This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.mft
File:                     72D4C5EE34A043798ED938051AE717D10692045C.mft (raw, json)
Hash identifier:          YgLk3VZbp3og7myyNJClQN+Z+4QqkZ3FyRCG9FEyPoc=
Subject key identifier:   CD:87:DE:E5:1F:8A:21:D4:8D:58:5A:61:16:69:38:09:88:51:9A:FB
Authority key identifier: 72:D4:C5:EE:34:A0:43:79:8E:D9:38:05:1A:E7:17:D1:06:92:04:5C
Certificate issuer:       /CN=72D4C5EE34A043798ED938051AE717D10692045C
Certificate serial:       26294B81B86A6FB1C2E5C2F74D054A6DC4E52970
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D4C5EE34A043798ED938051AE717D10692045C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.mft
Manifest number:          02D3
Signing time:             Sun 28 Dec 2025 10:22:28 +0000
Manifest this update:     Sun 28 Dec 2025 10:17:28 +0000
Manifest next update:     Mon 29 Dec 2025 11:27:28 +0000
Files and hashes:         1: 323830343a353136343a383030303a3a2f33342d3334203d3e20323638343439.roa (hash: JN32EgrgjizqbUbAtX1SYDeqmguBgQpzKTPi+awddl8=)
                          2: 323830343a353136343a633030303a3a2f33342d3334203d3e20323638343439.roa (hash: W4stWl4poow/vUNiwEsPZ57lYpsOS4HGOeMKxmH7ZCA=)
                          3: 323830343a353136343a343030303a3a2f33342d3334203d3e20323638343439.roa (hash: SAhtDrJAdKnYw+Wa3lyp+gm3tO9xH8/Pc/H2wqu8A/w=)
                          4: 72D4C5EE34A043798ED938051AE717D10692045C.crl (hash: rQKO0vIa9m0hrTsY+PYiwmwCqT881pziSYOdeK9EFzI=)
                          5: 34352e3136312e37322e302f32322d3332203d3e20323638343439.roa (hash: F5i/PSDWu4DJ8tYNAbgNEiFBIgrDglA7ho9bEvk0eAE=)
                          6: 323830343a353136343a3a2f33342d3334203d3e20323638343439.roa (hash: 47kMw0n/UxRcH30I3DPJKfeyYgmG0drCHwI8ptwKAQw=)
                          7: 323830343a353136343a3a2f33322d3332203d3e20323638343439.roa (hash: Cl16DiwJNumyv71pOGojDv+nWVRm7Lg2IzVvJEaSZoQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.crl
                          rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D4C5EE34A043798ED938051AE717D10692045C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 29 Dec 2025 11:27:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:29:4b:81:b8:6a:6f:b1:c2:e5:c2:f7:4d:05:4a:6d:c4:e5:29:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D4C5EE34A043798ED938051AE717D10692045C
        Validity
            Not Before: Dec 28 10:17:28 2025 GMT
            Not After : Dec 29 11:27:28 2025 GMT
        Subject: CN=CD87DEE51F8A21D48D585A611669380988519AFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0a:e9:67:15:9e:f4:4b:d8:dd:b2:56:fd:49:
                    55:68:ed:18:eb:fc:6a:ed:8e:40:18:df:4b:ee:56:
                    71:e3:20:c7:8f:5a:8f:48:90:49:16:2f:63:d5:a9:
                    61:f3:ef:a8:c8:cf:48:1f:f1:fd:1b:2f:b9:32:da:
                    05:20:af:bb:d1:f6:31:36:b8:d4:65:1f:2a:6c:a5:
                    ec:2a:b9:10:0d:01:5c:5e:70:e6:37:a0:83:da:b7:
                    e4:b3:d4:f4:3b:6f:79:81:56:ca:c8:73:62:56:32:
                    d1:67:57:4b:82:40:c5:31:c4:e3:83:18:83:0f:4a:
                    7e:6b:16:c7:ea:03:98:68:d9:89:f4:2b:06:32:1d:
                    64:2c:40:28:4e:01:09:5e:21:16:23:bd:ec:80:a0:
                    cc:28:85:b5:26:cc:5b:02:36:1d:a1:2d:ff:40:64:
                    b3:aa:c9:dd:95:b2:ba:2c:cf:d7:cc:69:16:89:fb:
                    1c:32:29:52:57:7b:b2:f5:78:ea:f4:db:cc:72:36:
                    1e:3d:b2:fe:23:bc:90:9f:4b:55:1d:02:2d:94:ed:
                    fe:c7:35:25:df:dd:e4:03:90:e8:58:be:27:9e:cf:
                    ba:51:a3:1c:dc:6e:ed:cd:a5:f0:4a:4f:d4:f2:1f:
                    39:92:d3:00:49:ee:39:92:e2:4e:f0:f3:00:51:e6:
                    0a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:87:DE:E5:1F:8A:21:D4:8D:58:5A:61:16:69:38:09:88:51:9A:FB
            X509v3 Authority Key Identifier:
                keyid:72:D4:C5:EE:34:A0:43:79:8E:D9:38:05:1A:E7:17:D1:06:92:04:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D4C5EE34A043798ED938051AE717D10692045C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:38:4b:d7:88:f6:af:66:3f:b0:dd:de:86:36:c7:4a:82:00:
         71:42:00:80:9c:8a:79:c7:39:65:37:3b:9e:d9:42:60:12:b9:
         17:62:96:36:46:15:c2:31:5c:8c:8a:72:4a:0f:b7:79:57:f5:
         70:cb:1b:08:fd:94:bb:60:15:8e:c4:fe:46:9c:02:07:3b:4f:
         37:6c:1e:86:b1:4c:7d:da:79:5a:53:80:a8:cd:be:75:3b:e0:
         ed:6f:df:f3:f7:b4:41:72:a8:25:67:80:da:18:f0:7f:0d:25:
         14:48:f6:68:f7:ea:8c:47:c4:b8:a7:39:60:fc:ab:b3:1a:a9:
         bf:a7:97:1e:95:14:dc:9e:c4:49:ef:d0:38:86:71:df:7a:ea:
         2b:60:e5:e1:a5:80:03:96:d7:c4:d3:ab:ab:90:7c:a4:d7:cc:
         63:9b:71:28:7c:76:66:1e:49:e1:e4:62:51:6c:0b:95:8e:a3:
         df:f6:9a:89:5e:de:f4:6a:9f:61:41:5a:2a:9b:3a:c4:58:3a:
         b1:7f:0a:31:bb:26:16:20:c9:52:64:3b:6a:fc:55:0c:49:e0:
         35:de:72:7b:1a:01:c2:ae:e8:08:bd:81:d5:15:45:85:69:a3:
         31:04:5d:6d:dc:1f:9b:c3:86:15:22:57:82:56:b9:cf:7c:6a:
         b9:56:d2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 23:26:54 2025 by rpki-client