This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.mft
File:                     11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.mft (raw, json)
Hash identifier:          Qj9yvrqTcd3pULACUmidB8IL24/pA3bBSpn/BVIuu28=
Subject key identifier:   21:7F:BC:A5:4E:24:93:94:4D:54:C9:5E:63:E0:E7:7A:DE:85:2A:49
Authority key identifier: 11:FB:1E:D5:A8:89:4D:A7:49:A7:F5:AD:4F:10:E8:0C:94:4D:42:1C
Certificate issuer:       /CN=11FB1ED5A8894DA749A7F5AD4F10E80C944D421C
Certificate serial:       38A2B792A8D817AD8A5D5D4DC1516DDC465748E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.mft
Manifest number:          7C
Signing time:             Fri 19 Dec 2025 14:07:23 +0000
Manifest this update:     Fri 19 Dec 2025 14:02:23 +0000
Manifest next update:     Sat 20 Dec 2025 16:20:23 +0000
Files and hashes:         1: 34352e3136372e39362e302f32332d3233203d3e20323637393938.roa (hash: nq7RhRiVGDMVVgM/MoyTYLTPrn1mJ9KD/K6WgZpjXDY=)
                          2: 323830343a353637303a3a2f33322d3332203d3e20323637393938.roa (hash: +cUVgKxn4mOXd+cHhmjCT1WiUS3lOZJTsD6ZtKdpHUU=)
                          3: 34352e3136372e39372e302f32342d3234203d3e20323637393938.roa (hash: Ytrdo261nu68G5iYQF5kllJQrLZFTEmfyesz1UaQMsc=)
                          4: 34352e3136372e39362e302f32342d3234203d3e20323637393938.roa (hash: /LAOQeapE7t7p2/spLqG+U81j0Yy8oxAeK+W5yPj2Gw=)
                          5: 11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.crl (hash: Us9U2WrV4l6o+hB9fMCCK9WPFwTJCaKfk+ToZDTmV28=)
                          6: 34352e3136372e39362e302f32322d3232203d3e20323637393938.roa (hash: /oOEnAypauONcNbXkKj4AELCL3ogJdLj9O5tkwd15xI=)
                          7: 34352e3136372e39382e302f32342d3234203d3e20323637393938.roa (hash: K6GBQqxqAfLpF97zU04kB7u5JAis425xps/SL+WZhCw=)
                          8: 34352e3136372e39382e302f32332d3233203d3e20323637393938.roa (hash: O7kjjCoo8NTTsbX0UuS95uZuDag0Q0a6IltqgBl9WOY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.crl
                          rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 16:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:a2:b7:92:a8:d8:17:ad:8a:5d:5d:4d:c1:51:6d:dc:46:57:48:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11FB1ED5A8894DA749A7F5AD4F10E80C944D421C
        Validity
            Not Before: Dec 19 14:02:23 2025 GMT
            Not After : Dec 20 16:20:23 2025 GMT
        Subject: CN=217FBCA54E2493944D54C95E63E0E77ADE852A49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a4:43:62:32:f6:d7:ea:fc:a2:fd:86:b7:21:
                    00:d3:34:7e:85:e5:b2:78:e5:93:02:10:14:ba:9e:
                    8a:41:e4:b7:e5:3f:49:d7:9a:99:d4:77:90:89:6e:
                    ae:54:a0:2c:85:c4:b3:a5:9f:f1:f0:dd:21:7e:a0:
                    da:5d:73:c5:34:ee:0f:7a:98:65:bf:e5:23:d0:9f:
                    6d:eb:2f:e2:d7:b5:8e:f1:db:91:82:c4:15:d3:c5:
                    79:b5:51:55:8d:89:9a:33:bb:3b:e2:59:d8:88:11:
                    a8:a0:35:4c:df:e2:18:50:25:d6:73:d9:80:7d:d4:
                    c7:8e:cb:e2:b1:aa:bb:4e:40:d9:0c:d4:38:38:ff:
                    b5:be:c2:55:56:13:a5:5b:11:3a:bf:f6:bb:0c:f8:
                    d0:fd:b1:3e:28:41:52:07:d8:f9:3f:a9:64:eb:fd:
                    00:ce:31:19:49:26:26:1c:f1:2a:89:a3:a5:79:dc:
