This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9Jntmgh3CAPNBCL9EALqgi6ffxESBTypqRrVfqixHCsj/0/2544A744BF63CAFEE703C310B888A17EEA5620E4.mft
File:                     2544A744BF63CAFEE703C310B888A17EEA5620E4.mft (raw, json)
Hash identifier:          9PYrQibu6yY0n2O9cgCCeISPY9OCV86Ai0naLwmA4oI=
Subject key identifier:   9C:0A:44:77:98:4A:05:17:1C:A1:15:A4:84:DB:36:02:61:82:B0:56
Authority key identifier: 25:44:A7:44:BF:63:CA:FE:E7:03:C3:10:B8:88:A1:7E:EA:56:20:E4
Certificate issuer:       /CN=2544A744BF63CAFEE703C310B888A17EEA5620E4
Certificate serial:       1A9F3DC8655207B4FDF85F3ADE7D13A4A783CBB9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2544A744BF63CAFEE703C310B888A17EEA5620E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Jntmgh3CAPNBCL9EALqgi6ffxESBTypqRrVfqixHCsj/0/2544A744BF63CAFEE703C310B888A17EEA5620E4.mft
Manifest number:          01A5
Signing time:             Sat 06 Dec 2025 18:07:00 +0000
Manifest this update:     Sat 06 Dec 2025 18:02:00 +0000
Manifest next update:     Sun 07 Dec 2025 20:46:00 +0000
Files and hashes:         1: 323830343a346362303a383030303a3a2f33342d313238203d3e20323637333835.roa (hash: jXeF+NgCQ2gMkcwEAiC47KRxnIEU5Xd6k15HoQOcTM8=)
                          2: 323830343a346362303a3a2f33342d313238203d3e20323637333835.roa (hash: MxN3sQ7DiVIAbxEmIqtHs315v2THdCLVIjHFC01hUkw=)
                          3: 323830343a346362303a633030303a3a2f33342d313238203d3e20323637333835.roa (hash: yv2kcsYsnQCGKA/gjgiVtFG4Q/27mIoHFK9WV18+BIY=)
                          4: 2544A744BF63CAFEE703C310B888A17EEA5620E4.crl (hash: otkr/sUna9DiMHHBCFdlwSIhb+l9jP6bTBaKSx5tSKM=)
                          5: 34352e3233342e3230382e302f32322d3332203d3e20323637333835.roa (hash: yq5XeCU0gzS8O2JDLt36f5CmAWg447NZw84atnW3Iig=)
                          6: 323830343a346362303a343030303a3a2f33342d313238203d3e20323637333835.roa (hash: OGyiChGR3iZvC06g735xc0xRFImHPm1xPNayvGC7P+Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Jntmgh3CAPNBCL9EALqgi6ffxESBTypqRrVfqixHCsj/0/2544A744BF63CAFEE703C310B888A17EEA5620E4.crl
                          rsync://rpki-repo.registro.br/repo/9Jntmgh3CAPNBCL9EALqgi6ffxESBTypqRrVfqixHCsj/0/2544A744BF63CAFEE703C310B888A17EEA5620E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2544A744BF63CAFEE703C310B888A17EEA5620E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 20:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:9f:3d:c8:65:52:07:b4:fd:f8:5f:3a:de:7d:13:a4:a7:83:cb:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2544A744BF63CAFEE703C310B888A17EEA5620E4
        Validity
            Not Before: Dec  6 18:02:00 2025 GMT
            Not After : Dec  7 20:46:00 2025 GMT
        Subject: CN=9C0A4477984A05171CA115A484DB36026182B056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d6:9d:81:76:70:8f:7f:e0:c1:0b:5f:63:6f:
