This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.mft
File:                     DDF75D11A85F5023747B20E973994EC53D23A68E.mft (raw, json)
Hash identifier:          kqVtF1j4TgGp4Rs3+oIl/g3xzKlQfA4Oc29GwVgj14k=
Subject key identifier:   BD:58:05:0B:FC:2C:E9:5A:00:B2:73:F2:B0:82:4A:75:37:A4:CE:00
Authority key identifier: DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E
Certificate issuer:       /CN=DDF75D11A85F5023747B20E973994EC53D23A68E
Certificate serial:       777C35975FBA25CEAA172E4A5143070B96C6E47B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.mft
Manifest number:          0239
Signing time:             Wed 24 Dec 2025 07:32:26 +0000
Manifest this update:     Wed 24 Dec 2025 07:27:26 +0000
Manifest next update:     Thu 25 Dec 2025 10:42:26 +0000
Files and hashes:         1: DDF75D11A85F5023747B20E973994EC53D23A68E.crl (hash: z/wLm1HaeP664FqLiH/9lEo+7MRCEzugJicv9885zMw=)
                          2: 3139312e3234312e33322e302f32312d3234203d3e203238323230.roa (hash: cCgTuPDH25c1DKWNfvgrBazV+yauBmZLAxwtarYXhVM=)
                          3: 34352e3136352e32302e302f32322d3232203d3e20323633363635.roa (hash: BVb/jut+C8eFviVFvuM2ltcqqqT+gQY09gWhdSqJwbM=)
                          4: 34352e3136352e32302e302f32322d3234203d3e203238323230.roa (hash: mwVI0AG/sDDI5JEjngpiIDs1ebr3AAS17BohJn/IWeI=)
                          5: 323830343a343763303a3a2f33322d3332203d3e203238323230.roa (hash: R/k8pi4fsQNg8Wu8CtzHxKeYM1rgtTrB7QYEgwRr7r4=)
                          6: 34352e3232372e3138382e302f32322d3234203d3e203238323230.roa (hash: fqsNhPPq7dBrU2xKfEFrYyM8zssknbI8exKJb78VYHE=)
                          7: 3136382e3139362e32302e302f32322d3232203d3e20323633363635.roa (hash: Hxkt07RV9GFrwmBw9JoUi3sqoPL1C0kt499HnHpofXI=)
                          8: 323830343a313133343a3a2f33322d3332203d3e203238323230.roa (hash: GHAgq490xgiu/xtos3hvohVrpJvrHTMlxqiqWAAEc/Q=)
                          9: 323830343a313133343a3a2f33322d3332203d3e20323633363635.roa (hash: o7ZXYUaKG6CLFwoYQcIALVYXwjHExB47howsx6XYQTU=)
                          10: 34352e3232372e3138382e302f32332d3233203d3e20323633363635.roa (hash: hT3nsovsnA8bbxMNLvVFGaXhiDR0wLXYuTXeoh3UYE8=)
                          11: 3133312e3136312e3130382e302f32322d3232203d3e20323633363635.roa (hash: NBzwX9EMQmnpIFrVrueasmzp+LR9euCvrCyy6Yi3P6Y=)
                          12: 3133382e3235352e3137322e302f32322d3234203d3e203238323230.roa (hash: kEXmzx86Kq1P8Y/eBTECWEkrm0ysop8uPcz5Wz8Amps=)
                          13: 3137302e3135302e3131322e302f32322d3234203d3e203238323230.roa (hash: T+8qc/rzBPe+Hje9YLB+FKUgs9PJi3Egscv6Uj4DmXE=)
                          14: 34352e3232372e3139302e302f32332d3233203d3e20323633363635.roa (hash: PscexAN2NvPbvhyGmVPqoxDbX6c4sd+iUCKklue+mRg=)
                          15: 34352e3232372e3138382e302f32322d3232203d3e20323633363635.roa (hash: x/b5ohnsDKfateOIejJiQEiQBqCZjfgDEnPV4d/7hAI=)
                          16: 3136382e3139362e32302e302f32322d3234203d3e203238323230.roa (hash: 5eTrnn0ZubUEihc4zm+2V60aFMpvNfcvLEPcTaBWnRw=)
                          17: 323830343a333433633a3a2f33322d3332203d3e203238323230.roa (hash: C8aE7AtEvU51iJnxliqgNr6rj7G50RbAeSkDhxlGrfE=)
                          18: 323830343a333433633a3a2f33322d3332203d3e20323633363635.roa (hash: qzkIktbxo2vBt40v1fv2gFF+F0vRV1kX0DvfP0Sj79Y=)
                          19: 3137302e3135302e3230342e302f32322d3234203d3e203238323230.roa (hash: lvrzPJIN1m1H2wK2uyLKYYX9Nbnc0hABolxa8svpDME=)
                          20: 3133312e3235352e3135362e302f32322d3232203d3e20323633363635.roa (hash: Oqc3rJfgm0No3wbVLCvGtljVQw9dhZmhe/7jORIBwps=)
                          21: 3139312e3234312e33322e302f32312d3231203d3e20323633363635.roa (hash: FAYovG+j2T0BnrleWeF2KmC90gVCZ+KiEXa2euYnAXg=)
                          22: 3133382e3235352e3137322e302f32322d3232203d3e20323633363635.roa (hash: eqEeXjsgpmbgcehXb4rKKeLfygWsFpsOvMEgCMLjbg0=)
                          23: 3133312e3235352e3135362e302f32322d3232203d3e20323634343933.roa (hash: D8TfdUkUH4NAEtLEGPmB+xl7I0mhnDlSsgQhMNPP/4I=)
