This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4ocRFaP8FReKg7P1yVg66obAobMvWZz6LiMcAMrFqRze/0/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.mft
File:                     7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.mft (raw, json)
Hash identifier:          U/b+oAY0XhYrGJACy/69MTduHcqHrrQvzLg59/zqtRg=
Subject key identifier:   B7:93:8E:FF:5D:85:45:92:2E:9A:5E:FD:18:4A:3A:15:73:00:55:65
Authority key identifier: 79:02:99:0B:6B:AE:3D:B7:24:9A:F5:2B:E3:F9:CA:51:F0:97:A6:A7
Certificate issuer:       /CN=7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7
Certificate serial:       33430C6B5C5509486F9E0D3D3517751B317FD2C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ocRFaP8FReKg7P1yVg66obAobMvWZz6LiMcAMrFqRze/0/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.mft
Manifest number:          031F
Signing time:             Sat 27 Dec 2025 07:09:52 +0000
Manifest this update:     Sat 27 Dec 2025 07:04:52 +0000
Manifest next update:     Sun 28 Dec 2025 08:54:52 +0000
Files and hashes:         1: 34352e3138302e3139362e302f32322d3332203d3e20323639313437.roa (hash: ACybkxJyHsEODztG1bQeawA3C9JEJuUmPXdqdZx92D0=)
                          2: 323830343a363032303a3a2f33322d313238203d3e20323639313437.roa (hash: atPOZ+v+uoJyPzZjiZJs06SSiwIYkKzMtaHF/Bo7lH8=)
                          3: 7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.crl (hash: 9bd1wje/AnPVOSxx2h7kxA61e+AT/iEiKA4ZFXBmyk0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ocRFaP8FReKg7P1yVg66obAobMvWZz6LiMcAMrFqRze/0/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.crl
                          rsync://rpki-repo.registro.br/repo/4ocRFaP8FReKg7P1yVg66obAobMvWZz6LiMcAMrFqRze/0/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Dec 2025 08:54:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:43:0c:6b:5c:55:09:48:6f:9e:0d:3d:35:17:75:1b:31:7f:d2:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7
        Validity
            Not Before: Dec 27 07:04:52 2025 GMT
            Not After : Dec 28 08:54:52 2025 GMT
        Subject: CN=B7938EFF5D8545922E9A5EFD184A3A1573005565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:35:75:da:24:02:03:c7:94:17:24:dc:77:7c:
                    c2:ea:88:c7:07:eb:4b:2d:7e:ea:db:87:34:31:17:
                    e1:52:df:c6:3f:37:c9:97:45:ca:62:4e:34:12:0b:
                    9c:70:6f:0d:f0:cb:99:fc:ba:97:65:48:52:6a:51:
                    cb:3b:44:0b:4a:5a:11:8e:57:b2:5c:3d:e8:00:03:
                    cd:3a:f4:bf:a2:74:ff:51:0f:ec:2c:69:13:43:97:
                    77:27:0f:22:fa:d7:2f:72:18:94:77:29:be:90:24:
                    11:15:cf:86:bf:ab:40:31:97:c9:c8:da:fd:fa:0e:
                    41:9e:a3:74:84:32:d1:b7:db:ff:91:f4:a9:db:c1:
                    27:23:28:e1:d2:bc:2c:cf:25:ce:68:29:b9:b6:9f:
                    63:c8:de:fc:2c:f4:13:ea:0f:8c:82:22:6f:9e:d4:
                    b8:c9:e1:d4:21:e6:db:ba:64:8b:48:df:89:d2:ca:
                    88:68:b5:31:c4:44:fc:31:34:cd:43:0c:e1:45:67:
                    01:f9:28:87:66:a6:30:68:e4:d5:58:a1:f1:1b:42:
                    1a:ce:74:e3:4e:20:6f:23:54:e9:0f:85:db:63:58:
                    92:5e:6e:74:fb:4d:c0:4b:db:79:70:39:34:b3:b5:
                    90:b8:1b:59:f3:dd:61:a4:95:f7:ae:96:d1:bd:58:
                    5b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:93:8E:FF:5D:85:45:92:2E:9A:5E:FD:18:4A:3A:15:73:00:55:65
            X509v3 Authority Key Identifier:
                keyid:79:02:99:0B:6B:AE:3D:B7:24:9A:F5:2B:E3:F9:CA:51:F0:97:A6:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ocRFaP8FReKg7P1yVg66obAobMvWZz6LiMcAMrFqRze/0/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ocRFaP8FReKg7P1yVg66obAobMvWZz6LiMcAMrFqRze/0/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:71:59:84:a0:ba:3a:8c:da:02:df:0f:59:83:e5:6d:02:b6:
         cf:33:d4:c1:2b:50:65:b4:78:2e:c8:ec:ff:51:09:36:30:5e:
         30:e2:1f:bd:ba:1f:12:0a:99:01:d6:20:b1:6a:7c:46:3e:04:
         48:e9:b1:f3:f7:08:48:c8:02:40:1f:50:18:c2:f8:73:90:35:
         6f:10:67:a9:01:9d:19:30:e2:be:64:b4:7d:b6:d4:28:d3:11:
         d6:fb:45:95:5c:5b:97:bd:63:14:c1:d3:a3:08:66:9c:47:02:
         f6:8c:2e:01:3c:9e:37:b3:26:24:61:22:04:7e:62:28:64:09:
         3d:84:6f:f2:aa:59:46:67:6d:13:39:e7:7a:ef:84:57:af:1b:
         11:a6:72:94:50:be:f7:9c:11:b2:57:59:dd:bf:ff:5f:24:8a:
         76:a4:9b:4e:49:e4:a0:8c:2f:a1:a2:7a:e3:9c:aa:cd:ce:e9:
         c0:d4:28:9a:c9:6e:38:54:76:79:48:fa:69:94:ba:56:fb:87:
         ee:f6:34:d1:d2:6c:d3:aa:9c:49:40:7f:4f:94:96:28:3c:63:
         d6:d0:16:e4:25:10:96:dd:2f:ad:4d:97:0d:e6:6f:9d:ae:ac:
         c6:49:66:c7:68:49:b3:22:03:85:b1:07:25:d3:e3:c9:1d:fb:
         1d:f8:a4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 17:51:43 2025 by rpki-client