                    19:b8:bb:0e:c7:74:f6:df:e7:ef:d4:d2:11:3e:42:
                    8a:69:ea:3f:23:50:e9:fb:51:22:fe:31:8f:bb:d1:
                    87:ac:8b:9c:d0:98:be:c2:96:03:d8:f7:b7:fd:c0:
                    9a:93:84:29:9b:66:2a:19:5d:7b:78:11:05:22:6a:
                    20:bb:a6:83:f6:be:e0:06:75:f7:07:1f:36:9e:5b:
                    5d:3c:03:ac:47:23:93:13:61:aa:a0:2c:6a:3a:bd:
                    25:6a:77:68:e2:09:cd:51:2f:ac:90:00:5e:0d:78:
                    6c:63:3a:7a:85:e6:c4:64:79:d6:af:96:02:da:0d:
                    d0:b8:c6:dc:e4:c3:20:a0:51:5d:40:0a:9a:c1:3e:
                    8e:a8:82:ca:2a:4c:52:16:7b:da:c3:bf:da:e3:7f:
                    32:01:99:2f:56:34:7c:19:7c:6b:6d:d7:e2:c2:2e:
                    0c:30:f5:dd:3b:78:e1:40:ba:19:58:a2:79:0d:fb:
                    5e:7c:70:ae:4f:01:a3:67:2b:4f:b1:96:fb:a5:3c:
                    00:43:06:67:a6:11:3e:e0:4c:02:93:2c:f6:a3:60:
                    0c:d2:ad:35:da:6a:4b:18:5d:fc:26:be:3e:4f:c5:
                    12:d0:c1:fe:e6:55:ac:9f:a2:6e:31:21:7d:62:91:
                    e2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:0A:44:77:98:4A:05:17:1C:A1:15:A4:84:DB:36:02:61:82:B0:56
            X509v3 Authority Key Identifier:
                keyid:25:44:A7:44:BF:63:CA:FE:E7:03:C3:10:B8:88:A1:7E:EA:56:20:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Jntmgh3CAPNBCL9EALqgi6ffxESBTypqRrVfqixHCsj/0/2544A744BF63CAFEE703C310B888A17EEA5620E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2544A744BF63CAFEE703C310B888A17EEA5620E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Jntmgh3CAPNBCL9EALqgi6ffxESBTypqRrVfqixHCsj/0/2544A744BF63CAFEE703C310B888A17EEA5620E4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:39:cb:20:87:b3:35:7a:b3:da:64:de:e9:57:f4:ce:e6:0a:
         23:e5:69:e7:01:0b:9c:d6:5d:ae:cd:7e:e1:f6:75:4c:ce:c1:
         de:48:c8:5b:9b:98:11:33:33:56:2b:16:1a:93:e7:a3:93:8a:
         ec:cf:76:84:08:e6:0c:37:b3:a1:6f:b7:f5:ca:f9:0a:b4:d0:
         72:09:f3:1f:ac:82:80:c7:9c:69:ac:08:3b:54:6c:b3:e8:88:
         03:2e:5d:25:f3:f8:4f:3b:17:4b:f4:ba:24:bb:69:89:44:f9:
         3d:c3:95:c8:1f:7c:58:02:6d:a0:98:4e:af:54:e5:f8:3b:14:
         2f:68:2c:97:b7:80:4e:a2:60:e8:65:9c:9a:90:f7:62:69:a8:
         8c:3e:1d:a7:1e:b5:02:a9:02:98:65:8b:7e:86:d5:96:3b:f0:
         d5:32:5a:88:aa:ae:30:d2:44:04:dd:23:e5:89:68:fb:07:71:
         f1:10:f5:51:00:ab:c5:a2:81:61:ac:1d:2e:1f:fa:d1:00:4c:
         4e:14:7e:65:ea:67:63:18:79:c7:bc:87:9c:89:91:b6:18:a3:
         25:15:c5:38:30:22:7a:d5:28:7c:ce:7f:98:14:19:0a:8d:2d:
         76:9e:38:28:28:04:b2:c1:19:d9:b2:01:10:9f:34:9f:47:30:
         79:8e:f8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:51:54 2025 by rpki-client