This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A.mft
File:                     E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A.mft (raw, json)
Hash identifier:          AdF3m6KtFE3BevGYIS8wJYt3JljntxKlMDZESa9okWQ=
Subject key identifier:   17:2E:6A:52:0C:43:EB:D2:C6:95:7C:01:68:A3:0F:8C:10:B7:41:20
Authority key identifier: E7:D1:90:A6:B0:6E:0C:CD:D0:31:1C:10:E2:F5:FA:64:61:CC:7D:9A
Certificate issuer:       /CN=E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A
Certificate serial:       4046A06F1FFC9403BC4AB6659AB43AB9FFD42226
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A.mft
Manifest number:          0140
Signing time:             Sun 21 Dec 2025 13:18:27 +0000
Manifest this update:     Sun 21 Dec 2025 13:13:27 +0000
Manifest next update:     Mon 22 Dec 2025 16:35:27 +0000
Files and hashes:         1: 3136372e3234392e36342e302f32322d3234203d3e20323634353038.roa (hash: dF2+76cfuLeNvD9ZxT7n4BNAULWR+KGOEh6zpdjaqZA=)
                          2: E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A.crl (hash: 7g4e7Wr0cmXOQAFNzrCdpaUvoxlPazpxnqKTxGaB64A=)
                          3: 3136382e3139362e342e302f32322d3234203d3e20323634353038.roa (hash: +aZvaW0UF/TiWgTM4PsCd55b6l7vX+zMulPHEnXbCgo=)
                          4: 323830343a323062303a3a2f33322d3438203d3e20323634353038.roa (hash: vkoLWI26GiuuozvXrpkKPobFcl8TDXNof5wr2hOdrYw=)
                          5: 3133322e3235352e3135322e302f32322d3234203d3e20323634353038.roa (hash: +eluInlviNYNWJeHLtTZjx1ItEvLQrcPfWWcjyh/Tp0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A.crl
                          rsync://rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 16:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:46:a0:6f:1f:fc:94:03:bc:4a:b6:65:9a:b4:3a:b9:ff:d4:22:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A
        Validity
            Not Before: Dec 21 13:13:27 2025 GMT
            Not After : Dec 22 16:35:27 2025 GMT
        Subject: CN=172E6A520C43EBD2C6957C0168A30F8C10B74120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c9:f0:a4:1e:56:13:4c:60:72:25:02:1d:6e:
                    69:cb:29:c5:3e:41:d5:35:af:9a:92:bf:0b:15:e2:
                    57:b9:45:33:a3:32:2d:e4:f2:b3:02:e4:b2:0a:65:
                    2c:e2:93:ef:d0:5d:c1:34:08:66:9c:43:86:3e:91:
                    98:e6:ac:b8:0d:08:03:bb:d6:a0:73:89:74:00:53:
                    3b:49:d9:2a:8e:3d:4b:08:05:b1:5b:77:b3:80:e1:
                    78:b6:e1:6b:06:3a:33:ef:03:96:bb:b6:87:31:aa:
                    73:fe:6b:35:46:b9:c8:2e:79:7a:ad:01:56:d0:4e:
                    f7:14:cf:74:cf:86:0d:d3:1c:fe:a6:06:98:1b:11:
                    3a:f9:68:b2:88:87:45:7b:a0:13:bb:c1:6e:a7:97:
                    ad:41:7c:a9:ce:42:21:28:f6:4c:47:d8:05:9e:0f:
                    41:87:c1:72:43:56:5c:f4:dc:58:e1:c7:10:30:8a:
                    e1:99:51:47:ed:26:45:37:39:a7:cb:5f:4e:7c:4c:
                    5f:33:46:06:cc:a5:3a:fd:e1:fc:6f:a6:8c:95:dc:
                    ba:0b:44:25:0c:99:08:2b:8f:5a:ed:45:3b:6b:6c:
                    db:a4:5b:62:ba:de:54:3b:9d:38:fb:2b:d7:bd:f5:
                    3e:c3:9b:04:6d:31:74:5b:90:b5:c1:9e:15:5a:75:
                    fa:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:2E:6A:52:0C:43:EB:D2:C6:95:7C:01:68:A3:0F:8C:10:B7:41:20
            X509v3 Authority Key Identifier:
                keyid:E7:D1:90:A6:B0:6E:0C:CD:D0:31:1C:10:E2:F5:FA:64:61:CC:7D:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:62:40:29:b9:93:66:bc:7a:68:8b:66:74:50:d2:9a:a2:ea:
         71:f8:3b:c9:23:54:c7:b3:28:2e:f3:2c:87:23:47:cd:98:c9:
         f0:e4:59:16:6e:b6:c9:5d:98:b3:a9:fe:6c:d9:88:b6:2b:32:
         d8:4d:5e:6c:a2:dd:cb:64:f1:72:5c:64:d3:db:33:6a:31:48:
         7f:a4:c5:92:3b:40:35:d4:12:d1:fa:d0:64:b1:73:ae:f7:13:
         53:9c:1b:3c:74:a3:00:5f:6d:01:80:94:83:fa:e0:b0:5e:3a:
         df:94:3a:9c:23:f3:64:e4:bc:44:5f:8b:64:b2:2d:7a:58:eb:
         84:18:28:08:b6:cb:5b:d6:b3:80:42:7f:da:2f:d5:ff:9b:8a:
         12:83:68:e6:cf:44:55:a2:4a:32:28:d8:3a:d5:fb:3d:6d:f1:
         a5:05:06:78:96:d5:1e:85:93:93:24:63:13:67:dc:44:32:b3:
         ca:55:6a:43:b8:90:51:21:43:f7:7b:1c:cb:a1:2d:1a:55:f7:
         f3:c2:fc:89:b2:f7:33:5d:75:d3:5a:1d:27:69:b6:1d:fc:9b:
         d6:f7:78:75:48:d8:a9:c6:05:5f:03:ee:d9:c9:c2:00:a0:37:
         e5:80:8a:aa:44:14:18:43:f0:c6:28:aa:8c:c4:9e:b9:67:71:
         f3:aa:30:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----