This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/C424690F0D40D5A947CD0515B923B426E1FD684B.mft
File:                     C424690F0D40D5A947CD0515B923B426E1FD684B.mft (raw, json)
Hash identifier:          m0yzUA3btn6x61oo/fyQG1gIhjoDbhnhfzHfmTBBFH0=
Subject key identifier:   1E:7E:E6:90:50:A6:91:05:BF:07:38:BC:A9:35:DF:F5:C5:49:06:CA
Authority key identifier: C4:24:69:0F:0D:40:D5:A9:47:CD:05:15:B9:23:B4:26:E1:FD:68:4B
Certificate issuer:       /CN=C424690F0D40D5A947CD0515B923B426E1FD684B
Certificate serial:       481AB0739D622F472F4484FC8F11324B72A9F4B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C424690F0D40D5A947CD0515B923B426E1FD684B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/C424690F0D40D5A947CD0515B923B426E1FD684B.mft
Manifest number:          0D
Signing time:             Fri 19 Dec 2025 05:13:40 +0000
Manifest this update:     Fri 19 Dec 2025 05:08:40 +0000
Manifest next update:     Sat 20 Dec 2025 07:59:40 +0000
Files and hashes:         1: C424690F0D40D5A947CD0515B923B426E1FD684B.crl (hash: 0d1eJRSuGBYVw9CsngYk02rt1DhdPZibl7C0oZ0SE+k=)
                          2: 3137392e35312e3137392e302f32342d3234203d3e20323731313735.roa (hash: 03Ku4lAbU5/PD5JO4pdQrXHTni5TKP2/9DA2m870n0w=)
                          3: 323830343a373736343a3a2f33322d3332203d3e20323731313735.roa (hash: wCMiWUF4ntNhxzgbOk+qkux3nVge2Q4vRRcVa/+wlyk=)
                          4: 323830343a373736343a653030303a3a2f33352d3335203d3e20323731313735.roa (hash: vIZGy7i+IFXHzjQRUKx6oOpriH1IPTb4mS4wPSxz0KA=)
                          5: 3137392e35312e3137382e302f32342d3234203d3e20323731313735.roa (hash: RGWehfx60vHbY+SHALVZ/LwjnA5g4oqW1WQkP8sLBYY=)
                          6: 3137392e35312e3137362e302f32332d3234203d3e20323731313735.roa (hash: +poPvZLrUraCnucbl4+mSJTJ8I+NA4YB7d8JHcxuQ64=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/C424690F0D40D5A947CD0515B923B426E1FD684B.crl
                          rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/C424690F0D40D5A947CD0515B923B426E1FD684B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C424690F0D40D5A947CD0515B923B426E1FD684B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 07:59:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:1a:b0:73:9d:62:2f:47:2f:44:84:fc:8f:11:32:4b:72:a9:f4:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C424690F0D40D5A947CD0515B923B426E1FD684B
        Validity
            Not Before: Dec 19 05:08:40 2025 GMT
            Not After : Dec 20 07:59:40 2025 GMT
        Subject: CN=1E7EE69050A69105BF0738BCA935DFF5C54906CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:89:c4:c6:04:0a:c2:5c:ab:2d:70:04:eb:2f:
                    1b:69:af:91:be:ba:93:d5:1b:d0:ba:91:be:9e:12:
                    92:33:87:cb:b0:9a:a4:81:76:32:45:28:93:b3:f8:
                    be:50:5d:b2:28:94:0d:18:b8:7b:7a:dc:61:d0:67:
                    fc:3a:dd:f6:e0:80:8c:c7:40:ad:f2:68:28:a3:6e:
                    69:90:c6:a4:d1:ae:29:86:42:76:e4:b5:bf:1b:9c:
                    ac:d4:dc:48:19:db:0a:2e:5f:4a:bf:d9:24:03:ce:
                    22:9f:cc:04:e1:13:b2:87:21:b2:36:e8:5b:4c:c3:
                    5c:b5:d0:35:6c:9b:f2:d3:1a:8f:30:c3:eb:59:27:
                    67:ba:f8:70:5e:ef:7d:98:2c:f5:67:81:ef:d8:c6:
                    ae:73:51:af:79:37:2e:e1:89:20:68:bf:45:db:10:
                    73:d6:01:27:1a:e4:1f:72:58:ee:f9:f9:a8:ed:73:
                    f1:da:88:da:24:68:2f:86:1e:18:49:4f:da:37:2b:
                    d7:c9:d1:f8:e4:fa:cd:00:d2:b3:ea:90:56:d4:33:
                    d1:42:52:54:a0:ee:12:c7:3d:09:30:f0:49:95:5b:
                    2c:e5:eb:8e:9d:63:ea:cb:a6:27:c8:0e:66:a6:b4:
                    a9:08:ed:c6:38:74:06:84:9c:a3:53:d7:83:e5:24:
                    b9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7E:E6:90:50:A6:91:05:BF:07:38:BC:A9:35:DF:F5:C5:49:06:CA
            X509v3 Authority Key Identifier:
                keyid:C4:24:69:0F:0D:40:D5:A9:47:CD:05:15:B9:23:B4:26:E1:FD:68:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/C424690F0D40D5A947CD0515B923B426E1FD684B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C424690F0D40D5A947CD0515B923B426E1FD684B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/C424690F0D40D5A947CD0515B923B426E1FD684B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:41:11:4b:04:b2:27:8e:ea:a7:31:8d:24:08:99:3f:83:a4:
         bf:b3:87:c2:3b:91:0d:8a:19:d6:54:e6:b5:a2:6b:99:3c:cf:
         1e:b9:e9:70:81:f9:04:58:d7:94:59:b6:89:04:6f:2c:81:83:
         83:6a:2c:22:7f:31:3a:09:a2:62:48:3d:d1:38:66:8e:6d:e2:
         9c:13:1e:f3:6f:94:50:e7:cc:f6:c8:b7:bf:5f:e4:25:16:e8:
         c8:b7:0e:95:55:59:1c:2f:03:5a:00:62:54:f7:0e:12:c1:f1:
         79:5e:01:f8:2e:f1:f7:a1:5b:33:4c:87:b0:d5:51:9c:97:4a:
         66:df:45:2b:1f:48:bb:87:e1:e1:1f:72:56:98:13:d2:18:5f:
         e3:d5:2b:54:32:cf:f2:77:c8:a4:05:21:9b:fd:65:90:9b:a4:
         c2:56:ee:14:47:b5:7d:c8:0b:68:81:5b:48:f0:39:a8:8a:34:
         41:a7:0b:9e:73:b7:98:e1:15:b6:1d:1a:11:ee:ab:bc:ca:ba:
         0c:a2:9b:11:9b:a3:7e:b7:d4:a1:bc:5f:1e:d7:b1:a4:98:f4:
         bd:84:93:7e:69:26:df:aa:56:41:55:f7:7e:bb:0e:cc:6a:0d:
         38:bf:21:8a:ee:b9:e3:3e:91:0b:9f:06:d7:02:a4:f8:43:23:
         a1:d4:19:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 08:04:58 2025 by rpki-client