This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/78BA6ECF2E6D2FFCC5795B50A5D23E3F3EA78A30.mft
File:                     78BA6ECF2E6D2FFCC5795B50A5D23E3F3EA78A30.mft (raw, json)
Hash identifier:          gpyk1rja7gnlaETqn3UXh9kupbfGzp+FIHammvU2Tt0=
Subject key identifier:   61:FC:E0:78:31:41:5E:64:4F:D0:EF:3A:04:9A:22:78:94:C1:0E:68
Authority key identifier: 78:BA:6E:CF:2E:6D:2F:FC:C5:79:5B:50:A5:D2:3E:3F:3E:A7:8A:30
Certificate issuer:       /CN=78BA6ECF2E6D2FFCC5795B50A5D23E3F3EA78A30
Certificate serial:       6F7246BD867830901194E7F531EB97515EFD9F6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78BA6ECF2E6D2FFCC5795B50A5D23E3F3EA78A30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/78BA6ECF2E6D2FFCC5795B50A5D23E3F3EA78A30.mft
Manifest number:          43
Signing time:             Fri 19 Dec 2025 22:14:31 +0000
Manifest this update:     Fri 19 Dec 2025 22:09:31 +0000
Manifest next update:     Sun 21 Dec 2025 00:08:31 +0000
Files and hashes:         1: 78BA6ECF2E6D2FFCC5795B50A5D23E3F3EA78A30.crl (hash: BoHWGQwOolfWE3CR2qDPeyHRy6Ftlmh7Owrjz7bWE0c=)
                          2: 3139382e35382e382e302f32322d3332203d3e20323633323536.roa (hash: WkczNhgV2X7EiWATkEF+uYWZgEmAAQ6rPaJHiZabWBI=)
                          3: 323830343a313765303a3a2f33322d313238203d3e20323633323536.roa (hash: TCuoCWgOoRavD/eJAiCBhrX9C/qeK4tliRmu4cHQdRE=)
                          4: 3137302e3234372e3230302e302f32322d3332203d3e20323633323536.roa (hash: d1ez1eIepXMff4zgF/M0OtTSP/kwyVj0XfA8p1hBfYs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/78BA6ECF2E6D2FFCC5795B50A5D23E3F3EA78A30.crl
                          rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/78BA6ECF2E6D2FFCC5795B50A5D23E3F3EA78A30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78BA6ECF2E6D2FFCC5795B50A5D23E3F3EA78A30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:72:46:bd:86:78:30:90:11:94:e7:f5:31:eb:97:51:5e:fd:9f:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78BA6ECF2E6D2FFCC5795B50A5D23E3F3EA78A30
        Validity
            Not Before: Dec 19 22:09:31 2025 GMT
            Not After : Dec 21 00:08:31 2025 GMT
        Subject: CN=61FCE07831415E644FD0EF3A049A227894C10E68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:08:f2:ae:a6:b1:9c:88:f2:c2:61:ec:ec:4f:
                    d1:d9:df:55:27:de:ad:64:d5:fb:a3:27:e9:8f:c2:
                    d9:89:1f:3d:72:84:0f:fe:99:d9:b0:ed:47:f1:79:
                    37:0a:07:74:05:8f:10:42:53:54:c4:8b:1e:33:fd:
                    ce:49:83:09:12:1d:07:b0:97:3b:6d:ee:f1:8d:af:
                    be:57:66:4f:12:3b:05:61:ba:c9:bc:18:fc:08:68:
                    b4:1f:ee:6c:55:ff:6a:97:04:5b:11:f9:d6:fb:86:
                    a2:65:61:23:05:08:03:5e:ed:e0:4a:a9:3a:5a:c6:
                    b1:d1:40:ed:4e:af:d9:12:1d:65:58:22:c2:7d:ca:
                    96:5f:aa:d0:26:af:be:81:f2:02:6f:a9:b1:42:6b:
                    33:11:7c:50:a8:83:ea:53:34:ee:8d:bc:11:8c:49:
                    6a:6a:3a:6f:59:fe:0d:a0:c2:61:f5:8a:b8:81:29:
                    83:ba:08:0b:81:35:97:c5:dd:02:6b:8f:c9:64:73:
                    1f:34:a4:00:dc:8c:69:38:63:e9:43:13:94:ba:99:
                    0d:6e:2c:68:72:d2:f4:d1:1b:3e:3e:ee:ff:aa:d2:
                    d9:2a:d3:14:b0:ae:70:0b:ee:dd:1a:4d:23:e9:8b:
                    d8:63:0b:95:24:3e:d8:32:22:3f:bb:2c:10:ec:ca:
                    0d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:FC:E0:78:31:41:5E:64:4F:D0:EF:3A:04:9A:22:78:94:C1:0E:68
            X509v3 Authority Key Identifier:
                keyid:78:BA:6E:CF:2E:6D:2F:FC:C5:79:5B:50:A5:D2:3E:3F:3E:A7:8A:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/78BA6ECF2E6D2FFCC5795B50A5D23E3F3EA78A30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78BA6ECF2E6D2FFCC5795B50A5D23E3F3EA78A30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/78BA6ECF2E6D2FFCC5795B50A5D23E3F3EA78A30.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:36:1d:60:a3:a2:d0:5e:03:ad:53:11:04:86:18:87:df:9f:
         4a:54:81:d5:98:e2:f3:ad:45:8e:eb:d4:c5:18:07:8c:ae:87:
         ee:7b:d7:10:4e:a8:0d:42:76:c7:93:9a:6e:04:be:cd:7b:11:
         08:60:40:40:fe:40:c6:f2:25:83:c1:45:fb:6e:1d:33:f7:d5:
         87:29:0c:19:b8:47:52:65:3c:5e:b0:35:c5:c0:2c:65:88:8f:
         2c:f8:e9:70:52:49:2f:ce:02:da:49:4a:05:5b:32:79:f3:60:
         fb:47:ec:9c:6d:88:17:0e:e2:60:db:8a:ba:d3:12:e1:35:d3:
         68:eb:c2:e6:cc:c6:a9:f3:fa:af:aa:ef:75:29:96:90:aa:42:
         d3:05:43:60:21:86:7b:72:61:3c:2a:6b:7e:fb:94:da:43:51:
         3d:93:a3:91:4e:0e:f7:3b:e3:10:4d:37:ac:ee:09:af:fc:81:
         dc:13:69:07:0c:c4:c1:e6:30:a3:49:e2:73:64:e2:29:0c:88:
         92:6d:2e:03:e1:20:5d:31:71:e8:09:78:da:2c:e4:50:49:48:
         87:70:6a:f1:d7:14:ea:31:e3:4c:cb:04:ef:d9:1a:70:62:fd:
         b8:81:5a:ac:98:59:d1:a7:16:11:af:1e:53:a7:59:f5:f2:bc:
         1d:0d:4e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:10:05 2025 by rpki-client