This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.mft
File:                     417A3C46308D4692153B994B72E51599225B4979.mft (raw, json)
Hash identifier:          6wJqLhTmEh5L1Yp+fdAnsuSSb7ExL7rT0ZO2Yp5+/ro=
Subject key identifier:   7C:D8:35:A3:7E:96:7E:18:5D:DB:85:14:1C:2B:01:33:4E:C9:D0:AD
Authority key identifier: 41:7A:3C:46:30:8D:46:92:15:3B:99:4B:72:E5:15:99:22:5B:49:79
Certificate issuer:       /CN=417A3C46308D4692153B994B72E51599225B4979
Certificate serial:       69094EC848CB6BB43D4B7F18524F16FE0F5F3D7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/417A3C46308D4692153B994B72E51599225B4979.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.mft
Manifest number:          1C
Signing time:             Sat 20 Dec 2025 00:01:11 +0000
Manifest this update:     Fri 19 Dec 2025 23:56:11 +0000
Manifest next update:     Sun 21 Dec 2025 02:28:11 +0000
Files and hashes:         1: 417A3C46308D4692153B994B72E51599225B4979.crl (hash: gFVATAzEQNLaU+lqy2oa5maZBQ3Kf5+nJ7Wu1Lrpivo=)
                          2: 323830343a363861303a3a2f33322d313238203d3e20323639373035.roa (hash: zhdfCF+qRAETjvfVQ6OraQ2dmSybxhayrJCM+QSnLjw=)
                          3: 3138392e3230312e3234382e302f32322d3332203d3e20323639373035.roa (hash: 67ErBlbOvFpg0hvnl1IkwlbuCRkTDA6ZZMEUfu5lUqE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.crl
                          rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/417A3C46308D4692153B994B72E51599225B4979.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 02:28:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:09:4e:c8:48:cb:6b:b4:3d:4b:7f:18:52:4f:16:fe:0f:5f:3d:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=417A3C46308D4692153B994B72E51599225B4979
        Validity
            Not Before: Dec 19 23:56:11 2025 GMT
            Not After : Dec 21 02:28:11 2025 GMT
        Subject: CN=7CD835A37E967E185DDB85141C2B01334EC9D0AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0c:43:6e:c2:4f:71:8e:8a:b3:f9:9b:6d:68:
                    ad:ae:8b:b3:99:d1:aa:94:90:a9:9b:8c:57:03:dd:
                    1b:cc:72:cc:8a:ef:7a:da:1c:91:1d:e5:53:b3:ae:
                    cd:49:e7:12:75:6d:65:a1:81:a0:a8:24:73:5a:f3:
                    b8:0b:ac:97:b2:2c:72:fb:e9:35:11:7a:88:cb:8a:
                    90:09:35:f7:3c:8f:2b:3d:06:e1:e3:62:6a:8e:92:
                    82:a6:a4:2a:8c:d8:cb:15:8c:5d:dc:a1:26:64:7a:
                    d1:5d:18:34:aa:ad:27:90:e0:7c:ac:d0:ed:7a:43:
                    c6:a0:29:d0:10:6a:43:15:4f:1f:47:f4:f8:9e:22:
                    3f:0d:ec:24:e3:ad:87:ca:92:bb:d8:f9:79:53:43:
                    f8:52:dc:80:d4:eb:2f:de:bc:c6:b6:3b:3c:21:64:
                    6c:ab:b7:39:ca:bf:a6:03:c7:5d:ce:25:08:f5:34:
                    5e:49:c5:3a:15:7a:17:0d:97:87:ac:64:ed:97:60:
                    fc:12:8a:1a:62:3e:79:ed:3a:aa:c1:de:ea:b7:72:
                    64:c3:62:fd:2e:1b:da:a5:dd:b8:81:c9:73:d1:08:
                    1c:6e:ea:53:e8:51:17:1c:7c:bf:a3:2f:d1:41:ec:
                    cd:98:6c:ed:f2:19:55:97:83:9c:45:68:c9:8d:81:
