This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.mft
File:                     4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.mft (raw, json)
Hash identifier:          iaX0GcK0XrVqo/zeLTk1ZAx2LZpdLIfIN2xQm09xg20=
Subject key identifier:   67:D1:99:7F:FD:B8:7E:14:EC:10:DA:AA:B6:45:03:89:3D:68:3D:71
Authority key identifier: 4A:1F:EB:8C:E3:07:A0:10:64:8F:FE:E1:98:D2:F6:AF:BE:64:5E:49
Certificate issuer:       /CN=4A1FEB8CE307A010648FFEE198D2F6AFBE645E49
Certificate serial:       42954E3B1AC090188FF4EABDC382B5C6662FFA34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.mft
Manifest number:          0331
Signing time:             Sat 06 Dec 2025 02:44:43 +0000
Manifest this update:     Sat 06 Dec 2025 02:39:43 +0000
Manifest next update:     Sun 07 Dec 2025 05:33:43 +0000
Files and hashes:         1: 34352e37302e3137362e302f32322d3234203d3e20323637353736.roa (hash: qPJDf0ZzOHhjuG0zLopodnYM0KBTlwwMbPfxeuoZ2to=)
                          2: 4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.crl (hash: W5M9dJAGesEthfSVWO0/X0b+8DJFFXPWiDAJojo16rM=)
                          3: 323830343a343338383a3a2f33322d3438203d3e20323637353736.roa (hash: cZd/ssKML83qdXJo2RFt0hxOAlYnrkcYP1rxyHfPV10=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.crl
                          rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:33:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:95:4e:3b:1a:c0:90:18:8f:f4:ea:bd:c3:82:b5:c6:66:2f:fa:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A1FEB8CE307A010648FFEE198D2F6AFBE645E49
        Validity
            Not Before: Dec  6 02:39:43 2025 GMT
            Not After : Dec  7 05:33:43 2025 GMT
        Subject: CN=67D1997FFDB87E14EC10DAAAB64503893D683D71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d8:f0:b2:4c:81:50:4e:43:19:5b:38:60:29:
                    ce:63:50:a2:be:fa:5d:df:a2:3b:9f:5f:6b:66:8a:
                    87:58:54:0e:8b:f8:ed:27:99:8d:56:7b:64:89:f7:
                    5c:8b:10:61:e9:82:54:e3:74:8e:84:ea:82:37:0f:
                    8f:e0:2c:dc:e0:4d:d0:c5:71:64:d1:47:a2:a3:e7:
                    8b:24:0d:83:77:80:88:da:2c:ae:ab:eb:07:cf:40:
                    1f:98:44:1b:8c:46:2a:21:5e:c8:c2:4c:36:0a:94:
                    bc:2e:79:af:9a:a3:09:c7:36:39:52:e9:52:da:9a:
                    eb:72:aa:12:99:5a:b4:c1:38:3b:e6:d7:3a:97:a7:
                    91:3b:58:29:31:36:12:b2:83:76:15:74:3e:2f:33:
                    e5:da:85:1d:82:c2:8e:e3:5c:13:38:72:b3:24:43:
                    6c:74:ab:1c:9a:ae:0d:ef:4d:b4:d6:14:1a:9a:c0:
                    ca:fd:19:95:af:8f:bb:15:82:d8:1a:94:72:68:2f:
                    03:8a:6a:f8:d1:f9:4d:92:c2:b2:9d:04:16:fd:dc:
                    25:0c:08:8c:a0:fe:d3:c2:12:04:50:31:9f:b7:61:
                    5e:d0:3b:81:22:3c:97:4a:59:49:85:f0:a9:d4:91:
                    c0:25:5b:e7:cf:a5:ef:70:69:4e:d4:0e:24:c9:3a:
                    59:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D1:99:7F:FD:B8:7E:14:EC:10:DA:AA:B6:45:03:89:3D:68:3D:71
            X509v3 Authority Key Identifier:
                keyid:4A:1F:EB:8C:E3:07:A0:10:64:8F:FE:E1:98:D2:F6:AF:BE:64:5E:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:b7:bd:9c:35:fc:ea:a4:f0:b0:30:c2:82:14:bb:d1:ee:36:
         d3:81:bd:8b:d7:03:1c:ad:ea:9a:92:10:59:3c:8e:b1:23:e2:
         73:4b:fd:cc:42:4a:63:4a:44:84:e6:e2:4f:f9:8d:91:30:79:
         e1:f1:8d:6d:b4:26:ce:74:a3:1f:8e:3f:13:63:92:d1:9a:c7:
         e8:eb:cf:c1:50:d8:32:9e:c9:80:f2:f3:5a:81:83:a8:5e:e3:
         65:22:46:6b:ab:9f:a0:cc:f4:2c:30:ea:7e:7e:7a:49:08:c6:
         3b:48:61:c5:7a:a3:50:3c:f6:04:97:dd:73:c5:33:f0:09:ee:
         7b:73:15:68:0a:b2:67:3b:41:4f:5d:b1:f1:90:05:d9:de:e0:
         9f:1e:dc:b9:78:06:f1:28:29:f4:bd:8e:03:19:4a:c5:62:a8:
         10:68:f2:78:1d:ea:6a:20:86:d6:82:bb:41:07:66:2b:ea:21:
         23:d3:a4:0d:d6:06:c8:1a:6c:1e:83:f7:8b:18:2b:b8:33:36:
         04:24:7f:aa:fd:7d:a9:8b:34:b7:ca:3c:87:37:14:31:94:f0:
         5a:ee:28:21:ca:54:b8:81:cb:48:67:ca:cf:46:fd:9e:2b:d9:
         6f:52:99:19:90:2f:af:6c:3d:24:13:5e:d0:68:0f:d9:5b:9a:
         07:66:6d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:23:13 2025 by rpki-client