This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2jmfJfq5kmtXTePEeRdgEjH44LnTcpTAfJJGcCi6Rgok/1/DD5D181A738CA0A83292F9454205D4B5A4E33992.mft
File:                     DD5D181A738CA0A83292F9454205D4B5A4E33992.mft (raw, json)
Hash identifier:          X/N2kr4Z7B+lzk03KoDig10dTBIzm5ZhWzKXtE5tnqg=
Subject key identifier:   48:A8:24:DD:5F:7A:EC:28:6E:FA:77:51:19:AD:F8:E6:F1:A8:92:51
Authority key identifier: DD:5D:18:1A:73:8C:A0:A8:32:92:F9:45:42:05:D4:B5:A4:E3:39:92
Certificate issuer:       /CN=DD5D181A738CA0A83292F9454205D4B5A4E33992
Certificate serial:       5A61614AB5BB26035A15C3A862254F548E799BBE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD5D181A738CA0A83292F9454205D4B5A4E33992.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2jmfJfq5kmtXTePEeRdgEjH44LnTcpTAfJJGcCi6Rgok/1/DD5D181A738CA0A83292F9454205D4B5A4E33992.mft
Manifest number:          03AA
Signing time:             Sat 20 Dec 2025 03:56:00 +0000
Manifest this update:     Sat 20 Dec 2025 03:51:00 +0000
Manifest next update:     Sun 21 Dec 2025 03:56:00 +0000
Files and hashes:         1: DD5D181A738CA0A83292F9454205D4B5A4E33992.crl (hash: ZUQRSbLHiixZU8vf/H62CFnfJxcRoXbDGZSKJLUmoKg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2jmfJfq5kmtXTePEeRdgEjH44LnTcpTAfJJGcCi6Rgok/1/DD5D181A738CA0A83292F9454205D4B5A4E33992.crl
                          rsync://rpki-repo.registro.br/repo/2jmfJfq5kmtXTePEeRdgEjH44LnTcpTAfJJGcCi6Rgok/1/DD5D181A738CA0A83292F9454205D4B5A4E33992.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD5D181A738CA0A83292F9454205D4B5A4E33992.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 03:56:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:61:61:4a:b5:bb:26:03:5a:15:c3:a8:62:25:4f:54:8e:79:9b:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD5D181A738CA0A83292F9454205D4B5A4E33992
        Validity
            Not Before: Dec 20 03:51:00 2025 GMT
            Not After : Dec 27 03:56:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ef:2f:e9:9e:03:27:92:1e:06:74:ef:77:cb:
                    e3:15:cd:df:f4:6c:ba:03:7f:e7:d2:8b:e5:3d:15:
                    c4:7a:c7:16:23:94:ce:d0:5f:ab:da:58:c1:38:9c:
                    61:80:25:81:c8:e3:57:bc:80:83:bf:21:27:05:be:
                    bc:13:a2:9f:f7:71:60:e6:74:a5:c1:bd:f5:fe:7a:
                    59:33:5b:d5:96:4b:57:2e:8d:19:9b:77:a4:45:b6:
                    e2:1a:f3:3e:6d:87:d7:95:d1:7d:0b:61:7b:e7:a0:
                    b7:2e:86:46:d0:3f:ab:27:2d:ed:db:8f:04:77:f4:
                    88:77:5d:6b:31:a5:9d:dc:8e:12:b0:88:74:c1:1a:
                    04:49:a8:0a:8c:76:8f:25:a3:49:24:b8:46:8b:aa:
                    b5:0f:00:c7:c6:e1:c7:b8:91:02:69:7a:b7:ca:6e:
                    05:e0:e3:74:da:90:1d:c0:eb:53:22:0d:00:dc:fc:
                    b1:5b:87:d4:0c:74:0e:a3:ac:d4:66:28:55:54:62:
                    fb:16:37:0e:5c:d9:64:b3:64:d4:fc:15:8a:e0:dd:
                    4d:d7:4b:81:3c:aa:d5:b4:21:44:13:79:71:c7:9a:
                    19:be:ef:50:74:15:e1:41:eb:ea:e2:ba:ba:35:5c:
                    94:d9:8c:04:a7:4d:9d:b6:8f:76:b0:56:6e:76:5d:
                    da:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A8:24:DD:5F:7A:EC:28:6E:FA:77:51:19:AD:F8:E6:F1:A8:92:51
            X509v3 Authority Key Identifier:
                keyid:DD:5D:18:1A:73:8C:A0:A8:32:92:F9:45:42:05:D4:B5:A4:E3:39:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2jmfJfq5kmtXTePEeRdgEjH44LnTcpTAfJJGcCi6Rgok/1/DD5D181A738CA0A83292F9454205D4B5A4E33992.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD5D181A738CA0A83292F9454205D4B5A4E33992.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2jmfJfq5kmtXTePEeRdgEjH44LnTcpTAfJJGcCi6Rgok/1/DD5D181A738CA0A83292F9454205D4B5A4E33992.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:b6:25:2c:76:20:2c:60:3c:55:11:67:4c:cf:ab:75:e9:cc:
         e5:c8:bc:8f:23:c8:41:16:ec:6f:a2:6f:89:1c:f6:5d:00:49:
         87:95:c6:1c:4c:28:07:fb:52:84:e6:d4:b5:bc:a5:18:0b:e2:
         00:92:bf:a4:0b:6b:75:9e:d6:2c:39:bf:50:ad:80:35:a6:3b:
         ab:9d:81:df:5e:a5:ed:f3:89:19:30:f7:ff:de:e2:1c:93:71:
         8c:b6:a6:2d:26:83:b7:8f:8b:32:1d:6d:3a:e5:6d:ec:e5:97:
         45:a5:ba:10:ed:02:b4:75:01:9d:75:17:0b:38:bc:96:b4:6d:
         1e:27:d8:0d:63:41:73:79:57:99:07:6c:a6:16:e8:1c:5a:87:
         f4:bf:c7:70:2a:3f:89:51:60:56:66:26:5c:5a:21:f6:aa:80:
         1d:6a:ce:3c:fb:92:25:39:68:6c:54:e0:fa:ba:ec:77:e3:53:
         d1:4e:d6:95:88:7f:74:d6:f0:98:8f:11:83:8e:b2:1e:cf:89:
         7b:30:cf:f9:6b:28:28:f1:d1:00:dd:6b:ef:ce:33:df:d2:e1:
         b1:6a:9b:cd:82:a5:f9:94:28:91:7c:b7:1e:0e:15:eb:fa:57:
         50:70:92:50:b7:13:15:57:db:a6:fd:e9:65:32:d1:38:f5:43:
         ec:ad:59:ac
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----