF:BA:96:51:8C:5A:81:46:74:C7:62:B4:2F:06:78:C2:4E:F2
Authority key identifier: DD:0E:EA:2C:C8:09:C7:ED:52:CD:2A:24:D1:44:54:39:0A:C2:46:4C
Certificate issuer:       /CN=DD0EEA2CC809C7ED52CD2A24D14454390AC2464C
Certificate serial:       6FA0E738DF91C5F60BCB8B52E427E3899CE071C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft
Manifest number:          03A8
Signing time:             Thu 18 Dec 2025 02:50:00 +0000
Manifest this update:     Thu 18 Dec 2025 02:45:00 +0000
Manifest next update:     Fri 19 Dec 2025 02:50:00 +0000
Files and hashes:         1: DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.crl (hash: /PDxV7S8+LtzLaijuQk6NapR1fTqU5fzDHBIh7z8ljc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.crl
                          rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 02:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a0:e7:38:df:91:c5:f6:0b:cb:8b:52:e4:27:e3:89:9c:e0:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD0EEA2CC809C7ED52CD2A24D14454390AC2464C
        Validity
            Not Before: Dec 18 02:45:00 2025 GMT
            Not After : Dec 25 02:50:00 2025 GMT
        Subject: CN=3082010A0282010100D4E319F8FBE080103C426E1849DBEC98857C8006AF316149DEEB55F63876D9C3A00406D1F1E37C59F4C37F3AF3CF4146240E8BDDF751690F9BE5E66C0CE57B6D63DEB7F130C261C3AA3C737B54AF3B871EFFCD8AA73C0A9CB73D81F8A62A099193C411C42220D5660D8495383E41E9E1A483663FC92007BA7C245012FFED30D56B9912EE95D9709A37E4E1EB370F3F4E888C397A6C765A94AAD3AF455D0438AB94C951A87E5F3E6D243D47734D5E6D2EA8D62513DF4BF3BE9D8B3624BE4569B4DA56E440DC6928681489E2F2A437AD4CB3D13D8D09513E9D4F0BA91C1B6FEDA0C7D0A51CB8E29986641A4D878A33C9107673832B407D022E60F7D5A8485E907D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e3:19:f8:fb:e0:80:10:3c:42:6e:18:49:db:
                    ec:98:85:7c:80:06:af:31:61:49:de:eb:55:f6:38:
                    76:d9:c3:a0:04:06:d1:f1:e3:7c:59:f4:c3:7f:3a:
                    f3:cf:41:46:24:0e:8b:dd:f7:51:69:0f:9b:e5:e6:
                    6c:0c:e5:7b:6d:63:de:b7:f1:30:c2:61:c3:aa:3c:
                    73:7b:54:af:3b:87:1e:ff:cd:8a:a7:3c:0a:9c:b7:
                    3d:81:f8:a6:2a:09:91:93:c4:11:c4:22:20:d5:66:
                    0d:84:95:38:3e:41:e9:e1:a4:83:66:3f:c9:20:07:
                    ba:7c:24:50:12:ff:ed:30:d5:6b:99:12:ee:95:d9:
                    70:9a:37:e4:e1:eb:37:0f:3f:4e:88:8c:39:7a:6c:
                    76:5a:94:aa:d3:af:45:5d:04:38:ab:94:c9:51:a8:
                    7e:5f:3e:6d:24:3d:47:73:4d:5e:6d:2e:a8:d6:25:
                    13:df:4b:f3:be:9d:8b:36:24:be:45:69:b4:da:56:
                    e4:40:dc:69:28:68:14:89:e2:f2:a4:37:ad:4c:b3:
                    d1:3d:8d:09:51:3e:9d:4f:0b:a9:1c:1b:6f:ed:a0:
                    c7:d0:a5:1c:b8:e2:99:86:64:1a:4d:87:8a:33:c9:
                    10:76:73:83:2b:40:7d:02:2e:60:f7:d5:a8:48:5e:
                    90:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:36:BF:BA:96:51:8C:5A:81:46:74:C7:62:B4:2F:06:78:C2:4E:F2
            X509v3 Authority Key Identifier:
                keyid:DD:0E:EA:2C:C8:09:C7:ED:52:CD:2A:24:D1:44:54:39:0A:C2:46:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:6d:81:1d:2b:e8:45:ef:d0:63:e1:e3:98:d4:af:cb:67:93:
         29:b0:18:85:d1:da:f5:c0:53:83:f5:e5:3d:1e:c3:70:65:fb:
         1c:d6:a8:bb:23:e5:78:44:45:c2:80:8c:6d:3d:e6:93:30:d1:
         f3:44:16:c8:e6:71:0d:44:d1:21:d0:b5:05:9f:b3:75:1c:67:
         24:10:b3:ef:1c:23:36:78:a1:98:43:c4:b3:fc:d2:02:88:fb:
         50:3c:b9:d0:81:02:d5:db:db:4f:43:08:1a:bc:e9:ec:97:56:
         50:02:dd:a7:a3:1b:11:43:51:d6:a1:88:16:e3:1c:5b:e8:13:
         90:2a:d0:ec:0b:cc:7e:ee:0a:5d:8a:2a:38:91:22:fe:09:78:
         b9:0c:97:77:a8:8b:ac:64:a4:95:79:0f:76:77:e3:a1:10:10:
         f2:aa:bf:26:ad:4f:85:7a:7c:08:67:02:82:c3:41:e4:f8:18:
         08:85:74:cc:e8:74:cc:3d:81:a0:62:cb:24:5a:88:3e:e3:d7:
         98:6a:e8:7d:80:f0:a5:17:88:a6:ba:2f:24:94:a3:9b:ba:69:
         da:05:6f:ce:51:8a:81:d4:71:5e:82:11:ed:3f:d6:1d:fc:d4:
         17:d6:a2:51:68:4f:f5:52:0d:70:ae:93:3f:8f:24:e4:a7:5b:
         23:6f:68:d9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----