This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft
File:                     041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft (raw, json)
Hash identifier:          EVvaCtoVAS/zWcQTAMbUkLV82VjWuHnhqPy9sMxi3yE=
Subject key identifier:   49:05:E4:19:DF:D7:1C:6C:1B:75:46:69:C2:38:84:4C:10:98:A5:24
Authority key identifier: 04:1F:A0:A4:08:AD:57:E9:38:4D:A3:31:B3:04:0B:91:FD:E0:0B:E3
Certificate issuer:       /CN=041FA0A408AD57E9384DA331B3040B91FDE00BE3
Certificate serial:       16ABDA3D2C763D7A4BE71E4ECA11885600009A4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041FA0A408AD57E9384DA331B3040B91FDE00BE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft
Manifest number:          7B
Signing time:             Wed 24 Dec 2025 03:15:50 +0000
Manifest this update:     Wed 24 Dec 2025 03:10:50 +0000
Manifest next update:     Thu 25 Dec 2025 04:05:50 +0000
Files and hashes:         1: 3133312e3130302e37322e302f32322d3332203d3e203631373536.roa (hash: ff5fnWNx341MgcrmBHedmB9h7orSMUG+v/FPbvSdt9w=)
                          2: 323830343a316265383a3a2f33322d313238203d3e203631373536.roa (hash: pqgsM2ASUBh1TC0/RYOz8T+lL73SNCUA6ljQ57Xb+SQ=)
                          3: 041FA0A408AD57E9384DA331B3040B91FDE00BE3.crl (hash: dU/465/HK7sIhfbh5jzGck9dmQ6vCCQML8EKGvF6EC0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.crl
                          rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041FA0A408AD57E9384DA331B3040B91FDE00BE3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 04:05:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ab:da:3d:2c:76:3d:7a:4b:e7:1e:4e:ca:11:88:56:00:00:9a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041FA0A408AD57E9384DA331B3040B91FDE00BE3
        Validity
            Not Before: Dec 24 03:10:50 2025 GMT
            Not After : Dec 25 04:05:50 2025 GMT
        Subject: CN=4905E419DFD71C6C1B754669C238844C1098A524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e8:61:83:b5:51:08:85:12:b9:8f:87:e8:f7:
                    d4:dc:dd:ec:44:36:85:78:3e:22:fc:f6:ff:f7:32:
                    90:36:65:46:83:da:97:92:e9:18:da:19:4a:70:ec:
                    21:99:08:e2:19:19:e2:19:29:2d:07:9e:d4:b3:fd:
                    00:2f:19:9c:f4:4d:b7:a3:d1:55:68:be:e4:2d:59:
                    fb:7b:af:cb:cc:2b:31:cd:53:ff:0b:17:c1:aa:02:
                    00:e7:fe:2a:7d:1e:cd:73:f9:0e:87:a6:6d:68:8d:
                    f6:0d:c0:82:33:55:3e:a1:c5:99:18:b2:53:bf:1a:
                    06:e9:25:12:de:b2:16:9a:99:79:4e:13:c3:90:47:
                    d3:1d:1d:19:50:ea:16:f2:49:1a:10:36:c4:b5:14:
                    29:05:77:b6:41:14:1e:fc:22:c1:93:ad:ce:33:d1:
                    17:e4:75:d6:69:f1:97:20:12:92:80:7a:c4:6f:0e:
                    72:d5:2a:ea:bb:89:95:22:e6:86:e3:d8:f6:d5:ca:
                    df:35:5d:53:7d:02:fb:3c:c2:88:c5:5e:5c:e8:78:
                    64:2b:32:27:95:65:fd:40:74:c8:ae:bc:80:92:5a:
                    8e:2a:65:50:03:c4:9f:5a:61:72:ff:59:d2:12:0e:
                    79:73:d4:5e:79:5c:27:d3:e3:0e:e0:22:cd:e8:84:
