This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/7920D02177ECD47B7DD8D2271C0793BAEA92E38F.mft
File:                     7920D02177ECD47B7DD8D2271C0793BAEA92E38F.mft (raw, json)
Hash identifier:          MQC2VPfIiC0WZifBMr94vzKd8+4qaQ+duNNGDNgRRG8=
Subject key identifier:   61:7E:8D:FB:A5:AC:78:D6:48:C0:78:64:F8:E4:A4:53:B6:A0:14:CE
Authority key identifier: 79:20:D0:21:77:EC:D4:7B:7D:D8:D2:27:1C:07:93:BA:EA:92:E3:8F
Certificate issuer:       /CN=7920D02177ECD47B7DD8D2271C0793BAEA92E38F
Certificate serial:       3087D76F98B0DA52FF36543AB7FEFDD59F3FD9F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7920D02177ECD47B7DD8D2271C0793BAEA92E38F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/7920D02177ECD47B7DD8D2271C0793BAEA92E38F.mft
Manifest number:          4A
Signing time:             Sat 06 Dec 2025 16:35:25 +0000
Manifest this update:     Sat 06 Dec 2025 16:30:25 +0000
Manifest next update:     Sun 07 Dec 2025 19:32:25 +0000
Files and hashes:         1: 7920D02177ECD47B7DD8D2271C0793BAEA92E38F.crl (hash: MrwFQNXrwUgQuQx7hfpF0+BsE00XEnC7sI8pzf8Agng=)
                          2: 3138362e3230382e3137362e302f32302d3234203d3e20323632373431.roa (hash: jEz9zY+wxzS97iwHB9xE1PykVRf11fGW8YWmOIzhiCw=)
                          3: 323830343a326233303a3a2f33322d3336203d3e20323632373431.roa (hash: 7UQAkAdK8C+wlUP4V5aeumqZo5vBRfE6ctyUTDb+9ww=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/7920D02177ECD47B7DD8D2271C0793BAEA92E38F.crl
                          rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/7920D02177ECD47B7DD8D2271C0793BAEA92E38F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7920D02177ECD47B7DD8D2271C0793BAEA92E38F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 19:32:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:87:d7:6f:98:b0:da:52:ff:36:54:3a:b7:fe:fd:d5:9f:3f:d9:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7920D02177ECD47B7DD8D2271C0793BAEA92E38F
        Validity
            Not Before: Dec  6 16:30:25 2025 GMT
            Not After : Dec  7 19:32:25 2025 GMT
        Subject: CN=617E8DFBA5AC78D648C07864F8E4A453B6A014CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:97:b3:43:8d:fe:3f:b7:79:5a:c7:9e:ce:d5:
                    2a:1e:a4:9e:1b:c8:04:9d:ff:e7:a9:d9:46:eb:b1:
                    41:ac:23:21:ed:af:22:9b:a2:7a:10:9a:18:40:84:
                    33:20:36:e8:47:18:bb:f1:5d:ba:3f:e5:f6:9e:24:
                    4c:3e:fc:4e:88:99:54:ba:20:09:4c:5e:80:23:5f:
                    0f:89:62:87:cd:98:4a:d1:96:aa:e8:f6:bc:a2:fc:
                    b0:6e:53:ef:61:1c:df:dd:90:53:10:2a:17:8c:5a:
                    4a:80:03:92:f6:87:3c:a8:8b:fa:03:e0:c6:4c:e4:
                    d1:c3:ea:85:d5:74:52:02:b0:96:90:60:20:db:28:
                    94:2e:fa:70:18:17:05:00:0f:2f:b9:50:65:6c:6b:
                    e6:a1:3f:f1:c7:89:36:12:9c:f0:fc:fc:a7:ae:b0:
                    08:c0:bf:43:f5:f1:c6:4e:79:58:74:ad:ba:6b:32:
                    a6:6c:2f:5a:e9:58:7e:0a:8d:3d:ab:db:b5:8e:bf:
                    f9:0e:ee:e8:83:41:2e:5e:d8:7e:00:89:c8:5b:1d:
                    00:83:67:7f:00:c0:8f:f8:09:0f:f1:d4:b1:91:f4:
                    79:4f:64:81:9c:2c:23:61:fb:ef:5d:f4:49:6c:ba:
                    f7:10:9a:3d:e6:0a:e6:e8:c5:ea:ef:80:b1:00:a4:
                    04:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7E:8D:FB:A5:AC:78:D6:48:C0:78:64:F8:E4:A4:53:B6:A0:14:CE
            X509v3 Authority Key Identifier:
                keyid:79:20:D0:21:77:EC:D4:7B:7D:D8:D2:27:1C:07:93:BA:EA:92:E3:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/7920D02177ECD47B7DD8D2271C0793BAEA92E38F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7920D02177ECD47B7DD8D2271C0793BAEA92E38F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/7920D02177ECD47B7DD8D2271C0793BAEA92E38F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:d5:85:6a:09:0d:38:41:bc:c4:b8:58:ec:68:42:77:9c:7f:
         e9:4e:0f:3d:a1:69:03:4d:81:1e:9b:32:6c:7b:97:d7:d3:f3:
         60:31:30:88:1f:6b:7d:2a:b4:c2:6f:74:8b:9d:e2:ce:bf:37:
         60:aa:24:99:b1:89:42:32:2c:63:8b:61:c8:47:c2:e1:8a:3f:
         09:7e:b1:45:ef:5c:80:16:5a:6b:21:e2:c3:bb:3e:92:ff:b3:
         56:ae:5b:d5:92:b0:55:b3:c5:6e:34:8e:5b:ea:6f:f1:73:5e:
         af:b7:8d:be:1e:4e:3b:4e:b5:37:70:f7:a8:43:8d:12:56:ac:
         44:99:ef:be:28:c9:10:05:da:29:c3:33:da:c0:a3:f4:68:10:
         43:a8:ba:5b:10:ae:65:1c:2b:ea:88:9c:92:46:e1:82:87:ad:
         c9:b6:b3:6e:3e:c1:cc:5e:54:4d:0a:78:50:6a:b9:04:81:3d:
         77:d1:7f:20:bc:f2:35:1c:52:8c:79:52:28:8e:e0:16:22:53:
         46:51:13:21:23:b8:97:fd:fe:09:a8:ee:97:0d:90:df:fc:cf:
         48:30:28:f1:6b:ae:cd:1d:db:e4:88:cf:3d:a9:0c:28:30:f1:
         d0:28:7f:ef:98:19:0f:56:39:d5:dc:21:75:63:93:ad:04:ba:
         35:b4:de:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:42:23 2025 by rpki-client