This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.mft
File:                     DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.mft (raw, json)
Hash identifier:          /SpxcTJlypy1tNAV3aiJjXhWw3VqvAXzsBi6OlIngWc=
Subject key identifier:   A7:DD:81:F3:C1:41:83:1B:0F:4F:58:9E:D6:96:32:7B:21:39:EA:68
Authority key identifier: DF:9D:1F:F1:4B:D6:D4:20:9A:F1:97:A1:E8:76:8E:8A:7A:93:C5:E7
Certificate issuer:       /CN=DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7
Certificate serial:       7011E42AF1AC9394AD2CE868E186C6AF85C76C94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.mft
Manifest number:          5F
Signing time:             Sat 06 Dec 2025 11:50:04 +0000
Manifest this update:     Sat 06 Dec 2025 11:45:04 +0000
Manifest next update:     Sun 07 Dec 2025 12:02:04 +0000
Files and hashes:         1: DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.crl (hash: 5g/UMnWiYgdm5mbi6GFOo0Quj8Dmnn2vZAzbq1a9WUI=)
                          2: 34352e3232392e382e302f32322d3234203d3e20323637313233.roa (hash: j9/yXjbHLeFdWjNt/+UbsU5bwMHLs49sOwHxrb3oU9U=)
                          3: 323830343a343837383a3a2f33322d3438203d3e20323637313233.roa (hash: oMvEM5HdlBE/2P1OWBPGBn5Q5f+CYXEGkA5YRY0DoGw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.crl
                          rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 12:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:11:e4:2a:f1:ac:93:94:ad:2c:e8:68:e1:86:c6:af:85:c7:6c:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7
        Validity
            Not Before: Dec  6 11:45:04 2025 GMT
            Not After : Dec  7 12:02:04 2025 GMT
        Subject: CN=A7DD81F3C141831B0F4F589ED696327B2139EA68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:52:9e:fc:23:8a:43:f6:be:96:e2:ce:bd:0a:
                    b9:de:a2:24:d5:a3:c1:cd:25:6c:0e:d4:d9:83:5c:
                    49:94:d7:fa:d7:ce:14:ad:49:1c:43:17:a1:3f:0d:
                    a7:05:a5:f8:af:d6:af:a0:e3:83:f3:4b:d6:75:e6:
                    29:3b:4a:8d:6b:9a:03:7b:b3:d2:f7:20:37:e9:bd:
                    fc:fc:23:c5:25:c3:7c:6d:7c:45:85:af:77:93:90:
                    25:e5:a5:15:e8:0a:8e:c3:c6:35:f0:64:ec:ee:ff:
                    b9:ac:ec:fd:fa:fa:8a:a3:87:3e:dc:6a:57:d3:39:
                    ab:fa:de:6e:22:3b:2f:c3:16:a1:06:78:a4:c9:84:
                    60:aa:6b:d2:35:1d:6e:46:22:1e:25:c8:cd:12:78:
                    d3:2a:7c:70:35:6e:90:2f:ce:4e:d6:98:06:72:ba:
                    ab:e7:da:f4:b0:9d:06:ff:aa:b8:32:be:8f:9c:30:
                    39:7d:d3:6e:46:c4:86:ea:7e:fd:77:a1:aa:fa:0b:
                    28:db:56:a2:b6:b3:2d:b2:7e:61:11:89:9f:3e:2a:
                    db:b6:8f:62:d2:1b:cb:c3:b3:e3:e0:90:d1:88:26:
                    4a:32:10:08:02:0c:32:e9:d3:cf:26:26:be:d0:38:
                    c5:79:dd:55:67:15:ba:7c:fe:5b:41:fd:44:a6:55:
                    4c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:DD:81:F3:C1:41:83:1B:0F:4F:58:9E:D6:96:32:7B:21:39:EA:68
            X509v3 Authority Key Identifier:
                keyid:DF:9D:1F:F1:4B:D6:D4:20:9A:F1:97:A1:E8:76:8E:8A:7A:93:C5:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:0a:26:57:4d:c4:f5:dc:de:56:73:96:46:05:6c:9a:af:05:
         ce:c8:4e:bb:cc:8e:a6:1f:0a:46:c8:c2:3d:6e:30:80:61:41:
         7b:fe:5e:02:52:06:e2:9b:b8:d6:fb:30:4d:52:cd:d2:c6:25:
         d1:12:5b:8d:33:0e:c4:79:1c:3d:9f:a8:f0:57:f2:2b:05:47:
         46:81:df:95:e0:80:c3:9a:e7:5d:ce:af:0d:9d:4a:42:56:0b:
         71:7f:6b:7a:4c:15:5c:39:5a:bf:f3:4a:9d:9e:2f:9a:73:99:
         df:f4:8f:0e:71:38:fe:ca:29:d9:d0:46:a6:5b:74:e1:e8:1b:
         91:b7:31:7d:be:fb:96:be:be:26:58:32:98:13:48:1e:e7:4c:
         37:40:82:6f:5e:3a:f9:b2:46:c0:4a:21:49:d0:c2:dd:96:c2:
         dd:cb:15:a5:c5:0e:80:fb:05:65:2f:10:55:65:67:8f:39:26:
         e7:5c:72:ca:48:f2:10:88:47:b9:5f:0e:cb:72:00:d1:00:8b:
         f7:63:61:16:cc:5b:7d:23:b4:16:a7:72:a6:42:f1:92:0b:bd:
         7c:3b:4e:8e:dc:7a:8b:27:62:54:8e:4e:2c:ba:74:b9:f7:62:
         f5:05:2b:8a:25:1e:18:b4:25:9b:6e:cd:f5:e3:da:a1:85:94:
         2c:39:70:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:46:40 2025 by rpki-client