This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/33UKvEp4wYrJRHbwSKgdu88cUFiMVm1GrVfWu1QzmCMZ/0/AE4918B47F20CB240F597D2AFBC73EF5DA714C09.mft
File:                     AE4918B47F20CB240F597D2AFBC73EF5DA714C09.mft (raw, json)
Hash identifier:          YgiXFzF3IQ+IF0zwxvkmbe8rV9TkUYZdFAoAFw/SQK8=
Subject key identifier:   CD:13:CC:3B:29:C1:EA:F4:1A:3C:3A:4E:36:C5:E0:77:02:3E:D6:98
Authority key identifier: AE:49:18:B4:7F:20:CB:24:0F:59:7D:2A:FB:C7:3E:F5:DA:71:4C:09
Certificate issuer:       /CN=AE4918B47F20CB240F597D2AFBC73EF5DA714C09
Certificate serial:       73E8F7783A60EF7EBB1C0B2C6F7B3AAD81EE1BC9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE4918B47F20CB240F597D2AFBC73EF5DA714C09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/33UKvEp4wYrJRHbwSKgdu88cUFiMVm1GrVfWu1QzmCMZ/0/AE4918B47F20CB240F597D2AFBC73EF5DA714C09.mft
Manifest number:          0153
Signing time:             Sun 21 Dec 2025 10:53:24 +0000
Manifest this update:     Sun 21 Dec 2025 10:48:24 +0000
Manifest next update:     Mon 22 Dec 2025 11:07:24 +0000
Files and hashes:         1: AE4918B47F20CB240F597D2AFBC73EF5DA714C09.crl (hash: 4Mq7o2866WMP+s2+c6bnBz149913pzTiNY8ZHwNZFn8=)
                          2: 3136372e3234392e3132312e302f32342d3234203d3e20323635313730.roa (hash: NPfh8u8RVDUIAohXlRx+4N15yDYs+Ev+gvVWRaJZcaQ=)
                          3: 3136372e3234392e3132332e302f32342d3234203d3e20323635313730.roa (hash: +cKQoYs5LyyWb4gOhSol6PefKtjBQmJwRnh0NAcBq34=)
                          4: 3136372e3234392e3132322e302f32342d3234203d3e20323635313730.roa (hash: uzzB7+YWS7F2Hjk+J6P50hWSoLAEmY3w4AXj2ZVKrsE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/33UKvEp4wYrJRHbwSKgdu88cUFiMVm1GrVfWu1QzmCMZ/0/AE4918B47F20CB240F597D2AFBC73EF5DA714C09.crl
                          rsync://rpki-repo.registro.br/repo/33UKvEp4wYrJRHbwSKgdu88cUFiMVm1GrVfWu1QzmCMZ/0/AE4918B47F20CB240F597D2AFBC73EF5DA714C09.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE4918B47F20CB240F597D2AFBC73EF5DA714C09.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 11:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:e8:f7:78:3a:60:ef:7e:bb:1c:0b:2c:6f:7b:3a:ad:81:ee:1b:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE4918B47F20CB240F597D2AFBC73EF5DA714C09
        Validity
            Not Before: Dec 21 10:48:24 2025 GMT
            Not After : Dec 22 11:07:24 2025 GMT
        Subject: CN=CD13CC3B29C1EAF41A3C3A4E36C5E077023ED698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:32:ad:a8:2b:cd:75:1d:24:88:b0:9d:b1:9e:
                    eb:d0:a2:d4:ae:c3:fd:3a:07:a4:9a:ba:9a:d0:1e:
                    89:03:84:07:4f:47:67:83:fd:cf:d6:41:ad:47:94:
                    dc:05:e8:b5:30:0f:ef:83:eb:a6:b9:f1:2e:a3:46:
                    5b:0d:93:eb:b9:d1:69:a4:1a:43:ee:48:24:e1:07:
                    a2:ed:3d:11:fe:b2:d8:73:ac:56:1a:45:3c:d3:69:
                    36:a8:85:06:b7:9a:62:63:45:fa:43:f6:47:3b:31:
                    28:e6:8b:f1:77:33:0d:ec:73:25:d0:e1:a9:76:4a:
                    21:af:e1:28:b3:26:93:bd:f9:47:44:9c:90:61:a2:
                    a0:be:c5:ef:95:65:5e:f2:f7:9a:c2:ac:f4:58:f4:
                    38:29:fd:c6:6d:e3:5a:be:54:67:a4:cd:99:44:d3:
                    48:93:fe:47:2b:5c:f3:c4:b7:e9:76:e4:60:8d:97:
                    7e:9f:7a:f0:31:50:19:38:93:2d:cb:e8:0b:8a:92:
                    a6:32:57:a6:17:10:bc:33:30:f9:c7:89:17:a3:9d:
                    77:7f:1c:11:78:ce:41:aa:75:01:2a:13:36:1e:9f:
                    07:b0:f8:ba:fd:9f:3b:b1:74:17:5c:dd:85:72:e6:
                    f1:2e:eb:11:52:40:d4:36:f2:da:4c:98:a2:6c:dd:
                    86:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:13:CC:3B:29:C1:EA:F4:1A:3C:3A:4E:36:C5:E0:77:02:3E:D6:98
            X509v3 Authority Key Identifier:
                keyid:AE:49:18:B4:7F:20:CB:24:0F:59:7D:2A:FB:C7:3E:F5:DA:71:4C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/33UKvEp4wYrJRHbwSKgdu88cUFiMVm1GrVfWu1QzmCMZ/0/AE4918B47F20CB240F597D2AFBC73EF5DA714C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE4918B47F20CB240F597D2AFBC73EF5DA714C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/33UKvEp4wYrJRHbwSKgdu88cUFiMVm1GrVfWu1QzmCMZ/0/AE4918B47F20CB240F597D2AFBC73EF5DA714C09.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:69:7b:1b:d7:4f:32:ff:51:ea:11:df:fa:f3:c2:70:5c:83:
         c3:46:a0:78:f9:3b:49:75:4d:d6:8f:4c:74:97:40:91:0b:bd:
         c5:97:20:cc:95:a0:73:3d:23:5f:f1:87:0b:e6:4d:cc:c7:b4:
         2b:fd:f8:6e:15:24:e0:d2:1e:e9:37:65:ea:7a:82:42:72:70:
         86:44:ac:69:60:24:ed:69:51:d3:f6:6c:70:72:72:b5:15:77:
         9e:b2:53:e2:c8:f8:48:ac:1b:64:cc:ab:99:e4:3c:27:58:94:
         09:18:b5:57:e6:56:6b:4b:33:62:cd:f9:22:0b:a8:4d:11:75:
         1b:a3:c0:05:0c:d9:0c:15:9f:aa:e9:3a:c8:4d:8f:53:5f:99:
         a8:f9:e8:29:c7:da:b6:5d:43:6d:40:2e:68:1d:21:9c:ed:32:
         42:28:b7:8b:ab:a5:6c:58:f7:a7:9a:35:ee:d7:89:7b:54:8b:
         2e:6a:90:c6:6b:6a:27:c4:3b:1f:ef:40:d7:e5:08:01:67:10:
         b8:a1:d7:1c:8c:70:79:62:e6:b1:d7:b6:18:85:c4:f8:43:31:
         0a:24:e7:80:0d:5a:55:ac:cc:a7:bd:8c:61:2a:2e:f5:64:a1:
         49:6b:1e:ff:39:9c:b5:77:1f:48:98:ab:85:cf:a7:a9:a2:12:
         fc:d3:c6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 18:59:13 2025 by rpki-client