This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/041B44A9F96A2E80EA192819BE9533FF7CE1F401.mft
File:                     041B44A9F96A2E80EA192819BE9533FF7CE1F401.mft (raw, json)
Hash identifier:          wmgZ0unTS0olmMWkJiaaQMNSzwQTpqv5YxayPe+v1y8=
Subject key identifier:   33:4C:8D:08:5A:E9:23:01:EE:97:6A:00:0F:C3:B7:16:94:43:F3:76
Authority key identifier: 04:1B:44:A9:F9:6A:2E:80:EA:19:28:19:BE:95:33:FF:7C:E1:F4:01
Certificate issuer:       /CN=041B44A9F96A2E80EA192819BE9533FF7CE1F401
Certificate serial:       6049CC6E857050CBEBDCCB3CDD8A8693404B6B71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041B44A9F96A2E80EA192819BE9533FF7CE1F401.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/041B44A9F96A2E80EA192819BE9533FF7CE1F401.mft
Manifest number:          0161
Signing time:             Wed 31 Dec 2025 01:08:33 +0000
Manifest this update:     Wed 31 Dec 2025 01:03:33 +0000
Manifest next update:     Thu 01 Jan 2026 04:32:33 +0000
Files and hashes:         1: 3138362e322e3234382e302f32332d3234203d3e20323636313633.roa (hash: /fbOsOYs6AxQese14fmYriT6Fyl3hntENuETfI0hxzo=)
                          2: 041B44A9F96A2E80EA192819BE9533FF7CE1F401.crl (hash: 3fst+Y93onNffsXUpGKo981sWrl9nRb9qt6IFsjPbWM=)
                          3: 3138362e322e3235302e302f32342d3234203d3e20323636313633.roa (hash: Kpf2RKCB6lOVWwZlKUC3hbK07a2qb/p0d32tUukbR/c=)
                          4: 3138362e322e3235312e302f32342d3234203d3e20323636313633.roa (hash: T942+I22olKUoF8g7UuB2ov3yuULn7rkquCI51mc40w=)
                          5: 323830343a336261383a3a2f33322d3438203d3e20323636313633.roa (hash: ZUYmh0T71CzQM4yz2odlnvMCE7L2ORZB0YBQinBzj1Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/041B44A9F96A2E80EA192819BE9533FF7CE1F401.crl
                          rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/041B44A9F96A2E80EA192819BE9533FF7CE1F401.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041B44A9F96A2E80EA192819BE9533FF7CE1F401.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 Jan 2026 04:32:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:49:cc:6e:85:70:50:cb:eb:dc:cb:3c:dd:8a:86:93:40:4b:6b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041B44A9F96A2E80EA192819BE9533FF7CE1F401
        Validity
            Not Before: Dec 31 01:03:33 2025 GMT
            Not After : Jan  1 04:32:33 2026 GMT
        Subject: CN=334C8D085AE92301EE976A000FC3B7169443F376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8f:28:55:69:37:c0:39:25:ed:4c:e5:75:85:
                    61:6b:9d:e7:50:4f:1d:67:6c:cb:4a:42:4d:31:7d:
                    24:35:67:34:cb:d3:31:7b:71:1e:1f:98:d0:f3:83:
                    4f:58:21:23:7c:5d:bd:d4:eb:8e:97:73:21:b3:bf:
                    1e:fe:5f:a5:96:4a:7b:ad:41:83:a4:db:f6:18:b8:
                    32:32:3a:20:5c:4a:07:4f:31:e0:79:f2:fa:ae:1f:
                    27:ce:62:7c:c3:de:14:8a:69:04:ea:a4:8d:09:17:
                    d2:67:6f:16:48:58:3c:4f:3b:3b:c1:b0:60:61:ba:
                    01:6a:af:d5:4d:a7:de:c0:7a:76:55:ef:44:1a:7a:
                    1f:07:49:ba:04:e1:60:1b:57:13:e9:0d:2c:95:a4:
                    e5:1a:7e:46:cd:d4:40:0c:a7:17:4f:e0:a1:15:58:
                    f7:2a:84:49:92:8b:ba:22:50:00:5e:8e:14:52:47:
                    72:e7:6c:3b:98:08:c5:d7:c6:cc:8f:c4:dc:ae:3b:
                    1a:8e:a8:ca:98:11:60:61:08:3b:ac:60:51:47:5b:
                    30:8c:76:ac:53:69:e8:4a:b3:90:a0:36:4a:37:f8:
                    41:42:3c:c5:20:0b:26:d9:d3:74:5e:9b:87:be:71:
                    bd:56:b9:e4:ae:c5:e9:86:3d:7d:9b:ba:c4:5d:db:
                    e3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:4C:8D:08:5A:E9:23:01:EE:97:6A:00:0F:C3:B7:16:94:43:F3:76
            X509v3 Authority Key Identifier:
                keyid:04:1B:44:A9:F9:6A:2E:80:EA:19:28:19:BE:95:33:FF:7C:E1:F4:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/041B44A9F96A2E80EA192819BE9533FF7CE1F401.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041B44A9F96A2E80EA192819BE9533FF7CE1F401.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/041B44A9F96A2E80EA192819BE9533FF7CE1F401.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:1e:7d:b7:b4:eb:8f:5b:a1:0c:69:ca:a9:5e:f4:29:10:bd:
         86:b0:91:ac:4e:08:ef:7e:60:f1:68:c5:8a:23:8f:1a:c7:fd:
         55:18:f2:67:c9:d3:dd:8a:13:da:d9:16:05:1a:7c:66:57:b8:
         a5:c7:3c:38:71:43:35:90:29:2b:4d:c5:c1:af:a0:00:36:59:
         78:9b:ef:2f:6a:95:4d:30:92:cb:a7:b0:96:1b:1d:99:16:dc:
         09:22:3e:67:d5:16:87:70:79:41:60:7d:43:c3:8c:f3:76:49:
         8e:e7:16:f6:12:86:99:97:bc:86:cd:b1:9e:de:c2:f2:9f:c6:
         c8:05:17:7c:85:f9:5c:84:1e:0c:51:44:0d:6c:d1:23:2d:3d:
         e3:57:00:38:c3:86:e2:71:48:a1:93:6b:e9:6b:f5:9b:aa:e5:
         cb:32:be:b4:03:ea:47:0f:e0:0a:e2:a0:82:bb:9f:16:13:95:
         f9:c8:1f:c6:41:09:d0:18:aa:33:cf:74:83:f6:c3:16:22:e5:
         60:97:f6:21:cb:b3:42:bb:a2:38:c8:23:29:23:33:f1:3a:b1:
         15:dd:3c:a9:49:03:1d:e2:65:c7:70:fb:2e:ba:f5:11:b2:2e:
         81:b1:0f:24:ac:c2:4a:ec:c8:4d:d4:cc:34:e1:3e:20:ae:b2:
         98:58:98:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----