This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/1/4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E.mft
File:                     4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E.mft (raw, json)
Hash identifier:          FKSUDZG19enraR+XEeZT3YP/9HDEEERdOp+XlI5rqlo=
Subject key identifier:   88:FE:E5:87:8A:DD:4C:45:56:04:15:1F:06:25:8C:73:4D:51:15:2E
Authority key identifier: 4C:C4:6B:4C:FC:BD:D5:3A:EE:15:9E:5B:C8:51:E0:ED:26:BE:7D:3E
Certificate issuer:       /CN=4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E
Certificate serial:       7AB629C1EEA22988CD3509321ACA74F918CC9838
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/1/4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E.mft
Manifest number:          02FA
Signing time:             Fri 05 Dec 2025 21:54:00 +0000
Manifest this update:     Fri 05 Dec 2025 21:49:00 +0000
Manifest next update:     Sun 07 Dec 2025 00:23:00 +0000
Files and hashes:         1: 323830343a353138633a3a2f33322d313238203d3e20323638343539.roa (hash: 41i7Ezse3mYBnAnuGShw9jFWqjRc0WkJ2TykK99pJBU=)
                          2: 4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E.crl (hash: v2a323PFbVxPV/tIIP8xwO9lr9J62il0Xba5FNsQJQc=)
                          3: 34352e3136312e3132382e302f32322d3332203d3e20323638343539.roa (hash: 7yzua8oiIxSfk31Q4r/FcHKoix1rYCC52BC1guGftUM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/1/4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E.crl
                          rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/1/4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 00:23:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b6:29:c1:ee:a2:29:88:cd:35:09:32:1a:ca:74:f9:18:cc:98:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E
        Validity
            Not Before: Dec  5 21:49:00 2025 GMT
            Not After : Dec  7 00:23:00 2025 GMT
        Subject: CN=88FEE5878ADD4C455604151F06258C734D51152E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e3:3a:5c:b1:f6:a8:92:09:82:a9:d5:99:c8:
                    ca:1e:71:35:93:03:96:68:1e:3d:ab:5a:44:a8:36:
                    9f:94:72:2c:c3:19:49:9a:81:1a:90:23:3b:5b:e3:
                    1c:f3:c3:07:aa:26:8a:1c:d5:bc:73:91:5e:15:d2:
                    d1:e6:92:c3:49:3b:c5:1b:c8:57:0d:57:d6:65:e6:
                    db:50:fa:c7:7f:89:09:3b:c5:a3:9b:c6:f4:36:c2:
                    26:c8:f0:51:65:5a:91:25:1a:6e:4d:2a:9a:97:42:
                    a5:4f:b6:27:a1:50:42:09:77:9f:ec:b8:31:3b:eb:
                    ec:02:3f:14:5a:1a:22:02:60:b6:a9:de:74:56:25:
                    db:b4:38:35:67:ff:7b:e7:a0:b4:f3:ef:a8:85:8c:
                    ae:50:ed:23:f5:bd:3e:e2:da:38:25:28:3e:06:2e:
                    fc:85:ce:ac:b0:c4:93:24:cb:39:66:4c:b5:ad:87:
                    2f:7d:fc:f0:fa:ae:00:41:d3:04:a2:b2:40:1f:c6:
                    8a:ba:3f:a9:76:9f:b5:e5:ae:1a:5e:23:b7:d9:c4:
                    68:3e:ea:cc:e0:3d:b5:4d:ec:71:c3:71:f9:e8:dc:
                    af:f7:a7:7b:f4:77:18:18:62:0f:94:8a:86:d9:7f:
                    d2:0b:82:13:fd:9f:6e:c2:1c:26:a8:ed:c3:4c:8a:
