This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft
File:                     20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft (raw, json)
Hash identifier:          lHwwBOr0/6AeXdYN0b0ml6p628d+JWXAepmJPvVF3/Q=
Subject key identifier:   E2:50:C6:EC:DE:64:4A:0F:A8:B3:3F:F4:0A:7C:23:32:5D:0C:60:3F
Authority key identifier: 20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3
Certificate issuer:       /CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
Certificate serial:       416AF7B2518B54D4455A1423B552914B44EEBC6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft
Manifest number:          0167
Signing time:             Sat 20 Dec 2025 08:47:05 +0000
Manifest this update:     Sat 20 Dec 2025 08:42:05 +0000
Manifest next update:     Sun 21 Dec 2025 11:24:05 +0000
Files and hashes:         1: 3138392e38342e34342e302f32322d3332203d3e20323633343832.roa (hash: O4kifbSkitu5/3Knp4MgghSalt5nO6zrru13mWlDmc4=)
                          2: 3139312e3234322e3231362e302f32322d3332203d3e20323633343832.roa (hash: EO9/XY1ow03W8t7vGcP2Wy5W1TvFO2XAT86ZvjriNVc=)
                          3: 20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl (hash: Z3E/gGUHV+2X2w+Dr0fomoyFzKjJfXHGuWhhmi6HkwA=)
                          4: 3137302e38332e3231322e302f32322d3332203d3e20323633343832.roa (hash: VRf7c1AilMDa5MAED8IvmErGMZeCvn1CKEsBPS+2gS8=)
                          5: 323830343a313238383a3a2f33322d313238203d3e20323633343832.roa (hash: hw5+VUcxGrU/e1Wu8H1AwOj1HjLcJDx9TuqRoRLdwuM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl
                          rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 11:24:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:6a:f7:b2:51:8b:54:d4:45:5a:14:23:b5:52:91:4b:44:ee:bc:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
        Validity
            Not Before: Dec 20 08:42:05 2025 GMT
            Not After : Dec 21 11:24:05 2025 GMT
        Subject: CN=E250C6ECDE644A0FA8B33FF40A7C23325D0C603F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0c:b2:40:52:09:29:7d:15:d1:fa:7b:dd:44:
                    fa:a7:78:0a:4c:7e:f9:ea:f7:8d:d5:d8:c8:bf:17:
                    5c:b1:06:d0:8d:20:c6:7d:7c:7c:97:e3:ba:b0:f2:
                    55:92:04:60:a4:29:41:53:d1:26:3d:d0:18:d7:1e:
                    23:eb:31:19:b5:5d:eb:bd:af:fe:f2:bd:85:77:df:
                    8f:fa:92:14:9b:1e:32:0b:85:74:16:84:7e:68:22:
                    d3:02:83:c6:34:6d:07:2f:38:b9:89:a8:31:70:6f:
                    61:e0:41:d0:32:24:c3:1d:60:43:9c:48:b7:d4:68:
                    67:94:99:53:e9:47:14:08:71:f8:09:24:f8:c4:56:
                    fc:fa:82:da:bd:31:8a:d4:3c:2f:45:59:86:79:9f:
                    55:b9:b1:92:e0:ed:7a:b1:18:c7:de:c9:32:d5:70:
                    35:1f:81:8f:da:15:0a:ed:4c:6a:2a:f0:09:c8:98:
                    3e:25:69:c2:f2:67:1c:3c:14:ec:f4:29:19:99:98:
                    13:ae:75:02:80:cc:e5:54:1d:56:48:a4:19:82:05:
                    b6:67:94:54:0f:8e:f0:2b:fd:dc:65:2a:9e:55:38:
