This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft
File:                     4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft (raw, json)
Hash identifier:          Qd/khaD45jooHx3AkTlCe3Vn4QGE/PljGoct2vrEfSw=
Subject key identifier:   E1:9E:54:50:E5:0C:AD:C7:B7:3A:52:8C:32:CC:CD:EB:2A:70:B2:28
Authority key identifier: 44:07:DF:C1:CD:58:AD:40:09:74:B8:DC:4C:0A:31:D4:EE:5C:2A:13
Certificate issuer:       /CN=4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13
Certificate serial:       15DC39416DB160D6FB993FE3C5FC1EAC0DE4CF60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft
Manifest number:          014B
Signing time:             Fri 19 Dec 2025 10:24:24 +0000
Manifest this update:     Fri 19 Dec 2025 10:19:23 +0000
Manifest next update:     Sat 20 Dec 2025 10:49:23 +0000
Files and hashes:         1: 3139312e3234332e3138382e302f32322d3332203d3e20323633353039.roa (hash: 2YCS6Yb/9D0/n8xix6Bzd5N6XCOxnBclmTpI31jfQuw=)
                          2: 3139312e3234332e3138302e302f32322d3332203d3e20323633353039.roa (hash: KlULxHMxyBYgHOWDvr82ep/Pt0PmGQBYgR+pKvkMFlE=)
                          3: 3139312e3234332e3137362e302f32322d3332203d3e20323633353039.roa (hash: 5MnHP1gwm6VSUR7iHYTvcw72QzSqthXM1z6v3zFxW5g=)
                          4: 3139312e3234332e3138342e302f32322d3332203d3e20323633353039.roa (hash: gplvuyLjGUhF+i6ssDirDxIMyE9T2g6roXbZ9yzSMSc=)
                          5: 4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.crl (hash: w0u447XVwfB4zcQYjKU3haiyX0o4htAGsmjH6FAWtlg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.crl
                          rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 10:49:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:dc:39:41:6d:b1:60:d6:fb:99:3f:e3:c5:fc:1e:ac:0d:e4:cf:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13
        Validity
            Not Before: Dec 19 10:19:23 2025 GMT
            Not After : Dec 20 10:49:23 2025 GMT
        Subject: CN=E19E5450E50CADC7B73A528C32CCCDEB2A70B228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8e:23:68:68:bf:0f:12:ce:a5:d3:1e:df:42:
                    5c:3e:2a:91:d4:f2:c0:a9:3f:f1:49:b1:c9:13:21:
                    a9:ff:a3:69:12:6a:49:fe:12:0a:b7:bc:e1:43:77:
                    ec:4f:3c:3f:4a:0d:18:69:3f:13:24:c5:c9:9e:c6:
                    3f:17:3e:c7:86:af:9c:77:7a:8b:ec:72:91:60:5c:
                    bf:06:d1:7d:27:61:58:dd:d3:c7:00:d3:a1:6e:c4:
                    7f:4c:f0:d3:b3:f5:fe:7d:fb:a0:f2:b4:cd:8a:d9:
                    ee:73:28:25:e4:46:2f:7d:e9:ad:09:9d:90:3d:e4:
                    b8:06:38:60:24:f6:6c:32:09:e9:68:00:c5:0e:f4:
                    0b:34:11:d6:1b:11:f4:b0:2a:1d:7b:20:fc:56:47:
                    87:48:2b:c9:d6:02:f4:8b:dd:a9:20:2c:02:f8:74:
                    06:69:1b:fb:1e:81:19:c6:3c:68:19:41:35:40:07:
                    68:44:a5:76:a2:6a:4d:cb:44:e3:73:a7:f7:42:6a:
                    7a:80:a1:60:6c:2b:7e:b9:4e:e0:e6:46:27:9a:46:
                    42:a9:02:b7:c5:84:fc:76:5d:4a:30:7c:26:49:d7:
                    dd:6e:58:8f:46:69:34:9f:8b:70:57:a3:72:37:7f:
                    ed:72:a4:76:3e:d6:20:45:a8:6a:4f:41:80:0c:38:
                    51:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:9E:54:50:E5:0C:AD:C7:B7:3A:52:8C:32:CC:CD:EB:2A:70:B2:28
            X509v3 Authority Key Identifier:
                keyid:44:07:DF:C1:CD:58:AD:40:09:74:B8:DC:4C:0A:31:D4:EE:5C:2A:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:f3:c7:54:9e:f8:54:e0:8d:39:95:ad:d7:7b:c3:72:1e:17:
         c7:54:93:0c:16:af:4d:c1:43:54:62:97:d7:fc:b7:86:6f:c6:
         bd:15:9b:c2:bd:56:a9:71:a6:e7:a7:f0:3d:54:8e:79:f2:b1:
         f8:d3:94:49:62:47:6d:7a:c4:bd:63:75:8f:7d:7c:04:c4:22:
         e0:3a:31:04:fa:66:17:21:02:96:ca:4f:51:45:6d:31:28:e7:
         e8:16:8c:36:23:53:8e:44:53:39:6d:21:84:a7:ee:cf:f1:f7:
         5d:69:c0:bc:3d:4b:e0:c1:10:b5:3a:81:9d:35:9d:97:db:3a:
         cb:89:9a:b6:93:d4:10:47:f7:7a:c6:60:99:7f:04:5d:07:43:
         d2:33:de:66:9a:4d:b4:85:fc:84:5d:c7:14:c6:e3:6d:c5:db:
         a4:31:69:5c:dc:2f:7b:36:e2:2d:9b:51:60:2e:bf:fe:6f:c6:
         8c:b9:31:c3:6a:3e:19:6d:58:4a:8b:11:eb:26:8c:b3:a4:8d:
         13:66:35:66:9a:1c:de:6f:06:b0:1b:33:49:f2:2f:23:01:f6:
         cd:5c:fc:bf:4f:c5:fc:72:13:c7:c7:fb:05:4f:4f:9f:7f:f8:
         af:6b:d6:fb:f4:53:6a:f1:4f:0a:6d:a1:fb:23:48:51:5d:84:
         1b:1e:f3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----