                    f1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FE:E5:87:8A:DD:4C:45:56:04:15:1F:06:25:8C:73:4D:51:15:2E
            X509v3 Authority Key Identifier:
                keyid:4C:C4:6B:4C:FC:BD:D5:3A:EE:15:9E:5B:C8:51:E0:ED:26:BE:7D:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/1/4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/1/4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:50:9e:7c:91:d2:6b:98:4f:8b:fe:20:d3:a4:5d:2d:c9:e0:
         65:f5:1e:56:0b:f6:7d:f3:64:47:0b:2a:24:dd:76:0f:a2:c4:
         36:7f:fa:1c:e6:98:1e:74:83:c3:8e:2f:c3:81:f6:43:b6:63:
         30:84:1f:11:a8:6c:32:b9:7a:2c:4f:68:fc:2a:62:99:a2:44:
         b8:d8:ba:71:1a:6e:84:af:82:1f:5e:e1:7c:81:ab:a9:99:08:
         5f:64:81:41:20:06:59:81:63:f2:20:ad:ae:82:bf:11:f8:b4:
         a8:77:24:b1:7f:e2:bb:34:2a:b4:bf:c5:35:49:2e:f2:24:60:
         ac:aa:a1:e7:22:6e:c4:93:d1:33:9e:fd:2e:39:d1:34:36:70:
         e6:90:1d:b9:37:eb:e8:7a:16:62:22:34:74:34:c3:72:10:15:
         89:38:1e:4d:b3:22:f8:15:a7:2e:85:2f:d8:3a:1e:8f:2e:f1:
         f2:5a:3e:4d:08:ae:e7:36:9f:b3:9e:4f:36:6a:30:70:5b:a3:
         d8:b6:4f:f8:5c:26:8e:f7:9a:1a:21:ff:4c:1f:ab:e7:06:da:
         cc:8d:d5:23:75:fe:8b:c8:f6:46:9c:c8:83:69:b1:79:8d:15:
         cb:68:d4:33:2a:62:a6:51:34:59:b6:a0:89:c2:41:bd:9c:70:
         61:78:de:d9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUerYpwe6iKYjNNQkyGsp0+RjMmDgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNENDNDZCNENGQ0JERDUzQUVFMTU5RTVCQzg1MUUwRUQy
NkJFN0QzRTAeFw0yNTEyMDUyMTQ5MDBaFw0yNTEyMDcwMDIzMDBaMDMxMTAvBgNV
BAMTKDg4RkVFNTg3OEFERDRDNDU1NjA0MTUxRjA2MjU4QzczNEQ1MTE1MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ4zpcsfaokgmCqdWZyMoecTWT
A5ZoHj2rWkSoNp+UcizDGUmagRqQIztb4xzzwweqJooc1bxzkV4V0tHmksNJO8Ub
yFcNV9Zl5ttQ+sd/iQk7xaObxvQ2wibI8FFlWpElGm5NKpqXQqVPtiehUEIJd5/s
uDE76+wCPxRaGiICYLap3nRWJdu0ODVn/3vnoLTz76iFjK5Q7SP1vT7i2jglKD4G
LvyFzqywxJMkyzlmTLWthy99/PD6rgBB0wSiskAfxoq6P6l2n7XlrhpeI7fZxGg+
6szgPbVN7HHDcfno3K/3p3v0dxgYYg+UiobZf9ILghP9n27CHCao7cNMivGPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUiP7lh4rdTEVWBBUfBiWMc01RFS4wHwYDVR0j
BBgwFoAUTMRrTPy91TruFZ5byFHg7Sa+fT4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0V5djZ5TVdna2I2ZDFZb0Y2NVZVaXhUZEIzZWVEQmtLRUFyNjdwd25X
eXMvMS80Q0M0NkI0Q0ZDQkRENTNBRUUxNTlFNUJDODUxRTBFRDI2QkU3RDNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDQzQ2QjRDRkNCREQ1M0FF
RTE1OUU1QkM4NTFFMEVEMjZCRTdEM0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N0V5djZ5TVdna2I2ZDFZb0Y2NVZVaXhUZEIzZWVEQmtLRUFyNjdwd25XeXMvMS80
Q0M0NkI0Q0ZDQkRENTNBRUUxNTlFNUJDODUxRTBFRDI2QkU3RDNFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAt1CefJHSa5hPi/4g06RdLcngZfUeVgv2ffNkRwsqJN12D6LENn/6HOaYHnSD
w44vw4H2Q7ZjMIQfEahsMrl6LE9o/CpimaJEuNi6cRpuhK+CH17hfIGrqZkIX2SB
QSAGWYFj8iCtroK/Efi0qHcksX/iuzQqtL/FNUku8iRgrKqh5yJuxJPRM579LjnR
NDZw5pAduTfr6HoWYiI0dDTDchAViTgeTbMi+BWnLoUv2Doejy7x8lo+TQiu5zaf
s55PNmowcFuj2LZP+FwmjveaGiH/TB+r5wbazI3VI3X+i8j2RpzIg2mxeY0Vy2jU
MypiplE0WbagicJBvZxwYXje2Q==
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:27:22 2025 by rpki-client