This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.mft
File:                     4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.mft (raw, json)
Hash identifier:          XngvAzHKhPxEEFQd+3Fb1L8Ms1EisdKJGTL2hcwg6kc=
Subject key identifier:   09:B4:09:45:E5:4B:0F:0E:55:66:97:4B:08:F9:D5:8C:4E:D8:A9:ED
Authority key identifier: 4D:E4:54:FF:1B:8B:F0:DF:2A:C7:FE:C8:E0:AD:68:78:2B:7D:85:19
Certificate issuer:       /CN=4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519
Certificate serial:       33BDDAD8114398ECCB8A76685C3517CEA446CC15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.mft
Manifest number:          0362
Signing time:             Mon 22 Dec 2025 12:40:40 +0000
Manifest this update:     Mon 22 Dec 2025 12:35:40 +0000
Manifest next update:     Tue 23 Dec 2025 16:22:40 +0000
Files and hashes:         1: 323830343a366262303a3a2f33322d3438203d3e20323730343137.roa (hash: ulWcHqimCcaLC71Cc0U5ajO6lXgnNtoY2SeIWmeZTEc=)
                          2: 3139302e3131312e3130382e302f32322d3234203d3e20323730343137.roa (hash: gpm/0PXcAio5zaXBKIME9f+opfZ4vyceUQhgW/q0Loc=)
                          3: 34352e3232352e3234342e302f32322d3234203d3e20323730343137.roa (hash: GjG1Mv8q7/+5pTIyYEZdpGEF5+avf3SU6nfp83cgKxI=)
                          4: 4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.crl (hash: G+2cIrYMhfCbv4eCqoo0Qx90Zx0/PmPyODT+z1lJxCo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.crl
                          rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 16:22:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:bd:da:d8:11:43:98:ec:cb:8a:76:68:5c:35:17:ce:a4:46:cc:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519
        Validity
            Not Before: Dec 22 12:35:40 2025 GMT
            Not After : Dec 23 16:22:40 2025 GMT
        Subject: CN=09B40945E54B0F0E5566974B08F9D58C4ED8A9ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8c:e9:9b:7a:95:61:53:97:69:01:f2:54:92:
                    3b:f3:2d:2a:09:b2:43:da:c0:b9:80:5c:5a:79:95:
                    9e:b5:17:2f:8a:25:97:e2:ab:2d:79:84:46:b9:21:
                    a2:e3:39:02:c2:71:3d:1e:aa:2e:e1:ac:4d:f1:94:
                    89:96:3c:74:ff:e6:72:79:18:a9:35:bc:a8:75:06:
                    cd:61:ae:d1:de:ce:a5:be:94:f8:13:8c:ae:1f:f0:
                    88:3b:15:a8:81:8a:36:49:81:cf:f9:c9:65:48:01:
                    72:65:06:a6:1a:cb:6e:4e:92:af:6a:99:98:f0:f7:
                    3b:6c:11:46:52:c6:c8:29:9f:91:ec:7f:4b:a7:23:
                    91:1f:96:66:20:40:9e:01:00:7e:72:57:2e:b9:81:
                    5d:2f:c8:6a:54:53:c4:1b:b6:84:02:28:36:36:41:
                    8d:c8:42:9a:32:a0:04:51:bd:76:a3:e6:ed:81:60:
                    ce:f9:e5:e6:0c:d1:e4:f9:55:71:24:ed:9e:e2:21:
                    f0:51:9e:d4:65:15:dd:78:c2:67:3f:5b:1f:1a:d7:
                    9c:f7:83:a5:35:2c:eb:0a:6c:26:23:dd:c2:fe:eb:
                    46:90:8a:7f:92:1d:c9:f6:f6:19:95:9a:a7:e3:88:
                    8d:bc:24:61:9f:e0:4d:97:ea:4c:9d:cd:8b:de:c6:
                    63:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B4:09:45:E5:4B:0F:0E:55:66:97:4B:08:F9:D5:8C:4E:D8:A9:ED
            X509v3 Authority Key Identifier:
                keyid:4D:E4:54:FF:1B:8B:F0:DF:2A:C7:FE:C8:E0:AD:68:78:2B:7D:85:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:4d:96:c1:c9:6d:16:6a:88:83:c7:03:7f:f4:26:3c:d6:e0:
         05:ee:cd:f4:a6:34:a6:34:07:64:e6:d6:d3:fe:e0:a2:a1:2c:
         c1:be:9e:f3:f1:74:ed:3f:2a:d2:40:77:74:82:cf:b4:1a:16:
         de:0f:57:d1:07:4e:a1:24:27:21:5d:82:d9:42:af:ea:ce:21:
         e8:0c:d3:f1:60:11:a5:ab:ab:f0:d0:3f:93:2a:6a:a9:6a:d4:
         0f:83:f2:24:ab:e8:02:cf:82:31:74:26:fe:48:02:47:1e:28:
         cb:fb:7b:d1:81:39:cd:49:c5:62:63:73:f4:90:bc:ab:08:b8:
         59:ec:ad:36:74:6f:db:a6:8c:21:34:2e:b8:bc:62:3f:94:21:
         ac:69:bb:d4:04:05:09:fc:7c:da:89:47:b3:f2:67:d5:fd:df:
         e7:20:e7:dc:03:99:6c:80:54:1d:23:e6:f4:84:61:a7:0f:f0:
         21:8f:41:c0:c9:b8:28:8c:74:8f:a2:3f:12:e4:2c:7c:d6:da:
         75:e3:c6:62:77:cd:de:4b:92:fd:84:b9:48:1c:4a:f2:ff:05:
         51:b4:47:28:a5:06:b0:32:36:64:ce:bf:48:12:f8:e8:a7:55:
         91:43:d7:40:d0:58:3c:7f:96:6c:78:ef:96:e4:c9:0a:7b:b2:
         13:b8:0c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 17:11:17 2025 by rpki-client