This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.mft
File:                     4329045FF5A88F6B7949093B6FE2C5D28A774010.mft (raw, json)
Hash identifier:          Oudi6S2cXAsIIXPAtp/kU+X9wEETSUhQ6OvJ3sSi3KE=
Subject key identifier:   88:98:C8:A4:D3:33:C7:3A:D6:36:74:49:3A:BA:74:D6:87:CF:6D:58
Authority key identifier: 43:29:04:5F:F5:A8:8F:6B:79:49:09:3B:6F:E2:C5:D2:8A:77:40:10
Certificate issuer:       /CN=4329045FF5A88F6B7949093B6FE2C5D28A774010
Certificate serial:       0EBAAEBD957ED5EA75D3312C44754B5BBFF2001A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.mft
Manifest number:          0347
Signing time:             Sat 20 Dec 2025 00:21:22 +0000
Manifest this update:     Sat 20 Dec 2025 00:16:22 +0000
Manifest next update:     Sun 21 Dec 2025 01:06:22 +0000
Files and hashes:         1: 3136372e3234392e3138302e302f32322d3234203d3e20323633303938.roa (hash: TWp4o6hfgsqCNsroy8xQzqXPkmDTRyp+OiTAo+o6fRQ=)
                          2: 4329045FF5A88F6B7949093B6FE2C5D28A774010.crl (hash: mIIBGwSejXknaVjC68zXMbtE4psEK1dlWQxdom17xNw=)
                          3: 3138362e3233332e39322e302f32322d3234203d3e20323633303938.roa (hash: QgxHMDYpUG5U2n7Tqtu7q8sPvNLB18Q/IiS12jWPoO0=)
                          4: 323830343a313736633a3a2f33322d313238203d3e20323633303938.roa (hash: 6urLe1qWg2v8eMe2oKgYt0ZAQWt9DYnjfH3T405VXdY=)
                          5: 3138362e3230382e3235322e302f32322d3234203d3e20323633303938.roa (hash: 80/5uHHr5e5A2Mrkjc4ckTwMz5jjtIE+JZWY+P7uRnc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.crl
                          rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 01:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ba:ae:bd:95:7e:d5:ea:75:d3:31:2c:44:75:4b:5b:bf:f2:00:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4329045FF5A88F6B7949093B6FE2C5D28A774010
        Validity
            Not Before: Dec 20 00:16:22 2025 GMT
            Not After : Dec 21 01:06:22 2025 GMT
        Subject: CN=8898C8A4D333C73AD63674493ABA74D687CF6D58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f2:34:6d:93:37:d6:98:96:3f:80:e3:3f:7b:
                    b7:81:cf:29:eb:d3:45:cf:06:64:2b:7c:e0:50:a3:
                    d9:1b:60:b5:99:9e:8c:91:09:f7:44:0f:8e:63:ce:
                    28:d2:25:20:11:80:c8:e0:9f:85:ec:fa:f2:1f:e9:
                    32:cf:34:5a:86:f9:89:b9:56:12:cb:b7:66:15:94:
                    57:e6:c6:9c:8a:93:71:ac:65:9c:69:8d:9d:2d:b9:
                    0e:5a:17:d9:68:7e:ed:f4:8e:7c:16:8b:f7:b0:0f:
                    54:33:b8:7a:d2:bf:ef:c9:c5:d5:dd:4b:ea:b4:44:
                    f7:cc:92:69:b7:5a:23:c8:ee:1f:de:fb:ce:6f:7b:
                    9c:44:5a:e4:81:d5:fc:d9:18:1c:34:27:ce:f5:a2:
                    fd:2a:fc:af:3a:6b:d8:82:b2:c6:04:db:5a:71:d1:
                    8d:ef:72:48:15:d5:37:61:19:8b:c4:4a:d0:c0:86:
                    cc:43:9a:6c:94:f8:4b:e6:74:4e:c8:37:30:62:df:
                    d2:4a:c2:3a:d2:6c:fa:45:58:b4:82:bf:04:de:8b:
                    c5:bd:7f:54:ac:b6:ee:03:a5:1a:18:19:00:bb:da:
                    8b:a8:3b:39:8c:56:a7:a6:ec:6d:36:fd:43:29:b9:
                    6b:78:b3:d2:02:b0:3f:2c:c7:ea:bb:9b:9b:54:32:
                    c8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:98:C8:A4:D3:33:C7:3A:D6:36:74:49:3A:BA:74:D6:87:CF:6D:58
            X509v3 Authority Key Identifier:
                keyid:43:29:04:5F:F5:A8:8F:6B:79:49:09:3B:6F:E2:C5:D2:8A:77:40:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:1d:de:22:a1:64:54:63:a5:0c:38:ca:c9:72:f2:4b:c3:b6:
         23:26:af:c7:ed:b9:fe:3d:c7:69:c4:fb:28:7d:e6:32:26:c2:
         53:f5:15:fd:a5:a4:85:60:24:1a:d3:4b:45:cb:92:4b:e9:9b:
         9a:6a:3c:8d:14:94:39:43:db:0d:c5:80:f3:d6:e9:12:b2:23:
         27:4b:3b:79:9f:15:8c:94:5b:b0:3f:97:69:97:50:c1:50:69:
         a4:cd:34:b2:03:74:8e:30:dc:cf:30:66:9b:e0:f3:3e:68:df:
         e8:41:97:c1:a3:a4:31:68:0b:e8:e4:b5:89:45:4e:05:b6:37:
         13:81:a2:1b:1b:97:d2:0b:f7:b3:3e:e5:65:b1:5f:21:29:b2:
         bb:3c:ca:6d:60:6d:63:cb:2e:05:0b:62:3d:33:cb:e1:6d:df:
         98:20:ff:0e:de:31:fd:d0:39:32:2a:a6:6b:0d:69:04:2e:6e:
         4e:c9:04:10:00:b4:80:6a:ef:e7:04:b8:22:0a:92:a9:af:22:
         f1:95:98:56:36:e2:25:90:15:08:92:2f:00:88:6f:6e:54:65:
         04:5b:82:ce:a5:23:77:ee:cf:e9:4f:49:b6:3d:5a:55:52:e8:
         a5:4a:e1:ab:83:08:44:b2:0b:0c:b7:f0:19:93:a7:56:b3:6b:
         8f:66:ba:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:36:41 2025 by rpki-client