                    5b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:05:E4:19:DF:D7:1C:6C:1B:75:46:69:C2:38:84:4C:10:98:A5:24
            X509v3 Authority Key Identifier:
                keyid:04:1F:A0:A4:08:AD:57:E9:38:4D:A3:31:B3:04:0B:91:FD:E0:0B:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041FA0A408AD57E9384DA331B3040B91FDE00BE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:22:c6:77:fb:e6:46:52:1a:96:2c:6a:9e:7a:94:48:3c:1a:
         47:02:6a:28:00:28:b8:75:eb:c3:82:07:ee:51:d7:3b:eb:7f:
         53:3a:d8:81:26:fb:89:7c:fc:e0:77:33:72:3a:52:bc:e3:1a:
         c4:dd:d4:c5:b9:38:ca:dd:87:81:14:e3:ce:cc:07:3e:d5:1a:
         2f:74:ba:08:94:93:6d:31:50:9b:fa:c7:56:e9:84:b2:65:7d:
         67:0b:6d:a9:5b:b3:bd:f3:d1:08:2a:24:cb:44:60:e3:de:02:
         fa:b9:34:89:cd:38:22:aa:f4:50:f2:fe:37:dd:15:7f:bd:32:
         62:d4:1b:9e:95:f3:94:32:ac:1a:c6:a4:3d:b9:85:ea:ea:c6:
         6d:fc:19:ab:79:41:23:b2:e3:56:3c:b6:0a:c2:ae:40:09:7b:
         d5:48:c1:c4:0c:3d:a5:57:b9:08:1c:d4:af:53:1c:bc:d5:6a:
         ce:f3:ec:32:e4:a5:36:2a:3f:9f:e1:59:b6:7f:b0:44:6e:cb:
         fb:97:20:8b:f7:a3:48:d0:40:00:bf:91:5f:33:89:f6:71:ac:
         02:d4:db:6c:d8:7b:3c:6e:41:c8:e6:5c:99:bc:cd:52:66:60:
         8b:cf:77:c8:8f:50:6b:f6:21:d9:8c:8b:8c:e9:20:cb:b5:03:
         f2:02:bd:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFqvaPSx2PXpL5x5OyhGIVgAAmkowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQxRkEwQTQwOEFENTdFOTM4NERBMzMxQjMwNDBCOTFG
REUwMEJFMzAeFw0yNTEyMjQwMzEwNTBaFw0yNTEyMjUwNDA1NTBaMDMxMTAvBgNV
BAMTKDQ5MDVFNDE5REZENzFDNkMxQjc1NDY2OUMyMzg4NDRDMTA5OEE1MjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi6GGDtVEIhRK5j4fo99Tc3exE
NoV4PiL89v/3MpA2ZUaD2peS6RjaGUpw7CGZCOIZGeIZKS0HntSz/QAvGZz0Tbej
0VVovuQtWft7r8vMKzHNU/8LF8GqAgDn/ip9Hs1z+Q6Hpm1ojfYNwIIzVT6hxZkY
slO/GgbpJRLeshaamXlOE8OQR9MdHRlQ6hbySRoQNsS1FCkFd7ZBFB78IsGTrc4z
0RfkddZp8ZcgEpKAesRvDnLVKuq7iZUi5obj2PbVyt81XVN9Avs8wojFXlzoeGQr
MieVZf1AdMiuvICSWo4qZVADxJ9aYXL/WdISDnlz1F55XCfT4w7gIs3ohFsrAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUSQXkGd/XHGwbdUZpwjiETBCYpSQwHwYDVR0j
BBgwFoAUBB+gpAitV+k4TaMxswQLkf3gC+MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1FYdjdXM2NTSlM0eXRkNmhxbTFDRkhURmFqaktZVUh0WDVZcWh5eFVv
QTkvMC8wNDFGQTBBNDA4QUQ1N0U5Mzg0REEzMzFCMzA0MEI5MUZERTAwQkUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0MUZBMEE0MDhBRDU3RTkz
ODREQTMzMUIzMDQwQjkxRkRFMDBCRTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q1FYdjdXM2NTSlM0eXRkNmhxbTFDRkhURmFqaktZVUh0WDVZcWh5eFVvQTkvMC8w
NDFGQTBBNDA4QUQ1N0U5Mzg0REEzMzFCMzA0MEI5MUZERTAwQkUzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFiLGd/vmRlIalixqnnqUSDwaRwJqKAAouHXrw4IH7lHXO+t/UzrYgSb7iXz8
4HczcjpSvOMaxN3Uxbk4yt2HgRTjzswHPtUaL3S6CJSTbTFQm/rHVumEsmV9Zwtt
qVuzvfPRCCoky0Rg494C+rk0ic04Iqr0UPL+N90Vf70yYtQbnpXzlDKsGsakPbmF
6urGbfwZq3lBI7LjVjy2CsKuQAl71UjBxAw9pVe5CBzUr1McvNVqzvPsMuSlNio/
n+FZtn+wRG7L+5cgi/ejSNBAAL+RXzOJ9nGsAtTbbNh7PG5ByOZcmbzNUmZgi893
yI9Qa/Yh2YyLjOkgy7UD8gK9qw==
-----END CERTIFICATE-----
Generated at Wed Dec 24 15:55:29 2025 by rpki-client