This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/1/4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E.mft
File:                     4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E.mft (raw, json)
Hash identifier:          6al5u4TmUvWAHpGyGQ4Eee+A4V9ehw5o4YKfj4E5aD4=
Subject key identifier:   57:78:5C:65:EF:C2:AB:5C:B8:1C:26:08:E1:5A:A6:31:38:E2:A9:86
Authority key identifier: 4C:C4:6B:4C:FC:BD:D5:3A:EE:15:9E:5B:C8:51:E0:ED:26:BE:7D:3E
Certificate issuer:       /CN=4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E
Certificate serial:       4E372AE3C4EBEB2E32C900AB427ED1E5D83C66CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/1/4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E.mft
Manifest number:          0312
Signing time:             Wed 24 Dec 2025 06:47:38 +0000
Manifest this update:     Wed 24 Dec 2025 06:42:38 +0000
Manifest next update:     Thu 25 Dec 2025 09:38:38 +0000
Files and hashes:         1: 34352e3136312e3132382e302f32322d3332203d3e20323638343539.roa (hash: 7yzua8oiIxSfk31Q4r/FcHKoix1rYCC52BC1guGftUM=)
                          2: 4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E.crl (hash: eKGcw5OWf3g3/XsbH85tInmDtC0QM+oSkBipqiEwdrk=)
                          3: 323830343a353138633a3a2f33322d313238203d3e20323638343539.roa (hash: 41i7Ezse3mYBnAnuGShw9jFWqjRc0WkJ2TykK99pJBU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/1/4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E.crl
                          rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/1/4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 09:38:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:37:2a:e3:c4:eb:eb:2e:32:c9:00:ab:42:7e:d1:e5:d8:3c:66:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E
        Validity
            Not Before: Dec 24 06:42:38 2025 GMT
            Not After : Dec 25 09:38:38 2025 GMT
        Subject: CN=57785C65EFC2AB5CB81C2608E15AA63138E2A986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3e:f6:d0:fd:72:81:d3:54:96:68:63:34:c8:
                    03:51:3c:0c:7d:d1:77:61:ff:9a:d1:6f:14:0d:f8:
                    50:9b:4e:ef:a4:f2:c2:73:7a:7c:aa:ac:c7:6d:4d:
                    42:ac:ec:29:e1:e8:38:4c:8f:85:ab:4b:46:fc:5c:
                    c9:a4:1e:d2:11:73:31:21:a2:be:48:25:01:e7:a1:
                    c3:be:9b:52:80:18:a3:a9:64:f0:b7:97:74:33:32:
                    a9:5d:00:e9:20:ce:15:f7:7d:8c:af:d2:d5:94:00:
                    cd:e9:65:c5:40:3b:cc:6b:62:48:b1:f3:13:27:b3:
                    a2:01:d7:e4:b0:83:25:bf:7c:8b:ff:d7:ae:5a:93:
                    8e:86:af:ad:75:30:c5:5a:54:2f:0f:2a:7c:4d:ad:
                    5c:5d:53:eb:fd:16:92:2e:32:3b:b0:e6:66:b8:57:
                    7e:de:67:7c:9e:9d:ac:b7:f1:f6:d6:db:1f:be:1f:
                    58:4e:96:61:72:5b:b2:89:25:e2:d1:6b:38:12:4a:
                    8d:cc:1f:12:b6:d4:b8:bf:e0:96:19:d2:be:bf:e4:
                    37:02:31:83:28:f7:04:be:01:a4:2b:37:ab:ab:ef:
                    29:86:6b:44:a5:73:23:3e:09:35:8d:ab:45:6a:48:
                    6c:4a:48:0e:ac:94:8d:36:e3:a2:99:54:74:b2:eb:
                    10:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:78:5C:65:EF:C2:AB:5C:B8:1C:26:08:E1:5A:A6:31:38:E2:A9:86
            X509v3 Authority Key Identifier:
                keyid:4C:C4:6B:4C:FC:BD:D5:3A:EE:15:9E:5B:C8:51:E0:ED:26:BE:7D:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/1/4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/1/4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:48:dc:3b:f1:aa:e1:d0:55:09:2a:ec:c4:7b:11:a8:f3:dd:
         0a:32:03:bb:93:8b:fb:9b:96:76:4d:0c:77:fb:30:03:b4:75:
         6a:62:be:29:81:62:81:e0:e7:ec:51:29:78:44:95:20:17:a8:
         bc:88:2d:4b:8b:3d:78:64:4d:1b:07:18:7f:1c:e2:12:1f:93:
         94:42:95:e1:28:72:d1:eb:8f:14:67:82:79:89:60:27:c9:ff:
         25:c3:09:1e:bc:46:55:d6:21:1f:8d:e7:af:15:d8:98:ef:43:
         0d:9a:73:f6:4e:13:50:12:94:9c:fc:57:f9:47:09:6f:59:1b:
         12:48:92:f6:d1:8f:fd:12:8c:21:62:2a:52:a6:51:d8:2c:ec:
         7e:49:fe:19:76:79:b2:9f:8d:89:1a:e6:02:b8:a2:72:f6:8f:
         46:be:e2:89:df:3e:85:c6:09:35:a5:43:4c:de:5f:f8:02:f2:
         5d:4f:a0:5c:ed:13:bb:42:01:de:78:05:a8:1f:68:4c:cf:d3:
         90:e1:66:d2:ec:4b:14:ed:d8:37:88:13:70:58:79:8f:5d:ee:
         18:4a:c5:fc:1d:8d:48:97:b4:3e:71:33:e6:f7:d5:63:2e:60:
         9c:9f:cf:5a:e4:39:31:2c:93:64:73:01:13:0c:53:37:ee:9e:
         ee:4f:23:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:31:51 2025 by rpki-client