This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/01CC4ED75252A6B3FCFC438848ADDD2DA638308B.mft
File:                     01CC4ED75252A6B3FCFC438848ADDD2DA638308B.mft (raw, json)
Hash identifier:          WFItYzzgM2wfOdTd0DzkXL63i+DnF9cvxjmHagPKnk0=
Subject key identifier:   80:3F:AC:0A:48:CD:F7:D4:A2:4F:39:4D:D6:BB:BD:3D:AC:DD:74:1A
Authority key identifier: 01:CC:4E:D7:52:52:A6:B3:FC:FC:43:88:48:AD:DD:2D:A6:38:30:8B
Certificate issuer:       /CN=01CC4ED75252A6B3FCFC438848ADDD2DA638308B
Certificate serial:       510B42A0999A7263070ED7DC15B184105E135AC8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CC4ED75252A6B3FCFC438848ADDD2DA638308B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/01CC4ED75252A6B3FCFC438848ADDD2DA638308B.mft
Manifest number:          029E
Signing time:             Mon 22 Dec 2025 21:29:14 +0000
Manifest this update:     Mon 22 Dec 2025 21:24:14 +0000
Manifest next update:     Tue 23 Dec 2025 22:33:14 +0000
Files and hashes:         1: 323830343a323534303a3a2f33322d313238203d3e20323634323638.roa (hash: LtSf2zRxdt6ow6Vhlq6nj+Vq6G9d30OycVXO+ctOcNI=)
                          2: 3133382e3131382e3137362e302f32322d3332203d3e20323634323638.roa (hash: F1FeDqtmwoS6pmFJIV5oUEd5AGZfISt6MSy2uFXN8mE=)
                          3: 3139312e372e3131322e302f32322d3332203d3e20323634323638.roa (hash: cWavp23qLqgANEwbYyFMQ5YEM9gyFzdA+BDyQSRkIys=)
                          4: 01CC4ED75252A6B3FCFC438848ADDD2DA638308B.crl (hash: y4UBkb0EcW2Gf8suG0QhSQ/yqUuScNg5ckz0P8fu0ck=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/01CC4ED75252A6B3FCFC438848ADDD2DA638308B.crl
                          rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/01CC4ED75252A6B3FCFC438848ADDD2DA638308B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CC4ED75252A6B3FCFC438848ADDD2DA638308B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 22:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:0b:42:a0:99:9a:72:63:07:0e:d7:dc:15:b1:84:10:5e:13:5a:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01CC4ED75252A6B3FCFC438848ADDD2DA638308B
        Validity
            Not Before: Dec 22 21:24:14 2025 GMT
            Not After : Dec 23 22:33:14 2025 GMT
        Subject: CN=803FAC0A48CDF7D4A24F394DD6BBBD3DACDD741A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2b:4f:40:0d:1f:cf:8e:9a:62:97:8c:8d:38:
                    7f:87:aa:cc:c1:bc:15:e0:29:a0:c6:a3:0c:52:06:
                    64:c3:d9:98:01:9b:47:1a:d2:09:a3:a9:27:59:4e:
                    ec:2f:7c:d1:49:7d:6b:8e:bb:49:bf:dd:89:0a:18:
                    64:65:85:df:cf:48:cc:ec:3b:02:8b:fd:b5:b4:45:
                    d2:12:65:4a:e4:f4:16:9f:2c:5a:17:1a:9e:49:9e:
                    35:f0:25:9b:09:de:c9:76:83:aa:96:e1:c8:35:48:
                    79:26:6d:50:1d:2c:9c:71:0c:b9:c6:f1:3a:3a:7d:
                    74:d3:38:91:c7:a1:77:c4:65:c8:da:3a:77:31:6a:
                    4e:f4:8e:b8:7b:6b:cc:26:00:09:ff:a3:89:bc:16:
                    12:f4:fd:61:6f:11:4f:64:11:3d:3f:d4:27:0d:f5:
                    a8:92:a0:a0:16:ab:05:0f:26:d0:09:94:2a:fc:6c:
                    f6:52:fc:ee:9b:77:21:f6:3f:be:30:72:70:df:37:
                    2e:02:8b:06:07:c1:84:35:83:09:bb:6d:7e:65:2d:
                    c6:16:7a:79:be:59:c7:e1:74:86:9b:54:d2:d5:97:
                    df:c6:36:c0:1b:a9:bb:31:78:68:71:2c:a7:cc:54:
                    14:d8:7b:c0:53:2a:f7:cb:25:a2:0a:12:88:39:45:
                    cc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:3F:AC:0A:48:CD:F7:D4:A2:4F:39:4D:D6:BB:BD:3D:AC:DD:74:1A
            X509v3 Authority Key Identifier:
                keyid:01:CC:4E:D7:52:52:A6:B3:FC:FC:43:88:48:AD:DD:2D:A6:38:30:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/01CC4ED75252A6B3FCFC438848ADDD2DA638308B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CC4ED75252A6B3FCFC438848ADDD2DA638308B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/01CC4ED75252A6B3FCFC438848ADDD2DA638308B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:0e:42:3b:ef:ce:f4:c4:53:25:1e:8f:b4:d4:60:d6:1b:8b:
         61:d4:ca:77:f3:a0:99:4b:ac:fa:fd:6b:9a:87:97:61:b8:f5:
         f2:0c:a7:53:b8:f2:72:46:73:d4:18:d5:17:da:ff:57:a7:0e:
         c1:9d:18:09:76:8e:a8:52:23:4d:7e:eb:87:c5:7c:63:39:ef:
         73:ba:08:c4:5b:65:c9:06:13:96:9c:64:c1:ba:04:f4:08:dd:
         7e:cd:f6:8c:f9:cf:93:bd:b5:41:8e:a6:53:72:95:df:29:c6:
         ac:ad:07:61:01:10:a6:a1:b8:7c:22:a6:27:17:e1:0c:6f:5e:
         d3:fc:18:1e:31:de:c6:58:41:4f:cd:59:19:0e:73:c9:11:17:
         db:cb:7e:e8:0b:3b:7c:c3:9c:52:76:f9:99:56:9d:35:54:a6:
         49:6d:c6:17:be:36:24:9f:c8:b1:3c:84:ee:89:d0:18:94:eb:
         e9:ac:83:b6:1d:a3:11:93:0b:87:0a:00:82:c4:ef:e8:be:e6:
         ac:d9:18:f8:f7:1a:2a:ac:0b:a9:fc:ce:cf:78:a5:91:e6:43:
         6c:f4:28:79:30:91:a6:72:85:ed:6d:b8:39:16:12:da:d0:55:
         6f:a7:e3:b7:04:c0:b5:0b:46:3f:85:d0:1b:8c:05:fe:d8:da:
         76:49:f9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 07:46:49 2025 by rpki-client