This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.mft
File:                     99143CBAF11D170944D719FD796009BC38F9F201.mft (raw, json)
Hash identifier:          GPfW7bW0aK9d4Vsb4WawI4HVTBzcejaF4QqKwqA0Zts=
Subject key identifier:   4E:09:E7:93:AD:8A:47:38:8A:7D:39:D2:43:56:7C:51:98:27:BE:AC
Authority key identifier: 99:14:3C:BA:F1:1D:17:09:44:D7:19:FD:79:60:09:BC:38:F9:F2:01
Certificate issuer:       /CN=99143CBAF11D170944D719FD796009BC38F9F201
Certificate serial:       452E4D6FAE917940699869BCC242E2A41C09A3DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99143CBAF11D170944D719FD796009BC38F9F201.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.mft
Manifest number:          0181
Signing time:             Sat 06 Dec 2025 00:47:02 +0000
Manifest this update:     Sat 06 Dec 2025 00:42:02 +0000
Manifest next update:     Sun 07 Dec 2025 01:13:02 +0000
Files and hashes:         1: 3137372e38352e3231362e302f32312d3231203d3e203532383438.roa (hash: dT3drk2apCMlmTaJ587FJLVDRKf659GM5r5ocqzqC5s=)
                          2: 323830343a3666383a3a2f34382d3438203d3e203532383438.roa (hash: 8xtcR24IPJaMX/rjvHeT8tMqZCtqzrZlmnUr2V0pZho=)
                          3: 3137372e38352e3230382e302f32312d3231203d3e203532383438.roa (hash: RRqoJBiXii3TgpvUYwzTzwuOv7ddzpllt21x0hxGtNA=)
                          4: 3136382e3139362e3138382e302f32322d3232203d3e203532383438.roa (hash: wGmW5HddS84Jo/UI8qqwdMdyTdX5hWciOmvr9JPT1Hk=)
                          5: 99143CBAF11D170944D719FD796009BC38F9F201.crl (hash: wMjZvS7//1M3KsObZmNDMyIacBjtd75vcSKxjMAPvIk=)
                          6: 3137372e38352e3232302e302f32322d3232203d3e203532383438.roa (hash: bpwbadI4PJrdbgkJUAI3blXoAxBzzJDOU/RK8agy34I=)
                          7: 3137372e38352e3231322e302f32342d3234203d3e203532383438.roa (hash: MK46EOQmbC35WhEWUmA1L+F9AWzxso9iv0FyQJWVVEg=)
                          8: 323830343a3666383a3a2f33322d3332203d3e203532383438.roa (hash: ArZW0IEPQT9qmNg5J+/twX+29UWHR8soH8MuXLBopaw=)
                          9: 323830343a3666383a633365383a3a2f34382d3438203d3e203532383438.roa (hash: g+kDGTXDx32jeHWBRz886fdCkrH4EgBpA9ppSeKKh58=)
                          10: 3137372e38352e3230392e302f32342d3234203d3e203532383438.roa (hash: +e4JE9WbQSTeKpKZM4B9htThLOM6QwAAvUGG04RlxEg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.crl
                          rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99143CBAF11D170944D719FD796009BC38F9F201.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 01:13:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:2e:4d:6f:ae:91:79:40:69:98:69:bc:c2:42:e2:a4:1c:09:a3:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99143CBAF11D170944D719FD796009BC38F9F201
        Validity
            Not Before: Dec  6 00:42:02 2025 GMT
            Not After : Dec  7 01:13:02 2025 GMT
        Subject: CN=4E09E793AD8A47388A7D39D243567C519827BEAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:07:2c:b1:f5:bb:32:da:10:4b:90:02:13:a8:
                    b1:64:07:00:92:d7:20:9e:dc:85:15:9e:b2:49:56:
                    da:7d:56:b9:ef:8e:19:d4:6f:3c:da:61:bd:b9:89:
                    d5:56:27:f8:e6:aa:cc:94:67:cf:d5:32:22:bd:2d:
                    a2:86:25:d0:d6:36:3d:01:70:03:3f:d5:69:c8:69:
                    3a:a6:26:ae:d6:97:d4:a1:80:de:50:09:ee:33:82:
                    21:08:90:9e:81:ea:a8:27:bf:34:bd:84:07:68:86:
                    fb:e9:e2:83:31:ab:3e:f2:0d:59:4f:4d:cb:df:3a:
                    47:9c:8f:90:94:61:42:e4:66:c3:c4:82:ab:6b:ba:
                    e7:90:54:98:26:c3:5b:a5:d5:ec:4c:fa:4d:7c:2d:
                    40:fc:85:d0:91:7a:46:2d:d9:18:e2:dc:b2:1f:4f:
                    1e:a8:2c:d1:fa:3b:ad:51:a2:a4:65:f0:3b:20:30:
                    28:38:76:be:4d:52:95:db:27:4a:c1:d1:e0:bc:6c:
                    aa:ed:20:a1:e1:1c:b6:15:67:9e:33:33:22:47:27:
                    46:77:b9:2a:d8:a0:8c:cc:ea:8b:d4:5b:d9:cb:bf:
                    84:f4:09:e6:62:0c:6c:b6:35:e5:07:43:6c:c6:51:
                    c5:cd:8d:98:00:42:68:6d:e0:45:9b:b4:a1:c4:08:
                    e3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:09:E7:93:AD:8A:47:38:8A:7D:39:D2:43:56:7C:51:98:27:BE:AC
            X509v3 Authority Key Identifier:
                keyid:99:14:3C:BA:F1:1D:17:09:44:D7:19:FD:79:60:09:BC:38:F9:F2:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99143CBAF11D170944D719FD796009BC38F9F201.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:ae:c4:a7:9a:1c:0d:ba:82:54:d2:c7:98:b5:2c:1f:1d:45:
         f7:8c:5c:e1:a6:10:a3:9a:55:57:60:09:6e:c7:2e:a2:54:da:
         2b:eb:82:01:7a:e5:41:c5:f1:00:68:c4:ba:d8:73:71:ca:9d:
         5f:7b:fd:9c:a0:e2:32:fe:71:24:88:ff:95:34:c6:d2:fb:75:
         2d:e7:64:35:f0:46:d7:3e:ed:eb:69:d4:b0:6a:6e:79:9d:d7:
         bb:14:03:50:d4:dc:d6:9d:a6:df:32:46:d8:bd:2e:a6:4f:78:
         8a:68:76:9b:fe:72:d7:c4:a2:2f:25:71:63:16:34:a0:fd:7e:
         e4:89:9e:ea:8b:cc:30:f6:40:c5:89:0e:72:f2:7e:7b:00:1e:
         44:bf:b9:41:a4:05:a8:4e:2a:b9:83:a2:e1:c3:41:43:28:d7:
         00:a3:31:af:62:c5:60:94:1a:4a:57:8e:55:e7:b0:61:b0:29:
         ad:67:c9:83:8b:aa:bc:10:55:31:f8:e2:58:b0:ad:58:c8:38:
         a1:38:49:c4:cf:43:8b:61:df:04:f5:68:b7:ed:2d:c3:29:ab:
         67:02:1b:f7:84:53:72:cb:24:c1:f4:a8:7d:62:5d:6e:af:7a:
         93:0d:8b:49:d6:6d:20:f4:03:73:45:ce:7b:9e:cb:4a:0c:78:
         2a:78:e4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:13:19 2025 by rpki-client