This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/1/4E4DCA5E9F4558BA38892642829692F839F2A231.mft
File:                     4E4DCA5E9F4558BA38892642829692F839F2A231.mft (raw, json)
Hash identifier:          qRw1IMJqJRRTySrmMkuk7+JoWgfW/XEYqiFMnwA5yk0=
Subject key identifier:   F5:A5:99:94:50:9A:02:3C:03:78:B4:F7:C8:FE:D0:7E:8D:16:87:E7
Authority key identifier: 4E:4D:CA:5E:9F:45:58:BA:38:89:26:42:82:96:92:F8:39:F2:A2:31
Certificate issuer:       /CN=4E4DCA5E9F4558BA38892642829692F839F2A231
Certificate serial:       4D5B15D91F8F2A3DADDFBDCB3886A6B026EA7DED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4DCA5E9F4558BA38892642829692F839F2A231.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/1/4E4DCA5E9F4558BA38892642829692F839F2A231.mft
Manifest number:          032F
Signing time:             Sat 06 Dec 2025 10:22:41 +0000
Manifest this update:     Sat 06 Dec 2025 10:17:41 +0000
Manifest next update:     Sun 07 Dec 2025 12:10:41 +0000
Files and hashes:         1: 323830343a356365633a3a2f33322d3438203d3e20323638393339.roa (hash: s3h95eMKxmkXSGki4ZHcCoW2ELo66lgT49Z+vc4H8Xk=)
                          2: 4E4DCA5E9F4558BA38892642829692F839F2A231.crl (hash: hLFyaO4rSXhJbsbmIMNGWsKvBS4MRJmiYaypeyzcuxc=)
                          3: 34352e3137362e32342e302f32322d3234203d3e20323638393339.roa (hash: 7owOvjKt8S5yyPckdQ+ocfHLQ1Lqtvr5DkC6evVNYxw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/1/4E4DCA5E9F4558BA38892642829692F839F2A231.crl
                          rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/1/4E4DCA5E9F4558BA38892642829692F839F2A231.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4DCA5E9F4558BA38892642829692F839F2A231.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 12:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:5b:15:d9:1f:8f:2a:3d:ad:df:bd:cb:38:86:a6:b0:26:ea:7d:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E4DCA5E9F4558BA38892642829692F839F2A231
        Validity
            Not Before: Dec  6 10:17:41 2025 GMT
            Not After : Dec  7 12:10:41 2025 GMT
        Subject: CN=F5A59994509A023C0378B4F7C8FED07E8D1687E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:04:90:a3:71:27:b5:76:3e:15:c9:fc:0c:e3:
                    41:ba:68:90:ff:39:ed:d2:a0:0c:6e:5f:8d:f0:4d:
                    42:e6:96:fe:c8:09:e5:72:41:04:dc:7e:48:45:ae:
                    28:99:87:ab:b5:08:45:3c:fb:76:7e:e1:33:e4:51:
                    43:16:09:7c:03:4c:ec:d8:0f:e8:fc:7d:cb:af:4a:
                    67:e3:8d:50:69:65:54:32:1d:e6:08:2e:65:27:04:
                    dd:97:d9:50:61:ec:d9:e0:3a:29:73:9b:2b:fd:b7:
                    e2:cc:8b:fe:47:b7:17:3a:8d:fa:7d:54:3f:17:a0:
                    c8:d0:5e:fe:9e:75:1d:3d:02:c2:d2:81:e3:bb:ff:
                    eb:09:2c:98:c0:c4:2d:fe:bd:fb:ec:66:16:c2:91:
                    12:53:b9:14:bb:8d:74:70:1f:9b:39:54:f3:bf:31:
                    e8:f9:21:f7:29:28:3e:97:0e:49:52:e8:95:d3:48:
                    b3:14:33:10:e7:1b:14:c9:0e:d9:ac:46:90:1b:46:
                    88:01:8f:5c:ea:76:52:3c:77:97:3e:58:cf:b6:44:
                    fe:af:dc:90:c9:4a:1e:7a:b1:a6:22:a1:fb:2a:1e:
                    c3:c7:6f:d2:ea:5b:e2:4c:29:84:eb:c4:0b:b7:a4:
                    40:c0:a9:ac:4e:22:ed:e6:81:b5:87:24:10:5b:4f:
                    42:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A5:99:94:50:9A:02:3C:03:78:B4:F7:C8:FE:D0:7E:8D:16:87:E7
            X509v3 Authority Key Identifier:
                keyid:4E:4D:CA:5E:9F:45:58:BA:38:89:26:42:82:96:92:F8:39:F2:A2:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/1/4E4DCA5E9F4558BA38892642829692F839F2A231.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4DCA5E9F4558BA38892642829692F839F2A231.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/1/4E4DCA5E9F4558BA38892642829692F839F2A231.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:df:aa:2e:a0:ea:15:7b:ac:e2:e3:4b:35:5b:27:a8:fa:cd:
         57:52:15:49:55:75:8a:27:2f:59:30:e7:17:1c:dc:ee:37:d6:
         34:49:43:1d:04:8f:8e:cd:15:2a:a7:29:0a:74:a2:3c:f3:e6:
         8d:ac:25:42:ac:43:73:a6:4a:93:e3:7a:c1:c6:cf:f4:99:d5:
         f3:94:f9:78:d4:f6:58:5d:0d:59:0d:26:d2:a4:af:2b:42:ac:
         e0:80:70:6c:e3:57:df:47:9d:7e:81:02:fb:66:dc:9d:6a:59:
         5b:74:b7:56:48:f9:ad:7f:b1:3d:36:9d:eb:23:9d:79:c6:b0:
         89:c9:93:d1:f9:0b:1b:18:68:5b:80:5d:d4:d0:c3:01:0f:0e:
         8d:fc:a8:7a:cb:24:57:88:f6:66:bc:69:7b:29:fc:d9:5c:7c:
         4d:f0:72:4f:6e:3a:cd:7a:ed:8e:c1:a7:08:c9:36:ed:17:df:
         f0:15:90:90:6c:e5:e5:63:68:42:dc:4d:5c:84:0a:ce:d3:0e:
         64:e4:b4:e6:31:5d:53:cc:4d:b9:46:d1:4a:a9:59:0b:8a:23:
         de:57:0b:74:13:d7:4e:85:5c:80:8e:6b:c5:a9:2d:57:dd:39:
         61:28:f2:6a:aa:67:bc:40:8b:78:61:bb:d7:24:ed:25:43:11:
         46:45:e3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:38:53 2025 by rpki-client