This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ABM7Y4kwEbXfTDTazAoRfJALD6ooc2bCLkmWshL6G3nF/0/27791B254E6E444C2DF8EBD6B3E6FF1D5D06673C.mft
File:                     27791B254E6E444C2DF8EBD6B3E6FF1D5D06673C.mft (raw, json)
Hash identifier:          P48k4BRj/rouw8ilmipN0/VQ+95tD6qNFr+7TwTfqyc=
Subject key identifier:   AD:19:E8:14:43:54:F5:0F:64:1A:1D:CC:30:62:45:E7:20:DB:40:C6
Authority key identifier: 27:79:1B:25:4E:6E:44:4C:2D:F8:EB:D6:B3:E6:FF:1D:5D:06:67:3C
Certificate issuer:       /CN=27791B254E6E444C2DF8EBD6B3E6FF1D5D06673C
Certificate serial:       0DE8FFF1F221B6F8CFEDD96F8386E0A7A0CD6753
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27791B254E6E444C2DF8EBD6B3E6FF1D5D06673C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ABM7Y4kwEbXfTDTazAoRfJALD6ooc2bCLkmWshL6G3nF/0/27791B254E6E444C2DF8EBD6B3E6FF1D5D06673C.mft
Manifest number:          3E
Signing time:             Fri 19 Dec 2025 17:05:19 +0000
Manifest this update:     Fri 19 Dec 2025 17:00:19 +0000
Manifest next update:     Sat 20 Dec 2025 17:11:19 +0000
Files and hashes:         1: 323830343a376362343a3a2f33322d3430203d3e20323731353133.roa (hash: xgWFYOp2f0haqa0kYdwrcrNBTBchuR1LmIccYGKdeOY=)
                          2: 3138312e3232342e3139322e302f32342d3234203d3e20323731353133.roa (hash: N263qEVIVHNRLSrHQLGMy+Wk1tLiYrvMtFJDHx0rG/w=)
                          3: 27791B254E6E444C2DF8EBD6B3E6FF1D5D06673C.crl (hash: e6iGsIGepSpeB8RhT5pC4xssZl3MeRFnCluDfgMr7p4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ABM7Y4kwEbXfTDTazAoRfJALD6ooc2bCLkmWshL6G3nF/0/27791B254E6E444C2DF8EBD6B3E6FF1D5D06673C.crl
                          rsync://rpki-repo.registro.br/repo/ABM7Y4kwEbXfTDTazAoRfJALD6ooc2bCLkmWshL6G3nF/0/27791B254E6E444C2DF8EBD6B3E6FF1D5D06673C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27791B254E6E444C2DF8EBD6B3E6FF1D5D06673C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 17:11:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e8:ff:f1:f2:21:b6:f8:cf:ed:d9:6f:83:86:e0:a7:a0:cd:67:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27791B254E6E444C2DF8EBD6B3E6FF1D5D06673C
        Validity
            Not Before: Dec 19 17:00:19 2025 GMT
            Not After : Dec 20 17:11:19 2025 GMT
        Subject: CN=AD19E8144354F50F641A1DCC306245E720DB40C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b9:78:e0:88:68:51:fd:e0:c6:7a:71:fd:db:
                    74:3b:df:75:84:25:24:72:71:53:3b:ae:61:d5:f4:
                    02:44:7a:2d:ff:7c:36:f1:a6:8b:75:ab:b5:32:b6:
                    98:a8:c4:09:86:58:c6:5c:ed:3d:db:6c:dd:bf:e3:
                    a8:cf:86:be:c2:b9:82:26:e8:c2:5f:14:49:3f:bb:
                    a7:04:7a:a5:2a:41:ef:8d:60:da:e1:5b:ab:68:fc:
                    bd:18:e6:27:da:98:38:46:20:d8:d9:bb:4e:93:f1:
                    f2:b9:b3:0d:5c:9b:a7:bb:6f:69:e6:1a:4f:b7:48:
                    39:dc:a5:dd:af:7c:b0:14:35:33:01:40:c6:88:52:
                    19:44:46:64:c8:37:31:48:f8:d2:72:39:61:d7:9e:
                    4f:92:7a:0a:81:8d:3f:d3:d1:eb:80:03:aa:cb:31:
                    ff:14:60:f8:58:a9:ce:5a:a7:95:9c:55:c5:2a:67:
                    5e:86:60:12:01:06:94:15:33:54:f7:07:d6:d8:22:
                    e6:ba:c7:0c:c5:a1:7b:ee:c4:51:db:c3:83:9a:35:
                    e4:92:93:46:a4:c1:08:0d:79:cf:50:46:ef:80:02:
                    0b:13:4f:3d:c5:28:d8:be:9c:37:2a:56:f2:50:0c:
                    45:e8:0b:4b:f2:07:2f:4f:67:b6:7a:5b:1e:bd:85:
                    5c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:19:E8:14:43:54:F5:0F:64:1A:1D:CC:30:62:45:E7:20:DB:40:C6
            X509v3 Authority Key Identifier:
                keyid:27:79:1B:25:4E:6E:44:4C:2D:F8:EB:D6:B3:E6:FF:1D:5D:06:67:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ABM7Y4kwEbXfTDTazAoRfJALD6ooc2bCLkmWshL6G3nF/0/27791B254E6E444C2DF8EBD6B3E6FF1D5D06673C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27791B254E6E444C2DF8EBD6B3E6FF1D5D06673C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABM7Y4kwEbXfTDTazAoRfJALD6ooc2bCLkmWshL6G3nF/0/27791B254E6E444C2DF8EBD6B3E6FF1D5D06673C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:60:25:58:8c:1f:eb:93:33:bd:cf:f5:1e:3f:03:40:9a:49:
         2d:64:c7:cc:47:ac:aa:a2:47:c6:77:38:43:0c:7d:7a:93:11:
         50:27:22:73:67:54:08:78:44:c9:2e:b9:59:4f:79:c8:00:96:
         3f:7e:ea:72:d4:c1:01:15:32:ce:ce:41:33:f3:ed:3b:56:2f:
         ad:5d:14:9a:fb:3d:df:90:ce:5a:72:e6:df:00:47:9b:00:32:
         b6:54:ff:f2:88:69:c6:1a:dc:d2:17:42:37:52:b7:9e:60:1e:
         6c:f0:ae:db:fc:d5:32:1b:82:0a:6b:9a:89:66:23:00:64:a5:
         23:6b:b7:75:be:cf:8d:b9:92:a5:79:3d:35:5a:f4:31:89:31:
         5b:68:74:37:ea:8e:3b:3f:02:a2:c1:0e:e3:62:26:d8:4f:b2:
         61:09:ba:cb:83:86:56:5b:dc:d3:c4:86:15:72:e7:ca:34:18:
         14:f7:f0:47:b0:14:36:fe:d8:a3:85:e3:3e:d6:c1:53:25:bd:
         55:51:6e:7f:a2:f8:1c:da:88:c1:72:0f:bc:fb:89:9f:86:d6:
         f9:66:55:ae:7c:17:8c:2d:ce:d5:3c:d2:17:7d:5e:14:d2:31:
         59:f0:09:ec:1d:5a:10:43:78:1f:7a:df:db:81:a7:e6:1d:c6:
         d6:6a:2f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 05:59:44 2025 by rpki-client