This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft
File:                     4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft (raw, json)
Hash identifier:          HXZv7cNXIZqAXJBRBJEE6l66pq/AeH9na9reIXNzijQ=
Subject key identifier:   69:11:9E:5D:B8:39:E1:AC:AE:B3:C8:0C:2A:8B:6A:26:93:B8:03:C9
Authority key identifier: 44:07:DF:C1:CD:58:AD:40:09:74:B8:DC:4C:0A:31:D4:EE:5C:2A:13
Certificate issuer:       /CN=4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13
Certificate serial:       315407E0EDAEF76103DB738BCC61F6338A86AFF7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft
Manifest number:          014C
Signing time:             Sat 20 Dec 2025 02:49:29 +0000
Manifest this update:     Sat 20 Dec 2025 02:44:28 +0000
Manifest next update:     Sun 21 Dec 2025 03:50:28 +0000
Files and hashes:         1: 3139312e3234332e3138302e302f32322d3332203d3e20323633353039.roa (hash: KlULxHMxyBYgHOWDvr82ep/Pt0PmGQBYgR+pKvkMFlE=)
                          2: 4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.crl (hash: KpuGb1NSJFzHO9P8Yz2U5jsR4hgNxhPzX3TagqN1uXY=)
                          3: 3139312e3234332e3137362e302f32322d3332203d3e20323633353039.roa (hash: 5MnHP1gwm6VSUR7iHYTvcw72QzSqthXM1z6v3zFxW5g=)
                          4: 3139312e3234332e3138342e302f32322d3332203d3e20323633353039.roa (hash: gplvuyLjGUhF+i6ssDirDxIMyE9T2g6roXbZ9yzSMSc=)
                          5: 3139312e3234332e3138382e302f32322d3332203d3e20323633353039.roa (hash: 2YCS6Yb/9D0/n8xix6Bzd5N6XCOxnBclmTpI31jfQuw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.crl
                          rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 03:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:54:07:e0:ed:ae:f7:61:03:db:73:8b:cc:61:f6:33:8a:86:af:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13
        Validity
            Not Before: Dec 20 02:44:28 2025 GMT
            Not After : Dec 21 03:50:28 2025 GMT
        Subject: CN=69119E5DB839E1ACAEB3C80C2A8B6A2693B803C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fc:a5:d4:9e:21:79:9e:e5:df:31:1e:c4:5b:
                    b8:dd:03:dd:98:d0:c9:aa:d3:cc:4a:5c:80:9b:8a:
                    8b:35:5f:94:f4:b6:a6:4f:95:ae:7c:d6:3e:e2:85:
                    28:8f:92:b2:c2:88:ef:0e:85:16:f9:9e:05:3b:b6:
                    38:fd:66:3f:a1:8a:50:98:17:1e:e1:9f:2b:2b:39:
                    3f:1c:82:e5:2e:5a:81:df:b4:3e:ad:cd:08:2f:4e:
                    f8:4d:9f:ed:6b:c9:ef:b8:2d:a7:2b:dd:be:17:b6:
                    51:e2:05:40:70:dd:64:6e:9f:b2:c5:80:20:be:a5:
                    da:00:ee:54:b9:bc:06:94:c1:64:d0:36:b2:93:9b:
                    c2:81:fc:a1:95:15:ce:7f:f4:40:c7:12:c1:6f:b9:
                    16:b4:69:3d:57:a6:6f:92:83:59:bc:64:a5:19:68:
                    48:d5:97:86:e1:be:20:27:09:82:b6:2e:76:85:94:
                    2b:0a:4c:e7:42:57:d3:e8:eb:c8:a7:4f:d0:e6:51:
                    f8:c5:57:0d:2b:02:e9:20:4b:0a:28:e2:a5:9f:03:
                    42:38:4c:1b:f5:d8:39:9d:01:c6:58:7d:c5:52:65:
                    6c:b0:d7:84:fb:e9:46:6f:31:e4:62:9a:01:ea:33:
