This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4humeVeEjxFa7LbCXbrWjPJDYMvcWZ27e6Jbohhfsid3/0/1C4D72EE314EFB7CE350AF052C58D3C8818D7575.mft
File:                     1C4D72EE314EFB7CE350AF052C58D3C8818D7575.mft (raw, json)
Hash identifier:          YN3t3AZgh3rZzPeygiBIrCAy3Z5kA5O05GqK0Q5vhEo=
Subject key identifier:   43:1F:9E:F5:C0:D8:55:40:52:10:9B:AC:2F:9B:B0:FC:BB:24:4B:37
Authority key identifier: 1C:4D:72:EE:31:4E:FB:7C:E3:50:AF:05:2C:58:D3:C8:81:8D:75:75
Certificate issuer:       /CN=1C4D72EE314EFB7CE350AF052C58D3C8818D7575
Certificate serial:       0489569B80A7CC58624584D96DE33FE1F7D482A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C4D72EE314EFB7CE350AF052C58D3C8818D7575.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4humeVeEjxFa7LbCXbrWjPJDYMvcWZ27e6Jbohhfsid3/0/1C4D72EE314EFB7CE350AF052C58D3C8818D7575.mft
Manifest number:          0156
Signing time:             Sat 20 Dec 2025 03:43:28 +0000
Manifest this update:     Sat 20 Dec 2025 03:38:28 +0000
Manifest next update:     Sun 21 Dec 2025 06:12:28 +0000
Files and hashes:         1: 1C4D72EE314EFB7CE350AF052C58D3C8818D7575.crl (hash: VCnIMcX3OXEqYb7uAgHeA4btgdI7w7S83goWGjc05vw=)
                          2: 34352e3232362e3130342e302f32322d3332203d3e20323637303133.roa (hash: /lrONYVj6x9Z9PjnRWdUB49spSO9endq95t5Zj5ewKo=)
                          3: 323830343a343664303a3a2f33322d313238203d3e20323637303133.roa (hash: kTr94xDUZ+WRd76umny03lWFerpjLzXLcja7/Ad0/gM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4humeVeEjxFa7LbCXbrWjPJDYMvcWZ27e6Jbohhfsid3/0/1C4D72EE314EFB7CE350AF052C58D3C8818D7575.crl
                          rsync://rpki-repo.registro.br/repo/4humeVeEjxFa7LbCXbrWjPJDYMvcWZ27e6Jbohhfsid3/0/1C4D72EE314EFB7CE350AF052C58D3C8818D7575.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C4D72EE314EFB7CE350AF052C58D3C8818D7575.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 06:12:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:89:56:9b:80:a7:cc:58:62:45:84:d9:6d:e3:3f:e1:f7:d4:82:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C4D72EE314EFB7CE350AF052C58D3C8818D7575
        Validity
            Not Before: Dec 20 03:38:28 2025 GMT
            Not After : Dec 21 06:12:28 2025 GMT
        Subject: CN=431F9EF5C0D8554052109BAC2F9BB0FCBB244B37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:af:83:72:95:d1:07:fb:53:34:23:82:6e:0d:
                    f3:e7:8e:96:83:be:98:be:90:02:ee:a2:cd:68:e4:
                    d2:12:40:27:07:11:7f:80:7f:79:b1:34:23:c3:dc:
                    1e:c8:04:09:13:9a:6c:a4:62:a0:b3:64:20:b0:05:
                    de:6c:f6:2f:2c:36:2d:03:52:e6:2d:3b:51:90:5a:
                    9f:6e:5f:08:b8:09:e5:6f:45:8f:b7:24:fa:1c:5e:
                    dc:e8:c4:db:38:6e:20:cb:04:27:02:79:29:20:f2:
                    b4:68:8c:dd:f0:10:5d:5e:8d:8f:3b:93:43:bc:c5:
                    c7:39:45:2d:05:c7:c3:cc:8e:22:72:ec:15:08:48:
                    10:ee:85:0f:34:86:56:72:bf:00:61:16:02:22:7e:
                    f2:43:5d:d4:a5:bd:cb:6f:ca:88:85:35:26:d7:55:
                    3b:0c:b4:e5:eb:20:f1:a1:0a:20:4e:11:c7:b2:1e:
                    49:70:06:4c:7b:f0:21:5e:2c:b1:10:ac:92:66:f4:
                    9e:4e:21:ef:39:3f:fa:58:29:b4:11:3e:ac:9a:05:
                    b4:c6:8a:ac:d5:44:d3:92:72:fa:77:da:c8:1b:df:
                    88:43:2b:68:a1:93:24:2b:bd:52:6a:53:39:c2:86:
                    7a:27:11:8d:0b:a4:57:9e:46:fc:78:ef:99:12:22:
                    34:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:1F:9E:F5:C0:D8:55:40:52:10:9B:AC:2F:9B:B0:FC:BB:24:4B:37
            X509v3 Authority Key Identifier:
                keyid:1C:4D:72:EE:31:4E:FB:7C:E3:50:AF:05:2C:58:D3:C8:81:8D:75:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4humeVeEjxFa7LbCXbrWjPJDYMvcWZ27e6Jbohhfsid3/0/1C4D72EE314EFB7CE350AF052C58D3C8818D7575.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C4D72EE314EFB7CE350AF052C58D3C8818D7575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4humeVeEjxFa7LbCXbrWjPJDYMvcWZ27e6Jbohhfsid3/0/1C4D72EE314EFB7CE350AF052C58D3C8818D7575.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:15:ea:6d:44:d2:7d:e5:22:50:cd:29:3d:3b:86:3d:16:91:
         22:e0:97:fc:c9:29:8b:b7:e1:81:0d:38:82:6d:08:23:70:0c:
         91:a5:00:dc:50:31:a4:62:80:4f:8e:8e:47:79:a7:33:cb:66:
         98:ad:1f:e8:0e:47:7d:04:1c:cf:9b:a4:57:e8:9b:7b:fd:6f:
         68:19:b9:e3:0f:69:0e:fb:34:0d:71:00:e1:6f:b8:a9:e9:d9:
         dc:b4:a0:df:91:3d:10:8c:a7:1f:e1:f2:73:46:a3:9c:fe:2a:
         79:a1:d8:d3:f3:9d:a7:f6:2a:de:c9:24:5b:40:ee:3d:49:f6:
         40:84:a2:66:71:61:44:d6:a1:10:0d:a3:15:15:00:72:03:af:
         09:d6:9e:4c:94:13:d1:95:61:c7:e2:67:1c:02:ff:04:e1:73:
         92:44:29:b9:a8:74:b9:06:e5:9f:70:72:45:d8:48:ad:c5:e4:
         d5:cf:7c:b9:e8:38:a1:11:86:75:e2:2d:b3:66:6b:31:45:e1:
         99:ee:e9:00:0d:10:1f:e2:48:36:40:2f:7e:80:96:b9:79:0f:
         c8:79:56:de:39:98:08:a0:3b:db:42:26:71:4e:be:33:00:62:
         88:31:96:e1:5e:5d:a1:bf:fa:69:63:e9:a5:d1:60:06:3d:b1:
         c2:ed:07:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:36:24 2025 by rpki-client