                    d6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D8:35:A3:7E:96:7E:18:5D:DB:85:14:1C:2B:01:33:4E:C9:D0:AD
            X509v3 Authority Key Identifier:
                keyid:41:7A:3C:46:30:8D:46:92:15:3B:99:4B:72:E5:15:99:22:5B:49:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/417A3C46308D4692153B994B72E51599225B4979.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:38:db:f9:42:e4:20:1e:da:2f:0e:8f:00:5d:68:ef:49:d9:
         80:b9:6c:7d:f7:1c:cb:70:14:bd:d6:7c:46:62:1d:5f:14:f5:
         5e:a2:d6:c3:6d:78:f2:d0:81:b8:db:d4:d2:77:86:53:26:fc:
         d0:9e:11:e9:e0:45:ec:03:b0:15:c6:05:3f:1d:a6:a2:ee:7a:
         c3:cc:cc:69:3b:d6:ed:56:8d:d3:4e:84:c4:b6:2f:55:d0:0b:
         b3:0b:54:dd:20:aa:2c:1f:f8:dd:d3:4e:91:f2:ad:e5:31:6e:
         f6:03:d4:06:18:2b:12:8a:bf:e6:05:b4:07:80:5c:3f:66:86:
         12:2e:be:fa:ad:96:6b:72:c2:ad:ab:68:9d:20:9a:23:e8:d3:
         37:3c:f1:b5:64:d0:9d:c6:1b:51:83:2e:21:dc:04:12:4c:ec:
         02:10:ed:e3:dc:da:f6:72:70:e7:c1:ab:b7:84:4b:ae:47:fb:
         db:5a:fd:cf:0f:a8:96:ce:98:85:2b:c1:b9:d9:9e:92:37:27:
         c8:11:cf:d9:5d:b0:bc:46:36:2b:af:f2:00:1c:d3:31:57:9b:
         5b:b2:64:36:11:18:a3:22:5d:4f:61:07:d5:7b:ca:a5:13:22:
         d4:29:75:85:f1:86:e2:f9:d6:c4:1d:2d:a5:18:aa:9d:d9:b9:
         1a:62:03:00
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUaQlOyEjLa7Q9S38YUk8W/g9fPX0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE3QTNDNDYzMDhENDY5MjE1M0I5OTRCNzJFNTE1OTky
MjVCNDk3OTAeFw0yNTEyMTkyMzU2MTFaFw0yNTEyMjEwMjI4MTFaMDMxMTAvBgNV
BAMTKDdDRDgzNUEzN0U5NjdFMTg1RERCODUxNDFDMkIwMTMzNEVDOUQwQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJDENuwk9xjoqz+ZttaK2ui7OZ
0aqUkKmbjFcD3RvMcsyK73raHJEd5VOzrs1J5xJ1bWWhgaCoJHNa87gLrJeyLHL7
6TUReojLipAJNfc8jys9BuHjYmqOkoKmpCqM2MsVjF3coSZketFdGDSqrSeQ4Hys
0O16Q8agKdAQakMVTx9H9PieIj8N7CTjrYfKkrvY+XlTQ/hS3IDU6y/evMa2Ozwh
ZGyrtznKv6YDx13OJQj1NF5JxToVehcNl4esZO2XYPwSihpiPnntOqrB3uq3cmTD
Yv0uG9ql3biByXPRCBxu6lPoURccfL+jL9FB7M2YbO3yGVWXg5xFaMmNgdbhAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUfNg1o36Wfhhd24UUHCsBM07J0K0wHwYDVR0j
BBgwFoAUQXo8RjCNRpIVO5lLcuUVmSJbSXkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkszQ2lNZzh3cHJ0NGtkWVhZTGRXeG5oREFoRjNOZDk5b1pvWmVBTmh1
ZTcvMC80MTdBM0M0NjMwOEQ0NjkyMTUzQjk5NEI3MkU1MTU5OTIyNUI0OTc5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxN0EzQzQ2MzA4RDQ2OTIx
NTNCOTk0QjcyRTUxNTk5MjI1QjQ5NzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MkszQ2lNZzh3cHJ0NGtkWVhZTGRXeG5oREFoRjNOZDk5b1pvWmVBTmh1ZTcvMC80
MTdBM0M0NjMwOEQ0NjkyMTUzQjk5NEI3MkU1MTU5OTIyNUI0OTc5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAzjb+ULkIB7aLw6PAF1o70nZgLlsffccy3AUvdZ8RmIdXxT1XqLWw2148tCB
uNvU0neGUyb80J4R6eBF7AOwFcYFPx2mou56w8zMaTvW7VaN006ExLYvVdALswtU
3SCqLB/43dNOkfKt5TFu9gPUBhgrEoq/5gW0B4BcP2aGEi6++q2Wa3LCratonSCa
I+jTNzzxtWTQncYbUYMuIdwEEkzsAhDt49za9nJw58Grt4RLrkf721r9zw+ols6Y
hSvBudmekjcnyBHP2V2wvEY2K6/yABzTMVebW7JkNhEYoyJdT2EH1XvKpRMi1Cl1
hfGG4vnWxB0tpRiqndm5GmIDAA==
-----END CERTIFICATE-----
Generated at Sat Dec 20 14:35:17 2025 by rpki-client