                    3d:96:8d:a1:62:49:c2:e7:11:68:67:ed:e0:75:82:
                    bd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:11:9E:5D:B8:39:E1:AC:AE:B3:C8:0C:2A:8B:6A:26:93:B8:03:C9
            X509v3 Authority Key Identifier:
                keyid:44:07:DF:C1:CD:58:AD:40:09:74:B8:DC:4C:0A:31:D4:EE:5C:2A:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:00:1f:88:84:6d:fd:66:75:df:65:54:dc:22:a8:90:8b:b3:
         ef:cf:27:ef:40:46:be:6e:13:86:3b:ae:49:3d:55:4d:c2:50:
         c8:4a:1b:46:1b:57:05:cb:b0:3d:01:1b:f5:70:7c:d8:98:95:
         b3:38:0b:62:49:2a:c3:f2:06:3c:b3:2e:87:c3:8a:f2:c0:77:
         78:0a:a3:7b:59:56:9f:5d:20:9b:19:4b:06:63:d3:8e:26:28:
         23:a2:52:ed:f0:c4:3c:34:a0:a1:66:78:02:b1:0e:19:74:87:
         3e:0e:4d:df:5c:52:02:73:e7:01:1c:64:b1:37:b2:3f:4d:48:
         3c:33:2f:b1:c2:57:dd:58:0f:19:02:c1:00:1a:15:94:3c:06:
         40:61:65:28:5c:d8:02:6c:fd:26:bb:02:db:08:bd:0f:6e:ee:
         f2:7c:1a:13:e7:03:a4:c3:da:ab:6a:b4:9e:63:45:09:8d:56:
         54:e7:54:9e:5c:0c:8d:12:f4:fa:05:9c:1f:38:dd:6f:cd:ec:
         66:aa:09:cf:5d:df:6a:f1:38:50:d2:70:50:fe:6f:14:c4:01:
         b8:1f:85:7f:3f:e9:84:fd:60:98:1e:14:5d:94:eb:47:35:42:
         05:fb:1b:06:9d:17:34:0b:22:a7:e4:f5:d2:36:a9:30:5e:24:
         ca:4b:e2:1f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUMVQH4O2u92ED23OLzGH2M4qGr/cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQwN0RGQzFDRDU4QUQ0MDA5NzRCOERDNEMwQTMxRDRF
RTVDMkExMzAeFw0yNTEyMjAwMjQ0MjhaFw0yNTEyMjEwMzUwMjhaMDMxMTAvBgNV
BAMTKDY5MTE5RTVEQjgzOUUxQUNBRUIzQzgwQzJBOEI2QTI2OTNCODAzQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp/KXUniF5nuXfMR7EW7jdA92Y
0Mmq08xKXICbios1X5T0tqZPla581j7ihSiPkrLCiO8OhRb5ngU7tjj9Zj+hilCY
Fx7hnysrOT8cguUuWoHftD6tzQgvTvhNn+1rye+4Lacr3b4XtlHiBUBw3WRun7LF
gCC+pdoA7lS5vAaUwWTQNrKTm8KB/KGVFc5/9EDHEsFvuRa0aT1Xpm+Sg1m8ZKUZ
aEjVl4bhviAnCYK2LnaFlCsKTOdCV9Po68inT9DmUfjFVw0rAukgSwoo4qWfA0I4
TBv12DmdAcZYfcVSZWyw14T76UZvMeRimgHqMz2WjaFiScLnEWhn7eB1gr0DAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUaRGeXbg54ayus8gMKotqJpO4A8kwHwYDVR0j
BBgwFoAURAffwc1YrUAJdLjcTAox1O5cKhMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzFVZmlqWlVyVHp2QzJBc2VzUVNrVmtGMXpTdm9oRzhacTFNUHFHQnlI
VGkvMC80NDA3REZDMUNENThBRDQwMDk3NEI4REM0QzBBMzFENEVFNUMyQTEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0MDdERkMxQ0Q1OEFENDAw
OTc0QjhEQzRDMEEzMUQ0RUU1QzJBMTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QzFVZmlqWlVyVHp2QzJBc2VzUVNrVmtGMXpTdm9oRzhacTFNUHFHQnlIVGkvMC80
NDA3REZDMUNENThBRDQwMDk3NEI4REM0QzBBMzFENEVFNUMyQTEzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeQAfiIRt/WZ132VU3CKokIuz788n70BGvm4ThjuuST1VTcJQyEobRhtXBcuw
PQEb9XB82JiVszgLYkkqw/IGPLMuh8OK8sB3eAqje1lWn10gmxlLBmPTjiYoI6JS
7fDEPDSgoWZ4ArEOGXSHPg5N31xSAnPnARxksTeyP01IPDMvscJX3VgPGQLBABoV
lDwGQGFlKFzYAmz9JrsC2wi9D27u8nwaE+cDpMPaq2q0nmNFCY1WVOdUnlwMjRL0
+gWcHzjdb83sZqoJz13favE4UNJwUP5vFMQBuB+Ffz/phP1gmB4UXZTrRzVCBfsb
Bp0XNAsip+T10japMF4kykviHw==
-----END CERTIFICATE-----
Generated at Sat Dec 20 11:33:23 2025 by rpki-client