This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/89DCCC087983CCF309AB03F388DFD612618A10BC.mft
File:                     89DCCC087983CCF309AB03F388DFD612618A10BC.mft (raw, json)
Hash identifier:          WsiH1IPQwj536pVnLYHdyXJJ5zinljiRmJUrKHqmcE0=
Subject key identifier:   65:23:68:C4:4A:23:71:41:F9:F2:67:17:15:19:CF:9F:42:A3:43:CB
Authority key identifier: 89:DC:CC:08:79:83:CC:F3:09:AB:03:F3:88:DF:D6:12:61:8A:10:BC
Certificate issuer:       /CN=89DCCC087983CCF309AB03F388DFD612618A10BC
Certificate serial:       3E9D75569F8D1520624E1E9A1BEDA1FA128003A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89DCCC087983CCF309AB03F388DFD612618A10BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/89DCCC087983CCF309AB03F388DFD612618A10BC.mft
Manifest number:          43
Signing time:             Sat 06 Dec 2025 03:54:26 +0000
Manifest this update:     Sat 06 Dec 2025 03:49:26 +0000
Manifest next update:     Sun 07 Dec 2025 05:52:26 +0000
Files and hashes:         1: 89DCCC087983CCF309AB03F388DFD612618A10BC.crl (hash: 2QpHSt+yj3F5WR5s41TqPF+fDgqRnTenCYGhWWhlgAY=)
                          2: 323830343a323562303a3a2f33322d3336203d3e20323634323935.roa (hash: 6JFNis6CMMlRcOn/JP2hG4cErjjDFHI1FiBH7GfiLcc=)
                          3: 3136382e3138312e3135322e302f32322d3234203d3e20323634323935.roa (hash: enA5gqxijJvyrQexiJtkq9Jp65o5Wz64+J9yGOE4DhM=)
                          4: 3137302e3234362e31362e302f32322d3234203d3e20323634323935.roa (hash: wVJ50g69tgJBhniEn3qHPivwTPWRxNwBQtD8dQ2M9YQ=)
                          5: 3133382e3132312e3131362e302f32322d3234203d3e20323634323935.roa (hash: IwmbqlRxvGJaLxRJRFKZh4xtvYzQKKvMF5BTmSlu89g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/89DCCC087983CCF309AB03F388DFD612618A10BC.crl
                          rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/89DCCC087983CCF309AB03F388DFD612618A10BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89DCCC087983CCF309AB03F388DFD612618A10BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:52:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:9d:75:56:9f:8d:15:20:62:4e:1e:9a:1b:ed:a1:fa:12:80:03:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89DCCC087983CCF309AB03F388DFD612618A10BC
        Validity
            Not Before: Dec  6 03:49:26 2025 GMT
            Not After : Dec  7 05:52:26 2025 GMT
        Subject: CN=652368C44A237141F9F267171519CF9F42A343CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:44:0f:17:06:44:d4:5b:76:26:55:94:2b:c7:
                    c7:f8:9f:7e:b3:c2:c2:f7:b5:82:1b:40:d6:77:c1:
                    44:9b:ad:8f:d6:8d:ed:bd:ce:07:bf:2d:c9:78:75:
                    df:22:32:18:ea:2a:b4:63:39:cb:57:e3:3d:5f:47:
                    cf:11:ec:62:a4:89:98:78:4f:f8:53:2f:f0:c2:d7:
                    76:fa:aa:d5:2e:79:c9:c9:f3:9e:15:c9:b0:af:76:
                    d4:b1:19:06:7a:ab:f8:9a:ae:59:a4:55:de:e7:20:
                    55:15:d4:40:48:ef:14:f8:24:1e:05:c4:10:e6:a4:
                    5b:a0:43:33:5f:a0:a7:5d:f8:ec:c5:7c:8c:75:8d:
                    dc:25:4c:e8:e9:e0:01:8f:d0:f3:71:b2:dc:92:b2:
                    84:0b:6c:07:2f:4a:e9:de:6e:23:aa:24:c1:fc:cf:
                    f8:51:5f:fd:5e:80:1f:cb:7d:87:e2:2c:96:e8:d9:
                    51:bb:f9:c6:ac:e1:31:4e:56:b0:8d:48:fe:55:be:
                    3b:3a:72:48:5e:4b:07:d3:2d:df:99:69:3b:02:76:
                    6a:f7:9a:2b:f5:b5:0c:3c:4a:c4:12:f0:2c:1e:87:
                    28:e0:33:2f:6d:bb:f6:b6:64:e0:e2:03:26:ba:15:
                    e6:36:a5:97:ae:e5:56:e5:9b:f7:ea:52:bb:3b:df:
                    b0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:23:68:C4:4A:23:71:41:F9:F2:67:17:15:19:CF:9F:42:A3:43:CB
            X509v3 Authority Key Identifier:
                keyid:89:DC:CC:08:79:83:CC:F3:09:AB:03:F3:88:DF:D6:12:61:8A:10:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/89DCCC087983CCF309AB03F388DFD612618A10BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89DCCC087983CCF309AB03F388DFD612618A10BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/89DCCC087983CCF309AB03F388DFD612618A10BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:0d:c2:64:95:12:af:ef:2b:7c:f7:57:59:13:e5:f3:7a:78:
         fc:f4:c6:c1:8a:7a:ff:22:6a:5f:37:3c:90:f9:94:43:95:eb:
         84:47:e0:29:08:71:92:77:e9:56:a9:c4:77:44:7f:98:b1:b1:
         50:2c:27:47:0f:fe:21:a9:1c:60:92:8f:a4:11:62:3c:18:4c:
         a1:47:ae:b6:79:10:e8:27:3d:ba:94:82:80:01:8a:d3:61:8f:
         d0:0a:90:1d:09:c1:90:b5:f0:4e:12:26:cc:30:c0:51:42:05:
         10:73:a9:aa:d3:fa:d6:40:fe:55:55:e7:3f:03:63:ed:fa:31:
         f5:bf:75:26:c4:65:16:38:87:5a:bf:35:8d:21:a1:e5:c8:cf:
         c6:60:f1:7f:78:d9:8f:e4:14:fe:86:5b:fd:d5:06:8b:e2:13:
         38:87:56:a8:5e:c7:9e:59:cb:a2:72:40:9d:af:d0:55:aa:8d:
         15:1c:e6:6e:57:50:9d:99:e9:11:69:5b:67:99:b3:61:78:c2:
         86:7b:05:eb:43:a3:7a:f7:19:18:ee:ca:da:28:db:25:23:00:
         88:98:fe:b3:d1:86:d4:75:39:1c:bc:52:35:83:43:a0:04:fd:
         d6:4b:e8:1c:db:58:15:5e:99:b3:a9:ea:ae:6a:35:74:34:a1:
         0d:23:c8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:55:57 2025 by rpki-client