This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.mft
File:                     CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.mft (raw, json)
Hash identifier:          0L5Qzai90BraD8w2MDBsVe4ANJgkIl0UbFev+uohsiM=
Subject key identifier:   3E:0E:82:68:2B:C4:E1:B0:62:96:37:BB:FE:97:AA:59:57:87:6D:1E
Authority key identifier: CF:F1:45:5C:F4:B4:90:8D:40:46:AE:3E:29:67:ED:5F:4E:2C:C2:6A
Certificate issuer:       /CN=CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A
Certificate serial:       06A1A8BD579A8C6A9ABA16EEFECFF8B0170B1583
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.mft
Manifest number:          4F
Signing time:             Fri 19 Dec 2025 20:08:47 +0000
Manifest this update:     Fri 19 Dec 2025 20:03:47 +0000
Manifest next update:     Sat 20 Dec 2025 20:29:47 +0000
Files and hashes:         1: CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.crl (hash: hkNswjWK9/QQKFocm1azZW6CnMV933/QZK4nKY+01Sg=)
                          2: 3138312e3233322e3132382e302f32322d3234203d3e20323731353132.roa (hash: iSKt+O/N+iNmfjUfkl/1zsDgFZ6/Nhl0ym5tKlT/l5M=)
                          3: 323830343a376362303a3a2f33322d3438203d3e20323731353132.roa (hash: 5Br5hbvYBXoc32hzXjNMrP/gjwU0zbkYoTihpOwr6ok=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.crl
                          rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 20:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a1:a8:bd:57:9a:8c:6a:9a:ba:16:ee:fe:cf:f8:b0:17:0b:15:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A
        Validity
            Not Before: Dec 19 20:03:47 2025 GMT
            Not After : Dec 20 20:29:47 2025 GMT
        Subject: CN=3E0E82682BC4E1B0629637BBFE97AA5957876D1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ab:4b:47:cf:1b:d1:df:a2:1d:46:db:8a:f6:
                    21:4a:88:39:c4:55:9d:e6:42:f1:6a:0d:58:5a:35:
                    03:fa:ed:b8:37:2f:18:bd:9d:c8:fb:be:b4:3d:f5:
                    68:ac:15:70:d9:e6:b9:e6:cc:f5:1a:ac:e8:64:c7:
                    ac:23:47:20:bd:8e:54:9f:1c:c0:d3:69:84:92:2f:
                    d5:80:92:6d:45:da:0b:e8:53:cd:f4:dc:84:1d:97:
                    f4:15:78:9c:d3:cc:af:d2:fe:be:51:a6:77:1a:90:
                    d6:0d:f6:9f:a5:ee:b4:1c:9a:9a:ba:25:4e:74:af:
                    4e:fc:db:48:3e:9c:d4:d3:a4:84:54:a3:91:51:61:
                    c3:da:c4:62:d8:a4:fc:49:9e:18:cf:f3:dd:67:ed:
                    97:42:c9:33:88:f4:b3:74:1d:d0:a6:d9:07:38:e0:
                    6e:48:cd:b1:54:1c:d6:9c:3d:1a:11:e8:4e:ca:f8:
                    10:d0:44:92:4d:7c:d6:56:35:4e:82:c8:84:76:7c:
                    a4:13:3c:e0:42:c2:77:01:b6:ef:01:4e:49:68:3c:
                    a9:61:7b:68:56:6f:0f:09:f8:79:b5:ec:3b:56:c8:
                    b9:48:42:81:45:81:fb:56:13:e5:59:11:62:e3:08:
                    d2:72:04:d4:e3:fd:93:32:72:37:a1:94:a4:ac:44:
                    72:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:0E:82:68:2B:C4:E1:B0:62:96:37:BB:FE:97:AA:59:57:87:6D:1E
            X509v3 Authority Key Identifier:
                keyid:CF:F1:45:5C:F4:B4:90:8D:40:46:AE:3E:29:67:ED:5F:4E:2C:C2:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:40:93:74:05:4f:bc:0f:fa:15:68:32:cb:24:09:10:16:7a:
         3a:30:30:9a:02:03:54:3d:8e:86:4e:81:97:34:fa:56:17:07:
         c3:e3:d4:7b:01:f7:e9:b8:2f:09:bc:41:cf:2f:5b:53:33:bd:
         4e:f5:a0:05:6d:27:95:ff:73:bd:a0:98:3f:68:28:04:3a:ce:
         e6:6e:85:62:b9:b5:d8:14:c9:35:27:d2:d2:84:ab:3e:ae:70:
         6c:20:e4:dd:09:58:c0:df:38:56:ff:a8:43:6d:d5:2c:ca:73:
         32:41:49:97:55:28:14:6e:94:5d:7e:ce:62:f2:42:65:7b:6a:
         01:24:a7:db:bf:1e:26:a3:4d:87:7a:05:61:7d:c4:d2:b5:3c:
         b9:2c:d5:80:5d:a4:23:ba:2b:93:6e:8a:1d:67:c3:ba:1b:ea:
         8e:a1:b1:7c:88:92:22:c7:df:67:c5:55:4c:55:fe:3f:2d:a6:
         be:c6:80:9f:33:81:ca:5c:7d:b6:22:62:b7:87:3b:58:f5:28:
         49:d9:a2:38:75:7e:d7:9d:af:ba:89:79:2d:25:f3:f7:67:dd:
         97:9c:be:52:85:e8:95:fc:0e:5c:fb:85:75:a8:9f:25:e1:34:
         06:2b:1f:e9:85:1e:b4:d1:49:23:15:4f:3a:84:62:af:ac:ad:
         e7:62:5f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:49:09 2025 by rpki-client