This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft
File:                     DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft (raw, json)
Hash identifier:          ktpW+eSJJV9GuHMaHTOsZL+fPfu2wJoIzfMnoZXDd6A=
Subject key identifier:   C9:9C:65:2E:D5:17:A2:A6:2B:8D:99:B0:E1:F7:AE:E0:6D:82:63:D8
Authority key identifier: DF:D4:20:BE:EE:86:65:8C:69:BF:7B:F0:25:AB:DE:B3:5F:72:3B:3D
Certificate issuer:       /CN=DFD420BEEE86658C69BF7BF025ABDEB35F723B3D
Certificate serial:       1E43AACC65821814E700ED1D19C3A028E08C0934
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft
Manifest number:          0350
Signing time:             Mon 29 Dec 2025 18:51:17 +0000
Manifest this update:     Mon 29 Dec 2025 18:46:17 +0000
Manifest next update:     Tue 30 Dec 2025 20:25:17 +0000
Files and hashes:         1: DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.crl (hash: hxiB/72tE/fFyl5v/ZhnRJkAnTsk7Z0eof+UF8JOWlU=)
                          2: 323830343a386230303a3a2f33322d3438203d3e20323733373036.roa (hash: Mfi2YXsn4usozNTkApzXZOTp/npyplnvShsrNKnIPOg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.crl
                          rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 30 Dec 2025 20:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:43:aa:cc:65:82:18:14:e7:00:ed:1d:19:c3:a0:28:e0:8c:09:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFD420BEEE86658C69BF7BF025ABDEB35F723B3D
        Validity
            Not Before: Dec 29 18:46:17 2025 GMT
            Not After : Dec 30 20:25:17 2025 GMT
        Subject: CN=C99C652ED517A2A62B8D99B0E1F7AEE06D8263D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5e:58:b9:ac:60:b3:8b:f9:d0:31:47:05:a2:
                    1c:aa:09:c4:1e:e6:5d:54:67:30:1d:a4:b7:e9:43:
                    ee:b0:a3:8c:49:12:7a:b5:fd:43:4e:39:84:9c:5c:
                    b3:9f:03:b3:97:32:30:be:dc:e0:93:d2:e3:e6:45:
                    51:9b:17:0b:09:60:4f:5c:8d:13:fe:b1:2d:09:ca:
                    b3:6d:1e:f7:96:a0:e0:90:91:1d:4d:70:7e:7d:0c:
                    64:ef:0a:6d:99:c8:07:ed:85:05:db:6e:f8:94:ac:
                    d4:ef:31:25:67:7b:19:99:41:d6:a3:8e:6b:c3:bf:
                    92:a1:df:d5:cb:e3:b4:27:77:17:42:4c:9f:ef:24:
                    ac:51:ca:28:66:43:93:c2:12:8c:b2:ff:dc:25:48:
                    71:97:32:ab:81:cf:b6:d4:cf:5e:7e:f7:d4:74:29:
                    40:e8:77:f7:50:fc:f7:f5:e4:1f:69:69:6e:26:3f:
                    2c:82:03:5d:77:d1:f6:0c:53:87:6d:14:3f:18:37:
                    c7:06:d3:1f:c8:22:45:cd:8f:a1:da:4c:ef:10:7b:
                    a7:68:cb:d6:a6:2a:56:94:81:6d:79:c8:82:d6:7b:
                    7c:55:20:c3:a5:bc:5c:f3:7b:bf:c6:dd:fd:08:bb:
                    e7:fa:44:6a:d1:29:9f:e6:94:6d:e8:15:85:6b:0e:
                    f0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:9C:65:2E:D5:17:A2:A6:2B:8D:99:B0:E1:F7:AE:E0:6D:82:63:D8
