This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.mft
File:                     721FDEF0EC64EC9ECB8963D4279535836A0A16EB.mft (raw, json)
Hash identifier:          5LI9zopghZElZ6dSJg2mWArwk4OlS0f198HYlfzSlQo=
Subject key identifier:   FD:6B:FC:F4:14:47:85:2A:83:43:A0:02:57:B0:7C:08:00:55:B5:7C
Authority key identifier: 72:1F:DE:F0:EC:64:EC:9E:CB:89:63:D4:27:95:35:83:6A:0A:16:EB
Certificate issuer:       /CN=721FDEF0EC64EC9ECB8963D4279535836A0A16EB
Certificate serial:       7E462B8DAF84D4CBD00365C9F8F914488365C743
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.mft
Manifest number:          4C
Signing time:             Fri 19 Dec 2025 22:08:25 +0000
Manifest this update:     Fri 19 Dec 2025 22:03:25 +0000
Manifest next update:     Sun 21 Dec 2025 01:54:25 +0000
Files and hashes:         1: 34352e3137372e3138342e302f32322d3332203d3e20323638393933.roa (hash: 1fsdSmR4TdjbL1xr7Loe4KWvKXQMJAqt1mSxZ8Jgpyo=)
                          2: 721FDEF0EC64EC9ECB8963D4279535836A0A16EB.crl (hash: q5qiLilQ70HxISrWwBTyWJkFEvdLmdiLTJgJ+RUdz2E=)
                          3: 323830343a356463633a3a2f33322d313238203d3e20323638393933.roa (hash: 8+Ghan3SgXuTsYmRhspkbGki+wRJrZx9AdfY1l2WwTE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.crl
                          rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 01:54:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:46:2b:8d:af:84:d4:cb:d0:03:65:c9:f8:f9:14:48:83:65:c7:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=721FDEF0EC64EC9ECB8963D4279535836A0A16EB
        Validity
            Not Before: Dec 19 22:03:25 2025 GMT
            Not After : Dec 21 01:54:25 2025 GMT
        Subject: CN=FD6BFCF41447852A8343A00257B07C080055B57C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:97:f6:36:84:d7:ae:b0:92:4d:48:a8:c0:67:
                    20:67:da:8f:0d:b0:55:0f:34:b0:f1:68:24:2c:6a:
                    5e:a9:b0:55:b1:e6:9b:af:64:ca:0b:4e:2a:a4:2f:
                    35:2b:3e:72:ec:24:29:1d:01:f1:79:d4:02:01:8a:
                    d9:c6:ef:62:29:2b:34:73:a7:f3:8b:42:03:f8:78:
                    20:95:fa:b8:b0:07:3d:e5:07:d5:47:88:ef:cf:27:
                    d2:c4:df:c2:cd:41:6e:8e:65:8d:0d:c6:be:c2:d1:
                    89:a1:86:b0:6f:fa:c2:77:ff:10:99:87:38:0a:01:
                    29:62:b3:97:03:22:e0:c7:58:97:b3:8d:49:1b:f3:
                    4f:bf:51:ef:46:c0:f4:2c:82:0a:6c:e0:8f:7e:93:
                    13:54:cd:b6:d0:09:d6:9b:bb:6b:1a:8e:c4:38:b8:
                    4b:45:8f:9d:8b:a6:03:a9:26:3d:47:15:09:86:ce:
                    88:e3:6a:16:d1:16:67:60:39:06:39:fd:12:86:3e:
                    ca:85:3f:15:f6:12:e5:d8:d6:40:6c:88:d5:20:42:
                    84:a8:b9:f3:ed:05:3a:ee:4a:63:af:44:9f:85:0e:
                    e5:46:aa:94:c4:35:dd:c4:b2:16:53:54:5c:99:87:
                    cf:65:03:34:33:20:d5:bd:b7:3a:a0:86:40:f5:be:
                    bb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6B:FC:F4:14:47:85:2A:83:43:A0:02:57:B0:7C:08:00:55:B5:7C
            X509v3 Authority Key Identifier:
                keyid:72:1F:DE:F0:EC:64:EC:9E:CB:89:63:D4:27:95:35:83:6A:0A:16:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:32:6b:84:86:33:c4:0e:21:cf:9c:63:a1:bc:14:a0:be:e3:
         5a:71:f8:c9:dd:c2:55:a4:ce:4c:66:b7:18:df:5a:64:db:e7:
         a8:8b:cc:e3:e9:e0:12:97:75:eb:49:9e:62:40:6f:35:a0:b4:
         9f:3d:3c:43:d1:44:6e:24:3d:7d:98:d9:75:3b:a6:03:77:42:
         48:dc:d8:11:62:e1:e9:1b:1c:b9:f5:22:69:0c:46:dd:27:10:
         37:5e:44:e1:54:62:6b:73:2d:eb:86:d1:1d:3d:85:38:d7:19:
         3c:c7:0d:a3:a6:63:d0:a9:d1:d1:e9:97:a7:6e:d8:8c:61:ba:
         ed:5c:9b:8f:ac:68:de:e5:09:0b:28:10:6e:a1:40:e8:a0:a3:
         50:d7:35:44:ed:92:59:0c:8f:2f:26:fb:92:cb:94:0f:03:b8:
         8a:2b:ae:75:0b:d7:73:19:4a:d3:7b:b9:a1:a0:44:76:8e:c2:
         79:90:df:0c:45:7d:3b:34:bf:3a:49:c9:83:cd:b3:fa:7a:39:
         ba:f0:43:8c:d2:b9:7c:50:6b:1f:5a:82:0b:d7:27:62:77:06:
         0d:ac:2c:33:be:17:52:68:9d:38:48:45:5a:3a:51:2b:d5:6c:
         c5:49:33:ed:26:99:16:b7:10:3f:00:6d:50:86:4e:43:76:a3:
         47:4a:ea:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:17:41 2025 by rpki-client