This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft
File:                     2D59905C3FCA5BDA34D7101B088D80451D026C47.mft (raw, json)
Hash identifier:          zt0AC5ZZgurfAtdDN2fNcAWJDTmR4Mnp5AyS//eK5RU=
Subject key identifier:   79:2D:94:D3:0E:6F:66:60:1F:AA:D9:F9:89:47:A7:BC:CD:AA:3D:83
Authority key identifier: 2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47
Certificate issuer:       /CN=2D59905C3FCA5BDA34D7101B088D80451D026C47
Certificate serial:       05F6E211B44A1EB0DBB279FE42B2C9FC2187958D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft
Manifest number:          033F
Signing time:             Sat 20 Dec 2025 03:00:27 +0000
Manifest this update:     Sat 20 Dec 2025 02:55:27 +0000
Manifest next update:     Sun 21 Dec 2025 05:32:27 +0000
Files and hashes:         1: 323830343a323439633a3a2f33322d3438203d3e20323634323333.roa (hash: NawnnPEHbMCtTiXRZuqs51ycbe695zSEZpiIfj2SEO8=)
                          2: 3137302e38302e3130302e302f32322d3234203d3e20323634323333.roa (hash: GZELRNfuplahvPNzTKoCXKCGe7m/TvcDFJFlJBobK9k=)
                          3: 3133382e3131372e3131362e302f32322d3234203d3e20323634323333.roa (hash: zTSSMFG/lgVqOaFeXf9pCktuzCsj0jIoIIi1uaEYa0I=)
                          4: 2D59905C3FCA5BDA34D7101B088D80451D026C47.crl (hash: x0YsPxMn1Vo9Sdq+LX0jo/b5GWKr3GlXW3fh4sG6CoA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl
                          rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 05:32:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f6:e2:11:b4:4a:1e:b0:db:b2:79:fe:42:b2:c9:fc:21:87:95:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D59905C3FCA5BDA34D7101B088D80451D026C47
        Validity
            Not Before: Dec 20 02:55:27 2025 GMT
            Not After : Dec 21 05:32:27 2025 GMT
        Subject: CN=792D94D30E6F66601FAAD9F98947A7BCCDAA3D83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:36:28:1d:ff:db:c1:58:06:aa:74:3d:80:8f:
                    14:bf:57:5c:69:1c:dc:50:ce:4d:5f:cd:7e:d2:a8:
                    29:72:df:03:35:62:35:29:1d:46:c7:2c:bf:28:ca:
                    7a:5c:59:3d:68:dd:7b:ba:cf:21:c1:ee:98:31:f2:
                    06:80:92:3a:c2:43:75:e3:57:31:25:92:c6:d2:05:
                    e3:ec:7c:41:fe:47:7f:7c:1f:f2:f6:26:e4:e2:a3:
                    5b:a6:ef:01:e2:a6:90:3f:63:f5:53:d9:fc:43:3d:
                    6e:ff:32:a3:e2:27:ac:7b:76:59:a7:bd:b2:e2:20:
                    36:ea:44:8a:1c:5e:12:af:3a:d0:aa:6d:27:05:81:
                    1d:68:51:fe:00:ea:57:55:53:34:ae:40:56:0b:d3:
                    69:2a:e2:f9:1f:26:62:cc:5f:46:56:28:8c:04:53:
                    a3:c4:bf:4b:a0:2e:d6:2c:da:eb:fa:71:22:2f:4b:
                    29:7e:6c:2d:26:02:7f:be:6f:c3:4a:d8:a6:90:28:
                    ea:dc:08:a1:1b:ee:ce:af:4c:16:5a:cb:1d:c9:1a:
                    81:bf:9f:1d:90:97:51:ba:79:d4:81:a4:69:01:23:
                    02:79:e0:40:19:ee:6c:8d:da:16:29:3a:5c:c7:12:
