This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.mft
File:                     725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.mft (raw, json)
Hash identifier:          CoKyIbXE/aiCfja+gWu80faQjw1HYGbMFdtE+fnbQl4=
Subject key identifier:   AC:01:F9:38:98:D7:B8:68:D5:23:32:70:64:C0:E3:85:66:AC:9A:83
Authority key identifier: 72:5C:FB:34:4D:3B:C8:D4:D1:28:A6:DE:8A:52:7D:9D:1E:3C:70:A5
Certificate issuer:       /CN=725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5
Certificate serial:       280B7DDEFF1D32693E8A74689D2969C1B9DB1709
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.mft
Manifest number:          0302
Signing time:             Tue 30 Dec 2025 21:07:27 +0000
Manifest this update:     Tue 30 Dec 2025 21:02:27 +0000
Manifest next update:     Thu 01 Jan 2026 00:59:27 +0000
Files and hashes:         1: 323830343a3162383a3a2f33322d313238203d3e20323632373634.roa (hash: emHd2D10GnG01ceLZivyVGNjBbutyt7W93juyNFSlF8=)
                          2: 3138362e3232362e3139322e302f32312d3332203d3e20323632373634.roa (hash: iFK1OF67O66YqUUD52Ds0rXQyHRWdpwPVw7VccZ/UVQ=)
                          3: 725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.crl (hash: 2EvFOKK2T++FTlse9iT42nlxL2O4FEsAXPYx9sDmb7U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.crl
                          rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 Jan 2026 00:59:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:0b:7d:de:ff:1d:32:69:3e:8a:74:68:9d:29:69:c1:b9:db:17:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5
        Validity
            Not Before: Dec 30 21:02:27 2025 GMT
            Not After : Jan  1 00:59:27 2026 GMT
        Subject: CN=AC01F93898D7B868D523327064C0E38566AC9A83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:52:69:e2:86:de:08:cc:bb:84:1b:5b:29:56:
                    86:d7:d9:da:e7:12:85:ee:9b:b3:c1:d1:38:6a:17:
                    05:a0:61:4b:f4:bb:21:a4:49:e2:17:aa:95:13:55:
                    24:c8:d3:e3:2c:cd:06:19:1e:81:63:ce:3b:1b:9a:
                    aa:21:c5:c6:b6:ef:8b:c8:dc:e9:9d:f5:1d:1b:41:
                    e4:87:e5:cb:ef:76:eb:70:d6:1e:64:ff:fa:a3:eb:
                    be:f7:ea:e4:ca:c4:a4:b5:37:6c:50:a9:8d:e6:9c:
                    0f:00:2e:60:18:d7:71:ff:5c:a2:92:ea:cf:23:fe:
                    8b:ce:6d:bf:ec:3c:83:bb:40:9d:48:43:32:cc:6e:
                    c2:36:ef:39:b8:e1:bd:ab:49:22:36:42:53:b5:d1:
                    66:a5:59:9a:f4:94:54:65:83:7b:70:2c:4a:0a:16:
                    27:fc:ec:19:48:51:dd:be:5a:24:9b:e0:7a:64:88:
                    c9:ce:01:30:12:b4:60:0a:49:2c:2e:ed:8d:90:31:
                    b8:3b:10:24:87:38:e0:d6:a8:05:4d:43:8e:68:68:
                    2c:01:14:86:a9:fb:dc:0a:e0:ab:f1:83:cd:a3:c9:
                    c8:c8:d4:8f:c8:60:d9:64:a5:ea:e5:17:43:03:70:
                    39:bc:5a:63:ef:0d:be:b3:c0:76:0e:55:43:ae:67:
                    3e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:01:F9:38:98:D7:B8:68:D5:23:32:70:64:C0:E3:85:66:AC:9A:83
            X509v3 Authority Key Identifier:
                keyid:72:5C:FB:34:4D:3B:C8:D4:D1:28:A6:DE:8A:52:7D:9D:1E:3C:70:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:9b:b6:b4:1a:93:33:cd:d7:27:63:61:a0:a0:2e:f8:0a:cc:
         69:da:c5:df:72:6b:29:83:2b:21:9f:e3:c9:17:1f:6a:1b:b9:
         f0:da:bc:96:d2:1c:fc:dd:3f:ba:21:de:55:0f:a9:2d:1d:61:
         9a:ab:ff:d0:f4:01:fd:7d:a0:32:71:e8:41:ad:93:be:90:88:
         4d:b2:10:9c:24:70:41:df:82:32:c2:b7:a2:8f:e0:5a:a7:f1:
         90:a1:56:5b:aa:46:64:ce:ea:a5:49:08:e3:32:c4:b9:6b:82:
         6f:04:08:21:24:81:7d:29:54:04:58:2f:e6:63:36:45:b3:95:
         60:9e:89:7d:1f:ee:80:1c:3d:8e:05:3f:7e:77:e2:82:df:5d:
         be:5d:dd:fb:c1:53:04:43:52:9e:58:38:c1:bb:05:c8:72:22:
         41:17:91:65:70:3c:5e:2c:87:ce:4c:5e:54:03:6e:05:44:ec:
         f7:2d:8f:35:f4:c8:5a:f5:72:33:df:d5:f4:8e:f5:2b:eb:7d:
         e2:2a:ba:83:12:1a:c1:4e:ef:5d:e7:35:0d:14:36:0b:0c:b2:
         24:54:61:c4:cf:3f:62:39:d8:73:1b:83:c7:74:1d:4a:e0:c8:
         a6:56:33:94:c3:1c:ae:86:aa:84:b9:08:da:40:47:c5:df:96:
         c2:a9:f4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 11:05:43 2025 by rpki-client