This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.mft
File:                     B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.mft (raw, json)
Hash identifier:          s550gW5zZYFlYTlntoIr60Pqbp7FoxlMBjrxd82QCMU=
Subject key identifier:   43:AA:D5:2F:4F:A2:C1:FA:79:9E:74:31:2A:F2:51:04:67:8B:E7:E1
Authority key identifier: B4:35:88:C8:AB:54:53:3C:6B:AF:EC:39:CA:9E:C4:E2:6E:05:D7:7B
Certificate issuer:       /CN=B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B
Certificate serial:       7F1E64E91A1AC2D6DE99E194387F155629BD6225
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.mft
Manifest number:          0381
Signing time:             Sat 20 Dec 2025 07:00:00 +0000
Manifest this update:     Sat 20 Dec 2025 06:55:00 +0000
Manifest next update:     Sun 21 Dec 2025 07:00:00 +0000
Files and hashes:         1: 3137392e3132372e38302e302f32302d3234203d3e203238323932.roa (hash: fWDx1Fi6mw6Ca6ZucRKlJCI/fMGdFESCD3/Jzd0xj/o=)
                          2: 3138392e3132342e3131322e302f32302d3234203d3e203238323932.roa (hash: Iq9Imp3qaQEaGFQWqL4EpTLVcZyaAgjQqWljK8thbFo=)
                          3: 3138392e32382e3137362e302f32302d3234203d3e203238323932.roa (hash: Bnl9bp41rgXoRcKOfyv6fT3qi9QRw6WJNdIPgdsg8NI=)
                          4: 323030313a313261303a3a2f33322d3438203d3e203238323932.roa (hash: dKQt4v2JdWqatl/R0rZkWZ5H3UnSmexxO6GH5f47Zss=)
                          5: B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.crl (hash: P9A2peJQHbBhvbJSKPple1ly9+mUiSiCH05YT81XcvY=)
                          6: 3137372e35342e34382e302f32302d3234203d3e203238323932.roa (hash: 40IYTjHiZO7EvGhruJ83FGAT4mQNUc8uvivoD/9QYP0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.crl
                          rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:1e:64:e9:1a:1a:c2:d6:de:99:e1:94:38:7f:15:56:29:bd:62:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B
        Validity
            Not Before: Dec 20 06:55:00 2025 GMT
            Not After : Dec 27 07:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:da:2c:cd:57:2f:31:ce:1f:39:9c:41:17:9e:
                    7c:3e:ab:ef:61:bd:f7:4c:af:3e:31:9a:bc:19:36:
                    9a:fe:c3:60:54:9a:3f:18:11:17:f3:da:4b:da:d2:
                    b3:11:86:3c:5b:f5:a2:08:7c:42:1e:09:bf:53:ad:
                    6a:85:42:e2:c6:36:22:73:0e:c4:24:b0:f7:ea:7b:
                    4c:d0:4e:00:a8:52:ae:09:33:06:eb:a0:51:9b:59:
                    50:36:8f:cc:bc:03:85:b5:b4:dd:7f:dc:0b:a3:8c:
                    a0:fe:79:0b:b9:ee:f7:03:65:c5:e3:9a:98:1d:67:
                    0f:e0:7f:12:b6:84:61:55:51:4a:6b:d1:40:89:e6:
                    47:a2:44:b5:10:ea:70:45:c7:cf:3d:e3:97:ad:5c:
                    dd:e3:cf:ee:4f:d1:82:8b:dc:2e:6f:7d:07:e3:0e:
                    09:c2:f9:dd:fc:cd:a0:f5:ea:bd:ad:fb:05:49:fc:
                    14:50:be:23:6a:07:94:a9:5c:bc:fb:30:9c:c9:1e:
                    07:48:2f:a4:41:f4:25:8c:5e:6f:41:04:6e:72:b6:
                    15:71:17:8c:d5:97:0d:28:1b:0e:f8:e0:c7:82:8b:
                    fc:8a:2b:a4:4a:44:99:37:22:34:41:2c:39:1c:cd:
                    77:1e:55:45:78:d6:19:b4:3a:ec:00:10:77:58:fe:
                    a8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:AA:D5:2F:4F:A2:C1:FA:79:9E:74:31:2A:F2:51:04:67:8B:E7:E1
            X509v3 Authority Key Identifier:
                keyid:B4:35:88:C8:AB:54:53:3C:6B:AF:EC:39:CA:9E:C4:E2:6E:05:D7:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:80:96:14:4c:ba:51:37:2c:06:5b:30:6c:f8:de:3e:aa:e6:
         46:5a:ab:c5:3b:7b:fb:7b:b2:12:3d:f3:8f:61:fb:f2:7e:69:
         cb:86:ba:d8:12:b3:2f:09:e9:ba:c0:91:55:b5:4b:ff:a0:bc:
         b8:03:87:b6:b4:7c:9f:40:e0:5c:f5:aa:97:fb:c7:26:07:c8:
         00:94:95:b2:80:ea:70:1c:43:57:f9:1e:ee:99:3c:d8:c3:af:
         a8:8c:6c:20:17:ef:f1:86:44:d7:34:d7:b6:6b:06:16:46:d7:
         1d:af:b9:59:b9:e3:35:66:81:95:42:a5:87:0b:94:5c:35:fc:
         85:fa:d2:4d:da:f7:eb:f4:62:67:25:fb:1d:fb:06:b3:96:2e:
         88:0d:e3:ed:b3:8c:b2:d2:c2:68:1d:d4:e0:c3:80:2f:7d:88:
         73:bb:42:22:77:61:25:8d:54:92:d3:f5:40:52:95:ac:d7:34:
         c1:f3:72:f7:e0:60:15:a6:08:44:ce:db:fb:14:55:cd:d9:ca:
         1c:37:90:f5:2e:7f:2f:bc:35:e7:fc:9f:12:8a:de:b3:1f:e2:
         8a:48:34:7a:e2:bf:64:40:cd:07:96:58:34:ab:5a:54:f2:7b:
         eb:6b:3d:bc:f1:38:c0:85:fe:6e:5e:eb:4a:cd:17:8e:58:18:
         ed:b9:81:e8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 20 09:29:30 2025 by rpki-client