This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.mft
File:                     4CE80122D6DDFCAC903327698E75EF1407FA8195.mft (raw, json)
Hash identifier:          kMH2MqawJlHnBTLRG5d/juoH6eBOAWe9FI0Zi9RixGk=
Subject key identifier:   89:E0:53:92:3D:60:F9:CE:BE:BC:B9:95:50:FF:9E:61:4E:02:A0:59
Authority key identifier: 4C:E8:01:22:D6:DD:FC:AC:90:33:27:69:8E:75:EF:14:07:FA:81:95
Certificate issuer:       /CN=4CE80122D6DDFCAC903327698E75EF1407FA8195
Certificate serial:       6F704C0EF694F8040C2D23D6E6A20D3F331BD457
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE80122D6DDFCAC903327698E75EF1407FA8195.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.mft
Manifest number:          A2
Signing time:             Fri 19 Dec 2025 20:53:20 +0000
Manifest this update:     Fri 19 Dec 2025 20:48:20 +0000
Manifest next update:     Sat 20 Dec 2025 20:58:20 +0000
Files and hashes:         1: 3230302e35332e37362e302f32332d3233203d3e20323731333136.roa (hash: JrtUeuMd7mlklugszg0TSGLi9BvMubCDLCd3d5HWus4=)
                          2: 3230302e35332e37372e302f32342d3234203d3e20323731333136.roa (hash: X1ipdbYyA0gvYxdeI8aFDgD73ImCQ+DUuOrszHZNSlA=)
                          3: 3230302e35332e37392e302f32342d3234203d3e20323731333136.roa (hash: 93zKVOrKHbSo5HEeLoH37RJ11jpFLfz+QyEJo6hXuuk=)
                          4: 3230302e35332e37362e302f32342d3234203d3e20323731333136.roa (hash: nIV6ZpOOJoFXarVbTgdRMvC2g1BanYy7ldked+11w1Y=)
                          5: 4CE80122D6DDFCAC903327698E75EF1407FA8195.crl (hash: IQPCBRWLR7YYAzoiUYOIBk5qkopn7/SY/We+8YCIgk4=)
                          6: 323830343a373939633a3a2f33332d3333203d3e20323731333136.roa (hash: 9dyqlba/doiFEieE0RYOotWF/WfNx8FttH4AXlnPn5s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.crl
                          rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE80122D6DDFCAC903327698E75EF1407FA8195.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 20:58:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:70:4c:0e:f6:94:f8:04:0c:2d:23:d6:e6:a2:0d:3f:33:1b:d4:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CE80122D6DDFCAC903327698E75EF1407FA8195
        Validity
            Not Before: Dec 19 20:48:20 2025 GMT
            Not After : Dec 20 20:58:20 2025 GMT
        Subject: CN=89E053923D60F9CEBEBCB99550FF9E614E02A059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:80:34:53:39:a4:49:1c:87:53:5e:16:96:5b:
                    4a:d1:b1:ac:7d:fe:2b:4e:c7:bb:bc:02:67:6c:6a:
                    a3:a2:20:42:1e:ce:6a:4a:6b:6a:4d:7f:69:13:1b:
                    6b:20:9b:a3:55:2c:54:60:82:88:e4:bd:c2:92:60:
                    e9:31:2f:ab:d0:c4:00:00:4d:1e:1a:1c:44:d5:a4:
                    e3:7a:c0:ff:c7:93:95:d2:12:01:6e:df:49:a1:bb:
                    22:d3:40:50:ad:98:8e:c2:61:8d:08:20:9b:a8:e0:
                    67:87:12:c9:e0:71:38:36:d0:60:e8:69:8e:ca:72:
                    29:01:76:84:b9:55:dd:53:f2:1b:e6:19:71:b2:4d:
                    f2:79:91:98:11:18:af:4e:d2:a8:82:bc:6d:38:a0:
                    c7:fa:4e:af:df:60:5b:46:08:81:f6:2f:74:8f:9a:
                    89:17:a8:c3:ae:fe:35:3a:1e:a6:8f:fd:a6:c0:6e:
                    d1:c8:bf:1d:67:5c:36:64:65:4d:11:52:c6:73:55:
                    2f:d1:20:da:00:1b:12:31:1d:b0:6e:cd:31:27:09:
                    79:86:ef:03:58:13:16:49:89:b4:3d:6e:3a:e6:ed:
                    18:20:e9:dd:cd:0c:b8:f2:e6:4a:b3:62:fe:4a:7e:
                    e7:a5:c7:bf:f2:ec:c0:46:d8:a5:00:14:62:b7:80:
                    b3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E0:53:92:3D:60:F9:CE:BE:BC:B9:95:50:FF:9E:61:4E:02:A0:59
            X509v3 Authority Key Identifier:
                keyid:4C:E8:01:22:D6:DD:FC:AC:90:33:27:69:8E:75:EF:14:07:FA:81:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE80122D6DDFCAC903327698E75EF1407FA8195.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:11:bf:4f:07:7b:f3:ef:b2:08:d9:ca:7d:46:4f:34:eb:f0:
         de:b4:af:23:7c:7b:db:ba:0c:3a:a9:fd:cb:30:94:ca:5f:4e:
         23:ff:fb:92:19:42:1e:ad:6a:3d:c1:0a:2b:46:6b:3b:ff:c1:
         36:4c:18:4a:ec:53:aa:e3:17:50:3a:94:34:03:d2:e3:59:41:
         8f:b7:47:83:bb:ac:68:3a:3a:7a:00:ff:31:ae:6f:dd:e9:fe:
         19:1d:64:59:13:91:c8:54:00:76:f3:9b:4d:cc:94:ba:6b:b8:
         99:f9:eb:9d:cf:d4:dc:7f:0b:59:ba:48:14:b7:f4:f5:34:02:
         dc:d7:1f:4e:5a:ea:48:92:21:13:0f:d4:47:51:49:2a:ff:8f:
         09:c6:11:c8:5d:67:41:72:8c:c7:c3:23:09:7c:2c:9c:eb:f3:
         a7:f1:c1:0b:e6:54:fc:51:ff:9c:85:96:8f:75:7e:9b:e8:27:
         58:f5:5e:3a:41:27:49:e3:96:9f:38:43:c1:c7:7e:cc:d7:1e:
         46:c6:3c:6e:c3:8c:03:04:c8:95:97:9b:2b:38:c3:11:f0:81:
         27:bd:96:5d:7a:9f:7a:27:1f:72:c4:5a:0a:8f:47:31:03:dd:
         cf:c3:0e:11:b5:05:d6:92:73:df:52:e3:5b:58:98:28:09:1d:
         db:c6:98:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:22:11 2025 by rpki-client