            X509v3 Authority Key Identifier:
                keyid:DF:D4:20:BE:EE:86:65:8C:69:BF:7B:F0:25:AB:DE:B3:5F:72:3B:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:22:ee:da:fa:c8:d9:59:05:ca:89:8a:ba:aa:70:ae:72:cb:
         4d:67:65:f1:67:fc:ee:db:e9:ae:93:37:ec:93:fe:a5:52:ac:
         f8:8a:1a:0a:06:3f:73:ab:e2:bd:50:3b:44:48:c6:a3:05:9c:
         67:7a:c1:47:b3:5f:15:a4:ba:5f:fa:c1:70:7e:d4:42:ae:08:
         4a:97:90:bb:f1:bb:73:29:d8:aa:ac:1d:79:69:21:2f:6e:79:
         e9:6a:98:d2:48:69:30:26:ab:7c:47:f8:42:b6:4b:0f:cc:47:
         c5:a1:5d:f8:c8:d5:41:49:3c:e9:b3:b5:f2:20:3c:86:d8:15:
         a1:81:e2:e7:0d:7b:8a:0c:0d:55:01:44:18:0c:1a:eb:e6:29:
         07:c8:b0:9c:c9:32:96:a0:89:90:fc:6f:e6:90:e4:62:e1:a1:
         52:a3:18:f3:9a:e5:4c:e5:ac:30:85:cf:f8:be:87:0d:53:79:
         29:5e:a3:6a:31:71:48:06:2c:7d:6d:46:b7:66:ca:49:ae:5d:
         b5:40:8f:fc:3d:c8:f0:09:75:0b:dc:a4:62:dd:69:f4:a5:cb:
         c6:2f:4a:96:63:32:2c:21:38:c7:14:0e:fb:84:18:f8:6c:ef:
         60:e1:fc:3f:12:a6:46:73:a8:07:da:3b:5d:07:f1:1c:6c:da:
         db:2c:5d:40
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUHkOqzGWCGBTnAO0dGcOgKOCMCTQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREZENDIwQkVFRTg2NjU4QzY5QkY3QkYwMjVBQkRFQjM1
RjcyM0IzRDAeFw0yNTEyMjkxODQ2MTdaFw0yNTEyMzAyMDI1MTdaMDMxMTAvBgNV
BAMTKEM5OUM2NTJFRDUxN0EyQTYyQjhEOTlCMEUxRjdBRUUwNkQ4MjYzRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoXli5rGCzi/nQMUcFohyqCcQe
5l1UZzAdpLfpQ+6wo4xJEnq1/UNOOYScXLOfA7OXMjC+3OCT0uPmRVGbFwsJYE9c
jRP+sS0JyrNtHveWoOCQkR1NcH59DGTvCm2ZyAfthQXbbviUrNTvMSVnexmZQdaj
jmvDv5Kh39XL47QndxdCTJ/vJKxRyihmQ5PCEoyy/9wlSHGXMquBz7bUz15+99R0
KUDod/dQ/Pf15B9paW4mPyyCA1130fYMU4dtFD8YN8cG0x/IIkXNj6HaTO8Qe6do
y9amKlaUgW15yILWe3xVIMOlvFzze7/G3f0Iu+f6RGrRKZ/mlG3oFYVrDvBdAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUyZxlLtUXoqYrjZmw4feu4G2CY9gwHwYDVR0j
BBgwFoAU39Qgvu6GZYxpv3vwJaves19yOz0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTR1SnZwQjJLQXJCeWZTUmNyS1Q0SkRXSDFkSkNOemNtbUx1cGR2U3N0
V3YvMS9ERkQ0MjBCRUVFODY2NThDNjlCRjdCRjAyNUFCREVCMzVGNzIzQjNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGRDQyMEJFRUU4NjY1OEM2
OUJGN0JGMDI1QUJERUIzNUY3MjNCM0QuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OTR1SnZwQjJLQXJCeWZTUmNyS1Q0SkRXSDFkSkNOemNtbUx1cGR2U3N0V3YvMS9E
RkQ0MjBCRUVFODY2NThDNjlCRjdCRjAyNUFCREVCMzVGNzIzQjNELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAASLu2vrI2VkFyomKuqpwrnLLTWdl8Wf87tvprpM37JP+pVKs+IoaCgY/c6vi
vVA7REjGowWcZ3rBR7NfFaS6X/rBcH7UQq4ISpeQu/G7cynYqqwdeWkhL2556WqY
0khpMCarfEf4QrZLD8xHxaFd+MjVQUk86bO18iA8htgVoYHi5w17igwNVQFEGAwa
6+YpB8iwnMkylqCJkPxv5pDkYuGhUqMY85rlTOWsMIXP+L6HDVN5KV6jajFxSAYs
fW1Gt2bKSa5dtUCP/D3I8Al1C9ykYt1p9KXLxi9KlmMyLCE4xxQO+4QY+GzvYOH8
PxKmRnOoB9o7XQfxHGza2yxdQA==
-----END CERTIFICATE-----
Generated at Tue Dec 30 11:33:24 2025 by rpki-client