This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft
File:                     4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft (raw, json)
Hash identifier:          HVTLuY79nd7u0BaF7DdWBI7qT3qvsTN/DgnT4HQdsZo=
Subject key identifier:   D8:75:53:DC:91:9C:C7:E8:2C:F6:79:93:95:D7:79:64:79:2A:06:BC
Authority key identifier: 4B:7D:00:90:A6:F4:C7:B2:FB:DF:9D:D5:BD:BE:78:B1:45:8D:11:33
Certificate issuer:       /CN=4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133
Certificate serial:       2EA3C64042F0F718F58F1F69EEAD6A8992FA17EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft
Manifest number:          01D8
Signing time:             Sat 06 Dec 2025 02:26:12 +0000
Manifest this update:     Sat 06 Dec 2025 02:21:12 +0000
Manifest next update:     Sun 07 Dec 2025 03:37:12 +0000
Files and hashes:         1: 4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.crl (hash: qOLT1fA0vcCgaVTE13LNyzMghi0aUOf7xH9AiJzZ4ls=)
                          2: 323830343a383732633a3a2f33322d3438203d3e20323732363932.roa (hash: tZ9CFfiGAu/s670SKNKGPAKN5ktK01F6Cjp7W8ikkTU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.crl
                          rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 03:37:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:a3:c6:40:42:f0:f7:18:f5:8f:1f:69:ee:ad:6a:89:92:fa:17:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133
        Validity
            Not Before: Dec  6 02:21:12 2025 GMT
            Not After : Dec  7 03:37:12 2025 GMT
        Subject: CN=D87553DC919CC7E82CF6799395D77964792A06BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9d:5b:c0:19:f3:f9:46:7a:5d:dd:7b:c9:e7:
                    72:7c:47:94:f6:9a:83:b2:ea:c7:86:3d:a0:e9:51:
                    21:fd:0a:59:50:6b:4d:9a:4c:0b:a2:ad:3e:51:c3:
                    4e:16:80:14:bf:5a:31:12:fb:d0:cd:5f:c8:cd:48:
                    b5:0c:e4:fc:ea:6c:79:c0:be:46:e8:70:10:11:e5:
                    98:2a:eb:dc:72:40:6e:9f:51:b4:00:a6:8a:d2:e4:
                    d5:d3:ac:77:9b:dc:54:fd:c5:20:b1:e7:d2:fb:c1:
                    46:67:6d:11:28:c3:17:15:6c:45:a9:4c:21:62:0e:
                    5c:92:28:da:c1:b7:04:31:d7:32:d2:ae:45:95:46:
                    d9:3f:43:a9:f6:90:1c:41:1e:dd:c0:cb:c1:f2:ae:
                    b7:2d:86:b0:c4:29:3d:26:c6:24:7b:1b:83:5e:22:
                    2e:11:2d:9b:12:bc:2b:f7:95:ce:14:7a:e0:9d:fc:
                    fe:b1:fa:b6:16:e2:45:e6:5f:27:2d:32:f4:28:56:
                    51:3f:2e:c2:e8:55:0a:fe:52:a9:b1:79:1b:ec:29:
                    c9:95:95:96:bf:f3:98:b7:6b:88:95:c6:84:f2:3c:
                    21:eb:c4:a3:75:ba:ee:f8:34:4d:5a:ff:4c:f1:60:
                    4d:c7:8b:f0:3e:2e:1d:e8:7a:f5:26:87:a7:d9:94:
                    26:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:75:53:DC:91:9C:C7:E8:2C:F6:79:93:95:D7:79:64:79:2A:06:BC
            X509v3 Authority Key Identifier:
                keyid:4B:7D:00:90:A6:F4:C7:B2:FB:DF:9D:D5:BD:BE:78:B1:45:8D:11:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:33:4d:48:ad:9f:c4:74:cc:05:de:ff:0a:b3:e2:fe:bf:30:
         5b:23:f9:e0:c1:8c:4d:ad:fd:e6:6d:61:e4:a2:77:d1:0e:ed:
         4f:79:9e:6c:9c:91:71:63:4f:36:b2:2f:db:20:b7:d8:5a:d8:
         4c:66:29:80:99:86:a5:d7:0a:46:61:b4:77:94:df:e1:55:0d:
         4b:62:22:3f:13:01:99:4e:c3:86:ee:9e:1a:72:ef:a9:b3:c1:
         6e:71:74:74:72:98:19:45:25:c6:01:97:ee:60:16:5c:26:38:
         91:58:06:0a:b1:35:27:3f:82:3c:a1:c2:47:87:2a:50:f4:ec:
         d7:74:f5:ee:57:2b:b2:1d:f6:09:09:70:b6:c0:d0:f9:2e:28:
         a5:c9:95:d7:f7:f4:98:2a:e3:a4:1b:8d:c0:f7:b2:32:76:ff:
         02:49:77:7b:ad:7c:15:68:fe:43:4e:6b:dd:cd:05:9b:73:e3:
         8c:f6:fb:7d:7a:41:0c:84:fb:99:cd:53:4f:b9:dc:d3:50:57:
         3b:bd:aa:6a:3a:d0:a2:12:d2:40:28:1a:98:64:c4:94:03:25:
         7d:05:4d:46:43:cb:98:0f:27:df:77:08:13:79:7d:93:ab:f9:
         d3:33:5f:62:71:6e:85:31:5f:f8:16:f6:2f:c8:82:6e:01:6f:
         53:3b:c8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:22:07 2025 by rpki-client