This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.mft
File:                     D4B92897692C4F611B738C6728923C318CA5378D.mft (raw, json)
Hash identifier:          hWqpOCs0VKxv4o3b9+6zDkvVkTXyCrsVW2+oSOFdugM=
Subject key identifier:   E6:AC:4A:23:F5:AA:74:12:53:74:08:A0:16:00:D7:2A:C8:F7:1F:68
Authority key identifier: D4:B9:28:97:69:2C:4F:61:1B:73:8C:67:28:92:3C:31:8C:A5:37:8D
Certificate issuer:       /CN=D4B92897692C4F611B738C6728923C318CA5378D
Certificate serial:       6F4681E0B882B991216EB9D40E4A1BA01B90A602
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4B92897692C4F611B738C6728923C318CA5378D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.mft
Manifest number:          032B
Signing time:             Sun 21 Dec 2025 10:54:04 +0000
Manifest this update:     Sun 21 Dec 2025 10:49:04 +0000
Manifest next update:     Mon 22 Dec 2025 14:09:04 +0000
Files and hashes:         1: 323830343a386133343a656330303a3a2f33382d3338203d3e20323733363534.roa (hash: 7nFV3a+hQjLyzppGzpIflRodGqWB/Ue6XkXpTxIfQY4=)
                          2: D4B92897692C4F611B738C6728923C318CA5378D.crl (hash: jRkA9Hh9vasAVBytDBBIt4n/5e1fmfPcRemStrHWOjE=)
                          3: 323830343a386133343a3a2f33382d3338203d3e20323733363534.roa (hash: F8C1M9ExsKqvOiXN93YJ+GMs5GM54Va82EHzWjYNmOI=)
                          4: 323830343a386133343a666330303a3a2f33382d3338203d3e20323733363534.roa (hash: Cz6E9/3ppBWDY1aQmtRNWMr0zzfNkr0yKTQZi86JYiA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.crl
                          rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4B92897692C4F611B738C6728923C318CA5378D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 14:09:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:46:81:e0:b8:82:b9:91:21:6e:b9:d4:0e:4a:1b:a0:1b:90:a6:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4B92897692C4F611B738C6728923C318CA5378D
        Validity
            Not Before: Dec 21 10:49:04 2025 GMT
            Not After : Dec 22 14:09:04 2025 GMT
        Subject: CN=E6AC4A23F5AA7412537408A01600D72AC8F71F68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4f:ef:3c:d2:c7:d5:a6:5e:81:7f:c6:1c:ca:
                    e7:a5:51:57:87:ba:82:c1:c2:5c:68:7e:14:57:fd:
                    ab:ac:b2:5d:06:d2:59:30:5d:ec:e4:73:38:5b:4f:
                    fa:8f:4e:10:37:d3:04:69:16:1c:67:d5:63:fb:cd:
                    ea:60:3e:5a:84:dc:38:ed:ac:59:83:56:34:bb:1e:
                    8c:b1:c0:03:57:50:d3:98:e8:68:eb:ab:f2:64:90:
                    2a:46:58:8b:47:a0:e6:f1:80:06:23:b4:d8:33:9d:
                    f1:bb:24:c0:dc:c6:0a:26:bb:35:6c:11:0f:f8:de:
                    b1:3e:66:7e:66:86:14:3f:34:ea:ce:2a:50:75:8f:
                    24:1f:cc:96:13:5e:90:72:a8:35:24:33:12:ba:45:
                    72:9f:b1:f4:f8:c0:b8:54:8f:ff:f4:80:15:5f:8c:
                    00:72:35:61:6a:a3:96:61:25:61:b6:b1:72:b6:01:
                    f4:62:91:22:f7:8c:db:08:8f:0c:5c:fe:72:27:af:
                    e9:4f:2c:7f:33:38:f4:ac:4d:5a:ee:85:17:1e:0f:
                    49:54:ab:d5:61:11:58:07:49:f8:88:31:20:b8:7e:
                    98:f2:d2:82:17:52:66:aa:08:38:b8:34:4b:8c:8a:
                    5d:dd:69:03:74:b6:10:42:5c:12:c6:c4:5b:ef:ed:
                    92:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:AC:4A:23:F5:AA:74:12:53:74:08:A0:16:00:D7:2A:C8:F7:1F:68
            X509v3 Authority Key Identifier:
                keyid:D4:B9:28:97:69:2C:4F:61:1B:73:8C:67:28:92:3C:31:8C:A5:37:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4B92897692C4F611B738C6728923C318CA5378D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:a7:63:ea:a8:af:7b:f9:51:6d:0c:cd:3f:04:ed:7b:46:63:
         76:e9:6e:b6:1d:1d:11:31:3d:d0:1c:ba:8c:ca:7f:f0:42:e8:
         fe:ad:5e:4f:e2:58:78:2a:9a:d2:61:56:af:e7:58:1d:6b:d6:
         35:9f:f8:78:d9:f8:2b:fc:19:42:ca:a5:7a:8c:e3:41:5d:39:
         c1:ae:1f:9a:f9:62:28:a3:c7:e4:55:a9:9e:30:a3:65:71:bb:
         b1:fc:2b:fd:f9:93:97:9d:91:d7:2a:bd:15:34:05:74:f8:fb:
         07:1e:6b:c0:03:81:3d:4a:4f:81:14:6e:54:4b:08:2f:75:dd:
         b1:6e:94:b3:bc:34:0d:3b:13:71:ba:af:7e:b6:f7:6b:0b:c5:
         58:54:c4:96:3b:2f:01:58:29:66:f4:c0:87:a9:59:02:8c:67:
         8f:58:49:b2:e9:38:c7:68:5a:c6:fa:7c:ec:ad:b8:b7:b8:f5:
         61:db:c8:49:63:92:2e:a8:b4:18:a2:e0:6a:f9:34:24:02:33:
         06:67:08:5d:1c:e5:c2:6e:6a:c3:76:35:0b:37:0b:fd:db:6a:
         e4:dc:8c:4c:55:ee:47:14:b3:9f:01:7a:e4:4d:21:83:49:de:
         33:4c:41:e3:75:28:bf:f8:e5:f2:d0:18:b1:4f:6c:6a:59:8e:
         e0:8b:d4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 01:44:00 2025 by rpki-client