This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/14F1CE0C1643DCFD066F662CE9E3074379A6732B.mft
File:                     14F1CE0C1643DCFD066F662CE9E3074379A6732B.mft (raw, json)
Hash identifier:          Ss8BWhCXNt2Vh09eScTamJa5iWNnuDqNHBcKTnCyw8s=
Subject key identifier:   87:CF:61:75:1D:F1:83:3B:6A:8B:88:49:04:DD:24:AA:A9:A2:17:89
Authority key identifier: 14:F1:CE:0C:16:43:DC:FD:06:6F:66:2C:E9:E3:07:43:79:A6:73:2B
Certificate issuer:       /CN=14F1CE0C1643DCFD066F662CE9E3074379A6732B
Certificate serial:       2E820203E2457C213908B257218DBBFDBD84F96D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14F1CE0C1643DCFD066F662CE9E3074379A6732B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/14F1CE0C1643DCFD066F662CE9E3074379A6732B.mft
Manifest number:          01EA
Signing time:             Tue 23 Dec 2025 21:55:24 +0000
Manifest this update:     Tue 23 Dec 2025 21:50:24 +0000
Manifest next update:     Wed 24 Dec 2025 23:03:24 +0000
Files and hashes:         1: 323830343a333633303a3a2f33322d3438203d3e20323636333332.roa (hash: BUQ5psFC+ALI+sFDNT+facg6CxsCsYFOSpYTDb4QQ08=)
                          2: 14F1CE0C1643DCFD066F662CE9E3074379A6732B.crl (hash: PlKJRpmm9XtvtnJTD6JZ3ii5s4svCjZCqWxRDUK0J18=)
                          3: 3137302e3233382e3138382e302f32322d3234203d3e20323636333332.roa (hash: Zs4aYDK+aLxoAbSoPwW9MX8do7CMIlIi0x9n4E+/C0o=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/14F1CE0C1643DCFD066F662CE9E3074379A6732B.crl
                          rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/14F1CE0C1643DCFD066F662CE9E3074379A6732B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14F1CE0C1643DCFD066F662CE9E3074379A6732B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 22:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:82:02:03:e2:45:7c:21:39:08:b2:57:21:8d:bb:fd:bd:84:f9:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14F1CE0C1643DCFD066F662CE9E3074379A6732B
        Validity
            Not Before: Dec 23 21:50:24 2025 GMT
            Not After : Dec 24 23:03:24 2025 GMT
        Subject: CN=87CF61751DF1833B6A8B884904DD24AAA9A21789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ee:32:92:8d:97:25:08:22:21:4e:1d:ae:b5:
                    91:d9:05:33:a2:c7:a7:d0:4e:34:fb:9f:fd:07:94:
                    86:6f:1e:18:92:e6:83:c3:7a:f5:26:d5:b2:83:e7:
                    a0:86:c0:c9:f7:bd:ca:a4:2e:da:a5:89:ae:5f:ca:
                    75:d4:b7:d0:9a:25:a4:13:cc:06:f5:65:52:a9:cb:
                    0c:2c:b9:49:c0:14:86:a0:04:48:71:ba:a4:d5:3e:
                    94:45:1a:0a:7b:37:4f:6d:0c:32:57:58:97:44:87:
                    ec:8e:cc:32:de:e5:f6:1b:ec:20:4a:4f:98:3e:88:
                    44:e4:a8:b2:dc:19:0c:b8:11:c8:de:7d:ae:5a:4c:
                    af:dd:03:6e:13:0a:39:34:93:64:fe:26:31:db:4a:
                    ea:c0:d1:1d:09:90:25:f6:90:db:b6:70:cc:38:ed:
                    95:33:fb:54:14:76:65:8c:e6:3e:5a:37:41:da:8a:
                    24:7a:27:75:ef:a5:d0:97:d5:07:04:56:4a:ff:b9:
                    7f:d9:43:30:6b:2c:1e:8b:9a:a9:7b:6b:e1:cc:2d:
                    d3:b9:5a:b3:5e:cd:31:8e:76:06:6b:64:d6:ca:d7:
                    68:ef:c0:33:da:52:4d:6e:15:6e:d1:60:b4:96:e3:
                    af:f7:d0:da:c0:45:b6:59:91:b2:10:30:b2:09:e7:
                    07:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:CF:61:75:1D:F1:83:3B:6A:8B:88:49:04:DD:24:AA:A9:A2:17:89
            X509v3 Authority Key Identifier:
                keyid:14:F1:CE:0C:16:43:DC:FD:06:6F:66:2C:E9:E3:07:43:79:A6:73:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/14F1CE0C1643DCFD066F662CE9E3074379A6732B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14F1CE0C1643DCFD066F662CE9E3074379A6732B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/14F1CE0C1643DCFD066F662CE9E3074379A6732B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:e8:64:e6:63:0d:de:a2:87:65:5d:47:a2:e5:27:e3:77:65:
         be:e2:7e:50:58:90:cb:7d:33:1c:e3:eb:7c:a4:0c:f1:74:60:
         60:84:a3:12:ad:92:d6:37:36:4e:a2:e6:a8:94:c7:e3:d4:b9:
         47:9e:eb:7e:ae:ae:23:eb:3a:79:31:b0:98:76:d2:b9:41:bc:
         fa:61:8f:d6:2b:41:8a:2d:da:82:6a:db:78:18:56:65:9f:e8:
         3d:87:8a:7f:66:06:b8:57:5a:2c:7c:81:ef:97:f4:9f:11:c1:
         f9:d8:b5:99:73:8f:aa:24:0e:83:2e:b7:7c:4c:30:81:18:70:
         74:02:0a:cf:1a:3d:fc:bd:27:0b:a1:ea:ec:4a:49:d4:f1:c0:
         2b:f2:43:b2:47:31:a6:7e:8c:e1:07:96:41:6a:a6:5c:fd:92:
         67:d5:5d:6a:d7:a5:0d:ed:38:0b:d7:41:ac:81:2f:0f:1b:c8:
         11:c7:fe:68:4e:a0:4a:06:50:22:51:ff:ef:0f:57:bd:b3:f9:
         4a:94:aa:86:2a:9e:50:ef:05:b7:c9:c7:f1:7f:3d:4b:87:3e:
         8e:83:96:b3:68:f8:1b:61:c6:e9:43:6a:c4:3f:be:0d:7a:2a:
         a8:1f:be:c0:09:f6:01:b7:f3:23:c7:0c:01:8d:8e:1b:d6:33:
         7e:88:00:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 00:34:39 2025 by rpki-client