                    8e:0d:81:dc:8a:70:83:53:6f:54:fd:16:dc:67:08:
                    54:96:1b:29:fc:ff:d4:fa:6a:4a:5b:2c:f3:fa:8d:
                    6d:1b:30:77:c0:84:32:02:e2:f9:4f:b7:6f:11:ef:
                    51:86:79:7b:bf:42:78:7a:d8:55:41:23:89:1d:28:
                    9f:e7:6c:2f:9b:04:6f:05:07:1a:63:77:b6:50:96:
                    c8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:7F:BC:A5:4E:24:93:94:4D:54:C9:5E:63:E0:E7:7A:DE:85:2A:49
            X509v3 Authority Key Identifier:
                keyid:11:FB:1E:D5:A8:89:4D:A7:49:A7:F5:AD:4F:10:E8:0C:94:4D:42:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:f0:9e:54:1b:d5:0a:84:c1:68:17:bd:37:04:36:be:f0:f9:
         1a:1e:c0:2b:d5:60:c3:53:37:db:17:ab:8f:95:0f:95:ac:9b:
         a0:51:63:e6:e1:e5:e4:e7:88:84:98:8d:72:5b:63:ad:77:14:
         9e:4e:7b:f5:73:60:a4:32:96:cb:16:f9:f6:c7:90:41:99:a2:
         3a:5b:89:05:e2:ad:bb:02:68:30:c2:4c:3a:74:13:f6:67:f9:
         70:6b:73:cf:fd:3c:52:7d:e1:ec:3f:84:2c:bb:08:84:6d:ca:
         8f:61:6c:4e:dc:52:4f:b0:b4:61:6a:14:9a:6b:d7:05:e4:a6:
         8b:b4:05:cc:25:59:38:20:48:43:28:63:c8:90:7c:ff:bb:c9:
         9d:42:24:f2:ae:52:23:fa:e4:29:30:00:d5:02:d2:de:c1:09:
         3f:50:78:a8:80:05:90:d5:f4:c7:db:74:f9:92:f6:f4:b1:c1:
         6d:95:b2:db:b9:96:07:5e:80:3d:b0:79:a0:be:7f:72:58:40:
         b1:d7:f8:14:c6:85:bf:79:fc:79:b9:54:52:8a:b2:01:84:6e:
         33:a2:f5:c2:e3:35:38:7b:85:d6:c1:d9:d1:f2:1b:9a:17:de:
         c7:fe:c8:c7:cb:fa:5e:19:a3:e2:29:8d:d0:93:64:ac:a3:86:
         33:f3:a1:3b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOKK3kqjYF62KXV1NwVFt3EZXSOUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFGQjFFRDVBODg5NERBNzQ5QTdGNUFENEYxMEU4MEM5
NDRENDIxQzAeFw0yNTEyMTkxNDAyMjNaFw0yNTEyMjAxNjIwMjNaMDMxMTAvBgNV
BAMTKDIxN0ZCQ0E1NEUyNDkzOTQ0RDU0Qzk1RTYzRTBFNzdBREU4NTJBNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKpENiMvbX6vyi/Ya3IQDTNH6F
5bJ45ZMCEBS6nopB5LflP0nXmpnUd5CJbq5UoCyFxLOln/Hw3SF+oNpdc8U07g96
mGW/5SPQn23rL+LXtY7x25GCxBXTxXm1UVWNiZozuzviWdiIEaigNUzf4hhQJdZz
2YB91MeOy+KxqrtOQNkM1Dg4/7W+wlVWE6VbETq/9rsM+ND9sT4oQVIH2Pk/qWTr
/QDOMRlJJiYc8SqJo6V53I4NgdyKcINTb1T9FtxnCFSWGyn8/9T6akpbLPP6jW0b
MHfAhDIC4vlPt28R71GGeXu/Qnh62FVBI4kdKJ/nbC+bBG8FBxpjd7ZQlsjfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUIX+8pU4kk5RNVMleY+Dnet6FKkkwHwYDVR0j
BBgwFoAUEfse1aiJTadJp/WtTxDoDJRNQhwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHh6aFFZblk3S1JkRUxuNXRUSmNGRVNMZ1V5ZXR1cGpIeVZ5Mmh1MlFl
SmovMC8xMUZCMUVENUE4ODk0REE3NDlBN0Y1QUQ0RjEwRTgwQzk0NEQ0MjFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExRkIxRUQ1QTg4OTREQTc0
OUE3RjVBRDRGMTBFODBDOTQ0RDQyMUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NHh6aFFZblk3S1JkRUxuNXRUSmNGRVNMZ1V5ZXR1cGpIeVZ5Mmh1MlFlSmovMC8x
MUZCMUVENUE4ODk0REE3NDlBN0Y1QUQ0RjEwRTgwQzk0NEQ0MjFDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAyPCeVBvVCoTBaBe9NwQ2vvD5Gh7AK9Vgw1M32xerj5UPlayboFFj5uHl5OeI
hJiNcltjrXcUnk579XNgpDKWyxb59seQQZmiOluJBeKtuwJoMMJMOnQT9mf5cGtz
z/08Un3h7D+ELLsIhG3Kj2FsTtxST7C0YWoUmmvXBeSmi7QFzCVZOCBIQyhjyJB8
/7vJnUIk8q5SI/rkKTAA1QLS3sEJP1B4qIAFkNX0x9t0+ZL29LHBbZWy27mWB16A
PbB5oL5/clhAsdf4FMaFv3n8eblUUoqyAYRuM6L1wuM1OHuF1sHZ0fIbmhfex/7I
x8v6Xhmj4imN0JNkrKOGM/OhOw==
-----END CERTIFICATE-----
Generated at Sat Dec 20 07:48:05 2025 by rpki-client