This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.mft
File:                     25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.mft (raw, json)
Hash identifier:          RfLBRXhIye6mVwUmt/sDx1bG8DSO7/sNU9AjIdy2gM0=
Subject key identifier:   DC:A3:0D:40:14:2E:CF:75:28:A8:1B:AA:A1:CC:D8:E9:5E:2D:8E:23
Authority key identifier: 25:C5:4A:79:FB:81:17:C3:BC:74:B6:44:4C:04:A7:DE:AA:5D:49:BB
Certificate issuer:       /CN=25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB
Certificate serial:       72DD18E2F8D41C55D5F7E358EA255D41AF7AC0F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.mft
Manifest number:          89
Signing time:             Sat 06 Dec 2025 04:20:00 +0000
Manifest this update:     Sat 06 Dec 2025 04:15:00 +0000
Manifest next update:     Sun 07 Dec 2025 08:03:00 +0000
Files and hashes:         1: 25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.crl (hash: 8QcgsbQtEl4fKJj3HaY+fUsT5pWpzEKUVgl65Co9jOk=)
                          2: 323830343a3762303a3a2f33322d313238203d3e20323632343533.roa (hash: gr2u/oI9boQwwcAjZcUOU8d5yrSlwex50xc/uUnWyPQ=)
                          3: 3137372e35322e3234302e302f32322d3332203d3e20323632343533.roa (hash: kT4yj8yFSiH6EDqd+WdC583lgIULpCZHsmLGa7cAUtY=)
                          4: 3137302e3234372e3130302e302f32322d3332203d3e20323632343533.roa (hash: 7BphB1JD9jH3YeTz7XYC6e12+BivDF1/qm1W0CYiPpI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.crl
                          rsync://rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 08:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:dd:18:e2:f8:d4:1c:55:d5:f7:e3:58:ea:25:5d:41:af:7a:c0:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB
        Validity
            Not Before: Dec  6 04:15:00 2025 GMT
            Not After : Dec  7 08:03:00 2025 GMT
        Subject: CN=DCA30D40142ECF7528A81BAAA1CCD8E95E2D8E23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:54:4a:39:47:a0:f9:5c:1a:82:e1:ee:57:de:
                    b8:5c:27:99:fa:5e:d1:d1:ae:54:14:a7:1d:a4:39:
                    7e:d4:1b:cb:e9:9f:e9:07:0c:f1:f9:33:6b:b5:9d:
                    d8:b5:12:fc:4d:7c:b9:87:78:7d:b0:7c:97:19:e7:
                    4d:c1:a1:27:4e:37:55:33:9a:e6:28:d0:c5:76:04:
                    4a:60:ad:fa:ec:dc:a2:2a:c5:54:a6:9b:f2:10:e4:
                    03:f2:ed:42:ce:47:09:65:6b:19:3d:d6:43:b9:b5:
                    f0:17:15:3e:cc:65:67:bc:43:1a:bd:46:0c:42:fc:
                    cb:02:cd:c5:01:03:95:07:d8:40:6e:d6:22:9d:15:
                    ba:1c:06:7c:ab:b2:be:f3:76:6b:13:3b:b4:68:92:
                    db:bb:c1:b1:bc:30:4e:30:b9:6b:1e:5c:d2:c0:e2:
                    92:fa:bd:2b:35:f2:07:b9:c9:4b:e5:51:03:05:b1:
                    e2:36:be:aa:a1:f7:ce:ac:42:a9:bf:72:66:80:93:
                    75:d7:93:7a:36:41:dc:38:e3:d3:d5:b5:45:5a:ca:
                    db:17:6f:e7:7a:9f:80:a4:7e:1e:95:b0:a7:d5:9f:
                    0e:ee:fc:96:27:bf:1b:06:62:11:ed:ef:94:2f:5d:
                    a2:5f:4e:95:8c:97:5b:2a:13:eb:ec:75:88:d3:69:
                    d2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A3:0D:40:14:2E:CF:75:28:A8:1B:AA:A1:CC:D8:E9:5E:2D:8E:23
            X509v3 Authority Key Identifier:
                keyid:25:C5:4A:79:FB:81:17:C3:BC:74:B6:44:4C:04:A7:DE:AA:5D:49:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:9b:7a:29:4f:8b:b3:27:9f:98:d4:09:16:a5:72:a9:ab:0a:
         bb:85:71:b9:1b:cd:0f:cb:2a:0e:ec:b2:5f:e1:05:18:a8:b6:
         7a:3e:f7:72:a6:18:8e:bd:74:c3:f7:d4:85:0b:4d:79:fa:01:
         d8:ea:19:fa:18:a5:7b:71:16:6b:42:b6:32:f9:52:83:67:d5:
         7d:c7:04:32:da:75:31:54:79:ca:09:39:ac:06:36:2d:0f:3a:
         c0:f9:81:83:40:b3:e5:06:4d:64:0c:0f:79:80:29:9f:a5:f7:
         cc:ae:2f:38:51:c9:13:d8:f0:8b:01:ee:dc:da:5c:3c:79:7b:
         0f:2b:84:22:93:ca:8d:3c:24:3c:f5:b8:b7:ae:52:e9:91:b6:
         82:9c:21:6a:db:b5:dc:dc:42:9c:05:f3:4a:0b:59:c2:3d:4a:
         25:5d:e5:fe:94:2f:8b:54:fe:59:75:1f:e3:c7:45:b5:0e:26:
         20:af:a9:78:2b:f3:fd:68:0f:f6:8a:59:00:7c:75:08:8f:eb:
         06:dd:02:97:d9:23:f7:fa:f5:33:1c:b5:76:67:b0:b4:99:32:
         7a:6c:f0:ab:6f:fd:b0:4b:5f:c7:65:b8:23:9c:03:92:a3:8f:
         57:cc:fc:62:a4:1c:cb:78:3f:38:87:ea:d2:f7:96:91:2c:a3:
         ed:6c:d9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:41:38 2025 by rpki-client