                    3f:8c:88:a6:b3:ae:6c:73:b9:7c:15:19:66:c5:b2:
                    26:0f:8f:ac:7d:32:e6:ed:c1:46:83:69:2d:c5:5f:
                    d1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:50:C6:EC:DE:64:4A:0F:A8:B3:3F:F4:0A:7C:23:32:5D:0C:60:3F
            X509v3 Authority Key Identifier:
                keyid:20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:6f:73:6f:a3:89:ba:23:03:5a:70:3f:81:11:75:8d:a7:e0:
         90:0a:b3:3d:fd:fb:08:cc:4c:01:97:87:3c:23:58:be:0b:d8:
         f4:5f:26:9f:7f:67:67:19:5b:41:fc:f7:af:54:40:3c:fb:79:
         a9:32:10:23:ff:b8:b9:e0:f9:52:48:9e:9f:70:84:18:cd:67:
         10:81:a6:35:45:30:8d:54:4a:bb:af:fa:12:56:a4:55:e3:71:
         3a:e7:53:10:31:15:92:a7:e3:ff:23:32:bc:db:ec:80:28:31:
         9f:6b:6f:c6:d3:7e:dd:32:30:74:59:57:99:bf:e9:67:fd:03:
         09:44:02:ab:05:0a:aa:ca:09:b8:19:ce:73:fc:82:9c:8e:c9:
         d8:81:9e:5c:b4:74:cd:c3:28:cd:81:f7:3c:03:e3:2a:91:44:
         8a:0f:0e:98:ab:40:e3:cb:b5:d6:d3:20:5c:35:f1:e2:bb:9b:
         f5:5b:eb:07:8f:5b:4a:46:e3:60:17:40:34:37:6f:32:77:6e:
         36:b2:85:e0:cf:a0:f8:7a:88:69:da:17:f0:32:7b:1b:9d:42:
         80:a3:7f:5b:c5:09:ec:5f:97:cf:59:ee:b9:34:d2:58:17:66:
         b2:30:19:ef:ee:84:21:15:34:8a:25:e0:fb:49:20:5d:34:f6:
         54:a3:68:f1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQWr3slGLVNRFWhQjtVKRS0TuvGswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBEQkQzQTBCNTREMTlFMTM1QkE1M0IzMUM0NTg4NDJD
ODlENDlGMzAeFw0yNTEyMjAwODQyMDVaFw0yNTEyMjExMTI0MDVaMDMxMTAvBgNV
BAMTKEUyNTBDNkVDREU2NDRBMEZBOEIzM0ZGNDBBN0MyMzMyNUQwQzYwM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjDLJAUgkpfRXR+nvdRPqneApM
fvnq943V2Mi/F1yxBtCNIMZ9fHyX47qw8lWSBGCkKUFT0SY90BjXHiPrMRm1Xeu9
r/7yvYV334/6khSbHjILhXQWhH5oItMCg8Y0bQcvOLmJqDFwb2HgQdAyJMMdYEOc
SLfUaGeUmVPpRxQIcfgJJPjEVvz6gtq9MYrUPC9FWYZ5n1W5sZLg7XqxGMfeyTLV
cDUfgY/aFQrtTGoq8AnImD4lacLyZxw8FOz0KRmZmBOudQKAzOVUHVZIpBmCBbZn
lFQPjvAr/dxlKp5VOD+MiKazrmxzuXwVGWbFsiYPj6x9MubtwUaDaS3FX9EPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU4lDG7N5kSg+osz/0CnwjMl0MYD8wHwYDVR0j
BBgwFoAUINvToLVNGeE1ulOzHEWIQsidSfMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREhNUVBCN0tGVEQzUlduUU1RRHprWFNwMmZDUWhrRUZaU0szTllvNVFE
VnMvMC8yMERCRDNBMEI1NEQxOUUxMzVCQTUzQjMxQzQ1ODg0MkM4OUQ0OUYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwREJEM0EwQjU0RDE5RTEz
NUJBNTNCMzFDNDU4ODQyQzg5RDQ5RjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
REhNUVBCN0tGVEQzUlduUU1RRHprWFNwMmZDUWhrRUZaU0szTllvNVFEVnMvMC8y
MERCRDNBMEI1NEQxOUUxMzVCQTUzQjMxQzQ1ODg0MkM4OUQ0OUYzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARG9zb6OJuiMDWnA/gRF1jafgkAqzPf37CMxMAZeHPCNYvgvY9F8mn39nZxlb
Qfz3r1RAPPt5qTIQI/+4ueD5Ukien3CEGM1nEIGmNUUwjVRKu6/6ElakVeNxOudT
EDEVkqfj/yMyvNvsgCgxn2tvxtN+3TIwdFlXmb/pZ/0DCUQCqwUKqsoJuBnOc/yC
nI7J2IGeXLR0zcMozYH3PAPjKpFEig8OmKtA48u11tMgXDXx4rub9VvrB49bSkbj
YBdANDdvMnduNrKF4M+g+HqIadoX8DJ7G51CgKN/W8UJ7F+Xz1nuuTTSWBdmsjAZ
7+6EIRU0iiXg+0kgXTT2VKNo8Q==
-----END CERTIFICATE-----