This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.mft
File:                     72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.mft (raw, json)
Hash identifier:          gzydUyWoRoZ7CJ+du1wFJFlKWnA6h0HfD+oSCm8Kbvc=
Subject key identifier:   1C:E3:3B:30:A1:21:37:86:99:D1:A9:7E:64:B7:05:35:EB:8D:58:B1
Authority key identifier: 72:F6:94:67:67:3B:0B:B3:A1:3E:C6:51:F1:D0:BF:66:BA:E3:1F:D8
Certificate issuer:       /CN=72F69467673B0BB3A13EC651F1D0BF66BAE31FD8
Certificate serial:       06239E9FC61F70902A1C446CCAD8F240EBA57EEE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.mft
Manifest number:          033E
Signing time:             Sat 20 Dec 2025 00:18:55 +0000
Manifest this update:     Sat 20 Dec 2025 00:13:55 +0000
Manifest next update:     Sun 21 Dec 2025 02:14:55 +0000
Files and hashes:         1: 34352e372e3232342e302f32322d3234203d3e20323636363135.roa (hash: QOk4xpuDXuZwmhbgGdBEEVI7JvxiOtP4Cb6ef0m8ZdI=)
                          2: 72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.crl (hash: etvnBQR3CD/6JRpWRyfNK4ARVY0CLyJ/sS7QGqCNOX0=)
                          3: 323830343a336562303a3a2f33322d3438203d3e20323636363135.roa (hash: wTXSbFwmT/5Z9im6LAa9Qvq4T1fygXNnTS0L/2a0r5A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.crl
                          rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 02:14:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:23:9e:9f:c6:1f:70:90:2a:1c:44:6c:ca:d8:f2:40:eb:a5:7e:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72F69467673B0BB3A13EC651F1D0BF66BAE31FD8
        Validity
            Not Before: Dec 20 00:13:55 2025 GMT
            Not After : Dec 21 02:14:55 2025 GMT
        Subject: CN=1CE33B30A121378699D1A97E64B70535EB8D58B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e4:f9:d1:e3:47:82:4f:e5:6e:6f:0a:71:31:
                    a0:17:3b:d4:da:b2:30:c9:91:8a:3b:c5:87:4a:db:
                    50:69:21:f3:f3:3b:bb:00:c9:58:62:c6:97:34:3e:
                    f3:e4:18:e7:f2:4f:1f:8c:87:4c:6c:e7:ec:73:3c:
                    f3:96:fe:62:76:76:5b:b3:72:d8:06:f8:68:e6:2d:
                    6e:d3:8b:38:5a:ee:9d:22:f5:65:d9:d8:86:ac:9b:
                    6f:98:f4:b5:8b:8b:29:8d:d9:f9:67:ee:ce:d4:b8:
                    54:cd:32:51:cc:14:d3:82:a5:4e:d4:0e:85:66:2e:
                    38:c2:42:6a:e9:1c:22:de:41:7a:86:30:f9:4d:22:
                    47:a5:cf:56:98:fc:f3:3e:f1:3d:7d:cb:45:90:d9:
                    fe:22:9b:20:35:f1:b6:99:ee:f3:1f:40:2f:c1:b0:
                    39:fe:fb:b8:4c:24:11:60:38:c9:d7:f5:7c:6d:b2:
                    e9:69:e5:12:93:6b:82:af:00:75:ca:61:72:86:a2:
                    46:93:3a:ed:eb:c1:20:b1:f2:95:71:36:f8:b4:e6:
                    10:14:f3:f4:9a:9c:5d:84:48:ef:c4:91:02:f4:1a:
                    4e:fe:7a:f1:dc:95:42:1d:17:f7:5c:b6:0e:7c:21:
                    5a:e8:64:2a:cd:5e:a1:d2:56:ff:89:26:32:9c:69:
                    d7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E3:3B:30:A1:21:37:86:99:D1:A9:7E:64:B7:05:35:EB:8D:58:B1
            X509v3 Authority Key Identifier:
                keyid:72:F6:94:67:67:3B:0B:B3:A1:3E:C6:51:F1:D0:BF:66:BA:E3:1F:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:ae:52:61:50:d8:7d:f3:8c:69:2a:dc:4c:1f:91:9c:30:38:
         38:e3:44:ae:6d:2c:3e:b3:e2:bc:a9:6b:25:47:bf:26:a5:40:
         6a:da:2a:3e:2f:82:6b:da:1f:f2:49:1b:09:b9:46:19:30:13:
         74:a2:53:c5:13:4d:62:36:ea:42:27:bc:7a:07:fd:da:23:84:
         dd:d2:15:ac:d9:81:bb:96:ef:74:be:43:6a:b7:78:2d:45:c2:
         ed:f9:24:06:3f:29:18:bf:ac:82:ab:27:b0:d5:2e:20:d1:02:
         d5:31:0f:c7:39:0f:b8:e6:79:3a:a3:7e:64:b1:fd:64:08:4e:
         40:ec:c0:04:91:0e:b3:08:d7:3e:57:04:94:9e:4e:dd:f0:31:
         92:0f:0b:9f:9c:db:7f:79:03:09:89:97:65:60:c4:20:76:4a:
         54:b2:b1:94:5e:db:9d:f8:0b:b6:70:61:30:e7:78:6f:18:d1:
         bb:f1:8b:c7:1c:82:a0:c6:2e:cf:49:27:0b:7e:f1:54:3f:61:
         35:e1:63:9d:3b:3c:74:5a:08:7a:20:2e:9e:e6:ca:fb:18:56:
         6b:83:af:56:4d:93:87:4e:e6:e6:a2:3e:a3:aa:f3:f1:f0:34:
         0e:93:17:f5:80:b5:5e:30:d6:c8:43:3d:07:13:b0:b4:db:71:
         8d:87:d2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:49:56 2025 by rpki-client