This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.mft
File:                     D93228E088FC63E499DDCF6E203558BDFBA33FC4.mft (raw, json)
Hash identifier:          eV4eyhy/TaSRvaBpj7njeq49AVbcoY1AWcOab+JG62w=
Subject key identifier:   89:0B:90:EC:89:77:01:41:8C:17:E5:A7:F8:7D:D1:30:6B:1F:D9:32
Authority key identifier: D9:32:28:E0:88:FC:63:E4:99:DD:CF:6E:20:35:58:BD:FB:A3:3F:C4
Certificate issuer:       /CN=D93228E088FC63E499DDCF6E203558BDFBA33FC4
Certificate serial:       7C4470E534C0FB43C58F3F5F2BE3B628A4D5AA17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.mft
Manifest number:          034C
Signing time:             Sun 21 Dec 2025 02:14:12 +0000
Manifest this update:     Sun 21 Dec 2025 02:09:12 +0000
Manifest next update:     Mon 22 Dec 2025 04:24:12 +0000
Files and hashes:         1: 3136382e3232372e3132342e302f32322d3233203d3e20323634383739.roa (hash: j4eqO1RosnvO9W/q4TSvq2Xk0oEtza1FTjGLHHoUlZ4=)
                          2: 323830343a326633633a3a2f33332d3333203d3e20323634383739.roa (hash: XSbAn/pz7hXFk/mpOgD3hwB9U6b5TM3N0a1ZAGw5jPI=)
                          3: D93228E088FC63E499DDCF6E203558BDFBA33FC4.crl (hash: X3og5AYASaEjSGF2VfAC8s6Gt40a4tnSk4hNIYF1nM0=)
                          4: 323830343a326633633a3a2f33322d3332203d3e20323634383739.roa (hash: YNhdmN2vc7RzIj2TqeohHdGfiJmdWcU2dn5E5eKzjpU=)
                          5: 323830343a326633633a383030303a3a2f33332d3333203d3e20323634383739.roa (hash: YS0gyG4QHBciG3UEXLmOy7DwJexDFc0srgUkSP0M4Sk=)
                          6: 3136382e3232372e3132362e302f32342d3234203d3e20323634383739.roa (hash: a/RJil0KG6SUeaeqg3ITGTI7MC//C57NG6CKtwOJwKg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.crl
                          rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 04:24:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:44:70:e5:34:c0:fb:43:c5:8f:3f:5f:2b:e3:b6:28:a4:d5:aa:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D93228E088FC63E499DDCF6E203558BDFBA33FC4
        Validity
            Not Before: Dec 21 02:09:12 2025 GMT
            Not After : Dec 22 04:24:12 2025 GMT
        Subject: CN=890B90EC897701418C17E5A7F87DD1306B1FD932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1c:cb:08:5a:a9:88:e1:a4:8b:ea:b0:83:e0:
                    d4:15:cc:13:51:6d:bc:ac:4c:5b:90:ee:3e:1b:c6:
                    0e:c0:f9:2d:fa:fa:05:ed:cd:74:b0:85:1f:61:5c:
                    ee:9c:07:ba:5c:77:ec:4c:71:cd:0f:21:d4:e7:46:
                    ca:4a:15:1a:f3:02:32:ae:85:f4:b7:dc:68:e6:b8:
                    b2:e8:6a:6b:4b:43:64:64:96:c9:b3:a6:2c:01:a6:
                    02:d0:da:fd:97:95:8b:b6:dd:bd:0d:9f:b9:d9:6c:
                    c3:42:bb:a3:e0:bf:05:eb:74:12:1b:e9:83:46:d2:
                    cb:e2:50:7a:00:b4:02:49:5e:3f:23:dc:56:7c:2f:
                    1a:3d:d4:71:1f:7e:e0:99:dc:e6:d6:9d:15:0e:19:
                    cf:2b:51:46:b0:17:f2:9e:9b:72:3b:cc:cc:92:4f:
                    b5:f3:f9:20:64:20:65:5b:ea:d1:98:66:57:ee:85:
                    d7:da:19:5f:e1:1d:09:32:ea:28:c5:79:26:29:ec:
                    a6:01:af:02:f3:c0:7f:68:d6:55:37:40:5b:7e:58:
                    42:71:0a:4d:05:bb:be:be:b0:2f:56:53:57:58:10:
                    5e:94:77:78:40:63:fb:71:39:7e:de:9e:67:50:4d:
                    58:17:ca:68:5c:28:e9:74:5b:7a:49:6f:f2:13:e0:
                    4b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0B:90:EC:89:77:01:41:8C:17:E5:A7:F8:7D:D1:30:6B:1F:D9:32
            X509v3 Authority Key Identifier:
                keyid:D9:32:28:E0:88:FC:63:E4:99:DD:CF:6E:20:35:58:BD:FB:A3:3F:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:38:b7:63:d8:fe:4d:8c:9c:53:be:7c:10:e4:43:19:d2:a4:
         95:69:95:87:4a:7a:d9:f3:11:7b:c5:95:2d:45:29:9d:4b:6a:
         ff:fe:80:9d:d9:79:41:01:b7:4c:83:49:54:7b:66:e2:55:82:
         3d:c4:25:bd:93:f6:26:62:a3:45:90:80:8e:b0:78:b1:4b:e4:
         07:26:62:49:eb:c7:ea:b8:ea:bf:c4:e8:31:2f:3c:fa:40:db:
         d3:83:da:28:b5:1e:34:fa:b1:3c:cc:77:cd:9f:60:c4:4e:7f:
         7e:c0:2a:07:6b:96:bb:dd:ab:d8:be:b6:fa:f0:76:ad:81:e6:
         c0:fc:a8:d9:d8:fd:8a:bd:ba:98:22:02:a3:38:d5:58:ec:3c:
         e1:d9:a2:90:1d:b2:92:65:5f:19:95:bc:b1:a6:d9:ad:84:e0:
         18:d3:78:29:89:41:6b:d1:5b:a6:78:aa:18:d9:0b:c4:10:d6:
         77:1d:8a:e4:a6:33:59:25:3b:3e:50:b5:3f:78:f9:7f:83:85:
         7f:39:76:ab:b9:86:4c:c7:9d:42:1c:7d:33:c5:aa:ac:4f:50:
         75:82:8e:49:37:88:43:72:77:b3:17:a6:e3:8f:6b:99:f3:b1:
         52:57:8f:16:0b:22:e1:d3:8d:26:d1:03:f9:dd:1a:57:6a:f0:
         48:15:26:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 18:57:02 2025 by rpki-client