This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.mft
File:                     DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.mft (raw, json)
Hash identifier:          9j54EsKOCTvqYDDZhsLZCPX/pdu/ro51QAi2Fsw1pQE=
Subject key identifier:   3E:5A:CA:94:9B:2D:11:72:DC:1F:22:6A:D9:53:A5:70:69:4F:63:B9
Authority key identifier: DA:2C:3B:25:72:C3:BC:A9:22:5E:87:2B:77:D7:EB:EC:51:E4:A0:1A
Certificate issuer:       /CN=DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A
Certificate serial:       66948C1757F44A0CC2D22FEDA5D529ACD68D2AAD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.mft
Manifest number:          73
Signing time:             Mon 22 Dec 2025 14:23:22 +0000
Manifest this update:     Mon 22 Dec 2025 14:18:22 +0000
Manifest next update:     Tue 23 Dec 2025 16:16:22 +0000
Files and hashes:         1: 3230302e302e36342e302f32342d3234203d3e20323731313830.roa (hash: rtgPsjEvrft8zzHlyyMigdsHOXzeRbr5m37PyhBdAbE=)
                          2: 323830343a373737383a3130303a3a2f34302d3430203d3e20323731313830.roa (hash: 78gnsip7r3qOi/EZ5Pk33H7zC5HcnHgzJbHz8JD3Mxs=)
                          3: 323830343a373737383a3a2f33322d3332203d3e20323731313830.roa (hash: afCsZwiPB5N2fDqRaLCKFhpsL0Zx4SiwNNU+IFHfbU8=)
                          4: DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.crl (hash: hQvte5vn+JpXrgmV7xhBckJFAMUjtcIhoHCyJ4Pw4GM=)
                          5: 3230302e3132352e3132392e302f32342d3234203d3e20323731313830.roa (hash: ntZ1ArAYp3sb9ElbA2pbCEeKkjRFsWYf3g7xNVHvk/0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.crl
                          rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 16:16:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:94:8c:17:57:f4:4a:0c:c2:d2:2f:ed:a5:d5:29:ac:d6:8d:2a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A
        Validity
            Not Before: Dec 22 14:18:22 2025 GMT
            Not After : Dec 23 16:16:22 2025 GMT
        Subject: CN=3E5ACA949B2D1172DC1F226AD953A570694F63B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ca:3e:39:83:5a:50:af:05:e4:10:99:76:0a:
                    ce:fe:0c:e6:97:19:a9:e9:34:70:ce:96:a0:18:e9:
                    95:b6:2d:51:19:4c:89:80:bb:84:de:19:88:18:ec:
                    cd:51:19:a1:82:23:cf:2d:a8:72:64:87:c6:a4:ec:
                    09:55:f9:ec:4a:fc:c8:02:a2:ca:cf:9b:d8:03:a0:
                    5a:b7:c7:ab:45:a7:ff:a8:f6:dd:43:42:f3:45:74:
                    33:5e:c4:56:2e:0b:51:23:c1:14:fb:23:0f:73:35:
                    8f:1b:f9:6a:9c:36:75:e8:ae:ff:b8:71:a3:78:32:
                    6b:59:69:28:65:2e:92:47:d7:9b:c2:e4:5b:29:6c:
                    a6:80:7e:86:58:bd:d0:09:b9:50:7b:61:b7:61:50:
                    eb:63:68:6f:45:01:d4:65:0b:3e:d3:3a:d2:07:78:
                    93:08:4d:c7:19:b4:57:97:8e:c8:65:cf:68:bd:23:
                    37:f9:dd:4f:58:d6:39:b3:8f:84:98:46:84:9c:f8:
                    27:17:8d:14:8e:ae:16:96:30:36:6e:b3:82:3c:b0:
                    cb:af:91:12:51:d2:0d:15:51:30:ef:53:81:1b:2d:
                    04:ed:ff:48:72:b6:93:04:11:7d:4d:68:aa:f2:fe:
                    3b:aa:6f:b4:37:29:66:14:ff:8f:03:87:25:83:c2:
                    a6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:5A:CA:94:9B:2D:11:72:DC:1F:22:6A:D9:53:A5:70:69:4F:63:B9
            X509v3 Authority Key Identifier:
                keyid:DA:2C:3B:25:72:C3:BC:A9:22:5E:87:2B:77:D7:EB:EC:51:E4:A0:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:d2:0d:68:33:9c:54:91:09:0f:58:70:8e:00:d8:7a:1e:64:
         25:3d:5e:19:ef:0f:25:78:f9:8a:c4:67:a1:81:96:e0:44:7b:
         58:ab:70:96:92:b8:72:20:8a:7c:fe:b0:42:92:cd:d3:00:6f:
         5a:b6:20:72:9c:76:3f:6b:32:2e:4d:1c:ad:31:8c:83:1b:7e:
         b8:e9:38:54:03:b3:f0:7e:f0:af:c7:8b:8d:c4:7f:19:e6:c5:
         85:07:b9:36:f4:81:b1:98:08:8a:86:ac:49:2d:d6:98:4a:9b:
         17:1c:e0:e0:46:6f:b1:c9:f9:73:78:b1:65:ce:69:c1:d1:20:
         1d:6c:b3:67:7d:8b:36:44:7f:d5:eb:4f:ba:52:d6:12:da:b7:
         a6:e6:a3:0e:23:7a:3a:75:0a:c9:51:6e:2d:fb:d7:71:bf:b0:
         1a:17:07:c5:b0:fb:99:9c:4d:38:6d:3e:f8:e4:4a:2f:de:6e:
         43:0c:03:e0:92:47:2b:56:50:5a:5d:c1:7f:79:20:7c:33:87:
         19:f4:61:a2:aa:5f:eb:82:b6:71:e5:62:30:0f:ce:3a:60:fa:
         19:54:ef:da:2b:f8:3e:12:69:ab:33:66:e4:06:05:1f:6b:ff:
         93:f8:91:d7:87:59:d2:a2:c2:7b:25:22:93:b6:02:da:77:85:
         d0:a1:72:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----