This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.mft
File:                     4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.mft (raw, json)
Hash identifier:          5YWsSjMMG72XXzCxd/UshjAhn9gOCsTZMkwf8qdHTe4=
Subject key identifier:   B9:FD:05:CA:B0:CC:FC:7E:1C:E1:64:AA:23:7F:4F:8F:A7:41:63:3E
Authority key identifier: 4E:87:B4:46:2F:90:42:B5:2A:A4:D6:5A:C7:D2:FD:92:C2:70:2D:D7
Certificate issuer:       /CN=4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7
Certificate serial:       40CDA70602FBD7084130429655BC62652C8AA84E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.mft
Manifest number:          02DF
Signing time:             Fri 05 Dec 2025 22:03:07 +0000
Manifest this update:     Fri 05 Dec 2025 21:58:07 +0000
Manifest next update:     Sun 07 Dec 2025 01:47:07 +0000
Files and hashes:         1: 3138362e3231312e3132382e302f31372d3332203d3e203134383430.roa (hash: ftA6nh79OsZrhLu+Cvl+lrj62PLDGQiLBHzDS0+NRqQ=)
                          2: 3230302e3139352e3232342e302f31392d3332203d3e203631383839.roa (hash: sTSl6DE+Q+MBofkv997YfHs0yOOPoDm3yLB3TKBLG1g=)
                          3: 3230302e3231352e3230382e302f32302d3332203d3e203134383430.roa (hash: p1uZlN8Wlt/fWaORsWNF+wGYb4BEwpix52g3HRvieik=)
                          4: 3230312e31362e36342e302f31382d3332203d3e203134383430.roa (hash: 21UHJgh6AzdIGqDB7DFLaL0tvIsd1nTk/LNYgLppA5I=)
                          5: 323830343a383a3a2f33302d313238203d3e203134383430.roa (hash: frigbEFULPdy1PgELAsAV6DgUeEDZqk8iidvtdoKVHY=)
                          6: 3138372e3130332e39362e302f31392d3332203d3e203134383430.roa (hash: FyfHWuY+9899LZebFp3dHC5ejksLfM26zSb/CsLJoXY=)
                          7: 3230302e3134332e36342e302f31382d3332203d3e203134383430.roa (hash: fIFgCyxGOKmp/2srRYvExO9oYUDF2tlIGssGQdzzfRY=)
                          8: 323830343a6533343a3a2f33322d313238203d3e203631383839.roa (hash: HYEvMJRjG5QXDDwsBWHNgE5Mg3D5Fvs4XyqLfXohRnQ=)
                          9: 4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.crl (hash: orKYrUo5poMmqEp78hs1x7Lv86twMAeBwSqwFlhjMlw=)
                          10: 3230302e302e33322e302f32302d3332203d3e203631383839.roa (hash: rn3fj/oh+E3vX7EFCkzSRRB/+AC0ELhI0buXS0WU9pU=)
                          11: 3137372e3135322e3138342e302f32322d3332203d3e203631383839.roa (hash: YjGrnWzYnTTxLNqJBqhuiy+v80Vyl6D6n64H6L1kPwA=)
                          12: 3230312e31362e302e302f31382d3332203d3e203134383430.roa (hash: up9ZCphMiwN6lb2b00jYK/8devAr+DhXJXs8vsTHYN8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.crl
                          rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 01:47:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:cd:a7:06:02:fb:d7:08:41:30:42:96:55:bc:62:65:2c:8a:a8:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7
        Validity
            Not Before: Dec  5 21:58:07 2025 GMT
            Not After : Dec  7 01:47:07 2025 GMT
        Subject: CN=B9FD05CAB0CCFC7E1CE164AA237F4F8FA741633E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:30:85:86:96:4e:fb:70:9b:9f:99:d3:a4:01:
                    c5:6a:cd:2a:dc:fe:ac:4d:4b:f6:56:0b:f6:e6:b8:
                    ae:6e:4e:a8:63:8e:f3:fd:fd:2c:cc:90:2c:36:9f:
                    2d:38:e0:f9:e4:90:23:10:10:2c:d6:ea:fe:51:57:
                    72:44:87:aa:93:5f:07:e0:e5:45:a6:b0:69:9b:71:
                    ad:67:12:f5:82:c3:c6:d1:77:05:88:cf:33:8c:03:
                    14:a9:f0:37:70:bb:9a:c6:f5:4d:3b:8c:98:80:af:
                    5b:83:24:fe:87:20:0f:b4:66:e5:32:2e:8e:51:1b:
                    38:c8:d1:78:2d:8c:83:d2:c5:50:c4:13:5d:fa:a1:
                    78:16:6f:19:3e:2a:3d:fe:a9:43:54:02:0c:93:55:
                    f5:06:e6:71:f2:73:64:2e:82:07:28:3a:68:97:74:
                    30:3a:4d:f4:99:be:3f:ef:9b:e6:54:69:3a:53:f6:
                    b3:45:f6:ff:cb:2b:ea:25:f9:5e:3c:40:e5:e8:4d:
                    3f:b4:8a:08:15:45:9e:0b:3f:9e:df:b0:0b:a9:87:
                    ed:93:67:86:fe:bc:28:f0:20:44:c6:e9:35:c7:a0:
                    39:af:a6:6a:6f:e9:c9:d2:23:40:c8:37:83:59:e9:
                    75:fd:0b:9d:6a:78:2a:48:0d:34:c1:6c:5b:51:30:
                    48:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FD:05:CA:B0:CC:FC:7E:1C:E1:64:AA:23:7F:4F:8F:A7:41:63:3E
            X509v3 Authority Key Identifier:
                keyid:4E:87:B4:46:2F:90:42:B5:2A:A4:D6:5A:C7:D2:FD:92:C2:70:2D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:65:44:c5:45:cb:dd:62:d0:cf:41:a2:6f:64:26:39:ef:2a:
         d3:b7:9a:ec:ac:fe:80:36:fc:1d:cb:d8:ab:2f:48:34:31:6d:
         2f:2a:8e:aa:16:cb:52:56:7d:6b:fe:ec:37:72:bb:91:06:4f:
         16:62:d2:86:13:e8:69:ed:0d:c9:8c:15:46:c7:dc:0b:8f:88:
         8c:cf:33:26:16:04:5b:8e:7e:a7:12:65:1e:e1:d4:e8:00:83:
         97:9d:9f:2f:b1:2a:b7:20:6d:e1:e6:a6:9a:0b:1b:9a:03:ed:
         3e:03:0a:21:20:10:36:ff:0d:b9:bc:f0:8c:5a:b8:11:52:51:
         96:1e:9e:75:72:ca:cf:9e:c4:39:91:a0:44:38:27:77:94:b9:
         2d:7b:fa:7d:f2:f6:79:be:6b:0b:48:bc:75:7c:3f:4a:51:51:
         34:bb:09:f5:f0:a9:94:16:94:90:c2:c0:c2:7a:d7:c6:e8:9c:
         0e:d7:13:d9:43:83:73:e4:30:a6:62:ac:a2:f6:b2:2a:f6:ad:
         13:44:3c:2b:f8:a4:9a:84:39:98:25:d4:ce:05:d0:c5:cd:c4:
         99:fa:7e:57:71:17:60:a5:e3:73:7f:2a:89:9c:41:92:7e:a8:
         07:96:4a:27:cd:e0:13:45:8b:29:49:9f:de:19:e9:20:49:b6:
         a1:f8:d4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:23:29 2025 by rpki-client