This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/7FE47B22E1D00A16DC5F3525694FF71E9831FBEF.mft
File:                     7FE47B22E1D00A16DC5F3525694FF71E9831FBEF.mft (raw, json)
Hash identifier:          fXAcfpfGY/JcFl1HmMuaxICQ3/nn8nsTIftGLygo6NA=
Subject key identifier:   40:16:65:CD:D4:21:25:B2:B2:35:23:36:43:78:B6:C0:BA:CA:01:33
Authority key identifier: 7F:E4:7B:22:E1:D0:0A:16:DC:5F:35:25:69:4F:F7:1E:98:31:FB:EF
Certificate issuer:       /CN=7FE47B22E1D00A16DC5F3525694FF71E9831FBEF
Certificate serial:       1ECB8FCC37429C5F8F0A835753A34461AA2E22F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FE47B22E1D00A16DC5F3525694FF71E9831FBEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/7FE47B22E1D00A16DC5F3525694FF71E9831FBEF.mft
Manifest number:          CF
Signing time:             Tue 23 Dec 2025 06:43:47 +0000
Manifest this update:     Tue 23 Dec 2025 06:38:47 +0000
Manifest next update:     Wed 24 Dec 2025 12:36:47 +0000
Files and hashes:         1: 323830343a323936383a3a2f33322d3438203d3e20323634303133.roa (hash: bcoHVYwFXHbpmom8wN+techsG6j1YQ+WqNEhM+tHWss=)
                          2: 3137302e302e3135322e302f32332d3234203d3e20323634303133.roa (hash: eCLgP+8ssKRiIrEK5rXT+g829AHe+fwoWLNl1v7lL9c=)
                          3: 3134332e302e3138342e302f32322d3234203d3e20323634303133.roa (hash: iqRP9+N612LMf/P4qfXtS/78l0PnkFrKqWePlS5S/8o=)
                          4: 7FE47B22E1D00A16DC5F3525694FF71E9831FBEF.crl (hash: M9ZZMBfCLmTnNYsT6UsZTIJ7dBLnvIWmfOjuH4N/zow=)
                          5: 3138372e3132302e3137362e302f32302d3234203d3e20323634303133.roa (hash: GdRj0PkrmXJJ5KIT1mXarj72HCe7H7Z3kVID1BIXt+U=)
                          6: 3137302e302e3135342e302f32332d3234203d3e20323634303133.roa (hash: 6dvG9ZHSO2jO9Toj1Oe4A0BAg4mZwD0Wm4UtOIQtFUo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/7FE47B22E1D00A16DC5F3525694FF71E9831FBEF.crl
                          rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/7FE47B22E1D00A16DC5F3525694FF71E9831FBEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FE47B22E1D00A16DC5F3525694FF71E9831FBEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 12:36:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:cb:8f:cc:37:42:9c:5f:8f:0a:83:57:53:a3:44:61:aa:2e:22:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FE47B22E1D00A16DC5F3525694FF71E9831FBEF
        Validity
            Not Before: Dec 23 06:38:47 2025 GMT
            Not After : Dec 24 12:36:47 2025 GMT
        Subject: CN=401665CDD42125B2B23523364378B6C0BACA0133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d1:f2:4c:be:85:34:9c:98:84:62:61:12:ae:
                    d3:f4:42:eb:81:fc:1d:04:cd:01:b7:a1:14:84:e1:
                    06:c2:b9:17:e2:5a:e7:94:f1:77:a9:d9:2a:53:40:
                    60:a0:e0:f2:26:ad:01:a2:84:a8:c8:95:37:3a:8c:
                    a8:0a:8a:43:e6:1e:5f:d8:96:48:71:c8:43:ca:5d:
                    b0:95:45:bc:bb:6b:00:52:54:41:3d:9a:f5:5e:c9:
                    e9:08:ca:0a:9f:16:7f:0d:96:a8:01:80:6e:ee:93:
                    cf:ca:52:ee:4b:da:90:34:55:d2:54:71:8a:09:b4:
                    f0:2e:5c:41:db:d8:0c:bf:81:7f:b0:0f:66:07:60:
                    54:87:a4:06:fb:47:62:8f:ca:90:66:8b:a9:8c:1d:
                    25:15:cd:23:1d:9d:08:24:a3:6c:7e:25:95:fd:f0:
                    6a:4c:da:e5:6e:1b:ff:75:51:43:3d:53:7c:50:1b:
                    6d:0e:e5:bd:6a:48:c3:26:1c:65:5a:ed:01:96:1d:
                    d5:3c:5b:99:b8:b0:22:60:0b:81:8d:b9:75:57:69:
                    4b:a0:0a:ac:05:65:a5:c5:54:0b:1e:65:d1:72:3b:
                    4a:c3:b8:50:2d:92:c4:04:18:4a:ce:59:dd:78:26:
                    07:06:cb:67:61:c1:40:4c:0e:0b:56:06:da:57:53:
                    51:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:16:65:CD:D4:21:25:B2:B2:35:23:36:43:78:B6:C0:BA:CA:01:33
            X509v3 Authority Key Identifier:
                keyid:7F:E4:7B:22:E1:D0:0A:16:DC:5F:35:25:69:4F:F7:1E:98:31:FB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/7FE47B22E1D00A16DC5F3525694FF71E9831FBEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FE47B22E1D00A16DC5F3525694FF71E9831FBEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/7FE47B22E1D00A16DC5F3525694FF71E9831FBEF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:bc:42:76:d9:ea:95:d4:f8:5d:25:aa:88:f7:87:35:3b:c2:
         0f:58:e6:35:f9:fd:a0:c0:c8:0d:96:d3:dc:47:2b:7f:e4:1c:
         f5:a2:ab:78:41:77:9b:2d:83:ed:35:64:30:32:ab:93:e9:3f:
         fa:73:a0:38:bf:a8:f3:10:c1:9c:f5:cd:3a:ae:ae:12:ad:3b:
         65:42:5e:2c:31:cf:4e:0c:9c:5e:73:7f:c4:c6:32:3d:05:22:
         7b:39:4a:28:78:3e:16:a6:9a:d9:1a:08:9a:3f:5e:52:83:f4:
         44:ae:55:fe:69:10:54:9e:05:5b:0b:3d:85:ca:76:34:9e:12:
         23:06:59:03:b8:b7:e6:fd:be:36:26:2f:22:f1:26:33:61:4f:
         29:c5:f3:91:71:7a:ea:17:d5:2a:76:d7:b0:2d:98:90:bd:eb:
         8c:67:87:36:02:6c:99:0c:15:fc:0c:dc:68:25:af:c2:c8:63:
         7c:06:c3:6e:51:c8:4c:26:8e:32:11:24:7e:59:15:85:b0:3e:
         88:19:b9:71:3e:89:ef:e0:7b:29:2e:34:6d:de:61:5e:15:01:
         e4:8c:38:f9:be:4a:9c:c2:76:09:60:d7:30:bb:2e:9d:40:a4:
         bd:b4:da:58:37:fa:18:c8:41:c4:f4:4b:0c:4f:75:ba:1c:a4:
         ad:06:90:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 18:35:51 2025 by rpki-client