This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ae4NTmLrAjgxBZKctYUzAmQBTE2jzjVEjoGm8x5rxWjD/0/DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.mft
File:                     DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.mft (raw, json)
Hash identifier:          w+dNsrgRDS5FSsVoPh1VZYGZ/a4wrs3nmoWmE/MTvE8=
Subject key identifier:   17:33:D8:44:C1:4E:4F:33:30:6D:36:2D:C4:62:DA:5F:37:05:87:32
Authority key identifier: DA:C0:A6:26:0B:90:EE:6F:2F:66:BF:B9:98:F6:D6:37:0B:21:9C:76
Certificate issuer:       /CN=DAC0A6260B90EE6F2F66BFB998F6D6370B219C76
Certificate serial:       20D65F6C9212556F0EAE6F22646C8A705D463B21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ae4NTmLrAjgxBZKctYUzAmQBTE2jzjVEjoGm8x5rxWjD/0/DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.mft
Manifest number:          024A
Signing time:             Sat 27 Dec 2025 19:01:04 +0000
Manifest this update:     Sat 27 Dec 2025 18:56:04 +0000
Manifest next update:     Sun 28 Dec 2025 20:50:04 +0000
Files and hashes:         1: 3136382e3232372e3132302e302f32322d3234203d3e20323634383738.roa (hash: XhQtGkmxlIoTQ7XqEuCKGZLcMg+a7EX+70TZqKNxv0w=)
                          2: 323830343a326633383a3a2f33322d3438203d3e20323634383738.roa (hash: 8qCs3rHqS1/6KOvaWm8UdvtlldzimJVDXGto/kxbPrI=)
                          3: DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.crl (hash: MmpV81mrVZgRDqJNX6w0FegIM43xWZzOPsXCFeV6rXg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ae4NTmLrAjgxBZKctYUzAmQBTE2jzjVEjoGm8x5rxWjD/0/DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.crl
                          rsync://rpki-repo.registro.br/repo/Ae4NTmLrAjgxBZKctYUzAmQBTE2jzjVEjoGm8x5rxWjD/0/DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Dec 2025 20:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d6:5f:6c:92:12:55:6f:0e:ae:6f:22:64:6c:8a:70:5d:46:3b:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAC0A6260B90EE6F2F66BFB998F6D6370B219C76
        Validity
            Not Before: Dec 27 18:56:04 2025 GMT
            Not After : Dec 28 20:50:04 2025 GMT
        Subject: CN=1733D844C14E4F33306D362DC462DA5F37058732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:03:38:fc:34:83:40:3e:90:b3:63:83:bb:83:
                    08:bf:96:e9:41:fb:42:78:fe:9d:b4:e3:9d:5a:3f:
                    80:f6:bf:66:b0:51:2e:70:0e:62:de:71:78:c3:db:
                    9f:6a:9e:bb:b4:d9:b3:64:da:4e:f9:f0:58:ed:ae:
                    7e:4d:31:cf:09:52:77:db:f0:5f:a2:e4:68:d0:05:
                    54:53:0d:a3:85:8e:a4:2a:13:a0:86:63:c5:05:17:
                    b4:bb:4d:c3:f2:17:9c:6d:76:ad:44:14:2e:a8:cf:
                    ed:0a:9c:11:be:e5:0d:86:56:9e:3d:97:dd:eb:8b:
                    60:84:56:84:58:05:47:7a:6c:a7:0e:36:0f:44:a2:
                    64:85:12:6d:18:09:b8:31:ba:e6:8c:76:7f:a9:0c:
                    5e:fc:94:94:ac:a3:58:9c:8f:60:3b:67:e3:cb:1b:
                    2e:69:a0:b7:41:86:7a:83:cb:9d:bc:fd:82:84:b1:
                    a2:b5:dc:e9:2f:b9:79:22:49:00:69:dc:bf:3a:fa:
                    32:04:58:fb:55:40:b6:4e:ca:a7:cd:92:9d:cb:32:
                    1c:e9:93:9e:9d:c7:3f:91:e6:de:93:eb:f0:b1:48:
                    da:50:3b:af:20:52:3f:08:c8:3e:bd:1c:82:5f:c8:
                    8f:44:99:d0:2a:c6:88:7a:a0:d0:00:2e:11:c7:a0:
                    38:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:33:D8:44:C1:4E:4F:33:30:6D:36:2D:C4:62:DA:5F:37:05:87:32
            X509v3 Authority Key Identifier:
                keyid:DA:C0:A6:26:0B:90:EE:6F:2F:66:BF:B9:98:F6:D6:37:0B:21:9C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ae4NTmLrAjgxBZKctYUzAmQBTE2jzjVEjoGm8x5rxWjD/0/DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ae4NTmLrAjgxBZKctYUzAmQBTE2jzjVEjoGm8x5rxWjD/0/DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:bf:f3:ea:44:f4:14:b9:63:75:75:45:51:0c:7f:d9:c5:e6:
         46:19:9f:c6:2e:3f:67:24:6c:99:1c:7b:30:ee:5e:84:34:05:
         ab:66:7a:bc:4e:f7:8f:4f:99:59:da:b9:aa:12:ba:be:83:c9:
         57:e0:ab:9a:da:3b:d0:4b:16:06:d3:82:08:35:07:df:d7:25:
         77:34:8b:ae:26:3c:72:4a:6b:b3:81:4a:43:2c:29:00:23:45:
         71:68:65:e0:cd:40:93:9d:73:ce:78:a6:c8:10:82:2f:6f:23:
         c2:ca:03:11:2a:19:70:6a:b4:f9:00:3e:c2:18:0f:d6:b4:c5:
         d1:af:35:ca:f7:7a:4e:91:7b:90:9e:75:65:a8:d3:4a:df:3d:
         e1:7e:52:8c:3a:67:ef:d9:f3:f2:b6:65:36:fd:fa:fd:6e:db:
         e4:c6:5b:ac:52:20:e7:1a:ac:aa:f3:5d:56:d7:7f:ed:2a:04:
         18:1c:46:70:14:f8:51:9b:b2:dd:62:4a:1e:c3:61:b6:d0:9d:
         87:b5:eb:35:ed:68:5e:f2:dd:19:fc:7f:ee:c4:aa:8e:df:c0:
         3d:1e:ba:1f:0e:3e:82:19:a6:ff:fd:05:69:95:8e:fe:76:5e:
         64:dc:61:9d:a8:93:04:65:58:7f:d8:6c:91:91:02:ab:fe:ea:
         ed:09:74:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 06:28:39 2025 by rpki-client