This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3U7tgDixHkFD5EH9yzXWuSfE1DAW7shAf3SSoKwvt722/0/D9ED078552BAC279662C7AC0E3D7F6EA67DF5694.mft
File:                     D9ED078552BAC279662C7AC0E3D7F6EA67DF5694.mft (raw, json)
Hash identifier:          owSKNqe3zEa/857le1wWbCHsAcie33PAm1yDlAwEq1o=
Subject key identifier:   3A:6B:07:67:55:A8:07:F1:69:9F:15:1C:3B:0C:05:61:8A:D3:15:B8
Authority key identifier: D9:ED:07:85:52:BA:C2:79:66:2C:7A:C0:E3:D7:F6:EA:67:DF:56:94
Certificate issuer:       /CN=D9ED078552BAC279662C7AC0E3D7F6EA67DF5694
Certificate serial:       7A1CAC9865AD86512D13AE624A599EBB74565398
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9ED078552BAC279662C7AC0E3D7F6EA67DF5694.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3U7tgDixHkFD5EH9yzXWuSfE1DAW7shAf3SSoKwvt722/0/D9ED078552BAC279662C7AC0E3D7F6EA67DF5694.mft
Manifest number:          E7
Signing time:             Sat 20 Dec 2025 07:42:03 +0000
Manifest this update:     Sat 20 Dec 2025 07:37:03 +0000
Manifest next update:     Sun 21 Dec 2025 10:09:03 +0000
Files and hashes:         1: 34352e3233372e3138302e302f32322d3234203d3e20323638323833.roa (hash: YFN+AEs5n1Eig3C/gtA8yy0FSgyDExbV1tDtPXxZf6A=)
                          2: 323830343a346563633a3a2f33322d3438203d3e20323638323833.roa (hash: 4zMsykUh7NgtSQYcLAQ5SQLWj08ze+POoqFzYTmhZDY=)
                          3: D9ED078552BAC279662C7AC0E3D7F6EA67DF5694.crl (hash: 7vNvRrKRlLNENj8mGI0MfyjtH/Ia/qva7C+AbseUNXk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3U7tgDixHkFD5EH9yzXWuSfE1DAW7shAf3SSoKwvt722/0/D9ED078552BAC279662C7AC0E3D7F6EA67DF5694.crl
                          rsync://rpki-repo.registro.br/repo/3U7tgDixHkFD5EH9yzXWuSfE1DAW7shAf3SSoKwvt722/0/D9ED078552BAC279662C7AC0E3D7F6EA67DF5694.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9ED078552BAC279662C7AC0E3D7F6EA67DF5694.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 10:09:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:1c:ac:98:65:ad:86:51:2d:13:ae:62:4a:59:9e:bb:74:56:53:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9ED078552BAC279662C7AC0E3D7F6EA67DF5694
        Validity
            Not Before: Dec 20 07:37:03 2025 GMT
            Not After : Dec 21 10:09:03 2025 GMT
        Subject: CN=3A6B076755A807F1699F151C3B0C05618AD315B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:65:c0:1b:1c:d7:6c:06:2f:ab:55:a8:d0:d8:
                    7d:06:b0:ea:c4:65:2a:4a:22:0c:a9:3c:74:59:2e:
                    a7:e0:96:e5:17:0b:5c:3a:73:59:cf:1b:cb:d6:80:
                    3c:40:9f:f8:4c:a1:5b:51:7d:18:fe:5f:75:fe:a2:
                    5a:1d:a4:a3:f0:ab:37:26:46:20:47:13:4d:d8:a7:
                    99:e0:72:8d:1f:65:57:04:2d:39:60:dc:ab:33:59:
                    c6:54:83:a7:de:95:29:3f:f7:e5:c1:8b:63:a3:41:
                    fc:b6:36:f2:4d:13:75:51:ba:8f:4b:90:d5:4f:20:
                    60:74:a8:b4:83:68:c0:ce:5d:53:f9:bf:09:4e:60:
                    fc:50:ef:c7:e5:cf:57:d8:e7:de:27:04:08:e0:bf:
                    14:c1:18:20:4d:75:6d:e8:80:f3:7f:9c:f0:3c:8c:
                    f1:3c:cd:97:01:fe:04:1c:bc:4d:d4:8f:1b:04:83:
                    dd:16:1e:ab:b4:69:cc:ce:c6:78:87:40:61:98:37:
                    f0:13:12:36:26:12:a4:8c:5b:d0:2c:85:fc:63:92:
                    cf:c5:b9:e4:66:b0:9f:68:bb:ba:16:63:fe:73:fe:
                    91:f9:0c:2c:c1:c1:07:fa:32:2f:51:11:07:62:c9:
                    12:17:08:ae:df:cb:95:45:ef:d6:2a:35:c3:a4:91:
                    ef:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:6B:07:67:55:A8:07:F1:69:9F:15:1C:3B:0C:05:61:8A:D3:15:B8
            X509v3 Authority Key Identifier:
                keyid:D9:ED:07:85:52:BA:C2:79:66:2C:7A:C0:E3:D7:F6:EA:67:DF:56:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3U7tgDixHkFD5EH9yzXWuSfE1DAW7shAf3SSoKwvt722/0/D9ED078552BAC279662C7AC0E3D7F6EA67DF5694.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9ED078552BAC279662C7AC0E3D7F6EA67DF5694.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3U7tgDixHkFD5EH9yzXWuSfE1DAW7shAf3SSoKwvt722/0/D9ED078552BAC279662C7AC0E3D7F6EA67DF5694.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:79:c3:23:73:4f:83:6b:2e:e2:c2:1c:3e:44:12:4a:ea:41:
         bc:24:04:c0:6d:7f:b7:50:f2:c0:be:c4:2b:e6:4b:6d:4f:2b:
         ec:d0:28:ac:57:df:d9:d1:d7:55:0a:f0:da:99:93:f3:a4:2f:
         85:d0:ce:89:0e:40:7e:ee:4a:c0:7b:cf:de:b7:b5:eb:ae:de:
         c0:d4:fa:95:b0:e5:57:1c:8d:55:71:f8:7e:64:e3:20:68:cf:
         ba:79:ac:79:41:05:89:53:e5:af:a1:89:a6:53:5e:58:29:17:
         81:96:3f:31:96:51:7a:a2:d1:eb:6d:3a:0d:80:2f:0b:ea:df:
         16:5c:31:00:33:2f:fd:b9:34:05:67:c4:c2:e4:db:f8:e9:78:
         a5:0a:f5:5b:60:93:80:79:72:7f:52:8d:5b:0b:5d:9b:b6:33:
         43:33:c7:8e:5c:ae:82:c2:eb:57:ce:a3:aa:96:32:15:87:67:
         3f:82:6b:74:4a:d0:30:9b:b7:b6:65:d8:68:57:f0:00:e4:34:
         c0:fa:c1:db:0e:ed:3a:40:86:8b:94:6c:44:e6:b5:f1:94:c4:
         84:56:6c:ae:e2:a7:f3:18:3d:f5:0d:ba:39:fa:08:0d:15:56:
         b7:94:98:78:f5:ba:40:da:cc:3e:ad:85:b2:f9:6c:71:c6:3d:
         f6:f8:af:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:34:07 2025 by rpki-client