This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/1/44D163BB7C285498620FF487902FE788F88F4349.mft
File:                     44D163BB7C285498620FF487902FE788F88F4349.mft (raw, json)
Hash identifier:          pi7djH9OTncriyd7vv1nE0hlt8JcnRz2Kbj/9Zc4FPk=
Subject key identifier:   90:BC:26:94:90:66:44:31:C0:51:2C:B2:D5:14:6E:00:47:E8:9A:D3
Authority key identifier: 44:D1:63:BB:7C:28:54:98:62:0F:F4:87:90:2F:E7:88:F8:8F:43:49
Certificate issuer:       /CN=44D163BB7C285498620FF487902FE788F88F4349
Certificate serial:       3A825272D9CE496FEAB5779F1A27DFFBED306B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D163BB7C285498620FF487902FE788F88F4349.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/1/44D163BB7C285498620FF487902FE788F88F4349.mft
Manifest number:          0345
Signing time:             Wed 31 Dec 2025 06:09:27 +0000
Manifest this update:     Wed 31 Dec 2025 06:04:27 +0000
Manifest next update:     Thu 01 Jan 2026 08:15:27 +0000
Files and hashes:         1: 3139302e3131352e3231362e302f32322d3332203d3e20323730383435.roa (hash: UyldARDGvGm/XD7rbiw9gECmuFn0wDSn0Px7jIBy8Bk=)
                          2: 323830343a373234633a3a2f33322d313238203d3e20323730383435.roa (hash: Z0vCvj+Vim0ac3Yt33tPoV2KdykezukadC/aeq1aNbs=)
                          3: 44D163BB7C285498620FF487902FE788F88F4349.crl (hash: E4JadZsi/O+9xwnLIrj288a99AkYbfSBeiVHyggECOY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/1/44D163BB7C285498620FF487902FE788F88F4349.crl
                          rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/1/44D163BB7C285498620FF487902FE788F88F4349.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D163BB7C285498620FF487902FE788F88F4349.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 Jan 2026 08:03:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:82:52:72:d9:ce:49:6f:ea:b5:77:9f:1a:27:df:fb:ed:30:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44D163BB7C285498620FF487902FE788F88F4349
        Validity
            Not Before: Dec 31 06:04:27 2025 GMT
            Not After : Jan  1 08:15:27 2026 GMT
        Subject: CN=90BC269490664431C0512CB2D5146E0047E89AD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d0:10:75:d6:11:a5:af:db:2b:30:eb:42:dc:
                    4d:66:b2:66:e3:0b:ac:3b:c7:5d:cc:a1:8d:e3:35:
                    b3:c1:38:f1:15:77:d9:b4:68:9c:a4:e9:71:25:7a:
                    3c:d6:99:f6:cb:7f:9d:4e:a4:a4:4d:b3:e8:48:71:
                    a7:30:65:1c:d6:8f:4e:ad:e8:ec:ce:e9:11:78:84:
                    7d:1a:cb:3b:b4:71:90:92:a5:68:a4:47:f4:01:c0:
                    f3:9a:b9:cf:6d:f9:30:28:25:1c:6a:84:d8:52:65:
                    a6:ba:05:d2:65:4a:2b:71:ef:1f:f1:29:cc:d8:28:
                    c7:d0:1c:82:ca:b1:1c:a6:9b:4d:49:31:78:d0:3f:
                    36:ed:4a:22:55:d2:d7:8c:8e:cf:72:31:32:4d:53:
                    32:23:cf:6e:1a:4a:06:c8:c7:ed:68:c8:6b:a5:1d:
                    e0:a7:27:53:58:2d:a2:e9:4e:dd:ec:c5:f9:db:22:
                    05:85:21:ad:66:be:fe:c1:81:11:e2:db:71:1a:9c:
                    80:6e:c6:b2:65:44:d9:dc:50:77:23:1c:ce:5c:7c:
                    ec:e8:bd:3b:2d:29:4f:bc:9a:9b:df:3e:dc:c8:62:
                    75:98:43:6d:ee:eb:52:f3:90:e7:f0:04:4a:fa:2d:
                    e1:cc:50:f1:a9:da:03:87:01:87:4b:9b:70:34:45:
                    22:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:BC:26:94:90:66:44:31:C0:51:2C:B2:D5:14:6E:00:47:E8:9A:D3
            X509v3 Authority Key Identifier:
                keyid:44:D1:63:BB:7C:28:54:98:62:0F:F4:87:90:2F:E7:88:F8:8F:43:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/1/44D163BB7C285498620FF487902FE788F88F4349.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D163BB7C285498620FF487902FE788F88F4349.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/1/44D163BB7C285498620FF487902FE788F88F4349.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:ab:7a:96:5d:1c:ad:a9:35:a4:e8:29:0f:dc:b9:1c:0c:78:
         33:6f:00:4d:cf:cb:a9:a7:bf:e0:17:44:25:d3:32:01:01:e2:
         d2:d5:c4:41:de:ca:93:0f:9a:6a:bb:7c:04:23:12:de:9b:26:
         d8:85:77:4a:9e:01:75:ed:f3:d9:fd:8b:2c:e6:01:8e:88:99:
         58:87:83:c3:7f:d4:28:da:29:d1:ac:b4:54:6e:db:1f:61:3c:
         fa:2e:bd:c1:fd:7f:6c:49:6c:65:1e:46:50:0e:b2:9e:18:ce:
         fc:40:8e:4a:25:0b:ec:4d:6f:58:00:19:a2:76:3f:2f:72:ac:
         52:aa:61:83:d0:1c:34:9c:4e:38:d9:05:3a:06:5f:cd:4f:10:
         77:f4:16:a5:cb:48:5f:6c:9f:17:c1:2d:44:4f:f1:ef:42:bc:
         c0:08:b5:b4:bd:0a:be:05:7e:89:dc:63:30:b0:36:ed:54:11:
         b4:7a:d5:05:bc:a0:eb:7b:ee:3e:a9:23:2b:d8:bb:7e:cd:fa:
         f2:08:89:d8:6e:c2:c9:82:b4:5d:ff:c2:1d:53:bd:92:ff:2f:
         3e:e3:1e:16:7c:b4:89:c3:d4:b5:05:ea:fd:c7:d3:5a:ef:ff:
         14:71:6e:12:46:c5:50:9f:3a:04:97:ab:6f:c9:7f:74:d8:11:
         c6:e6:91:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 07:44:17 2025 by rpki-client