This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.mft
File:                     DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.mft (raw, json)
Hash identifier:          B2AcP9+f+2c2a8xjlXyTbjKqtjNxhhEvfwTdsblTCOI=
Subject key identifier:   47:01:28:0B:71:02:ED:20:5D:CA:43:63:61:27:14:98:28:C2:48:A0
Authority key identifier: DB:A9:F4:3A:F1:C5:D6:D4:19:0A:21:3B:71:5C:CC:CD:88:70:B2:14
Certificate issuer:       /CN=DBA9F43AF1C5D6D4190A213B715CCCCD8870B214
Certificate serial:       4B94F1C572BB236D289F2AB1682D300A775AAB1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.mft
Manifest number:          01CB
Signing time:             Wed 31 Dec 2025 05:53:20 +0000
Manifest this update:     Wed 31 Dec 2025 05:48:20 +0000
Manifest next update:     Thu 01 Jan 2026 07:25:20 +0000
Files and hashes:         1: 3230312e3231382e3139312e302f32342d3234203d3e20323731363733.roa (hash: lnRYnsLaeTagk3YmYxNJPL1MDkMZJR2nkTuZoLpcpy4=)
                          2: 323830343a376633343a383030303a3a2f33342d3334203d3e20323731363733.roa (hash: iWhPnAhj3dd8Y7eJsXGRqMMLGi/mTekP+TCGk2AbXxo=)
                          3: 323830343a376633343a3a2f33342d3334203d3e20323731363733.roa (hash: 6p736a30/2i9LJcs1hb1ed9zaI7wB1ErFxUo6TpVy40=)
                          4: 323830343a376633343a3a2f33322d3332203d3e20323731363733.roa (hash: djB2JrLGEoNlz7mztZIPZvlLJqWLlIHMYMTyoMmF7M4=)
                          5: 323830343a376633343a343030303a3a2f33342d3334203d3e20323731363733.roa (hash: TldNcaHXQVZGykpWF3rX9YQvzYUDmkROp5LgUwuHTUs=)
                          6: 3230312e3231382e3139302e302f32342d3234203d3e20323731363733.roa (hash: wiiXUnWo63vzJhmrCkqVL1S+wH4snK2pQri85+frrR4=)
                          7: 3133312e3235352e3133302e302f32342d3234203d3e20323731363733.roa (hash: O7Us7wk+GnMKRgCS3TKHI9ERTyGNqtuD1W9Ku5NaZho=)
                          8: DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.crl (hash: TouWUCff+Z2xbr6tcY4kR4fGCaQm7O3n0qByR1m8Zww=)
                          9: 323830343a376633343a633030303a3a2f33342d3334203d3e20323731363733.roa (hash: mWPhtWJsfDFT1R1nzsk/oY24KxIQCTMegbRUupSl6uI=)
                          10: 3230312e3231382e3139302e302f32332d3233203d3e20323731363733.roa (hash: 1y+Ib97uJV3+TQ4t8bZRKWYP/AkF26UsUnZ85x3ze0k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.crl
                          rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 Jan 2026 07:25:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:94:f1:c5:72:bb:23:6d:28:9f:2a:b1:68:2d:30:0a:77:5a:ab:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBA9F43AF1C5D6D4190A213B715CCCCD8870B214
        Validity
            Not Before: Dec 31 05:48:20 2025 GMT
            Not After : Jan  1 07:25:20 2026 GMT
        Subject: CN=4701280B7102ED205DCA43636127149828C248A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:45:55:b9:1c:45:77:7e:1f:af:70:a3:b0:f2:
                    37:67:06:d5:86:9c:56:10:06:b0:f1:fe:39:d5:3e:
                    38:10:bb:95:43:ff:9d:c1:9a:02:38:92:33:fa:79:
                    69:d8:d0:94:bd:1d:1f:5c:a7:40:97:f3:85:47:91:
                    f7:f1:a4:13:e2:72:ce:88:d3:ce:c8:85:0b:31:07:
                    ec:1e:71:a0:28:21:06:67:da:04:4e:c8:54:89:b0:
                    d7:fd:cb:31:7a:7b:ec:e3:87:c5:6a:b1:56:ca:98:
                    3f:3c:a0:24:b0:99:56:cb:aa:fe:b6:9c:de:1d:cf:
                    0c:fd:46:88:69:73:c5:46:ed:a3:71:db:7f:ae:ec:
                    15:8e:f3:90:ea:0f:05:28:2e:78:2d:f2:b4:cc:6b:
                    63:0b:b9:c1:94:ca:62:0c:1c:1c:12:0c:e4:70:a3:
                    8a:65:06:e2:b1:eb:97:ce:89:e3:98:59:44:40:21:
                    05:9c:f5:6e:04:0f:58:89:57:86:49:c9:ae:31:93:
                    b0:e8:0a:f2:0b:35:f7:0c:8f:4e:f8:2f:43:97:88:
                    9a:c4:06:ab:04:9f:d3:76:d8:cb:e5:4c:1b:e1:95:
                    2c:af:16:22:58:9f:5e:da:89:8f:e5:5a:a3:3a:33:
                    8a:17:66:d6:c7:e1:69:b8:18:3f:3d:44:8b:80:8f:
                    80:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:01:28:0B:71:02:ED:20:5D:CA:43:63:61:27:14:98:28:C2:48:A0
            X509v3 Authority Key Identifier:
                keyid:DB:A9:F4:3A:F1:C5:D6:D4:19:0A:21:3B:71:5C:CC:CD:88:70:B2:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:19:43:2d:55:71:4b:66:35:41:01:57:94:16:c4:0f:43:38:
         fd:dd:bf:c1:d4:88:d7:d5:9e:03:8b:cc:1a:5e:31:3b:26:11:
         fc:5c:7f:65:88:2c:88:7c:66:59:10:f3:f6:90:81:25:19:2b:
         e8:45:57:81:1a:ac:8f:5f:0f:0f:62:45:36:41:f2:8b:30:d6:
         f4:b6:82:f2:b9:a0:70:fb:3f:78:cf:44:b3:4e:97:7a:4f:8e:
         a1:dd:fe:6e:32:95:b0:d1:1b:6c:81:2c:1b:58:18:6c:83:ad:
         ce:6d:12:f9:18:e5:73:8a:c0:90:a6:fc:74:fc:49:8f:49:9f:
         cf:fd:21:ec:b3:f3:04:dc:4a:23:bb:b4:7d:a9:c3:3d:00:dd:
         6b:7a:9d:dc:d5:b3:4c:ae:7a:3c:0d:53:ed:9b:58:12:a5:4e:
         a4:f3:7d:0c:d5:f8:3f:7a:b0:10:1d:29:7e:77:ce:a9:ec:ad:
         35:b0:ca:c5:11:45:e8:0b:fd:82:fe:05:2d:c4:59:f6:b0:24:
         64:e9:41:1c:04:f1:b7:16:f6:18:99:0a:3b:ec:52:6c:39:76:
         71:31:7f:1e:2e:ff:9a:6b:d6:59:ba:b8:64:38:94:18:2d:aa:
         e4:e8:7a:db:6a:d6:42:e3:9f:bd:95:c4:7f:5c:5a:79:77:96:
         0f:d9:ce:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 07:43:32 2025 by rpki-client