This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft
File:                     AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft (raw, json)
Hash identifier:          XJJgHOhNPZSXAstSrV0tnwZKxJVsBbt0o1Iab32LKFw=
Subject key identifier:   57:4E:83:5F:F3:C6:43:2D:57:04:FE:90:23:C1:85:51:F4:8B:31:4E
Authority key identifier: AC:40:A1:FA:2C:73:E5:50:F9:41:27:54:FD:DA:A2:2E:99:3A:0D:26
Certificate issuer:       /CN=AC40A1FA2C73E550F9412754FDDAA22E993A0D26
Certificate serial:       3D95EB80ED77FB18EC73B6085C6A31292EC4D9D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft
Manifest number:          032E
Signing time:             Sat 20 Dec 2025 14:31:02 +0000
Manifest this update:     Sat 20 Dec 2025 14:26:02 +0000
Manifest next update:     Sun 21 Dec 2025 17:22:02 +0000
Files and hashes:         1: 323830343a323161303a3a2f33322d3438203d3e20323634353635.roa (hash: NiYQ1Oj4jlQxAf7CG9stE44f6zRfyXp+SMr92oO0Sk4=)
                          2: AC40A1FA2C73E550F9412754FDDAA22E993A0D26.crl (hash: Axs2sELmDlTlzgGyvv4tSjNOgP20sLUki5mXg7nxmTE=)
                          3: 3133382e3235352e34382e302f32322d3234203d3e20323634353635.roa (hash: +vkDLgW06ADX84gA1CLRdVqziUPHQH1KnbJn/VuJnSU=)
                          4: 3133382e33362e34342e302f32322d3234203d3e20323634353635.roa (hash: UvH9nIlLV7MTTlk+ySp3aQIuOQfzxZDqD2RXeggUE+U=)
                          5: 34352e3136332e32342e302f32322d3234203d3e20323634353635.roa (hash: JEf8pXy01p6LMl3AMIH7leZQ45M0qwFi0UCbJ3ks1zQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.crl
                          rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 17:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:95:eb:80:ed:77:fb:18:ec:73:b6:08:5c:6a:31:29:2e:c4:d9:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC40A1FA2C73E550F9412754FDDAA22E993A0D26
        Validity
            Not Before: Dec 20 14:26:02 2025 GMT
            Not After : Dec 21 17:22:02 2025 GMT
        Subject: CN=574E835FF3C6432D5704FE9023C18551F48B314E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c9:d6:88:b8:32:7a:d6:6c:a3:02:f1:33:cb:
                    58:cc:f6:cf:ef:d4:81:68:93:f9:f6:40:66:aa:e0:
                    d0:4d:51:ac:e2:de:9f:c9:56:11:99:7c:c4:62:0e:
                    eb:c9:ec:75:52:01:a4:1e:f5:9f:8a:44:ea:34:2a:
                    42:a9:9c:5d:a8:49:72:e8:2c:e1:0b:8b:f3:69:d0:
                    0c:7f:76:0e:f4:3e:b9:ee:4f:bf:0c:8d:50:f5:99:
                    7e:33:60:66:ac:aa:50:0b:73:f0:c3:d5:b4:f6:34:
                    64:82:dc:f5:71:ec:dc:d8:74:0c:8d:a4:d0:64:98:
                    30:94:bb:e7:62:51:71:ce:70:37:f7:73:42:08:cb:
                    9d:35:e3:5a:9a:10:48:6c:51:7a:79:10:fa:94:5b:
                    16:13:a2:89:6b:e9:cf:9a:e5:f9:65:d2:2d:df:77:
                    65:8e:5d:22:0d:02:73:ce:00:84:c8:e2:0c:9b:34:
                    0c:8f:fa:7e:f5:61:01:52:d1:af:97:d7:ea:a8:2a:
                    de:77:31:7b:9f:2a:79:4d:07:c2:d9:bf:ec:80:16:
                    01:c7:3e:4c:b7:99:0c:70:92:9e:68:ba:c7:ff:bb:
                    97:0d:a9:1b:b9:bd:e9:d0:17:73:55:f3:96:36:82:
                    79:d5:54:69:7c:71:eb:06:ba:31:09:85:06:56:16:
                    c4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:4E:83:5F:F3:C6:43:2D:57:04:FE:90:23:C1:85:51:F4:8B:31:4E
            X509v3 Authority Key Identifier:
                keyid:AC:40:A1:FA:2C:73:E5:50:F9:41:27:54:FD:DA:A2:2E:99:3A:0D:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:5d:32:ae:48:b8:91:0a:e6:8c:96:37:f8:80:44:cb:c6:b8:
         a2:07:2b:11:da:41:ee:2a:ff:86:b2:c1:28:fe:27:29:d8:dc:
         45:5a:22:83:a1:96:5b:2a:23:04:7b:f9:81:73:d7:49:e0:ac:
         6a:5e:6e:12:d1:bd:fe:55:33:fc:0b:10:a0:b2:2b:05:33:50:
         1f:4a:f6:79:1e:5e:63:51:f7:31:4d:c5:5d:ab:42:7a:01:ab:
         19:09:97:a7:d9:c3:29:77:24:9e:eb:e4:ce:3e:70:16:0f:9d:
         47:f8:2e:e3:ef:8e:15:d5:20:ac:f2:bc:42:bd:e6:85:ce:cb:
         61:bf:c4:de:f9:02:9d:0d:a2:3b:69:68:6c:b3:83:ac:d0:42:
         c0:06:7a:50:d4:8f:8b:cd:bb:b1:6b:45:23:1e:b8:76:c9:8a:
         06:59:f0:53:f5:34:3e:14:c7:9f:35:4f:a8:f3:82:cf:8b:42:
         81:c9:6b:46:db:9a:0c:06:14:db:0e:65:de:03:ed:33:f9:1e:
         58:54:25:c7:38:0d:e7:43:f9:b9:46:74:1d:8c:f4:ff:d4:c6:
         f2:57:37:68:e3:a8:93:5b:2f:92:1e:90:55:0c:ed:23:f5:e0:
         9a:95:b2:94:ef:ec:51:dc:de:ba:19:83:29:c5:c0:b7:49:b5:
         2a:7f:44:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----