This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.mft
File:                     421509EE0B333FF7D576BF479ED0155BADFB2A90.mft (raw, json)
Hash identifier:          4t/6Wll7novwHQp0yDN9pDktlkqhQpiq7KO9h3pqJ0M=
Subject key identifier:   23:A5:F2:86:D5:93:43:EF:BF:AA:5D:A6:CF:A0:A3:E9:BF:46:BC:38
Authority key identifier: 42:15:09:EE:0B:33:3F:F7:D5:76:BF:47:9E:D0:15:5B:AD:FB:2A:90
Certificate issuer:       /CN=421509EE0B333FF7D576BF479ED0155BADFB2A90
Certificate serial:       654659ABCD931A4523C254C6F8B385DEFE716B14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/421509EE0B333FF7D576BF479ED0155BADFB2A90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.mft
Manifest number:          0180
Signing time:             Mon 29 Dec 2025 06:57:29 +0000
Manifest this update:     Mon 29 Dec 2025 06:52:29 +0000
Manifest next update:     Tue 30 Dec 2025 07:33:29 +0000
Files and hashes:         1: 421509EE0B333FF7D576BF479ED0155BADFB2A90.crl (hash: 3s7FP9CNImSKnIDAV+M2T41rEDNn5zgZQM3jOov7MR4=)
                          2: 34352e3136362e39362e302f32342d3234203d3e20323637393539.roa (hash: HmIVPaWFHQDFb9ehHmUe+M86a5PovezP3h348KDU/vg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.crl
                          rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/421509EE0B333FF7D576BF479ED0155BADFB2A90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 30 Dec 2025 07:33:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:46:59:ab:cd:93:1a:45:23:c2:54:c6:f8:b3:85:de:fe:71:6b:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=421509EE0B333FF7D576BF479ED0155BADFB2A90
        Validity
            Not Before: Dec 29 06:52:29 2025 GMT
            Not After : Dec 30 07:33:29 2025 GMT
        Subject: CN=23A5F286D59343EFBFAA5DA6CFA0A3E9BF46BC38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b7:77:10:e1:91:71:4a:5e:8e:34:56:97:7d:
                    f0:92:6e:c3:2e:08:c6:b8:45:99:33:6d:50:50:1c:
                    44:40:a4:f4:81:e2:88:a2:d8:b3:20:29:31:20:01:
                    84:9e:9e:7a:2b:2e:5c:ea:ec:9a:55:ce:25:68:bc:
                    e4:41:90:0a:dc:5c:ce:a2:38:00:54:96:ae:f4:db:
                    60:6a:0b:f3:ae:3f:66:2f:95:64:c4:0e:6a:a0:e7:
                    0c:c0:60:e7:1c:66:ae:6c:30:2c:56:22:a2:79:78:
                    3f:ff:72:3b:53:9d:1d:15:d9:1b:0d:0e:65:2f:7e:
                    b0:47:e3:82:95:5b:56:10:5b:e9:76:df:c2:70:6d:
                    5b:fc:b3:61:a6:16:c6:6f:fa:d7:47:51:b4:df:ac:
                    89:f1:05:3c:97:53:31:ff:ad:28:f0:c2:4f:fd:fb:
                    f8:1c:75:ee:a2:52:57:82:a3:ad:fe:ec:ff:c3:28:
                    cb:03:19:24:83:33:a5:ae:b8:f1:89:36:ad:2f:db:
                    26:25:32:d7:c6:a9:ee:f7:4c:56:0c:bc:b3:5d:b0:
                    8c:b6:a9:ef:2b:e0:13:1d:7c:57:68:d1:55:80:b0:
                    92:3e:8a:b2:15:86:e4:db:bd:0b:e3:2e:0e:c6:ed:
                    2f:42:7e:f9:88:9c:38:f0:b4:d2:52:0d:16:61:a5:
                    1d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A5:F2:86:D5:93:43:EF:BF:AA:5D:A6:CF:A0:A3:E9:BF:46:BC:38
            X509v3 Authority Key Identifier:
                keyid:42:15:09:EE:0B:33:3F:F7:D5:76:BF:47:9E:D0:15:5B:AD:FB:2A:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/421509EE0B333FF7D576BF479ED0155BADFB2A90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:10:8a:5a:1b:75:b4:9d:6e:fc:8d:75:22:d4:98:cb:73:1c:
         be:41:28:1c:8a:11:53:c6:e7:01:3b:4e:db:27:da:0d:e5:d3:
         ac:c5:7e:71:85:ae:c1:e1:60:5a:14:2f:d6:40:2a:5d:1e:5e:
         4b:1b:78:59:24:09:16:3c:4f:ef:09:c2:11:fe:e4:76:64:4b:
         90:a4:d7:8c:0f:c2:8c:89:a4:fb:cb:b4:cc:c2:68:b0:0a:3f:
         ad:d8:f7:ee:8a:f8:c3:44:f8:e6:c1:ce:76:16:d5:8d:37:b0:
         7f:30:bb:34:a8:24:1d:74:98:11:a9:ff:c7:10:4f:aa:d2:50:
         4d:39:d0:60:84:8b:40:0a:b0:7a:13:46:80:8c:77:f2:b4:d8:
         df:44:f6:a8:b5:ec:fa:56:c0:13:80:87:8c:4c:f0:e5:d7:ba:
         03:7b:c3:3c:02:8e:cf:5a:93:b4:da:ce:d4:3c:3b:ba:d8:f7:
         64:5c:b7:0a:0e:ee:d3:14:7e:01:7c:15:3a:6e:5b:72:74:9c:
         24:38:c8:bf:12:74:0a:3e:45:95:5e:9f:69:6c:b7:8f:a5:01:
         df:8c:90:9f:ff:b2:06:59:6e:19:41:bd:98:f1:93:d8:1c:3b:
         4e:ca:80:1a:4f:58:98:4f:63:2e:31:b8:d2:76:58:32:a0:4a:
         0e:02:ab:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----