This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6FFhxBJ55Jr7xJSkra3sTtjzFBspWkqxG6LAtPyyK4go/0/42F151EC6332FC2768F7C46E57772FDBBFA6D092.mft
File:                     42F151EC6332FC2768F7C46E57772FDBBFA6D092.mft (raw, json)
Hash identifier:          4BKfDb2N2o8LkUGCOoCeG122TfxdGgjNZfgYexOaTuo=
Subject key identifier:   52:8F:AE:79:C9:7E:05:01:38:C4:F5:1E:1D:8F:AD:11:95:9F:DA:7B
Authority key identifier: 42:F1:51:EC:63:32:FC:27:68:F7:C4:6E:57:77:2F:DB:BF:A6:D0:92
Certificate issuer:       /CN=42F151EC6332FC2768F7C46E57772FDBBFA6D092
Certificate serial:       41087224CD03CB45EA226634F183DA9F88D56773
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42F151EC6332FC2768F7C46E57772FDBBFA6D092.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FFhxBJ55Jr7xJSkra3sTtjzFBspWkqxG6LAtPyyK4go/0/42F151EC6332FC2768F7C46E57772FDBBFA6D092.mft
Manifest number:          18
Signing time:             Fri 19 Dec 2025 11:09:21 +0000
Manifest this update:     Fri 19 Dec 2025 11:04:21 +0000
Manifest next update:     Sat 20 Dec 2025 14:42:21 +0000
Files and hashes:         1: 3137372e38342e3234302e302f32312d3332203d3e20323632353934.roa (hash: 3zB2FSeh+NJPJNGWiVbuq5aynYc1XkNU14DQAsUk4NQ=)
                          2: 323830343a3638633a3a2f33322d313238203d3e20323632353934.roa (hash: a9uSBnVmhWL+rAy+roz4Y7RFXYsRevtEOedLhHqfF08=)
                          3: 42F151EC6332FC2768F7C46E57772FDBBFA6D092.crl (hash: yYvdebmIGA9D3WXrINRdrqrnAi/Gbnrot32MMCKWfVs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6FFhxBJ55Jr7xJSkra3sTtjzFBspWkqxG6LAtPyyK4go/0/42F151EC6332FC2768F7C46E57772FDBBFA6D092.crl
                          rsync://rpki-repo.registro.br/repo/6FFhxBJ55Jr7xJSkra3sTtjzFBspWkqxG6LAtPyyK4go/0/42F151EC6332FC2768F7C46E57772FDBBFA6D092.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42F151EC6332FC2768F7C46E57772FDBBFA6D092.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 14:42:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:08:72:24:cd:03:cb:45:ea:22:66:34:f1:83:da:9f:88:d5:67:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42F151EC6332FC2768F7C46E57772FDBBFA6D092
        Validity
            Not Before: Dec 19 11:04:21 2025 GMT
            Not After : Dec 20 14:42:21 2025 GMT
        Subject: CN=528FAE79C97E050138C4F51E1D8FAD11959FDA7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9f:7d:34:4c:b2:39:37:b6:25:6d:5d:a3:20:
                    ce:7e:c1:80:74:b9:d4:bc:e8:ab:2b:8a:aa:3e:e6:
                    5c:3d:f4:fe:50:93:b6:33:6d:2b:79:68:73:09:39:
                    69:26:81:9d:0f:b6:1b:54:68:74:6b:1d:09:58:c0:
                    ff:be:15:7c:a6:8e:90:bb:0e:ea:bf:24:d1:1d:9c:
                    12:5d:a3:9f:64:d9:6d:db:22:c9:56:e6:46:61:d3:
                    a3:1c:95:59:e7:14:e9:b3:a2:01:d4:8b:88:ce:10:
                    71:d9:d5:26:a1:11:e7:99:7c:fc:75:73:1e:1d:28:
                    20:8f:9f:b1:f2:34:96:e0:1f:3f:76:b1:31:71:13:
                    ee:9e:18:e2:98:93:b5:06:20:7c:06:29:0d:63:95:
                    96:51:ad:81:a9:fb:19:b3:dd:99:c6:3b:a6:25:3f:
                    b2:d5:7e:c9:b2:ba:62:64:f7:18:c2:b6:27:d5:c3:
                    ee:6d:56:30:2a:86:c9:d2:bb:50:e4:8c:54:19:63:
                    b2:82:94:11:2c:2d:1f:80:f8:b4:58:da:66:02:bb:
                    14:75:14:f2:1e:36:d6:96:a9:34:18:96:54:a7:ac:
                    34:22:95:5c:b0:27:bf:13:e5:01:fb:e5:96:54:98:
                    4f:5b:9a:51:bc:24:27:68:c8:14:16:5d:c6:5d:2c:
                    fd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:8F:AE:79:C9:7E:05:01:38:C4:F5:1E:1D:8F:AD:11:95:9F:DA:7B
            X509v3 Authority Key Identifier:
                keyid:42:F1:51:EC:63:32:FC:27:68:F7:C4:6E:57:77:2F:DB:BF:A6:D0:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FFhxBJ55Jr7xJSkra3sTtjzFBspWkqxG6LAtPyyK4go/0/42F151EC6332FC2768F7C46E57772FDBBFA6D092.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42F151EC6332FC2768F7C46E57772FDBBFA6D092.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FFhxBJ55Jr7xJSkra3sTtjzFBspWkqxG6LAtPyyK4go/0/42F151EC6332FC2768F7C46E57772FDBBFA6D092.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:03:b8:2d:e5:0d:c6:48:cf:a9:19:4f:ef:1b:6c:b0:70:bc:
         36:84:4c:a4:66:72:46:2c:e7:87:d4:cd:8a:56:ac:02:b7:f3:
         29:7f:87:c5:e9:5f:8f:b3:f2:65:f1:a8:f5:03:ba:e6:a7:71:
         d2:39:bb:db:c3:46:58:21:70:47:cb:03:a8:c5:43:7d:1a:eb:
         45:15:2a:d6:72:79:9c:62:ce:73:3f:7d:34:d0:83:b7:d0:8d:
         52:f2:f5:c6:a7:8d:1a:43:8b:df:0e:68:ac:24:bb:8f:c4:3e:
         8a:f4:e6:11:07:0f:c0:17:d5:da:f8:86:f8:a0:c0:b0:5e:cb:
         1e:ca:72:d4:3c:e9:cf:86:6c:88:f3:db:07:09:7e:6a:da:74:
         f8:db:e7:f7:b3:cb:b6:92:49:21:0c:ac:fd:cc:04:40:c0:28:
         1c:a9:00:21:fb:9d:be:48:25:3b:de:7f:74:df:0d:8d:0a:d2:
         ab:db:03:bb:ba:32:10:ff:de:3a:17:78:8d:6a:e3:46:6d:c7:
         49:c5:41:5b:94:5d:99:d5:86:39:5a:86:1f:d1:76:70:31:a0:
         c8:25:3c:dc:0f:72:0a:ca:e4:be:09:d8:a1:99:5f:b2:08:32:
         3b:56:c3:c4:40:d5:18:cd:02:2a:52:97:d2:6e:79:37:b2:57:
         35:17:f8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:42:58 2025 by rpki-client