This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.mft
File:                     CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.mft (raw, json)
Hash identifier:          CzbEeJHgWpqGgUgnRRRr/W9EqDRL0xC7fe1ejNf4qfo=
Subject key identifier:   9C:2A:F3:7D:CC:A8:EF:9D:C9:FD:79:9B:8F:C4:BA:D6:AF:20:20:D5
Authority key identifier: CB:ED:2E:B5:5F:BF:7D:D2:35:6D:73:47:1D:F5:93:AA:70:73:D3:FD
Certificate issuer:       /CN=CBED2EB55FBF7DD2356D73471DF593AA7073D3FD
Certificate serial:       09D5AFB04BB82C018E5DF9233D31476B525FF673
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.mft
Manifest number:          A8
Signing time:             Sat 20 Dec 2025 18:55:16 +0000
Manifest this update:     Sat 20 Dec 2025 18:50:16 +0000
Manifest next update:     Sun 21 Dec 2025 19:46:16 +0000
Files and hashes:         1: 323830343a373830383a3a2f33322d3332203d3e20323731323136.roa (hash: aP9w5LUb2eJVRnoNyFOvF8ygagN8phXJPyzq4MAIWds=)
                          2: CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.crl (hash: yCu3pN5rSM/OBYrZotY/Ve79CcOTHUvEJbtWgenItGY=)
                          3: 3137372e33362e37382e302f32332d3233203d3e20323731323136.roa (hash: RpLdfJT1pXXcOR4aWQ4um6Zo3Vsbi/E86oiN9R6ONyk=)
                          4: 3137372e33362e37362e302f32332d3233203d3e20323731323136.roa (hash: 3U7NF9Lz9aGI73HLXDdDGtUNdHBz7fbGjnXgXaW6L2w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.crl
                          rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 19:46:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:d5:af:b0:4b:b8:2c:01:8e:5d:f9:23:3d:31:47:6b:52:5f:f6:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBED2EB55FBF7DD2356D73471DF593AA7073D3FD
        Validity
            Not Before: Dec 20 18:50:16 2025 GMT
            Not After : Dec 21 19:46:16 2025 GMT
        Subject: CN=9C2AF37DCCA8EF9DC9FD799B8FC4BAD6AF2020D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b2:e3:e4:81:25:73:c5:90:35:78:58:a9:01:
                    68:52:e1:30:c2:86:fd:8a:3b:07:5b:4a:5b:9c:15:
                    bb:e0:69:db:3b:82:8b:ea:2a:15:c9:9c:21:c0:5d:
                    af:27:3d:07:72:64:c0:88:00:d9:65:36:f3:e8:6a:
                    76:24:2a:d3:46:81:9e:bc:6a:8f:63:77:b1:a0:19:
                    c4:f0:93:53:56:9e:09:84:39:fe:52:d0:6b:22:7f:
                    a4:d9:17:31:cf:26:39:fc:fa:af:48:02:04:12:2c:
                    18:f1:cb:12:3b:8c:f6:7c:f5:f4:e5:52:2f:df:5e:
                    8d:f9:c0:bb:1a:f9:45:92:ba:cd:21:96:92:81:0f:
                    9d:a8:ea:66:80:90:69:9c:3b:86:fd:b0:6f:69:ab:
                    d6:23:78:ff:45:16:87:79:45:d8:66:8f:ce:83:e9:
                    81:b4:98:59:c7:17:66:91:ab:db:c1:e0:c9:4d:44:
                    cc:d1:b7:d0:50:d8:41:2c:ca:ac:c9:48:21:8e:fe:
                    48:db:26:91:cb:a2:e4:d7:44:49:f8:4a:6f:3c:72:
                    da:57:10:3a:d3:ed:04:cd:3c:f4:ad:ba:0e:3f:a7:
                    2d:f6:41:f9:35:0c:54:85:fa:dc:96:b2:5d:94:77:
                    84:48:09:14:ef:46:08:ce:21:37:85:b1:a1:b3:58:
                    62:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:2A:F3:7D:CC:A8:EF:9D:C9:FD:79:9B:8F:C4:BA:D6:AF:20:20:D5
            X509v3 Authority Key Identifier:
                keyid:CB:ED:2E:B5:5F:BF:7D:D2:35:6D:73:47:1D:F5:93:AA:70:73:D3:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:58:e1:44:d8:c4:f2:96:65:d4:27:07:c4:fd:2b:da:95:76:
         bf:c4:29:aa:7f:fc:48:d9:09:e4:2e:70:cd:e3:27:67:b2:49:
         89:36:4a:f8:dd:2d:32:71:fd:db:66:3d:29:2f:cc:57:16:1f:
         19:ea:46:e9:a4:f4:24:66:a0:b9:7e:98:f1:f1:bf:18:67:29:
         8e:f9:03:19:e0:69:23:2c:fd:7d:21:1a:5b:7e:a3:94:43:cd:
         37:c0:6c:b6:98:07:4d:b6:61:34:2a:f7:2c:e8:56:07:96:52:
         0f:43:c2:47:5e:0b:78:f7:cc:d4:75:40:3b:5e:f7:da:a0:23:
         16:9a:f8:83:bb:65:bc:67:7a:c7:57:64:79:c3:2a:5f:d7:0f:
         6d:ff:4d:58:33:62:9a:fa:ff:2b:c4:e5:43:0a:83:8a:9b:ac:
         1a:65:d0:a7:09:ce:48:17:dc:6e:b9:a5:c0:6d:ec:00:ae:70:
         d3:20:ae:be:fd:51:4f:2e:bf:72:b6:22:88:00:f0:e8:7e:bb:
         3b:84:0d:7a:db:d7:d3:ec:fc:6b:bb:de:4e:15:e5:62:7d:6e:
         32:a7:5f:5c:df:aa:13:af:af:6e:8f:7e:30:f1:84:20:8f:a1:
         54:71:4e:98:fc:64:8a:de:e6:46:d6:0f:77:66:3a:2d:0f:66:
         7f:9b:7e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 08:14:47 2025 by rpki-client