This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/4F13601ED15DE77633F89012A7D2AD0E725C8891.mft
File:                     4F13601ED15DE77633F89012A7D2AD0E725C8891.mft (raw, json)
Hash identifier:          un5/CQ+O5i6JpoCDQw0OJdwxXnVhAecCrwXMYyDlBfM=
Subject key identifier:   04:DF:21:53:23:D3:D7:61:F1:98:EE:C7:79:9A:8A:B5:04:31:53:90
Authority key identifier: 4F:13:60:1E:D1:5D:E7:76:33:F8:90:12:A7:D2:AD:0E:72:5C:88:91
Certificate issuer:       /CN=4F13601ED15DE77633F89012A7D2AD0E725C8891
Certificate serial:       0AF1AC7AAF2869EB4C96F1FDE00D5A94D58473DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F13601ED15DE77633F89012A7D2AD0E725C8891.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/4F13601ED15DE77633F89012A7D2AD0E725C8891.mft
Manifest number:          02D8
Signing time:             Sat 20 Dec 2025 11:03:33 +0000
Manifest this update:     Sat 20 Dec 2025 10:58:33 +0000
Manifest next update:     Sun 21 Dec 2025 14:32:33 +0000
Files and hashes:         1: 323830343a386662633a3a2f33322d313238203d3e20323733353038.roa (hash: PgnAjQjtCXsOdg7BLRWirXsf07CcpSkOYKeceD7ZWuo=)
                          2: 4F13601ED15DE77633F89012A7D2AD0E725C8891.crl (hash: Nmz8unVlDu/MXxl2eU9k/HW3+0ev915OU/tU7ZApVdQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/4F13601ED15DE77633F89012A7D2AD0E725C8891.crl
                          rsync://rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/4F13601ED15DE77633F89012A7D2AD0E725C8891.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F13601ED15DE77633F89012A7D2AD0E725C8891.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 14:32:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:f1:ac:7a:af:28:69:eb:4c:96:f1:fd:e0:0d:5a:94:d5:84:73:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F13601ED15DE77633F89012A7D2AD0E725C8891
        Validity
            Not Before: Dec 20 10:58:33 2025 GMT
            Not After : Dec 21 14:32:33 2025 GMT
        Subject: CN=04DF215323D3D761F198EEC7799A8AB504315390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b6:31:ff:2c:9b:de:67:29:cc:9d:72:18:9a:
                    56:b1:df:22:82:a3:75:68:46:2a:3f:f0:4c:6a:d2:
                    93:64:2e:54:70:02:0d:43:e6:db:3d:73:0a:23:6f:
                    48:43:8c:20:1b:2c:12:2d:63:c2:f7:9d:fb:0f:35:
                    44:24:7e:b1:cf:24:ee:35:86:75:be:29:5f:1c:c4:
                    9a:41:f9:d3:6b:ad:8d:24:80:1e:99:d6:05:e3:af:
                    70:1a:ac:e9:52:33:b3:cf:3d:01:83:58:91:9b:e8:
                    d5:3b:a8:5b:1c:9e:3f:02:82:27:b7:d6:42:33:1f:
                    cb:87:06:4d:c9:e3:7f:0f:28:11:12:1c:e2:23:9b:
                    a7:02:9a:79:3d:9d:22:31:fc:db:85:49:34:19:f5:
                    8a:38:4f:61:88:e1:74:e9:74:d9:e0:93:96:86:19:
                    80:6a:83:c8:a7:42:8f:43:df:fb:9d:cc:8c:bc:96:
                    98:89:b4:94:3a:02:73:76:94:34:a8:96:4f:5d:fc:
                    46:c4:8c:84:7c:58:5d:d4:32:c9:63:3b:db:8e:bb:
                    18:9d:a5:b4:55:36:a0:39:86:9a:d3:68:2b:44:86:
                    13:a4:b8:05:82:a2:81:cc:71:a2:54:e1:3a:2d:d3:
                    19:1b:f9:dc:bb:99:52:9a:3e:82:65:d5:9a:19:b7:
                    7d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:DF:21:53:23:D3:D7:61:F1:98:EE:C7:79:9A:8A:B5:04:31:53:90
            X509v3 Authority Key Identifier:
                keyid:4F:13:60:1E:D1:5D:E7:76:33:F8:90:12:A7:D2:AD:0E:72:5C:88:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/4F13601ED15DE77633F89012A7D2AD0E725C8891.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F13601ED15DE77633F89012A7D2AD0E725C8891.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/4F13601ED15DE77633F89012A7D2AD0E725C8891.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:0c:a3:21:b6:fe:6b:73:fe:97:f9:14:44:fc:aa:ad:59:61:
         14:25:ad:80:dd:ce:ba:d0:3f:8b:32:ec:d1:54:fd:de:32:2f:
         80:76:a2:f8:59:60:91:30:5e:f9:f8:da:ed:34:e8:2f:bf:6e:
         71:c7:f3:c3:8a:1d:c7:db:4f:dd:d9:90:85:81:61:79:eb:2f:
         55:40:d1:8f:f7:9a:ea:7f:ba:97:b0:d1:be:8e:9b:f9:94:54:
         09:39:c8:3d:31:00:bf:a4:b9:fe:cd:eb:f0:e0:69:86:58:75:
         e2:46:96:2a:97:e4:44:4c:db:b9:cc:ac:f9:f7:64:df:f6:2e:
         fa:2b:7e:9a:23:12:92:03:3e:a6:56:8f:0b:ec:00:35:87:4f:
         f7:3f:c5:a4:c4:41:af:55:3a:85:9a:ea:76:03:a1:c2:0d:8a:
         e3:9c:d0:e0:97:60:3a:69:75:40:f3:34:e2:c3:b1:4f:10:b1:
         58:76:cf:0b:6e:48:3f:87:cf:f9:09:51:54:fe:91:93:b4:00:
         90:a2:de:30:7a:77:bd:c3:73:ba:08:9f:56:46:ae:16:3e:fb:
         02:34:0c:2c:dc:f1:9f:ba:c8:b6:e0:d9:a5:f0:d2:0e:a4:50:
         96:86:11:5a:74:68:f4:18:d2:93:85:4e:75:c2:15:9a:b8:5d:
         1c:2c:ff:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:10:02 2025 by rpki-client