This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/98408164D264D668D190CF3DE6A09CDF1BD9915D.mft
File:                     98408164D264D668D190CF3DE6A09CDF1BD9915D.mft (raw, json)
Hash identifier:          3jNA0GwzGyFpFFfNOeiQpCqlbzY0aPWnA49hFvaP6D0=
Subject key identifier:   B8:30:9A:19:2C:EB:5F:2B:46:98:88:05:16:D7:59:C5:A4:14:57:3C
Authority key identifier: 98:40:81:64:D2:64:D6:68:D1:90:CF:3D:E6:A0:9C:DF:1B:D9:91:5D
Certificate issuer:       /CN=98408164D264D668D190CF3DE6A09CDF1BD9915D
Certificate serial:       6B7F125EC925C217255B6AE000A4E69550C06AC9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98408164D264D668D190CF3DE6A09CDF1BD9915D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/98408164D264D668D190CF3DE6A09CDF1BD9915D.mft
Manifest number:          4B
Signing time:             Mon 22 Dec 2025 10:15:00 +0000
Manifest this update:     Mon 22 Dec 2025 10:10:00 +0000
Manifest next update:     Tue 23 Dec 2025 13:26:00 +0000
Files and hashes:         1: 98408164D264D668D190CF3DE6A09CDF1BD9915D.crl (hash: iL/y9TLAj4qHSI/ghUM1yGfKSPuMrAyHfWNHEE/qd7k=)
                          2: 323830343a323931303a3a2f34342d3434203d3e20323633393935.roa (hash: 27+/hY05AUsTveZKr80z0CNwrh3EGc7neEwvjrj3OHY=)
                          3: 3133382e3235352e3233302e302f32342d3234203d3e20323633393935.roa (hash: CUa+EsTgqnDFMeYCGdSynWmFoM/HLTcxL7TZ3kbaOLw=)
                          4: 323830343a323931303a383030303a3a2f34342d3434203d3e20323633393935.roa (hash: BhcHV4tjIlW567jEhCBEZqVpga5ReVc/oP246ZNsCHc=)
                          5: 3133382e3235352e3233312e302f32342d3234203d3e20323633393935.roa (hash: K2gj8aSr0mWjYCTCX86P8+2RbTeEK8cTt8kQlQr7LZ8=)
                          6: 3133382e3235352e3232392e302f32342d3234203d3e20323633393935.roa (hash: kx9xaU9LSipvhTCiF4YSPbplqEKLSWIw+G9pWMfKPIs=)
                          7: 323830343a323931303a31303a3a2f34342d3434203d3e20323633393935.roa (hash: Vgkv11jh89pWFtcyDjQR5wC8UK2Auoyje2NZD2CFpIY=)
                          8: 323830343a323931303a32303a3a2f34342d3434203d3e20323633393935.roa (hash: EekCnh9tmCzbXmJNWX1KoB41PeVfewcEIeY1fIrLowc=)
                          9: 3133382e3235352e3232382e302f32342d3234203d3e20323633393935.roa (hash: FaFXr1rwB5AC1MqddXh9lljyBWnl3t2y6/lFX3oJ/uc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/98408164D264D668D190CF3DE6A09CDF1BD9915D.crl
                          rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/98408164D264D668D190CF3DE6A09CDF1BD9915D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98408164D264D668D190CF3DE6A09CDF1BD9915D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 13:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:7f:12:5e:c9:25:c2:17:25:5b:6a:e0:00:a4:e6:95:50:c0:6a:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98408164D264D668D190CF3DE6A09CDF1BD9915D
        Validity
