This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.mft
File:                     DA32161651B9F9E5E58F4DC96D7517F0D8023D21.mft (raw, json)
Hash identifier:          /O3soLsVNalTMtbLYeuv9DILOA4irg0rl7aFukkCs/M=
Subject key identifier:   43:4F:F0:78:89:1C:3B:7F:6F:3D:F8:0D:26:32:F9:09:32:DC:34:6F
Authority key identifier: DA:32:16:16:51:B9:F9:E5:E5:8F:4D:C9:6D:75:17:F0:D8:02:3D:21
Certificate issuer:       /CN=DA32161651B9F9E5E58F4DC96D7517F0D8023D21
Certificate serial:       670A7EDD645262CEE3292DD83C503F94D1A5813B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.mft
Manifest number:          72
Signing time:             Sat 06 Dec 2025 09:56:14 +0000
Manifest this update:     Sat 06 Dec 2025 09:51:14 +0000
Manifest next update:     Sun 07 Dec 2025 10:53:14 +0000
Files and hashes:         1: 323830343a356131303a3a2f33322d3332203d3e20323638373436.roa (hash: eGZD7+eskYzZyFUSN4zLdCIvAQZ1VuGOy0ALN38lsYQ=)
                          2: DA32161651B9F9E5E58F4DC96D7517F0D8023D21.crl (hash: aJkg52bPxOJi8O4PtBnJFLW4PWpZZ/oR/N/9QIt+9lE=)
                          3: 323830343a356131303a3a2f33342d3334203d3e20323638373436.roa (hash: 9o7lavwjulV3fpAGiQXqev5sOTLeTgQMz9g4ia+BMMA=)
                          4: 34352e3137312e3232392e302f32342d3234203d3e20323638373436.roa (hash: 053II39czKoDlFApN81A+GOzp4hI6thaDDCXVCdNib8=)
                          5: 323830343a356131303a633030303a3a2f33342d3334203d3e20323638373436.roa (hash: z+3ohN7ys6qvVZHYtT1mUj5ysj5Np0arhMhZnrmaBdg=)
                          6: 34352e3137312e3232382e302f32332d3233203d3e20323638373436.roa (hash: YdarR+QaZ9yj1i7HuzBXmedG2+MATOll3jGHoyY0qa8=)
                          7: 34352e3137312e3233302e302f32342d3234203d3e20323638373436.roa (hash: wE4EBqNlO7eVDZImnzy21QRjaxM6N+Dt8TzyrD5gslw=)
                          8: 323830343a356131303a623030303a3a2f33362d3336203d3e20323638373436.roa (hash: Jav0xLM6Is9afXmhGsCCehbVr+haDaSC4bRoiJlo08g=)
                          9: 323830343a356131303a383030303a3a2f33342d3334203d3e20323638373436.roa (hash: kVm0VIVBjTNJy5YqaBSoeHi2G45/6/NLZ0FjoV6k0AY=)
                          10: 34352e3137312e3232382e302f32342d3234203d3e20323638373436.roa (hash: 0sOOVSe32U0lldiIM2aJzoYhRCwuAoLPywGqK1VRF6E=)
                          11: 323830343a356131303a343030303a3a2f33342d3334203d3e20323638373436.roa (hash: w4Nml5oEApym7dAms2mz08q+PHPJy9+nc+HSFUCIXIQ=)
                          12: 34352e3137312e3233312e302f32342d3234203d3e20323638373436.roa (hash: Ay5Yt9PP4Vo/O07n8aNGtvM97N5DN5sYV1Evi2Fqm8E=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.crl
                          rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 10:53:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:0a:7e:dd:64:52:62:ce:e3:29:2d:d8:3c:50:3f:94:d1:a5:81:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA32161651B9F9E5E58F4DC96D7517F0D8023D21
