This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.mft
File:                     DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.mft (raw, json)
Hash identifier:          /43c6wESRlSzzgC5RHsecTOSrD1gnYFJ1eK6Ym2BqJ8=
Subject key identifier:   1A:70:CE:9E:8A:4F:D6:69:A8:62:6D:0F:DC:DE:C3:F1:3E:11:F9:5C
Authority key identifier: DB:A9:F4:3A:F1:C5:D6:D4:19:0A:21:3B:71:5C:CC:CD:88:70:B2:14
Certificate issuer:       /CN=DBA9F43AF1C5D6D4190A213B715CCCCD8870B214
Certificate serial:       6973F63B50B2B16908B1B042A6EAF9173FA7471F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.mft
Manifest number:          01BB
Signing time:             Fri 19 Dec 2025 18:58:14 +0000
Manifest this update:     Fri 19 Dec 2025 18:53:14 +0000
Manifest next update:     Sat 20 Dec 2025 21:14:14 +0000
Files and hashes:         1: 323830343a376633343a633030303a3a2f33342d3334203d3e20323731363733.roa (hash: mWPhtWJsfDFT1R1nzsk/oY24KxIQCTMegbRUupSl6uI=)
                          2: 3230312e3231382e3139302e302f32342d3234203d3e20323731363733.roa (hash: wiiXUnWo63vzJhmrCkqVL1S+wH4snK2pQri85+frrR4=)
                          3: 3230312e3231382e3139312e302f32342d3234203d3e20323731363733.roa (hash: lnRYnsLaeTagk3YmYxNJPL1MDkMZJR2nkTuZoLpcpy4=)
                          4: 3139302e392e3132372e302f32342d3234203d3e20323731363733.roa (hash: fCtxBgUjEIK10Q/wo720O2TGWtm4JXe0tsIL+mToQRE=)
                          5: 323830343a376633343a3a2f33322d3332203d3e20323731363733.roa (hash: djB2JrLGEoNlz7mztZIPZvlLJqWLlIHMYMTyoMmF7M4=)
                          6: DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.crl (hash: 2PzeKu4Vb/YdrLh22fwNYJ0lAmrOWBKYygvnFUPjtFc=)
                          7: 323830343a376633343a3a2f33342d3334203d3e20323731363733.roa (hash: 6p736a30/2i9LJcs1hb1ed9zaI7wB1ErFxUo6TpVy40=)
                          8: 3230312e3231382e3139302e302f32332d3233203d3e20323731363733.roa (hash: 1y+Ib97uJV3+TQ4t8bZRKWYP/AkF26UsUnZ85x3ze0k=)
                          9: 323830343a376633343a383030303a3a2f33342d3334203d3e20323731363733.roa (hash: iWhPnAhj3dd8Y7eJsXGRqMMLGi/mTekP+TCGk2AbXxo=)
                          10: 3133312e3235352e3133302e302f32342d3234203d3e20323731363733.roa (hash: O7Us7wk+GnMKRgCS3TKHI9ERTyGNqtuD1W9Ku5NaZho=)
                          11: 323830343a376633343a343030303a3a2f33342d3334203d3e20323731363733.roa (hash: TldNcaHXQVZGykpWF3rX9YQvzYUDmkROp5LgUwuHTUs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.crl
                          rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 21:14:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:73:f6:3b:50:b2:b1:69:08:b1:b0:42:a6:ea:f9:17:3f:a7:47:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBA9F43AF1C5D6D4190A213B715CCCCD8870B214
        Validity
            Not Before: Dec 19 18:53:14 2025 GMT
            Not After : Dec 20 21:14:14 2025 GMT
        Subject: CN=1A70CE9E8A4FD669A8626D0FDCDEC3F13E11F95C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:69:6e:0a:7a:b0:5e:8d:e6:ef:0b:62:84:10:
                    10:ab:e7:78:49:b1:cb:5d:d2:53:94:82:16:5e:a2:
                    c1:0d:95:1e:01:06:6c:4b:fc:81:57:7b:c2:e4:d3:
                    7d:3f:d9:e4:1a:70:35:96:34:68:e5:ff:35:f4:c0:
                    5c:e6:c3:93:1f:ec:0f:c5:21:40:8a:27:58:77:67:
                    06:2e:c4:f4:8f:b2:ca:93:40:93:e4:e6:0a:59:ac:
                    96:d8:9d:e3:a5:b9:35:bf:54:23:16:12:19:b5:cd:
                    c1:06:bf:b9:e4:8c:fd:37:99:50:43:54:54:ad:55:
                    00:30:b0:d1:d1:c8:1f:ac:2a:ef:43:13:a7:98:39:
                    4d:37:25:a5:16:ca:4c:39:81:6d:a0:fa:2a:1a:7a:
                    d0:fe:a6:bc:c0:48:27:2a:19:93:62:92:d8:c9:56:
                    c2:f4:a2:2d:7d:c6:9d:9d:7e:ca:94:ab:85:60:14:
                    64:ed:b9:19:14:51:eb:4c:a3:9c:bf:64:3c:e2:f8:
                    de:31:c9:f4:2b:bb:4d:8b:3d:f2:91:76:67:af:64:
                    a5:f8:24:f9:13:ef:30:0d:5c:02:55:aa:b7:81:f2:
                    10:80:4e:d0:7b:fc:be:cd:20:c5:5b:00:1f:37:87:
                    0d:ac:71:bb:76:fa:c0:02:36:69:16:a8:14:6d:06:
                    dc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:70:CE:9E:8A:4F:D6:69:A8:62:6D:0F:DC:DE:C3:F1:3E:11:F9:5C
            X509v3 Authority Key Identifier:
                keyid:DB:A9:F4:3A:F1:C5:D6:D4:19:0A:21:3B:71:5C:CC:CD:88:70:B2:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:a7:0f:13:66:23:9b:ee:b9:ee:77:df:33:22:2b:7e:3c:10:
         98:2a:65:7a:4c:6c:07:32:2e:d0:68:49:40:37:eb:b8:93:29:
         b6:b5:9b:64:e2:4d:eb:6a:63:67:ed:1e:27:c5:9d:c9:23:47:
         ff:ba:ff:67:5f:eb:73:be:b2:e6:35:08:27:79:d0:e7:8f:04:
         74:92:0e:5b:96:36:69:8e:a6:bd:50:a4:cf:d3:09:4b:b2:43:
         01:f7:5b:3f:b0:7f:42:7e:0d:0d:96:a8:5c:72:98:d7:77:a9:
         6f:20:ec:e4:18:0f:1c:2c:4b:4a:71:1b:b9:05:28:65:1c:7a:
         bc:16:6d:36:36:a3:20:13:68:09:06:59:33:75:36:71:a5:bc:
         3b:92:05:47:ac:8f:34:73:7a:63:d9:5c:08:31:fd:fd:b1:63:
         d2:c5:44:29:0d:c5:61:4e:c9:bd:55:cb:21:bb:14:2e:50:3d:
         66:2a:80:92:27:2c:83:70:72:46:82:7a:6f:16:bf:01:a3:8b:
         ab:91:e5:4b:60:b9:48:7c:e3:d7:af:1c:1c:87:b5:d1:e5:15:
         7d:a2:97:fa:2e:3e:9b:f1:32:c4:95:a8:22:c7:d8:ec:78:a8:
         ef:ae:0e:46:bf:00:84:1a:35:75:21:20:b3:a6:8d:60:6e:15:
         61:33:56:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:00:09 2025 by rpki-client