This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/640539F45452C2299C340AFF511D40CB7EEAA212.mft
File:                     640539F45452C2299C340AFF511D40CB7EEAA212.mft (raw, json)
Hash identifier:          D/6NzL5m9sH1/dh48iWTz8AIVnYBI5HxuRVSFhwP7cA=
Subject key identifier:   65:A9:56:AE:FE:1E:AD:13:23:33:52:A7:A8:0C:B6:09:CE:4D:6E:53
Authority key identifier: 64:05:39:F4:54:52:C2:29:9C:34:0A:FF:51:1D:40:CB:7E:EA:A2:12
Certificate issuer:       /CN=640539F45452C2299C340AFF511D40CB7EEAA212
Certificate serial:       3B6702BFC0EEAC354F3B8F57C0EEDFC1D605A92D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/640539F45452C2299C340AFF511D40CB7EEAA212.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/640539F45452C2299C340AFF511D40CB7EEAA212.mft
Manifest number:          0293
Signing time:             Sat 20 Dec 2025 07:07:15 +0000
Manifest this update:     Sat 20 Dec 2025 07:02:15 +0000
Manifest next update:     Sun 21 Dec 2025 10:29:15 +0000
Files and hashes:         1: 3133382e3138352e3136382e302f32322d3234203d3e203238313837.roa (hash: rD7F5xK9cR4/pIN8ctsOCA9ZeSAJs1T9SIFaWOA5R3U=)
                          2: 3138392e38392e3230382e302f32302d3234203d3e203238313837.roa (hash: Ml245kH2H3yLOKcjLG5bMV/jbocL+TBO+YTq3SCbAcg=)
                          3: 640539F45452C2299C340AFF511D40CB7EEAA212.crl (hash: 1VmNUVxNvAgqSRjZ5JtFyfyq3hhzROWxOZAVH7K+kGI=)
                          4: 323830343a3230303a3a2f33322d3438203d3e203238313837.roa (hash: +AmSumNSe3jEfgO/zgnDArEQVyEKrrgM+a3326FiUeE=)
                          5: 3138372e36302e3132382e302f32302d3234203d3e203238313837.roa (hash: hP3SbN5WFhu7M5qdmCPlBLAeFnVA62R4iLUfEyYsfhU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/640539F45452C2299C340AFF511D40CB7EEAA212.crl
                          rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/640539F45452C2299C340AFF511D40CB7EEAA212.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/640539F45452C2299C340AFF511D40CB7EEAA212.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 10:29:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:67:02:bf:c0:ee:ac:35:4f:3b:8f:57:c0:ee:df:c1:d6:05:a9:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=640539F45452C2299C340AFF511D40CB7EEAA212
        Validity
            Not Before: Dec 20 07:02:15 2025 GMT
            Not After : Dec 21 10:29:15 2025 GMT
        Subject: CN=65A956AEFE1EAD13233352A7A80CB609CE4D6E53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e2:00:7a:bf:08:6f:f6:47:29:aa:81:4e:7a:
                    de:62:31:db:58:ab:2a:94:13:05:57:1a:98:e1:55:
                    2c:56:be:d9:57:21:b8:f1:2f:ea:d4:41:b9:85:2b:
                    16:48:8c:4a:92:d0:40:60:27:a8:31:97:6d:70:19:
                    6c:25:10:3d:4d:dd:25:95:5c:a1:c0:1f:70:a4:74:
                    18:5a:7c:99:7e:38:90:4c:7d:20:e8:1e:94:f5:ae:
                    11:42:96:0f:06:dd:5c:2b:4e:f9:a0:45:fd:55:7a:
                    b5:6a:df:fd:05:96:07:29:28:c0:0b:ad:ab:bc:20:
                    a2:3e:e0:ea:44:2b:fe:de:7b:c9:21:59:d0:05:65:
                    51:16:9d:10:29:fb:11:91:87:b2:e8:d9:48:88:fa:
                    25:83:49:70:c7:71:f9:2a:fe:71:9f:57:e0:c7:72:
                    ee:e2:ee:31:67:92:60:65:1c:3d:82:01:46:67:fe:
                    9e:48:af:d7:3e:95:1f:07:95:e7:f7:13:df:c9:9c:
                    a6:54:f2:ca:22:e3:7b:96:04:a4:71:48:db:e2:8c:
                    75:50:44:0b:dc:08:04:82:77:8e:be:c5:23:6b:84:
                    d6:12:8b:ba:6d:f7:f5:78:e5:88:34:88:2c:42:fc:
                    ef:e8:cb:c6:8e:90:65:09:51:ce:49:56:be:c8:f6:
                    dd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A9:56:AE:FE:1E:AD:13:23:33:52:A7:A8:0C:B6:09:CE:4D:6E:53
            X509v3 Authority Key Identifier:
                keyid:64:05:39:F4:54:52:C2:29:9C:34:0A:FF:51:1D:40:CB:7E:EA:A2:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/640539F45452C2299C340AFF511D40CB7EEAA212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/640539F45452C2299C340AFF511D40CB7EEAA212.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/640539F45452C2299C340AFF511D40CB7EEAA212.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:91:e2:21:e4:6c:d3:f5:d1:4e:04:43:90:e5:d9:48:6e:88:
         cc:d6:5e:79:c4:84:46:1c:d0:46:29:d0:9f:7f:0e:b7:5a:6a:
         cd:a7:1a:f4:87:49:79:4f:0e:43:75:1a:e2:96:25:d1:76:58:
         17:59:56:78:a1:f9:4b:7f:9a:48:64:af:31:72:45:5a:a2:75:
         2a:5c:bf:fc:2b:33:13:f8:55:4f:74:26:a5:06:ff:07:4c:23:
         c7:9e:9e:a3:46:25:e8:87:22:b7:76:6e:87:fb:d5:24:2d:54:
         f0:82:46:ad:a1:64:74:2f:78:07:89:c3:43:80:b6:4d:50:82:
         40:45:26:34:ab:16:ac:e2:cb:ce:5b:64:6f:97:20:d8:c0:ef:
         e5:1b:d3:06:57:d3:45:61:9d:c5:32:d2:8b:63:5c:72:fe:b5:
         0f:96:bc:ad:8b:9d:1f:4f:bc:90:0a:22:d1:eb:2e:74:04:e8:
         f5:c5:71:68:b7:ff:dd:12:62:21:63:f3:86:5e:e5:a2:ce:bb:
         68:ba:4f:48:c8:3c:c0:f6:6e:d0:60:d4:3e:bc:9d:3a:e2:10:
         c2:74:55:c4:3e:4f:87:60:5c:5a:f7:cd:05:bf:a3:ba:ed:ad:
         25:f9:2e:cd:39:f2:2f:b3:05:71:c7:32:9a:5a:6f:91:28:47:
         73:5a:17:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:57:13 2025 by rpki-client