This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/0/DC566526072898BA252A37ABF91AC32DFFCDCB28.mft
File:                     DC566526072898BA252A37ABF91AC32DFFCDCB28.mft (raw, json)
Hash identifier:          H7AueRciKajfDK5K2QQDmPEuToNKL9+V6MSqxOy/dhc=
Subject key identifier:   96:B3:12:50:11:DA:15:44:84:D7:17:30:0D:96:63:A3:3A:02:F8:B9
Authority key identifier: DC:56:65:26:07:28:98:BA:25:2A:37:AB:F9:1A:C3:2D:FF:CD:CB:28
Certificate issuer:       /CN=DC566526072898BA252A37ABF91AC32DFFCDCB28
Certificate serial:       02AFD51D57CE97A40FD614EB904BEF090CA017DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC566526072898BA252A37ABF91AC32DFFCDCB28.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/0/DC566526072898BA252A37ABF91AC32DFFCDCB28.mft
Manifest number:          20
Signing time:             Tue 16 Dec 2025 19:19:27 +0000
Manifest this update:     Tue 16 Dec 2025 19:14:27 +0000
Manifest next update:     Wed 17 Dec 2025 22:40:27 +0000
Files and hashes:         1: 34352e36352e3233362e302f32322d3234203d3e20323636353236.roa (hash: muO7hGKXHvC3T8bSCTNhPz+n78PR7f0AlhPMWQjify4=)
                          2: 323830343a336435633a3a2f33322d3438203d3e20323636353236.roa (hash: mH533Be2tht8K5psDXIQnJeE8QNu4JJ2clMQCKj33gY=)
                          3: DC566526072898BA252A37ABF91AC32DFFCDCB28.crl (hash: afKYqr+u+2Kyjs94KH3dPI2aaEOjZ8bFQeydvO7wtTY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/0/DC566526072898BA252A37ABF91AC32DFFCDCB28.crl
                          rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/0/DC566526072898BA252A37ABF91AC32DFFCDCB28.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC566526072898BA252A37ABF91AC32DFFCDCB28.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Dec 2025 22:40:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:af:d5:1d:57:ce:97:a4:0f:d6:14:eb:90:4b:ef:09:0c:a0:17:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC566526072898BA252A37ABF91AC32DFFCDCB28
        Validity
            Not Before: Dec 16 19:14:27 2025 GMT
            Not After : Dec 17 22:40:27 2025 GMT
        Subject: CN=96B3125011DA154484D717300D9663A33A02F8B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3a:41:74:3f:e3:0c:69:4a:cb:1d:42:41:e1:
                    7b:27:95:99:32:ce:50:19:79:45:6f:db:5f:f5:6e:
                    0a:1d:f9:89:1d:44:f5:23:51:81:ef:b7:d3:eb:53:
                    33:65:59:23:db:e8:ba:2b:78:44:09:31:29:0b:9f:
                    34:63:9a:20:5a:c4:cd:9e:a4:55:08:6b:da:4f:9d:
                    c9:c2:02:27:64:d0:3c:0f:d7:e8:57:ce:c3:12:c2:
                    ba:d7:1e:19:35:8c:c9:7c:d0:bd:a9:78:5f:02:ba:
                    42:a8:7e:72:f9:85:8f:28:cd:1c:58:ca:3b:fc:81:
                    51:aa:f0:ed:92:a1:02:45:dd:b4:7e:4c:29:a7:5d:
                    e0:fd:f3:14:0a:71:21:2e:d9:9d:0f:f1:11:ac:05:
                    14:cb:97:f3:2d:40:b0:de:55:85:45:cd:27:51:f3:
                    a3:66:db:12:94:e3:e7:c3:3a:fe:4a:20:28:8d:24:
                    2f:c6:ad:44:96:85:dd:6a:57:cd:f3:b6:8a:95:00:
                    6b:19:28:ec:44:2d:5e:6e:9d:ec:d7:39:31:1a:c3:
                    66:f8:bc:e3:6b:24:f9:76:60:ea:9c:25:e1:28:52:
                    2b:51:aa:64:7c:22:48:8c:94:83:33:1e:65:cb:e3:
                    20:56:d8:c7:15:8a:6d:67:7b:5d:56:c2:a8:49:eb:
                    33:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B3:12:50:11:DA:15:44:84:D7:17:30:0D:96:63:A3:3A:02:F8:B9
            X509v3 Authority Key Identifier:
                keyid:DC:56:65:26:07:28:98:BA:25:2A:37:AB:F9:1A:C3:2D:FF:CD:CB:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/0/DC566526072898BA252A37ABF91AC32DFFCDCB28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC566526072898BA252A37ABF91AC32DFFCDCB28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/0/DC566526072898BA252A37ABF91AC32DFFCDCB28.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:4a:74:b3:59:55:70:83:1b:b2:f5:82:2c:b4:0a:1e:2b:f9:
         80:da:df:8f:7d:d8:e9:58:06:7e:f9:2b:19:5a:3d:2c:60:44:
         41:81:b4:1b:45:fd:4a:82:95:57:3d:7a:5f:9c:3d:80:bc:e8:
         fe:66:05:04:1f:bd:cc:1f:1a:7a:92:98:c0:0e:6a:14:21:01:
         79:63:2e:e5:71:a9:0c:17:c4:23:17:4b:3a:00:46:77:df:78:
         46:23:20:f3:df:85:8f:0d:30:80:9d:c4:27:79:15:f1:5b:eb:
         7c:9a:77:d8:5a:ac:ac:09:86:c1:d7:2a:a6:22:eb:17:ad:99:
         8c:a0:4e:42:f5:16:32:82:4f:b8:6b:6c:5f:b8:26:f4:3e:b7:
         ab:e3:01:8c:d1:38:be:03:5a:a8:8f:b2:32:6e:86:e9:90:0b:
         37:6c:62:d8:59:e2:5c:e2:bd:fc:20:16:09:0a:a2:40:77:81:
         38:05:39:9f:97:74:46:95:ad:64:eb:fb:2c:dc:58:cb:98:89:
         75:7d:1a:41:a5:dc:71:8c:ee:3a:bb:1f:35:a6:a5:6a:96:a2:
         00:70:e1:c9:43:87:35:6a:ce:a8:e9:3a:03:fa:ca:30:2f:74:
         61:05:41:bc:ae:32:27:62:a5:25:e6:2d:6b:15:38:57:7e:ea:
         57:ca:7d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 11:17:06 2025 by rpki-client