        Validity
            Not Before: Dec  6 09:51:14 2025 GMT
            Not After : Dec  7 10:53:14 2025 GMT
        Subject: CN=434FF078891C3B7F6F3DF80D2632F90932DC346F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c0:1f:2b:a2:d6:5c:53:19:a2:2d:bf:21:bc:
                    42:95:9d:b6:fc:9e:33:da:d4:f2:10:09:73:55:d1:
                    7a:ab:df:64:4c:f0:28:5c:a5:55:cb:03:41:a7:a7:
                    cd:f9:88:8f:64:b6:79:b5:9c:ca:e5:46:59:56:8c:
                    1e:0b:f8:10:63:e6:ae:46:b7:7a:81:b8:39:a2:71:
                    0a:32:12:a5:8f:d4:ca:d5:72:10:29:7c:64:30:a5:
                    50:72:56:35:05:09:24:af:4a:f8:9c:ba:06:31:a2:
                    35:eb:1e:6f:dd:af:fa:28:e0:cc:2c:35:48:94:36:
                    2a:00:83:d9:5b:ca:6c:18:b5:bf:9e:15:3d:0f:cd:
                    0a:8a:3a:dd:27:d1:1b:71:c5:79:2c:3a:ef:99:aa:
                    f0:00:a4:36:36:5a:0b:a6:9d:e3:20:9d:df:cf:41:
                    ad:70:7f:bf:2f:b0:d3:ab:55:6b:ee:d8:9a:dd:9e:
                    47:0f:73:9e:b3:11:da:59:5f:3b:c5:4b:ad:d1:98:
                    a4:5a:4b:ad:73:e8:f4:b9:3e:85:75:e7:f6:5a:66:
                    86:a7:a5:87:12:5e:60:2b:7b:cf:e9:3d:33:b4:e7:
                    42:2d:41:42:8d:b3:f0:e6:2c:5d:71:8a:1e:58:c9:
                    44:c1:c5:3c:e1:5a:56:05:2d:4f:26:92:51:09:50:
                    fd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:4F:F0:78:89:1C:3B:7F:6F:3D:F8:0D:26:32:F9:09:32:DC:34:6F
            X509v3 Authority Key Identifier:
                keyid:DA:32:16:16:51:B9:F9:E5:E5:8F:4D:C9:6D:75:17:F0:D8:02:3D:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:2b:5d:bb:bf:95:a8:9f:3a:13:2b:30:90:db:70:9a:d8:9f:
         15:f0:72:22:51:6f:d5:c0:8c:64:fd:4d:a9:ab:48:89:be:3a:
         0e:5f:16:e9:ee:5f:6d:ee:ac:8f:59:58:b8:36:14:26:f2:fe:
         0f:cf:4b:04:88:f1:83:05:8f:c8:3a:7c:bf:c3:74:99:b1:4b:
         f7:05:35:54:f6:85:46:9b:b6:e6:a8:d6:2c:4b:c7:03:b7:7f:
         18:e1:58:34:bf:c0:4f:9e:89:ea:a4:4d:3e:4e:63:28:67:c2:
         35:6d:01:a3:45:e2:85:6d:50:58:95:bc:0c:f0:85:ba:59:ae:
         92:67:f7:6c:53:29:cb:10:d1:68:a9:7c:c7:8b:23:85:d0:e7:
         3b:56:df:75:36:5e:3c:b4:3e:32:a2:84:20:6a:ba:6b:67:f5:
         bb:03:f6:12:ed:9a:65:da:45:fb:08:79:8a:b3:7a:be:af:10:
         00:01:c6:91:d1:4c:01:37:4d:dd:a7:67:71:80:70:e6:f7:eb:
         b9:b7:1f:3c:f0:2e:3a:db:94:20:8b:5b:95:c0:77:0b:d6:d7:
         97:e5:01:d8:58:ed:34:c8:5f:d9:9a:88:6f:4d:73:ff:58:e7:
         bf:f3:b9:19:b2:19:de:0e:77:98:56:4d:7b:4d:f0:4b:05:af:
         5f:19:d2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:38:02 2025 by rpki-client