This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.mft
File:                     488D61367F4C42E03AE5C5AE8BE0076E4961BE71.mft (raw, json)
Hash identifier:          Ka39I4kxzTSNZo+/ZTfxtsPLK+r9AgUPiGyK4sxqmWo=
Subject key identifier:   26:E5:10:DA:12:CD:45:98:A7:12:E1:61:F5:E7:E3:73:E9:4C:33:C9
Authority key identifier: 48:8D:61:36:7F:4C:42:E0:3A:E5:C5:AE:8B:E0:07:6E:49:61:BE:71
Certificate issuer:       /CN=488D61367F4C42E03AE5C5AE8BE0076E4961BE71
Certificate serial:       3F5BF41D480F66CFC3773D383908758F1307C46C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.mft
Manifest number:          0333
Signing time:             Sun 21 Dec 2025 12:55:27 +0000
Manifest this update:     Sun 21 Dec 2025 12:50:27 +0000
Manifest next update:     Mon 22 Dec 2025 16:28:27 +0000
Files and hashes:         1: 323830343a373836303a3a2f33322d3332203d3e20323731323338.roa (hash: ob/Dwvax52q+vhxyPcSWE0mkKcMCWrMtLj4d7yXoKhY=)
                          2: 3139302e3137312e37322e302f32322d3234203d3e20323731323338.roa (hash: I9G3ex2XveORcAEqGBwplD5mNPbZvqU6abd1zjBCLKY=)
                          3: 488D61367F4C42E03AE5C5AE8BE0076E4961BE71.crl (hash: /FXZU4mywDidlZ+QpGF/MulCv0NbeHjbKE1hX+TyTxE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.crl
                          rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 16:28:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:5b:f4:1d:48:0f:66:cf:c3:77:3d:38:39:08:75:8f:13:07:c4:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488D61367F4C42E03AE5C5AE8BE0076E4961BE71
        Validity
            Not Before: Dec 21 12:50:27 2025 GMT
            Not After : Dec 22 16:28:27 2025 GMT
        Subject: CN=26E510DA12CD4598A712E161F5E7E373E94C33C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ef:bf:d8:8a:83:c6:7b:bc:13:f6:db:42:6d:
                    31:fa:ac:ef:16:87:a7:d2:a8:76:2a:a1:33:c4:16:
                    a2:b9:6a:f3:2a:65:28:b7:e0:d1:7e:4c:f5:df:63:
                    4c:45:8e:73:89:bc:3e:e8:f6:4b:87:5c:eb:79:97:
                    cb:07:57:a4:9f:d3:1f:59:08:eb:47:16:39:27:54:
                    b6:dc:5b:6c:31:a4:cc:8e:a9:3b:2f:58:f0:17:e1:
                    5f:03:79:dd:e5:41:d3:e6:b5:cf:40:43:e5:11:9a:
                    76:7a:cb:ad:f6:6b:96:8c:c1:37:c1:ff:b4:4e:02:
                    bc:6d:ba:80:0b:44:0d:ca:ae:6d:27:98:ce:07:a7:
                    f0:89:0c:7d:20:01:ec:15:fd:5c:12:e8:4c:47:b5:
                    13:79:ea:13:9a:4c:3b:5f:31:90:c6:b5:46:32:3e:
                    69:23:0d:99:ca:71:25:57:67:d6:5f:73:a2:70:4f:
                    2d:bf:1e:13:b7:05:b7:c3:27:68:f4:6f:60:a5:30:
                    5e:a1:4e:14:ed:49:fb:7d:be:32:4d:5e:7c:ca:48:
                    d3:db:0b:2f:5f:ad:24:d3:61:b3:04:cb:9f:60:0f:
                    4b:38:f0:99:59:c0:9c:33:46:f0:94:6d:9b:a0:7c:
                    62:d6:05:a0:7d:e0:70:8d:3d:3c:91:2f:14:42:ed:
                    24:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E5:10:DA:12:CD:45:98:A7:12:E1:61:F5:E7:E3:73:E9:4C:33:C9
            X509v3 Authority Key Identifier:
                keyid:48:8D:61:36:7F:4C:42:E0:3A:E5:C5:AE:8B:E0:07:6E:49:61:BE:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:d4:11:5a:7c:ad:8f:12:c6:6b:62:01:ed:7c:24:9c:3d:84:
         0e:cc:5d:7c:a8:62:65:65:c7:f4:63:8a:d3:39:20:a2:22:26:
         3a:cf:ff:cf:5a:b5:65:71:1e:5c:f1:22:9f:19:ce:0c:3a:f2:
         e2:59:86:86:b7:93:a3:7f:fb:e9:b1:10:f0:77:67:2d:80:82:
         3a:8f:e2:5f:79:52:ff:f8:9c:5f:50:1d:dd:02:3f:08:28:75:
         2d:50:59:1a:ce:5d:e8:be:09:c6:a8:e8:73:65:19:8b:61:45:
         ca:15:2a:66:00:89:c4:49:d2:72:7d:72:64:6b:c7:a4:f7:b6:
         05:56:08:b0:7a:5e:00:14:56:6e:86:44:53:14:06:06:83:0a:
         32:41:a6:ff:e9:ac:68:8c:64:51:0b:24:8b:2c:cf:0f:62:4c:
         6a:fb:43:79:d6:10:99:85:02:60:6a:3f:55:bd:ea:34:81:ae:
         60:84:02:55:d3:74:63:cf:94:70:7a:6a:e7:d7:d9:11:51:d7:
         2d:e1:fa:6a:95:15:96:18:13:f5:74:bd:23:f1:92:d1:3f:26:
         0a:68:56:ad:a1:76:c9:20:d7:12:86:a5:d3:84:50:9a:f5:a4:
         c3:db:2c:74:4e:49:a2:0f:6c:37:44:62:f4:05:b7:95:08:51:
         6b:1a:2c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 01:30:16 2025 by rpki-client