                          24: 3133312e3235352e3135362e302f32322d3234203d3e203238323230.roa (hash: CuuomBXo9hDCRzui0HAYXbBVhlcJqySvryxp3b66mkE=)
                          25: 3133312e3136312e3130382e302f32322d3234203d3e203238323230.roa (hash: r5d1cYieDidroOK+EMRknH1MDdiB/XwwZRRUsY+qUtU=)
                          26: 34352e3136352e32302e302f32322d3232203d3e20323638363532.roa (hash: pGqCvwBeRGN/RovuatR+UB0BOB33pst9kKe11/8mKcw=)
                          27: 3137302e3135302e3230342e302f32322d3232203d3e20323635303339.roa (hash: 9mcMX3ahs5AIs1ezAh9Rsp2/1ypwjCg27jrlMQNVzKI=)
                          28: 3137302e3135302e3230342e302f32322d3232203d3e20323633363635.roa (hash: dKF5S3RFpi7oopso/2Zq7m8muGyWcN5o2HJWXty1BmM=)
                          29: 3137302e3135302e3131322e302f32322d3232203d3e20323633363635.roa (hash: xng2mJo7bTOi2NuQGd4/1Q1u+arhtwMRVb6YUfHPIkc=)
                          30: 323830343a343763303a3a2f33322d3332203d3e20323633363635.roa (hash: gteufyn+gtDBvgOQJmRTTDwF5AEXqFlurruWWyQ4DsQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl
                          rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 10:42:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:7c:35:97:5f:ba:25:ce:aa:17:2e:4a:51:43:07:0b:96:c6:e4:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDF75D11A85F5023747B20E973994EC53D23A68E
        Validity
            Not Before: Dec 24 07:27:26 2025 GMT
            Not After : Dec 25 10:42:26 2025 GMT
        Subject: CN=BD58050BFC2CE95A00B273F2B0824A7537A4CE00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:20:93:7d:e4:43:2c:df:a6:1c:08:7f:74:1b:
                    88:f7:85:fa:23:96:15:07:bb:1d:9b:b6:ee:ac:9d:
                    d5:cc:a9:03:18:3f:8b:96:55:95:9b:9e:f4:56:b5:
                    7c:9c:2a:5e:c7:cf:d0:32:86:5b:36:f7:b9:41:71:
                    5e:e0:af:f0:2d:8d:bc:f6:7a:3c:5b:be:51:dc:c1:
                    0b:7c:83:be:43:73:03:40:c2:8f:dd:eb:0d:0e:b8:
                    f5:3b:87:7a:df:b3:b0:40:65:3a:c7:e3:6e:fa:e0:
                    6f:f8:8b:4a:82:d9:69:34:53:14:25:db:a3:0e:8d:
                    10:fb:fa:d4:b1:65:57:2b:b5:03:4a:ef:cc:b2:86:
                    c1:06:55:a9:21:87:0f:60:8d:24:d3:47:01:28:19:
                    a5:e9:1f:fb:d4:c4:88:e0:f0:3b:6c:6c:34:9b:b6:
                    c3:b6:e9:51:ae:8b:51:4f:f4:2e:42:b9:f9:00:a4:
                    3e:f9:a7:2b:63:3f:d1:12:2e:48:1e:aa:fc:48:cd:
                    f6:d2:01:6c:22:4c:ee:47:07:44:ca:f4:f4:1c:ca:
                    7b:d9:fc:aa:fc:6d:1f:26:21:29:6a:b8:83:e9:2b:
                    08:87:e7:7c:bb:e8:90:99:fa:f2:82:24:f9:47:ef:
                    3b:1d:27:f5:1c:ed:6b:a2:b8:5c:47:53:c5:d8:d6:
                    8e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:58:05:0B:FC:2C:E9:5A:00:B2:73:F2:B0:82:4A:75:37:A4:CE:00
            X509v3 Authority Key Identifier:
                keyid:DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:d6:ef:1a:f6:73:9a:63:1e:5a:d1:f1:59:0e:33:6a:76:a8:
         9c:6a:a6:bf:ca:a8:4c:51:d6:de:58:29:d3:7b:b9:11:99:64:
         44:8b:f8:d7:b4:a5:cc:3f:4d:17:ea:64:a9:7f:82:15:24:f1:
         e9:89:62:d0:c6:20:97:08:72:b1:9c:d7:30:aa:aa:57:68:5d:
         81:2b:5d:b1:a0:4d:1e:77:64:e3:f8:00:91:d8:21:a9:4b:33:
         10:99:6f:3e:9d:50:0f:bb:df:bf:fa:42:45:64:d7:d4:e9:dd:
         2a:78:a0:63:0e:ad:45:c2:52:4f:89:5c:aa:dc:aa:73:23:76:
         a3:2f:1b:45:a8:ef:fb:fe:7f:dd:15:b4:8e:fa:a4:de:3d:4a:
         77:b4:cd:f3:01:38:5f:a3:8c:88:da:34:0d:29:c8:97:bf:c1:
         c7:8c:6c:65:2c:c8:b7:c8:3a:01:41:4b:8b:14:72:bf:20:fc:
         46:36:c5:43:84:1c:15:a8:c4:03:c2:4e:fc:96:bd:3c:89:b7:
         6c:87:98:56:14:54:c7:ca:8c:3f:c0:79:5e:95:f6:f1:9a:62:
         fa:78:a7:6b:c1:17:d1:9b:50:62:3a:14:7d:50:58:51:51:01:
         a9:a8:d4:0b:e3:0b:6e:40:71:2d:85:19:53:22:78:f4:6c:44:
         e9:0a:6a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 13:24:08 2025 by rpki-client