This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/D76AC9525C9299F8D9F26853A5246419EB9913D9.mft
File:                     D76AC9525C9299F8D9F26853A5246419EB9913D9.mft (raw, json)
Hash identifier:          NDC4bcsdQbpOk9MAUeuIles2tglt1wOlGBFsr14z4sk=
Subject key identifier:   25:2B:A4:65:8D:4A:93:1E:09:D0:DF:71:B7:B1:78:28:AE:F9:78:A3
Authority key identifier: D7:6A:C9:52:5C:92:99:F8:D9:F2:68:53:A5:24:64:19:EB:99:13:D9
Certificate issuer:       /CN=D76AC9525C9299F8D9F26853A5246419EB9913D9
Certificate serial:       7020659BD67C6BBED6A161DD046994544DCB9FF4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76AC9525C9299F8D9F26853A5246419EB9913D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/D76AC9525C9299F8D9F26853A5246419EB9913D9.mft
Manifest number:          01EC
Signing time:             Thu 18 Dec 2025 01:18:29 +0000
Manifest this update:     Thu 18 Dec 2025 01:13:29 +0000
Manifest next update:     Fri 19 Dec 2025 02:01:29 +0000
Files and hashes:         1: D76AC9525C9299F8D9F26853A5246419EB9913D9.crl (hash: 9SeSKaiDuOjwKAPlnayrrnV+aREGuTb/sfjJH/S/I5k=)
                          2: 323830343a366465303a3a2f33342d3334203d3e20323730353631.roa (hash: 8UzLhtci0l5G0ENV82ucDQHclfvZgSZAmpZNX/ywHtI=)
                          3: 3138392e38352e3131382e302f32332d3233203d3e203237303536.roa (hash: WkRh4q3yCsmxYgDqDCuNGHualbNnJe0+bWfw5u+/ozk=)
                          4: 323830343a366465303a343030303a3a2f33342d3334203d3e20323730353631.roa (hash: y189ak1XK6Qr6H0+gnqZC7JFDVX7Lor1h/MsABRW+Ak=)
                          5: 3138392e38352e3131372e302f32342d3234203d3e203237303536.roa (hash: 7M4PHxGFY4B2Gwb8GvpfO9tOo+yDRj/Wl4uUjFXWU4E=)
                          6: 323830343a366465303a383030303a3a2f33342d3334203d3e20323730353631.roa (hash: G2et8YTDC4WEV2izVbeh0k2zRU+a4/iOAGtDbkCxWEM=)
                          7: 323830343a366465303a633030303a3a2f33342d3334203d3e20323730353631.roa (hash: zzF4cVgg+3Roe8eARCK53PWqAF8+vEM/pKnvhPVlie4=)
                          8: 3138392e38352e3131362e302f32342d3234203d3e20323730353631.roa (hash: GxIGCxMcRP7/9vwj89xb8ySXb5CoTnA5ceaKh+oc5WM=)
                          9: 3138392e38352e3131372e302f32342d3234203d3e20323730353631.roa (hash: Y7JHV0Y3H0yqMxt11aCQ+XRFKA55wXlg7YzGq34ZL7Y=)
                          10: 3138392e38352e3131382e302f32332d3233203d3e20323730353631.roa (hash: TnrDZrm5IeFKDts8/NT8oV8wF1CEp18CLZumFVya2Gs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/D76AC9525C9299F8D9F26853A5246419EB9913D9.crl
                          rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/D76AC9525C9299F8D9F26853A5246419EB9913D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76AC9525C9299F8D9F26853A5246419EB9913D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 02:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:20:65:9b:d6:7c:6b:be:d6:a1:61:dd:04:69:94:54:4d:cb:9f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D76AC9525C9299F8D9F26853A5246419EB9913D9
