This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9uLs22ASqpqZvBJL8xJRKQ4Rzwy4zjmpPdx9hZmqEPGE/1/554F31049EE1172449D30E9D16346BBA2B90EA1B.mft
File:                     554F31049EE1172449D30E9D16346BBA2B90EA1B.mft (raw, json)
Hash identifier:          XF4GBeV3sO9z5y+vmlVI+UqZemdRulkHhgoPbWGyBQQ=
Subject key identifier:   D3:C4:2D:EC:D8:59:B1:9C:5E:72:9D:EF:63:7D:A6:15:DF:47:F9:F3
Authority key identifier: 55:4F:31:04:9E:E1:17:24:49:D3:0E:9D:16:34:6B:BA:2B:90:EA:1B
Certificate issuer:       /CN=554F31049EE1172449D30E9D16346BBA2B90EA1B
Certificate serial:       4182B7F9B1F47BC41BFE951596BE1DD2C046D4D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/554F31049EE1172449D30E9D16346BBA2B90EA1B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9uLs22ASqpqZvBJL8xJRKQ4Rzwy4zjmpPdx9hZmqEPGE/1/554F31049EE1172449D30E9D16346BBA2B90EA1B.mft
Manifest number:          0342
Signing time:             Fri 26 Dec 2025 21:17:53 +0000
Manifest this update:     Fri 26 Dec 2025 21:12:53 +0000
Manifest next update:     Sat 27 Dec 2025 23:33:53 +0000
Files and hashes:         1: 3139302e3132332e3230302e302f32322d3332203d3e20323636313935.roa (hash: SDFFSK9M6cjlOGACtmM2JZ2sXUK6mRfwQaoY19mg/7c=)
                          2: 554F31049EE1172449D30E9D16346BBA2B90EA1B.crl (hash: 2VFyJun93XiEoxzcW/hxXyLvvScxey/W956lzE2N4Ok=)
                          3: 323830343a336333303a3a2f33322d313238203d3e20323636313935.roa (hash: olm/ccIpwi2oz1sjR7tPCHa9WGc1X6lJ5dlT6llhasE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9uLs22ASqpqZvBJL8xJRKQ4Rzwy4zjmpPdx9hZmqEPGE/1/554F31049EE1172449D30E9D16346BBA2B90EA1B.crl
                          rsync://rpki-repo.registro.br/repo/9uLs22ASqpqZvBJL8xJRKQ4Rzwy4zjmpPdx9hZmqEPGE/1/554F31049EE1172449D30E9D16346BBA2B90EA1B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/554F31049EE1172449D30E9D16346BBA2B90EA1B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 27 Dec 2025 23:33:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:82:b7:f9:b1:f4:7b:c4:1b:fe:95:15:96:be:1d:d2:c0:46:d4:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=554F31049EE1172449D30E9D16346BBA2B90EA1B
        Validity
            Not Before: Dec 26 21:12:53 2025 GMT
            Not After : Dec 27 23:33:53 2025 GMT
        Subject: CN=D3C42DECD859B19C5E729DEF637DA615DF47F9F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8e:91:67:92:1a:b6:ae:8f:e0:38:5d:d1:a4:
                    56:09:0d:dc:c0:a4:90:46:63:e5:09:4c:2d:57:02:
                    63:49:d5:d9:8a:b0:4c:f4:40:5f:56:74:6e:f8:30:
                    7d:40:9a:8f:5f:a4:85:f9:dc:f1:bf:35:50:36:61:
                    b8:1f:3b:a8:de:eb:00:3d:8a:cc:18:5f:c7:a2:2d:
                    ae:47:52:43:f2:56:76:c2:d2:a3:60:14:f8:a9:10:
                    a7:62:ac:ed:71:a0:a0:c6:36:30:0b:3d:31:02:f9:
                    61:76:05:a4:af:f9:67:3e:9f:7f:25:2c:bf:99:6f:
                    f8:6e:84:0e:82:12:93:26:5f:69:3a:84:39:83:28:
                    9f:e9:4d:56:32:50:31:0b:39:2a:c3:f3:6f:7e:f0:
                    a2:d9:cc:4d:0f:3f:53:a7:50:c7:0c:6b:bf:78:39:
                    58:d1:1b:20:e8:e2:ff:65:35:25:6d:c5:c9:7e:42:
                    c1:2b:de:27:fb:eb:99:b3:83:bd:7c:29:37:a1:bb:
                    d0:1b:93:41:bd:51:e7:1c:9f:93:1e:64:5f:8a:98:
                    4e:bc:5a:dc:7a:21:53:c6:72:62:f0:aa:89:7e:6a:
                    bb:dd:0d:a9:c1:78:06:ca:23:e6:70:b4:02:3b:bd:
                    ad:73:cf:cc:18:a7:df:08:8e:1d:fd:ec:81:e9:c3:
                    b2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C4:2D:EC:D8:59:B1:9C:5E:72:9D:EF:63:7D:A6:15:DF:47:F9:F3
            X509v3 Authority Key Identifier:
                keyid:55:4F:31:04:9E:E1:17:24:49:D3:0E:9D:16:34:6B:BA:2B:90:EA:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9uLs22ASqpqZvBJL8xJRKQ4Rzwy4zjmpPdx9hZmqEPGE/1/554F31049EE1172449D30E9D16346BBA2B90EA1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/554F31049EE1172449D30E9D16346BBA2B90EA1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9uLs22ASqpqZvBJL8xJRKQ4Rzwy4zjmpPdx9hZmqEPGE/1/554F31049EE1172449D30E9D16346BBA2B90EA1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:e6:58:f2:60:d8:ed:d6:45:87:e5:64:fd:3a:46:b4:83:07:
         4b:d8:00:4d:41:9a:d8:6b:ac:6f:9f:fc:06:e4:85:17:69:9c:
         a7:f5:07:a3:7f:17:f5:64:1c:02:b7:02:59:e9:3d:89:6a:0c:
         7a:14:5b:79:ac:eb:08:80:72:57:a6:30:b9:47:23:a3:bb:13:
         6e:95:75:9c:9b:f4:66:d2:48:59:95:79:44:6f:f0:ad:05:9f:
         14:64:5a:3e:a6:6a:a7:f7:14:1f:db:8f:11:5a:fd:0f:79:22:
         4c:ec:66:e1:c1:c8:f3:24:85:5b:fc:d4:7c:1a:58:35:fc:11:
         a2:4d:78:64:77:90:82:b7:b0:66:85:d4:3e:5e:16:49:7e:d9:
         a2:98:5b:96:ea:87:87:e9:60:4e:7e:ab:ec:ae:c2:b0:5f:39:
         d8:23:21:43:66:c2:e6:27:61:19:a3:b9:df:9e:86:c6:42:61:
         01:8f:9d:90:bb:42:9e:6a:99:ac:e7:59:66:62:8f:6b:6a:5e:
         ba:60:68:b6:73:89:57:7d:c1:02:0a:07:21:fe:b8:13:2d:9c:
         3d:a7:0c:28:63:4e:fa:e9:ce:c8:4d:9e:8a:36:43:f4:04:12:
         37:8f:9f:b0:b3:a5:76:bf:97:36:e8:fe:2e:db:65:28:29:52:
         f6:da:4c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 05:43:36 2025 by rpki-client