This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D6atVe6Qfg8iD3975DVeZY9ye3SxC2zUdY7qXdkq5LcG/0/08DDDD3D95492046DE5DDF0A80DFA4076B24B19A.mft
File:                     08DDDD3D95492046DE5DDF0A80DFA4076B24B19A.mft (raw, json)
Hash identifier:          8NQmdSVEL5x45ovNwAudAJA5rMMWFlmD6IsyfNgezUw=
Subject key identifier:   AF:78:EF:0D:80:37:61:C8:FA:8F:18:06:DF:E1:C9:17:8C:7A:60:82
Authority key identifier: 08:DD:DD:3D:95:49:20:46:DE:5D:DF:0A:80:DF:A4:07:6B:24:B1:9A
Certificate issuer:       /CN=08DDDD3D95492046DE5DDF0A80DFA4076B24B19A
Certificate serial:       2A5895E7BDD1BD8B4C1373692905D1EB459DFB82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08DDDD3D95492046DE5DDF0A80DFA4076B24B19A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6atVe6Qfg8iD3975DVeZY9ye3SxC2zUdY7qXdkq5LcG/0/08DDDD3D95492046DE5DDF0A80DFA4076B24B19A.mft
Manifest number:          7D
Signing time:             Sat 20 Dec 2025 04:30:39 +0000
Manifest this update:     Sat 20 Dec 2025 04:25:39 +0000
Manifest next update:     Sun 21 Dec 2025 05:34:39 +0000
Files and hashes:         1: 323830343a366666633a3a2f33322d3434203d3e20323730363939.roa (hash: gfD4DT8xrbgsKAbOtxhKs94zEtw6SZqQtc9rYxG0qfw=)
                          2: 08DDDD3D95492046DE5DDF0A80DFA4076B24B19A.crl (hash: NVDVYxZl2Pe6A5/KgrHkIAQjXP6DpTmhDGbb+g567xw=)
                          3: 3230302e3138372e3130382e302f32322d3234203d3e20323730363939.roa (hash: 3DjukDWweMhuIBO0IUDNviu44ZUEf1ziUSOevMRnTfM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D6atVe6Qfg8iD3975DVeZY9ye3SxC2zUdY7qXdkq5LcG/0/08DDDD3D95492046DE5DDF0A80DFA4076B24B19A.crl
                          rsync://rpki-repo.registro.br/repo/D6atVe6Qfg8iD3975DVeZY9ye3SxC2zUdY7qXdkq5LcG/0/08DDDD3D95492046DE5DDF0A80DFA4076B24B19A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08DDDD3D95492046DE5DDF0A80DFA4076B24B19A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 05:34:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:58:95:e7:bd:d1:bd:8b:4c:13:73:69:29:05:d1:eb:45:9d:fb:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08DDDD3D95492046DE5DDF0A80DFA4076B24B19A
        Validity
            Not Before: Dec 20 04:25:39 2025 GMT
            Not After : Dec 21 05:34:39 2025 GMT
        Subject: CN=AF78EF0D803761C8FA8F1806DFE1C9178C7A6082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:02:43:86:db:5e:d8:6a:f8:c2:87:f7:3d:ba:
                    73:dc:7f:f7:d6:ea:4c:d4:77:d6:39:17:f9:62:9d:
                    ca:06:79:20:3e:99:be:30:8b:24:a8:40:50:49:81:
                    b3:45:f2:cb:fb:ee:86:23:7a:e2:96:89:a6:bb:8c:
                    01:e4:f0:39:5b:90:2f:ec:a1:4c:90:e1:13:3c:4c:
                    d3:cc:ca:61:98:ac:29:e5:b7:1a:27:a9:e3:98:e8:
                    4f:06:60:bf:4b:5d:25:18:e6:55:c3:7c:28:f4:a0:
                    31:04:59:cd:86:b8:e2:9b:ba:ea:3a:eb:4e:52:52:
                    53:fa:e8:50:4e:65:88:f5:83:1d:39:3e:50:1a:6b:
                    d6:e1:99:d1:42:ed:1c:b7:d9:00:6a:37:89:c4:0e:
                    77:ea:79:26:6d:2a:d1:fc:2a:9b:4d:9d:d3:18:79:
                    89:c0:8c:ca:ec:c8:cb:4e:fb:62:8c:ad:9f:30:e2:
                    73:79:a6:f2:51:75:dd:ca:38:e4:7b:d3:bb:61:65:
                    53:fa:dc:07:f3:d5:0f:bb:06:37:ff:60:2a:af:82:
                    ca:9b:a3:5e:8d:0e:41:22:94:88:93:e5:21:57:bc:
                    8f:7c:5e:27:1b:4e:6c:54:80:c3:d2:77:df:18:38:
                    af:7e:fd:cc:ff:d9:33:b8:8c:bf:df:c8:a8:ac:4b:
                    d6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:78:EF:0D:80:37:61:C8:FA:8F:18:06:DF:E1:C9:17:8C:7A:60:82
            X509v3 Authority Key Identifier:
                keyid:08:DD:DD:3D:95:49:20:46:DE:5D:DF:0A:80:DF:A4:07:6B:24:B1:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6atVe6Qfg8iD3975DVeZY9ye3SxC2zUdY7qXdkq5LcG/0/08DDDD3D95492046DE5DDF0A80DFA4076B24B19A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08DDDD3D95492046DE5DDF0A80DFA4076B24B19A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6atVe6Qfg8iD3975DVeZY9ye3SxC2zUdY7qXdkq5LcG/0/08DDDD3D95492046DE5DDF0A80DFA4076B24B19A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:24:09:a9:40:e0:d0:08:a9:02:8e:42:c1:69:ce:ee:6a:1c:
         6b:ae:52:01:ff:3c:bc:e0:ed:fe:c4:67:a8:7c:2e:42:18:23:
         2a:9c:fa:b4:0c:f2:43:38:09:d5:95:35:ae:23:4e:9f:78:10:
         a1:bd:cb:72:7f:a7:91:e1:70:9a:c1:77:77:d8:62:bc:06:80:
         c6:e7:7f:9c:d6:e5:c6:30:8e:cc:ef:70:56:a6:53:ac:b9:b7:
         be:13:41:68:d8:33:e2:40:74:62:52:15:55:53:6c:08:43:06:
         61:70:91:d9:06:60:61:cd:5f:fd:1c:d3:d9:68:a3:30:5b:8e:
         79:6f:37:68:30:78:83:b5:5d:85:16:56:35:1b:94:23:9c:c6:
         76:d2:31:b7:34:db:76:07:95:a7:22:74:b1:9b:45:ee:75:66:
         1b:03:a8:ef:38:c2:8b:db:b7:64:0b:10:69:98:84:26:e4:9a:
         ef:7c:45:21:fc:0c:c9:fe:9c:25:58:b5:e3:ac:37:25:74:09:
         23:de:4f:43:37:f6:fa:67:fe:ed:e7:5a:47:a3:2c:d6:c8:70:
         41:59:5f:86:33:fe:d2:6c:bd:28:9c:6f:c2:fc:ac:65:37:f6:
         e2:7c:9f:a8:5f:95:d7:68:12:74:00:df:4e:d7:4c:ab:29:e3:
         f1:fb:cf:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:33:46 2025 by rpki-client