This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HeNEWuDtv1k4Zcj5fho4nJMZCJvjL8RBbf7pCgvu54zi/0/4FFB30F4AF6F87A3EC05B09AB1446F0AD6F0D61B.mft
File:                     4FFB30F4AF6F87A3EC05B09AB1446F0AD6F0D61B.mft (raw, json)
Hash identifier:          KmhoOlD/FUGNaOvgEpbHw+4cUqBEfZEG143FkCoXce8=
Subject key identifier:   C0:92:84:9C:58:2B:50:62:40:BB:CA:FF:2A:0A:E1:A9:20:76:0A:7B
Authority key identifier: 4F:FB:30:F4:AF:6F:87:A3:EC:05:B0:9A:B1:44:6F:0A:D6:F0:D6:1B
Certificate issuer:       /CN=4FFB30F4AF6F87A3EC05B09AB1446F0AD6F0D61B
Certificate serial:       4094B8362904021296198F0497A98A12E0BE199A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FFB30F4AF6F87A3EC05B09AB1446F0AD6F0D61B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HeNEWuDtv1k4Zcj5fho4nJMZCJvjL8RBbf7pCgvu54zi/0/4FFB30F4AF6F87A3EC05B09AB1446F0AD6F0D61B.mft
Manifest number:          5E
Signing time:             Sat 20 Dec 2025 10:52:17 +0000
Manifest this update:     Sat 20 Dec 2025 10:47:17 +0000
Manifest next update:     Sun 21 Dec 2025 11:19:17 +0000
Files and hashes:         1: 323830343a363231303a3a2f33322d313238203d3e20323639323733.roa (hash: wH/6pz3ahNkfk7gPFIl5c3ScL/I16vVUmQ0HDgWkMDo=)
                          2: 34352e3138332e36382e302f32332d3332203d3e20323639323733.roa (hash: XfPh1ok4j7oZ7NiAwh/s5pZG0pmZyhfZ32tt7ZsO+Eg=)
                          3: 4FFB30F4AF6F87A3EC05B09AB1446F0AD6F0D61B.crl (hash: 0JVgQer3Zau01PEXmCtNf9q0CzD/xxFPXsHPDCNEVws=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HeNEWuDtv1k4Zcj5fho4nJMZCJvjL8RBbf7pCgvu54zi/0/4FFB30F4AF6F87A3EC05B09AB1446F0AD6F0D61B.crl
                          rsync://rpki-repo.registro.br/repo/HeNEWuDtv1k4Zcj5fho4nJMZCJvjL8RBbf7pCgvu54zi/0/4FFB30F4AF6F87A3EC05B09AB1446F0AD6F0D61B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FFB30F4AF6F87A3EC05B09AB1446F0AD6F0D61B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 11:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:94:b8:36:29:04:02:12:96:19:8f:04:97:a9:8a:12:e0:be:19:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FFB30F4AF6F87A3EC05B09AB1446F0AD6F0D61B
        Validity
            Not Before: Dec 20 10:47:17 2025 GMT
            Not After : Dec 21 11:19:17 2025 GMT
        Subject: CN=C092849C582B506240BBCAFF2A0AE1A920760A7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:90:cf:e7:c2:89:5f:3f:5c:fa:34:ce:e4:95:
                    41:e1:1b:54:99:55:86:58:e9:cd:c6:70:25:30:37:
                    6a:25:65:bf:2f:cf:40:95:ba:23:0b:08:dd:44:7d:
                    14:34:74:12:e0:fa:44:1f:34:60:c6:fe:85:91:69:
                    35:45:cc:64:18:db:e2:b3:35:db:68:32:e4:a6:cf:
                    b5:99:1e:bd:b9:eb:84:ff:37:8d:21:11:99:d4:8c:
                    39:c1:a7:09:23:b7:4b:1b:dd:aa:c5:64:19:a0:82:
                    4a:2f:3a:a4:15:49:b1:73:d4:69:3f:8c:f1:ae:f9:
                    d1:97:06:6f:21:10:b2:7d:23:05:0b:72:b1:51:b9:
                    c7:94:61:60:e8:3c:d9:8a:06:d5:69:99:f2:59:d2:
                    5c:8c:a4:96:ab:e7:61:06:5f:13:ee:d8:a4:81:48:
                    9e:c8:d4:99:f2:6f:f7:74:d5:fc:56:41:a4:fe:28:
                    f3:21:d9:d8:d4:8b:83:24:bf:73:cd:be:b6:20:25:
                    81:dd:8f:d8:64:c2:75:49:f9:4f:e4:b5:54:42:96:
                    33:39:f9:7d:1e:77:c4:43:8d:2e:2f:93:90:42:81:
                    b5:e1:0d:ab:12:8a:a3:ae:da:bc:8a:d2:a7:c9:91:
                    84:c6:46:e7:e8:5f:25:25:85:49:50:e6:dd:e1:65:
                    f5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:92:84:9C:58:2B:50:62:40:BB:CA:FF:2A:0A:E1:A9:20:76:0A:7B
            X509v3 Authority Key Identifier:
                keyid:4F:FB:30:F4:AF:6F:87:A3:EC:05:B0:9A:B1:44:6F:0A:D6:F0:D6:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HeNEWuDtv1k4Zcj5fho4nJMZCJvjL8RBbf7pCgvu54zi/0/4FFB30F4AF6F87A3EC05B09AB1446F0AD6F0D61B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FFB30F4AF6F87A3EC05B09AB1446F0AD6F0D61B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeNEWuDtv1k4Zcj5fho4nJMZCJvjL8RBbf7pCgvu54zi/0/4FFB30F4AF6F87A3EC05B09AB1446F0AD6F0D61B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:e8:ab:89:1f:6c:15:48:71:f2:42:f5:aa:b9:7f:5e:0a:3c:
         0b:35:27:6a:c7:c0:7b:00:08:af:6f:1e:97:48:23:18:5a:01:
         7c:15:4f:1d:b8:e7:62:83:ff:96:97:5b:6d:98:a7:93:d1:fa:
         f3:fc:c2:a0:fc:48:93:4e:9a:c1:3c:83:d4:e0:16:04:b6:84:
         1e:91:54:bc:d6:1c:78:68:8a:32:38:46:19:f2:09:ad:26:e2:
         a4:d4:1e:e7:54:57:bf:e6:24:19:92:a9:46:cf:c2:a5:97:f0:
         29:46:b0:43:c1:4e:bb:5a:47:a1:27:5e:70:97:95:f4:73:ab:
         ec:59:7d:26:d8:b3:52:61:68:94:40:e5:20:0e:5b:1e:2b:4e:
         90:e6:f6:30:61:b9:dd:3b:ec:18:ce:f6:20:83:67:db:25:46:
         b0:31:89:00:6a:dc:9b:06:75:25:7d:54:1a:a2:f8:c0:99:57:
         dd:50:35:90:48:fe:d8:04:7c:03:0b:26:f4:d0:9c:a4:4a:29:
         61:20:b6:51:58:cb:fe:11:f0:4d:97:07:b4:1a:53:8f:64:af:
         55:bb:6c:6c:cc:e5:4d:8d:fa:b0:26:45:be:09:c9:5e:a5:d5:
         b4:a9:d8:e6:7c:d0:24:d7:4d:ff:02:ad:44:7b:56:7c:04:d1:
         0b:56:f3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----