This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JDu7qDnQhpraJirn4hutp5jpeEFkCRG2MkZmDAWdZzKj/1/251F42E9CF35EC723B5F3367208AE269F803C9D8.mft
File:                     251F42E9CF35EC723B5F3367208AE269F803C9D8.mft (raw, json)
Hash identifier:          DKCRy9apyPtmaiaXeOZ6ybXdCncUrGFYQ6upd1EQKEY=
Subject key identifier:   82:40:65:1C:6E:E2:BA:72:3A:C7:67:BB:B3:D2:56:EE:4B:C0:C0:E7
Authority key identifier: 25:1F:42:E9:CF:35:EC:72:3B:5F:33:67:20:8A:E2:69:F8:03:C9:D8
Certificate issuer:       /CN=251F42E9CF35EC723B5F3367208AE269F803C9D8
Certificate serial:       6B187719546176C148831497BD4C717362A4115E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/251F42E9CF35EC723B5F3367208AE269F803C9D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDu7qDnQhpraJirn4hutp5jpeEFkCRG2MkZmDAWdZzKj/1/251F42E9CF35EC723B5F3367208AE269F803C9D8.mft
Manifest number:          0344
Signing time:             Sat 20 Dec 2025 06:12:06 +0000
Manifest this update:     Sat 20 Dec 2025 06:07:06 +0000
Manifest next update:     Sun 21 Dec 2025 08:20:06 +0000
Files and hashes:         1: 323830343a3465303a3a2f33322d3438203d3e20323632343735.roa (hash: kULuEHZyUb+ghyU+j24oPE0W64NdFuNbm7Hj6FV4EyE=)
                          2: 3137372e35332e3137362e302f32322d3234203d3e20323632343735.roa (hash: myrZ1geu0Q+dRPgD5Jw7Y3zm0Yi451sLrhm9OsPorGA=)
                          3: 251F42E9CF35EC723B5F3367208AE269F803C9D8.crl (hash: Lgyd//Yh2pvpCX8Z4Ti7FkMihF4PjrgvLglRHucA2KM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDu7qDnQhpraJirn4hutp5jpeEFkCRG2MkZmDAWdZzKj/1/251F42E9CF35EC723B5F3367208AE269F803C9D8.crl
                          rsync://rpki-repo.registro.br/repo/JDu7qDnQhpraJirn4hutp5jpeEFkCRG2MkZmDAWdZzKj/1/251F42E9CF35EC723B5F3367208AE269F803C9D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/251F42E9CF35EC723B5F3367208AE269F803C9D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 08:20:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:18:77:19:54:61:76:c1:48:83:14:97:bd:4c:71:73:62:a4:11:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=251F42E9CF35EC723B5F3367208AE269F803C9D8
        Validity
            Not Before: Dec 20 06:07:06 2025 GMT
            Not After : Dec 21 08:20:06 2025 GMT
        Subject: CN=8240651C6EE2BA723AC767BBB3D256EE4BC0C0E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:67:db:0e:6c:bb:e7:88:8d:4c:23:04:72:ce:
                    ee:5c:c1:c1:1f:ab:b5:e3:c1:95:88:78:29:f7:e1:
                    f7:de:a6:57:f2:2a:65:f3:b5:97:00:cc:cb:98:77:
                    4f:64:37:13:33:48:4c:5a:c0:14:6b:ff:e0:09:28:
                    c9:fa:b9:96:76:1a:eb:f2:f0:87:5c:92:72:6f:ce:
                    08:71:48:df:cc:40:a8:00:80:87:c9:00:a8:2e:80:
                    3f:02:f7:28:7e:06:3c:c4:71:95:b4:b9:a0:96:9c:
                    08:00:dc:e9:ae:2c:04:d5:56:c4:d9:d6:67:28:8d:
                    4c:69:f9:ea:fe:2b:de:9e:2a:87:41:a6:39:74:b8:
                    5a:39:19:7f:e6:55:16:a6:6e:f8:4c:96:ca:47:b9:
                    1f:89:de:31:a6:53:18:e5:4f:20:f2:20:b0:ba:a6:
                    23:1c:b9:0c:58:c3:ac:0e:3d:1b:7e:39:f7:f0:72:
                    44:47:65:96:d4:f4:69:b9:b5:88:ab:31:ae:eb:f9:
                    36:95:0d:28:93:a5:0c:8d:57:e4:a2:7f:3f:98:75:
                    31:dc:0c:22:54:c3:38:bd:db:d0:bd:b9:14:a4:7b:
                    e5:af:d9:18:b0:8d:80:cb:3f:2e:ae:6f:a2:03:be:
                    f0:4e:07:f3:16:bd:a7:14:51:43:9b:25:8e:d1:48:
                    76:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:40:65:1C:6E:E2:BA:72:3A:C7:67:BB:B3:D2:56:EE:4B:C0:C0:E7
            X509v3 Authority Key Identifier:
                keyid:25:1F:42:E9:CF:35:EC:72:3B:5F:33:67:20:8A:E2:69:F8:03:C9:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDu7qDnQhpraJirn4hutp5jpeEFkCRG2MkZmDAWdZzKj/1/251F42E9CF35EC723B5F3367208AE269F803C9D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/251F42E9CF35EC723B5F3367208AE269F803C9D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDu7qDnQhpraJirn4hutp5jpeEFkCRG2MkZmDAWdZzKj/1/251F42E9CF35EC723B5F3367208AE269F803C9D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:95:a8:62:0a:f5:2e:a0:60:07:0f:24:9f:ae:94:ac:7c:76:
         25:96:d2:9c:f0:73:2c:42:3d:8e:3b:24:91:8d:6d:12:7b:32:
         90:52:89:3c:5c:59:cf:8f:3c:2f:e5:95:c6:ce:a4:56:c0:26:
         dd:da:67:cb:40:05:fb:fe:f4:ee:9a:fb:ea:d8:58:d8:e5:b6:
         6e:8b:d9:47:4f:bb:7f:b5:f3:05:67:e9:79:33:c9:46:b8:f7:
         e9:8e:13:a1:0e:b7:b1:cb:d6:60:7d:db:e8:72:b2:f4:77:76:
         61:7b:01:3b:5d:aa:d0:4d:ce:7b:ec:6b:e3:15:6f:1d:56:f9:
         7b:40:da:b2:15:2f:bf:09:3b:c2:fe:95:21:0f:7d:4b:c7:e8:
         bb:5b:16:1f:c1:1a:a1:58:5c:67:c5:9a:c7:6a:b8:63:ee:8c:
         cd:67:67:63:75:76:d8:14:04:29:48:37:b6:8d:46:86:45:8c:
         78:d6:93:55:53:f3:e1:49:63:e7:47:d0:fe:00:21:a1:67:7d:
         ce:0d:8a:e4:27:ca:5f:76:49:3d:85:03:81:3d:b8:67:c2:59:
         05:23:f3:af:db:27:5f:96:ed:32:ee:8d:4d:08:ec:b6:5b:99:
         06:c2:b0:8d:6e:07:c4:0e:63:3e:92:59:ef:9f:cf:63:6e:bc:
         3f:79:53:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:17:00 2025 by rpki-client