                    c3:29:db:9d:31:0c:01:f8:d1:ab:8a:b9:7e:6a:3c:
                    2d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:2D:94:D3:0E:6F:66:60:1F:AA:D9:F9:89:47:A7:BC:CD:AA:3D:83
            X509v3 Authority Key Identifier:
                keyid:2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:b9:98:d0:a0:bb:2c:b7:0f:29:42:c5:57:09:14:61:09:38:
         98:94:82:56:8b:63:ed:1d:df:66:bb:40:7c:52:d0:c2:f7:97:
         c2:6b:5f:e1:2e:10:37:da:ba:ba:41:a9:4c:2a:01:8d:e0:08:
         f5:32:1d:b0:8b:a7:f3:da:36:41:4d:df:9c:6a:3e:d5:fb:62:
         9c:af:80:bc:30:cf:7a:7a:72:fc:be:f2:c9:1d:f8:81:fa:fd:
         e1:d7:31:7f:19:6e:56:2c:0a:f1:08:19:ba:8b:7a:38:4a:84:
         48:3e:67:62:74:61:28:13:05:a6:18:16:fa:08:d1:5c:a2:46:
         43:0f:d4:e2:b0:7b:b4:67:fe:90:c4:b4:d5:d7:d6:eb:b6:54:
         90:66:dc:e1:ae:a7:dc:e1:a0:b5:d1:9b:e6:bc:ea:33:0b:ae:
         24:89:5b:4b:d8:bf:18:2e:db:b6:87:0e:53:67:36:d4:4f:88:
         ea:d5:a0:73:0c:f4:47:4a:f0:e4:be:74:00:02:48:5c:be:f9:
         c0:5b:e4:01:9b:7f:87:c9:08:fb:f1:69:ba:1b:81:e0:f9:e3:
         61:ec:89:4b:2e:08:fb:2e:47:14:ea:df:70:e2:da:9c:f3:bf:
         84:fc:d8:a9:4c:ae:de:af:51:8a:13:3e:b4:dc:ed:de:82:67:
         94:b8:15:40
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBfbiEbRKHrDbsnn+QrLJ/CGHlY0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ1OTkwNUMzRkNBNUJEQTM0RDcxMDFCMDg4RDgwNDUx
RDAyNkM0NzAeFw0yNTEyMjAwMjU1MjdaFw0yNTEyMjEwNTMyMjdaMDMxMTAvBgNV
BAMTKDc5MkQ5NEQzMEU2RjY2NjAxRkFBRDlGOTg5NDdBN0JDQ0RBQTNEODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuNigd/9vBWAaqdD2AjxS/V1xp
HNxQzk1fzX7SqCly3wM1YjUpHUbHLL8oynpcWT1o3Xu6zyHB7pgx8gaAkjrCQ3Xj
VzElksbSBePsfEH+R398H/L2JuTio1um7wHippA/Y/VT2fxDPW7/MqPiJ6x7dlmn
vbLiIDbqRIocXhKvOtCqbScFgR1oUf4A6ldVUzSuQFYL02kq4vkfJmLMX0ZWKIwE
U6PEv0ugLtYs2uv6cSIvSyl+bC0mAn++b8NK2KaQKOrcCKEb7s6vTBZayx3JGoG/
nx2Ql1G6edSBpGkBIwJ54EAZ7myN2hYpOlzHEsMp250xDAH40auKuX5qPC1NAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUeS2U0w5vZmAfqtn5iUenvM2qPYMwHwYDVR0j
BBgwFoAULVmQXD/KW9o01xAbCI2ARR0CbEcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFRTcmFVZEFXV0xoVVlYOXVkM2N5bnlYSDZaZVdjQVZDOHpjR29GaFA5
QUgvMS8yRDU5OTA1QzNGQ0E1QkRBMzRENzEwMUIwODhEODA0NTFEMDI2QzQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJENTk5MDVDM0ZDQTVCREEz
NEQ3MTAxQjA4OEQ4MDQ1MUQwMjZDNDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RFRTcmFVZEFXV0xoVVlYOXVkM2N5bnlYSDZaZVdjQVZDOHpjR29GaFA5QUgvMS8y
RDU5OTA1QzNGQ0E1QkRBMzRENzEwMUIwODhEODA0NTFEMDI2QzQ3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZ7mY0KC7LLcPKULFVwkUYQk4mJSCVotj7R3fZrtAfFLQwveXwmtf4S4QN9q6
ukGpTCoBjeAI9TIdsIun89o2QU3fnGo+1ftinK+AvDDPenpy/L7yyR34gfr94dcx
fxluViwK8QgZuot6OEqESD5nYnRhKBMFphgW+gjRXKJGQw/U4rB7tGf+kMS01dfW
67ZUkGbc4a6n3OGgtdGb5rzqMwuuJIlbS9i/GC7btocOU2c21E+I6tWgcwz0R0rw
5L50AAJIXL75wFvkAZt/h8kI+/FpuhuB4PnjYeyJSy4I+y5HFOrfcOLanPO/hPzY
qUyu3q9RihM+tNzt3oJnlLgVQA==
-----END CERTIFICATE-----
Generated at Sat Dec 20 12:53:18 2025 by rpki-client