This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft
File:                     DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft (raw, json)
Hash identifier:          7XMMbHXnNwlnxEmG/32nxn8k+6A2JQd09R61TYsJuYI=
Subject key identifier:   9E:53:6B:97:C0:C0:67:A7:FE:CE:95:E6:01:93:34:49:1B:5E:6F:C9
Authority key identifier: DD:0E:EA:2C:C8:09:C7:ED:52:CD:2A:24:D1:44:54:39:0A:C2:46:4C
Certificate issuer:       /CN=DD0EEA2CC809C7ED52CD2A24D14454390AC2464C
Certificate serial:       31AB67B9590E7A4DC9B97A7ADD9D0812F2A7CB2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft
Manifest number:          03AB
Signing time:             Sat 20 Dec 2025 02:50:00 +0000
Manifest this update:     Sat 20 Dec 2025 02:45:00 +0000
Manifest next update:     Sun 21 Dec 2025 02:50:00 +0000
Files and hashes:         1: DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.crl (hash: qhPWFXNL4dfFdA2+wEnci99f6ssON0AN4ea0GSXuHEo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.crl
                          rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 02:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:ab:67:b9:59:0e:7a:4d:c9:b9:7a:7a:dd:9d:08:12:f2:a7:cb:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD0EEA2CC809C7ED52CD2A24D14454390AC2464C
        Validity
            Not Before: Dec 20 02:45:00 2025 GMT
            Not After : Dec 27 02:50:00 2025 GMT
        Subject: CN=3082010A0282010100ABF7B9A746870E8AE82C28B1D18844F945EA44E51824168CE5684505C295FB90A46699DA74CC777C6194953838B40F3D9A3021403ABEF100FE93E1E82F87ABEFBFEB516231253E02D52DEBFACDF30F8218387C625CA4AEB039644478C2B8B6D16F48AB7D1FBE5351539F6DC441FC785452249B2CC7305FE494EE49714F0400DA008B7BF5B96FA81A28422BD4D6B45A26672174E7890B8AA4CFCA88715366D052827EDD87C3FE821435AABE26C85412E3798AF2A5E1E92A9B2C72ED8A1FDC68EB3BA58E9A4238EF2A46AD368453BFD8A632F03C83DA0EBEDDE8BFFE308CE3A66829F8B2995EC250F7A3BADF8115C7D64A8C6B369243599AD49D7C5177548B48710203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f7:b9:a7:46:87:0e:8a:e8:2c:28:b1:d1:88:
                    44:f9:45:ea:44:e5:18:24:16:8c:e5:68:45:05:c2:
                    95:fb:90:a4:66:99:da:74:cc:77:7c:61:94:95:38:
                    38:b4:0f:3d:9a:30:21:40:3a:be:f1:00:fe:93:e1:
                    e8:2f:87:ab:ef:bf:eb:51:62:31:25:3e:02:d5:2d:
                    eb:fa:cd:f3:0f:82:18:38:7c:62:5c:a4:ae:b0:39:
                    64:44:78:c2:b8:b6:d1:6f:48:ab:7d:1f:be:53:51:
                    53:9f:6d:c4:41:fc:78:54:52:24:9b:2c:c7:30:5f:
                    e4:94:ee:49:71:4f:04:00:da:00:8b:7b:f5:b9:6f:
                    a8:1a:28:42:2b:d4:d6:b4:5a:26:67:21:74:e7:89:
                    0b:8a:a4:cf:ca:88:71:53:66:d0:52:82:7e:dd:87:
                    c3:fe:82:14:35:aa:be:26:c8:54:12:e3:79:8a:f2:
                    a5:e1:e9:2a:9b:2c:72:ed:8a:1f:dc:68:eb:3b:a5:
                    8e:9a:42:38:ef:2a:46:ad:36:84:53:bf:d8:a6:32:
                    f0:3c:83:da:0e:be:dd:e8:bf:fe:30:8c:e3:a6:68:
                    29:f8:b2:99:5e:c2:50:f7:a3:ba:df:81:15:c7:d6:
                    4a:8c:6b:36:92:43:59:9a:d4:9d:7c:51:77:54:8b:
                    48:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:53:6B:97:C0:C0:67:A7:FE:CE:95:E6:01:93:34:49:1B:5E:6F:C9
            X509v3 Authority Key Identifier:
                keyid:DD:0E:EA:2C:C8:09:C7:ED:52:CD:2A:24:D1:44:54:39:0A:C2:46:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:c1:12:9f:08:62:bb:6a:ab:1e:c8:7d:13:9a:13:57:12:cf:
         55:1a:3f:cf:31:ad:c0:cb:17:b7:8a:0a:eb:8a:bb:36:b2:40:
         89:c3:be:be:a7:f4:d8:e6:73:8a:76:10:c5:e3:0d:f4:66:87:
         ec:93:46:f5:f2:e9:ae:f9:c9:ea:69:07:2b:9f:77:82:e9:b3:
         05:07:06:54:77:7f:73:ed:4c:b1:b3:52:58:2c:50:a0:92:f8:
         ff:60:9c:cd:cd:7c:49:8c:f6:51:f5:03:43:c7:0c:0c:d5:b4:
         91:49:50:f3:f4:91:1e:43:fe:95:e2:d6:7c:bc:86:13:92:2c:
         eb:0f:2b:9d:f2:6d:8f:c6:a1:97:a0:a2:df:fb:a0:13:f4:d5:
         03:ed:3d:be:9d:ad:d9:dd:eb:5b:49:b7:2b:2d:f9:7a:2a:7b:
         6d:18:9f:32:f5:4b:4b:ea:9a:35:6b:65:6c:30:94:d6:7b:54:
         ca:67:34:db:6d:26:b0:9e:2a:6e:1a:2f:e3:52:29:eb:f3:51:
         e9:1f:7e:f1:e5:c3:88:5d:dc:81:2c:bb:ec:08:e4:25:87:10:
         ce:b3:20:a2:a1:a2:61:9c:75:45:64:67:0a:fd:c1:f5:17:8b:
         f8:5a:5c:e6:66:0e:c3:44:d1:4a:c5:8f:a2:77:0b:cd:bf:0a:
         b5:d1:40:cb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----