This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.mft
File:                     69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.mft (raw, json)
Hash identifier:          mFhbZ95hOmzAzSS+kS3x+j0q+AlXCTaAmw7DH+Gak3s=
Subject key identifier:   71:C7:D2:7D:AA:EF:F4:DF:F1:F5:47:86:09:EE:E8:D3:57:C6:12:FB
Authority key identifier: 69:DE:5A:D1:A5:B1:F9:78:84:D1:9D:C3:E9:EF:DA:3F:96:54:C1:23
Certificate issuer:       /CN=69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123
Certificate serial:       09D24EDA27F5DA4C07ED71CBD8D7F780DE10B6C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.mft
Manifest number:          0163
Signing time:             Fri 19 Dec 2025 20:23:16 +0000
Manifest this update:     Fri 19 Dec 2025 20:18:16 +0000
Manifest next update:     Sat 20 Dec 2025 22:26:16 +0000
Files and hashes:         1: 3138372e34342e36342e302f32302d3234203d3e203238333039.roa (hash: ytWMeT7a+5e3RhiY9vsuprXfI161f6tC472OLXTHDx0=)
                          2: 69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.crl (hash: fp+DvNccoYCuRu9XOgIMxLZez+KjPLC/VOwqb4M9pCg=)
                          3: 3138392e33382e33322e302f32302d3234203d3e203238333039.roa (hash: 9htZ/FrsfimiBtIRqe4S+q6Q8vdfYo+stxFxu6+6KXM=)
                          4: 3137392e3138392e302e302f32302d3234203d3e203238333039.roa (hash: gj4anIFoqS5An8dBcpGfcziSjC/4vyS/7Ef60ioYdXI=)
                          5: 3136382e3232382e39362e302f32322d3234203d3e203238333039.roa (hash: P4GcC84l5CNw0HIyuFql5vqXvV7osJssOwZyF9l46qM=)
                          6: 323830343a3136633a3a2f33322d3438203d3e203238333039.roa (hash: ExtPc8BcnrlABDGyELCaMKx1KVqxUBfgTRnIpEc/mhg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.crl
                          rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 22:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:d2:4e:da:27:f5:da:4c:07:ed:71:cb:d8:d7:f7:80:de:10:b6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123
        Validity
            Not Before: Dec 19 20:18:16 2025 GMT
            Not After : Dec 20 22:26:16 2025 GMT
        Subject: CN=71C7D27DAAEFF4DFF1F5478609EEE8D357C612FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9b:d8:fa:4c:1e:55:2f:8c:06:8e:64:cf:fd:
                    01:79:7e:63:f3:3a:18:f9:b5:68:81:2b:87:b7:ff:
                    53:5e:4e:e5:62:b3:7a:55:d7:35:14:5f:3c:68:1a:
                    6b:16:9d:62:53:69:fa:4d:f5:1b:6b:83:df:2f:77:
                    3f:43:8e:9d:f8:8e:67:4f:af:78:65:6e:86:94:bd:
                    3b:e8:74:36:7e:48:af:72:18:c1:1f:cc:69:ea:2a:
                    75:8b:6d:46:91:7c:b0:37:59:77:ad:e1:06:6d:a5:
                    a1:91:1d:76:63:38:fb:8f:9d:9d:26:e5:33:1c:ac:
                    ac:ed:97:da:99:a8:53:bf:79:8d:af:1b:7e:09:a2:
                    36:d7:bb:0a:7d:be:39:53:22:51:a1:65:59:d9:1c:
                    63:4e:35:e8:23:e9:b8:ec:5e:3e:b3:62:6a:ca:a0:
                    a4:83:fa:aa:b3:7f:94:be:54:c1:9d:2a:36:40:02:
                    4c:af:24:2c:c1:ac:c4:a3:2b:2c:49:9d:70:19:b4:
                    97:38:4d:e3:aa:8b:b8:7e:0f:82:26:7f:08:92:28:
                    49:22:e4:71:d1:e7:3f:de:93:4b:da:14:e4:f7:d5:
                    6b:07:58:df:64:f1:e7:63:c8:c1:1e:22:00:b1:43:
                    08:0d:8a:3e:e6:a9:96:ef:61:52:ac:52:5f:11:92:
                    69:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C7:D2:7D:AA:EF:F4:DF:F1:F5:47:86:09:EE:E8:D3:57:C6:12:FB
            X509v3 Authority Key Identifier:
                keyid:69:DE:5A:D1:A5:B1:F9:78:84:D1:9D:C3:E9:EF:DA:3F:96:54:C1:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:5d:a4:d5:c4:4d:ab:98:a5:13:d3:2c:e0:24:56:be:e8:12:
         34:5c:c7:eb:97:5d:66:05:dc:9a:77:78:14:00:94:87:f4:7e:
         49:3c:ad:2d:b4:dc:3d:6a:db:e2:19:ea:d7:36:bb:3d:67:5d:
         71:67:53:80:59:ab:5b:a4:8e:f6:3b:3d:b4:89:ad:88:4b:2e:
         a5:50:1d:2f:17:6c:20:38:35:22:43:9b:63:6c:cf:84:43:cf:
         28:5c:1e:50:b2:4b:27:2a:65:5e:2f:59:a4:52:ef:e9:97:32:
         c5:cf:47:b2:e4:65:1e:60:4f:97:e3:92:ba:1a:d4:82:c8:90:
         4e:86:e4:53:d4:73:b6:1f:cd:dd:5f:20:d6:dd:62:96:f9:b5:
         f4:ea:f8:5a:fc:26:b1:1d:a8:58:85:4d:e3:6a:e4:3a:0a:bb:
         08:bb:68:20:0d:1a:fc:b5:65:b6:9d:2e:a9:97:49:fa:9e:6c:
         76:bc:d8:bd:da:29:8a:40:a9:8a:81:9f:5a:c0:a5:bc:21:0b:
         06:b9:ae:13:05:a8:1a:d9:64:3e:af:c0:42:71:b5:29:32:c6:
         c7:79:b9:01:8f:64:08:1b:24:e9:b7:01:5b:b3:99:7e:dc:4f:
         b2:51:12:aa:39:20:3f:bd:7b:04:eb:78:17:1d:bd:ce:a5:f3:
         e3:2d:8c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:49:44 2025 by rpki-client