        Validity
            Not Before: Dec 18 01:13:29 2025 GMT
            Not After : Dec 19 02:01:29 2025 GMT
        Subject: CN=252BA4658D4A931E09D0DF71B7B17828AEF978A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6a:c9:36:a8:4b:4d:11:9a:d9:80:97:4f:7e:
                    ab:8d:d6:85:f1:1f:d0:9b:e8:b9:4e:d1:c0:eb:f9:
                    b9:f8:2f:49:67:70:3c:a4:39:44:75:ad:12:b9:a4:
                    b2:e5:ce:b5:23:f9:44:5d:74:2e:e8:1d:1b:00:50:
                    fa:63:fa:63:3d:ee:3f:62:94:3d:a5:b0:1c:36:6b:
                    7b:31:b1:b3:3e:c1:e8:fb:0d:6b:59:6c:60:d3:63:
                    73:cc:52:bd:76:f3:17:c2:a0:12:e2:ea:de:e5:d8:
                    e2:27:96:5e:17:97:02:bc:64:4b:e9:e3:d0:87:10:
                    b4:f2:45:d9:79:04:66:78:a0:8f:77:33:ad:ba:b9:
                    99:86:94:a0:ef:09:2e:0c:20:73:20:42:75:0f:d8:
                    c7:ce:d7:cb:fa:55:8b:87:00:54:f9:10:3d:4f:4a:
                    10:85:5a:b5:af:4e:ca:7d:b3:4a:16:ec:77:2c:b3:
                    c0:cc:69:d3:33:24:f4:8d:c8:91:7b:52:1e:61:2e:
                    16:0e:a5:3d:7e:36:73:ca:70:42:2e:db:0b:3f:3e:
                    d6:55:80:4b:33:97:9e:4d:cd:5a:0a:0e:ec:75:5e:
                    fb:8b:69:e2:4a:27:a3:ed:c7:e3:4c:67:94:16:93:
                    65:a9:9c:3c:ba:92:62:2a:b7:ed:26:71:51:68:89:
                    0e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:2B:A4:65:8D:4A:93:1E:09:D0:DF:71:B7:B1:78:28:AE:F9:78:A3
            X509v3 Authority Key Identifier:
                keyid:D7:6A:C9:52:5C:92:99:F8:D9:F2:68:53:A5:24:64:19:EB:99:13:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/D76AC9525C9299F8D9F26853A5246419EB9913D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76AC9525C9299F8D9F26853A5246419EB9913D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/D76AC9525C9299F8D9F26853A5246419EB9913D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:90:d4:67:75:2d:19:bf:fd:15:89:c2:92:0b:35:ec:35:c0:
         ec:23:00:c2:30:e2:8c:28:46:a8:6d:70:f3:bf:74:40:26:9b:
         48:83:8f:58:70:76:9b:94:a1:81:ca:ae:70:f5:5f:e7:35:e5:
         99:19:b1:77:a4:fe:1d:63:92:7a:88:67:ce:d9:79:32:15:da:
         34:cd:0e:22:aa:20:28:a0:98:3a:09:68:b8:b4:f6:0f:f6:f0:
         1d:bc:29:ee:0d:c5:ed:62:c3:2d:4d:56:d0:76:fd:87:7c:39:
         2f:1f:31:c5:99:75:ab:22:1e:2e:cd:22:1b:aa:1f:79:8a:b9:
         a8:02:84:03:63:f0:86:b4:f4:85:83:22:f7:1e:4b:a2:ec:e1:
         0c:56:5f:9f:95:32:f9:5f:42:96:c3:d5:2c:79:2e:47:d0:64:
         47:ea:98:40:e6:00:3b:5a:8c:4a:2e:f5:38:98:0d:2e:3b:be:
         7a:4b:33:9a:79:b6:88:09:7b:4e:69:16:98:ae:2d:22:03:5b:
         ec:4f:60:1c:2a:b6:3f:c7:4b:9e:1e:31:42:37:75:cc:c8:4b:
         94:8a:b4:41:64:f4:ef:37:0a:ba:81:16:2b:8a:e4:5a:78:68:
         01:10:f2:a0:be:89:50:81:e6:d9:3b:23:85:54:94:ad:8e:38:
         2d:46:df:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 12:48:27 2025 by rpki-client