This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.mft
File:                     DFB1F3FA6F420DF0190552FC0972859AF45F368E.mft (raw, json)
Hash identifier:          Hsv6Sj1LkOjZBCvLJcNuvVi5+WMoMGnIhTOG0w9enSI=
Subject key identifier:   3B:6A:8B:EB:B8:17:D4:03:A9:43:B5:E6:51:F7:92:DF:92:A9:D6:C7
Authority key identifier: DF:B1:F3:FA:6F:42:0D:F0:19:05:52:FC:09:72:85:9A:F4:5F:36:8E
Certificate issuer:       /CN=DFB1F3FA6F420DF0190552FC0972859AF45F368E
Certificate serial:       26721DBB2E6F5C964C5244C32BCC3111C999038A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB1F3FA6F420DF0190552FC0972859AF45F368E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.mft
Manifest number:          0126
Signing time:             Sat 20 Dec 2025 03:18:09 +0000
Manifest this update:     Sat 20 Dec 2025 03:13:09 +0000
Manifest next update:     Sun 21 Dec 2025 03:47:09 +0000
Files and hashes:         1: DFB1F3FA6F420DF0190552FC0972859AF45F368E.crl (hash: EJ6WHjbhbrkGPSprkNaWapE8wpVe/v2+4Kwyktv4jus=)
                          2: 3137372e38352e3137322e302f32322d3234203d3e203532373436.roa (hash: KCrFqTQzO17kQlL8SOLSVWkU5WyJdtvB7e1wLs8BQYA=)
                          3: 323830343a316535343a3a2f33322d3536203d3e203532373436.roa (hash: ADTcvk7C0x33Y2RYKuM0CdXcsQC2etHZuMH6cQfkxbQ=)
                          4: 3133312e3232312e3138302e302f32322d3234203d3e203532373436.roa (hash: 3PsUICllrnsF07Zi7kmN3vDa9q1Ef/q577Ua+T+jmVg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.crl
                          rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB1F3FA6F420DF0190552FC0972859AF45F368E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 03:47:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:72:1d:bb:2e:6f:5c:96:4c:52:44:c3:2b:cc:31:11:c9:99:03:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFB1F3FA6F420DF0190552FC0972859AF45F368E
        Validity
            Not Before: Dec 20 03:13:09 2025 GMT
            Not After : Dec 21 03:47:09 2025 GMT
        Subject: CN=3B6A8BEBB817D403A943B5E651F792DF92A9D6C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:98:43:ba:d7:e7:6e:2c:c8:b8:fb:05:d8:c6:
                    ea:c7:f0:41:69:3e:08:d6:92:f8:13:c1:4c:5e:b8:
                    2f:94:44:ad:5a:4a:43:8d:09:d8:1b:be:2b:b5:8f:
                    52:e2:6a:69:e1:f5:c3:7a:b7:fe:ca:a1:27:13:b9:
                    df:cc:87:0d:12:e4:94:23:2b:99:b2:27:a2:01:f1:
                    e2:d9:dd:f9:30:3a:97:e1:fc:72:cd:cf:93:1a:a8:
                    f4:97:f9:67:09:50:d5:20:b3:f0:12:14:e0:71:54:
                    b9:91:66:f6:f6:09:1d:98:50:41:22:bf:f7:67:b2:
                    14:1e:8b:27:59:54:89:bf:2c:18:54:c5:5c:ad:2d:
                    3e:2b:72:a1:d0:3d:b5:4d:6f:17:43:58:e9:ee:bf:
                    af:f8:5b:7f:43:8d:eb:04:64:2a:78:04:1f:38:ba:
                    25:f0:62:64:c5:05:6f:c2:a2:ff:b4:34:4b:f0:ba:
                    80:46:bc:f2:f3:38:0f:b9:9a:8a:27:da:e3:d9:87:
                    cc:2f:d6:ee:82:1d:18:76:42:74:b3:16:0d:54:3c:
                    ab:e0:bc:1e:cb:68:d8:1a:7f:05:af:2c:ef:d0:2d:
                    6b:a1:d6:8b:59:b5:b3:03:12:9a:15:80:c2:c0:eb:
                    f3:81:6d:cf:34:ba:b4:ec:e2:d1:05:84:fd:ee:be:
                    06:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:6A:8B:EB:B8:17:D4:03:A9:43:B5:E6:51:F7:92:DF:92:A9:D6:C7
            X509v3 Authority Key Identifier:
                keyid:DF:B1:F3:FA:6F:42:0D:F0:19:05:52:FC:09:72:85:9A:F4:5F:36:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB1F3FA6F420DF0190552FC0972859AF45F368E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:e7:c5:4c:f0:fa:9c:22:d1:04:81:43:33:44:c4:57:05:dd:
         bb:47:8f:f7:b0:4e:c5:61:b3:42:25:c4:ce:1c:a4:e1:d4:cf:
         db:2c:a8:cb:64:36:c8:56:f9:60:e6:cb:a9:de:86:a7:ab:15:
         0c:f9:cb:53:b0:db:47:fe:79:ad:71:af:11:b1:bd:00:49:43:
         55:1f:e8:4a:31:39:2c:db:26:d0:a5:2e:60:1e:99:aa:8c:e4:
         c0:58:e5:a9:ae:26:53:dc:66:19:d7:9c:67:5a:9e:16:a8:20:
         92:ba:52:e5:9e:c0:ad:0e:a2:f7:32:aa:aa:02:26:8b:29:01:
         cf:88:ee:dc:40:d8:96:35:b9:e0:9e:ba:5c:4c:58:de:1b:b1:
         2f:1e:fa:29:21:ac:11:38:86:76:ee:a7:c0:39:8b:20:40:56:
         b7:16:5a:fb:9b:e9:fa:1b:23:89:3b:81:05:f6:e6:ba:f7:05:
         ae:16:3b:fe:86:1b:98:a2:a4:5d:ef:db:0d:91:ac:32:3d:3a:
         9e:6a:64:67:e0:a8:4d:4e:90:1b:9a:83:55:dd:06:c1:6c:85:
         d2:35:91:5c:6c:31:51:18:8b:43:fe:df:cd:85:cc:01:3b:30:
         e1:b3:8e:70:d0:ee:82:b1:53:fe:5a:1c:1c:7d:5d:9b:a5:2c:
         96:0a:31:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:34:28 2025 by rpki-client