            Not Before: Dec 22 10:10:00 2025 GMT
            Not After : Dec 23 13:26:00 2025 GMT
        Subject: CN=B8309A192CEB5F2B4698880516D759C5A414573C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:59:fa:c8:59:4c:fc:a8:ac:ce:b5:30:82:3f:
                    95:24:31:e1:19:01:da:bc:f7:f3:bc:bc:ec:d4:16:
                    e4:81:17:2c:20:1b:65:38:06:de:cf:5e:fc:d5:7a:
                    c3:df:05:6b:9d:a0:db:c4:1a:5c:e1:89:45:63:a8:
                    2b:e1:49:2e:b1:6d:a4:d8:8c:f8:9e:4f:d7:b1:4e:
                    7b:dc:36:a8:eb:cb:18:49:4c:d0:ba:12:b8:c5:64:
                    1e:42:90:b9:34:67:3c:3b:a9:19:1b:54:2c:6e:96:
                    5d:e6:91:39:f8:fa:0d:98:28:36:af:a9:bf:49:79:
                    ae:d2:ed:37:54:48:76:b6:32:70:5c:9b:92:9c:fc:
                    f7:ef:4b:27:3e:09:cd:ac:fc:c5:3f:5a:dd:5e:cd:
                    bc:d6:45:c0:02:5c:c4:2b:78:2e:ae:f6:19:cf:2a:
                    3a:84:8b:16:c8:b4:5e:d2:ff:7a:51:c0:34:ad:4d:
                    c2:bb:cd:91:8d:09:d1:24:9d:5a:07:95:55:36:8b:
                    cc:07:12:b4:34:b2:2a:aa:2b:bd:ad:94:5b:33:9f:
                    1e:c1:b1:50:4c:ed:65:d1:d6:bf:3f:5b:59:b2:bd:
                    0c:6f:ad:41:d7:35:15:b3:30:0e:58:13:fa:9b:7b:
                    d2:41:1b:58:0d:e1:97:ce:6c:29:91:b7:71:73:0e:
                    c1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:30:9A:19:2C:EB:5F:2B:46:98:88:05:16:D7:59:C5:A4:14:57:3C
            X509v3 Authority Key Identifier:
                keyid:98:40:81:64:D2:64:D6:68:D1:90:CF:3D:E6:A0:9C:DF:1B:D9:91:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/98408164D264D668D190CF3DE6A09CDF1BD9915D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98408164D264D668D190CF3DE6A09CDF1BD9915D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/98408164D264D668D190CF3DE6A09CDF1BD9915D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:d6:21:07:40:ca:73:bc:ac:06:da:e7:12:08:34:ad:7c:e7:
         38:56:17:98:8f:08:51:23:5a:68:dc:87:d3:d6:52:43:6d:86:
         82:76:6b:27:ca:77:3a:cc:f3:32:a3:78:1c:60:ab:90:37:78:
         67:e7:56:05:7f:47:21:b6:ee:50:ca:4b:5f:e1:57:7a:58:77:
         e6:89:ea:ac:f4:89:9b:26:aa:ac:19:ce:cf:1c:c2:19:09:15:
         72:9c:82:20:ae:dd:50:cf:40:02:69:89:9e:ce:f3:5b:06:e8:
         6d:79:7f:78:3a:a3:6d:e3:6b:90:52:6d:47:0c:e9:2e:69:d9:
         3c:83:3c:8e:0b:d6:23:04:e1:2b:2f:bd:84:6e:c6:bc:f6:bc:
         bb:6e:22:32:91:7f:3f:7b:91:00:2f:81:16:97:f2:15:3d:a0:
         dd:3e:3c:cb:51:48:bc:1c:71:47:97:92:b5:c1:62:93:54:18:
         bb:12:1c:ee:cc:91:f0:51:9a:9b:82:12:63:49:87:7d:a7:40:
         7b:15:6f:38:71:a5:72:18:95:30:43:04:bd:18:7d:78:ee:bf:
         59:6d:c8:3a:fb:a6:85:da:58:bd:4e:79:0f:5f:ef:a8:54:1d:
         72:7b:eb:0a:77:ae:64:fb:98:91:eb:0e:81:f5:67:68:ec:49:
         2f:5d:a7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 17:16:54 2025 by rpki-client