This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.mft
File:                     DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.mft (raw, json)
Hash identifier:          pW35cwn56p/njolLAgyp+1KDLEB/BDUz12ryvx4WZTY=
Subject key identifier:   EE:21:AF:0D:6E:FC:59:A8:C1:85:B9:6D:6A:4D:4F:59:E4:F9:25:86
Authority key identifier: DB:A9:F4:3A:F1:C5:D6:D4:19:0A:21:3B:71:5C:CC:CD:88:70:B2:14
Certificate issuer:       /CN=DBA9F43AF1C5D6D4190A213B715CCCCD8870B214
Certificate serial:       79FB020B9F79479F2CEC638D8717671D44BDDBC5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.mft
Manifest number:          01A9
Signing time:             Sat 06 Dec 2025 07:38:15 +0000
Manifest this update:     Sat 06 Dec 2025 07:33:15 +0000
Manifest next update:     Sun 07 Dec 2025 10:52:15 +0000
Files and hashes:         1: 323830343a376633343a3a2f33322d3332203d3e20323731363733.roa (hash: DCmI3uAH6IOctpTW4zhjJ749X9nSMkWEhiAm9WZK2vY=)
                          2: 323830343a376633343a633030303a3a2f33342d3334203d3e20323731363733.roa (hash: jL9sQIHLeHFiWKAM+pSJFCuPovdtr2l5oyW5FieuxMI=)
                          3: 323830343a376633343a343030303a3a2f33342d3334203d3e20323731363733.roa (hash: MwJJ8Mm2z+/ELvG40NH/+Kv0dt+tg2+QT2SLFZsm2Hg=)
                          4: 3230312e3231382e3139312e302f32342d3234203d3e20323731363733.roa (hash: vvqp/nqFKinsaAKPXQr35JJMQ54KYxeB4AvVf7GF29s=)
                          5: DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.crl (hash: j6q+yilSoaX+oSmRwnu6kMeZY/SgUPxBBLe1oiCD840=)
                          6: 323830343a376633343a3a2f33342d3334203d3e20323731363733.roa (hash: PnEMFNaJ/2hiNtQXCE2iGGQPPRaWEqK35H/exTC0/tw=)
                          7: 3230312e3231382e3139302e302f32332d3233203d3e20323731363733.roa (hash: dadtCIPaeoZRgXbU5cQsYPIC7eGRkifdVuBRZLr+Pi8=)
                          8: 3230312e3231382e3139302e302f32342d3234203d3e20323731363733.roa (hash: 6Z2esfVr8s9MXFSgVr3EGBTrzDPCGCERiVfOtYbPGok=)
                          9: 323830343a376633343a383030303a3a2f33342d3334203d3e20323731363733.roa (hash: Gnq1RQP+JJrF4PghogkiLjFjC2yUN33/Y0T7c4tBZTk=)
                          10: 3139302e392e3132372e302f32342d3234203d3e20323731363733.roa (hash: 4StaB59EY0ZxZlFd3R7wiaZpyvhlkpyMcN6GzNOcihE=)
                          11: 3133312e3235352e3133302e302f32342d3234203d3e20323731363733.roa (hash: k7dQtxEQN5+Zcl+pS8zego4DbrQFxod+edwKTZB1y60=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.crl
                          rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 10:52:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:fb:02:0b:9f:79:47:9f:2c:ec:63:8d:87:17:67:1d:44:bd:db:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBA9F43AF1C5D6D4190A213B715CCCCD8870B214
        Validity
            Not Before: Dec  6 07:33:15 2025 GMT
            Not After : Dec  7 10:52:15 2025 GMT
        Subject: CN=EE21AF0D6EFC59A8C185B96D6A4D4F59E4F92586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c6:b3:b5:e8:f0:09:4b:7e:7a:bf:d8:9c:76:
                    fb:fb:3f:03:95:9e:99:a6:6b:c7:db:92:70:ef:bf:
                    d7:b0:4b:ba:c7:27:86:45:51:35:fb:97:6e:66:42:
                    5a:a4:b9:89:bc:35:97:12:4d:e8:ed:af:be:f8:60:
                    8a:46:1e:90:f7:b7:a2:05:de:56:36:e8:85:d1:91:
                    3e:83:ac:32:be:df:18:e4:7a:76:48:d0:8a:62:aa:
                    b0:b5:d4:75:a8:13:d7:f0:0a:e5:63:e2:9b:89:1c:
                    35:26:12:b2:0c:5b:4f:b5:3c:e5:f5:9e:4b:14:e6:
                    c6:1d:1e:17:ad:0e:ac:84:77:37:b8:33:91:ca:de:
                    ac:a2:c7:72:52:55:29:78:06:3b:ba:34:a5:0c:b1:
                    93:89:44:af:03:4a:26:cf:4d:18:07:56:8d:14:03:
                    ba:52:93:de:ea:73:64:34:e2:50:ea:8f:33:2c:6e:
                    12:87:9d:f8:77:53:9d:47:62:18:96:7a:de:e2:26:
                    9a:e3:10:cf:58:d7:dc:91:17:ab:4e:b9:ce:36:68:
                    e6:93:29:96:e5:b4:90:0d:5a:e4:8d:4f:e2:4d:e1:
                    e2:2d:ca:94:55:10:bd:40:7d:09:e4:84:46:b8:84:
                    00:0f:d3:43:fc:c2:51:d6:f7:cc:a5:b9:8b:f2:fc:
                    da:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:21:AF:0D:6E:FC:59:A8:C1:85:B9:6D:6A:4D:4F:59:E4:F9:25:86
            X509v3 Authority Key Identifier:
                keyid:DB:A9:F4:3A:F1:C5:D6:D4:19:0A:21:3B:71:5C:CC:CD:88:70:B2:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:92:c2:1d:d9:80:08:27:a2:50:49:6a:2e:7e:89:1a:c7:5f:
         50:d0:3a:a1:b7:bc:92:f3:0c:42:a1:b6:7f:bc:c4:c8:33:8c:
         5c:86:db:29:07:5d:e8:99:de:32:07:8e:b8:27:30:00:2a:83:
         7b:52:6e:4a:d5:69:d8:e5:cf:6e:30:70:c2:38:d7:94:85:84:
         13:34:77:26:c6:5b:f9:eb:0c:67:d7:d4:93:35:ed:ed:8f:b4:
         76:08:c6:de:8b:23:8d:2f:63:09:0a:07:cb:ba:7c:d8:72:ef:
         11:65:04:6c:60:96:c1:1f:4a:3f:c3:9f:89:07:48:fc:cb:be:
         3e:62:00:ed:3c:40:52:70:bd:01:d3:c5:ac:6d:0b:71:cc:25:
         d0:21:22:38:6d:25:1b:f8:a8:d1:27:3a:a8:e8:e5:10:dd:41:
         0a:97:31:20:c8:ea:1d:79:d6:58:0a:44:2a:8f:b1:88:62:2a:
         ba:54:97:f8:5a:02:41:38:db:a4:7e:52:5e:8b:41:87:50:e1:
         a9:0b:b3:31:67:59:9b:75:13:94:0f:b4:e5:ae:67:2a:b3:13:
         75:21:86:57:80:57:e4:e6:47:a2:f8:e0:4f:bd:cf:a7:19:ac:
         14:94:21:eb:55:62:89:94:48:a0:5f:ec:4c:ea:30:d6:ad:08:
         c2:65:da:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:17:05 2025 by rpki-client