This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft
File:                     40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft (raw, json)
Hash identifier:          3fIcXPYxqRUdY5GbB1pJZhXH9GLn438r99x5gq3hYBI=
Subject key identifier:   4B:40:4F:DD:40:CA:15:D4:13:DE:13:77:4D:9C:7C:D6:2B:0E:AA:91
Authority key identifier: 40:CA:A2:BC:57:B3:3D:FB:E5:5B:3E:B4:EA:58:A7:E9:A1:71:55:DD
Certificate issuer:       /CN=40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD
Certificate serial:       0C4F602462C1F8325D8AAD1267EE5950DF6C4FDB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft
Manifest number:          0340
Signing time:             Thu 18 Dec 2025 05:32:57 +0000
Manifest this update:     Thu 18 Dec 2025 05:27:57 +0000
Manifest next update:     Fri 19 Dec 2025 07:58:57 +0000
Files and hashes:         1: 40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.crl (hash: 6HdqfOQjJFYrJFyoRYzn7DdCoO6My+NsbmjTTUKOJ6A=)
                          2: 3230312e3138322e35362e302f32322d3234203d3e20323637343939.roa (hash: mF0u/vAyNOeoPPNVDLbnxzMdhqwwSdgGBBg/m8ai89U=)
                          3: 323830343a343236633a3a2f33322d3438203d3e20323637343939.roa (hash: 25SAOXwAX4L8AMZJng8zABZRivbLO/GLBh3G1AeqA58=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.crl
                          rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 07:58:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:4f:60:24:62:c1:f8:32:5d:8a:ad:12:67:ee:59:50:df:6c:4f:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD
        Validity
            Not Before: Dec 18 05:27:57 2025 GMT
            Not After : Dec 19 07:58:57 2025 GMT
        Subject: CN=4B404FDD40CA15D413DE13774D9C7CD62B0EAA91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c4:1a:1d:fa:82:92:a0:dc:86:77:ff:b0:35:
                    4b:34:eb:75:60:ae:19:ff:b4:62:37:fe:e2:5f:fa:
                    e7:d9:0b:35:ec:77:b8:dc:d5:93:cf:b9:b1:44:04:
                    20:46:87:05:39:f0:f0:5f:f3:13:13:b2:f7:80:36:
                    b4:d2:a4:c6:91:81:46:c0:cd:39:df:ef:a1:49:ef:
                    a2:15:1f:d0:f3:86:73:01:60:74:27:86:28:ee:d0:
                    72:95:2e:f7:9f:31:62:e3:ae:ba:f7:d3:94:3b:e5:
                    a5:83:0c:83:5f:b7:a7:73:7e:55:44:35:08:81:f2:
                    a4:07:17:4a:01:7a:78:85:07:c6:a3:e5:c3:e6:16:
                    3e:d1:d8:eb:6d:a1:96:b2:14:05:7a:59:90:96:0b:
                    97:c6:02:48:5c:d1:4f:3c:5a:82:c9:d4:ab:ef:ae:
                    e7:87:8e:03:af:00:08:d7:d9:66:09:75:c4:4d:4a:
                    f7:d5:34:18:13:aa:17:e0:71:72:37:56:81:26:2e:
                    3d:96:43:d1:ff:7a:a4:18:ba:91:f9:6a:f3:4e:04:
                    7f:2d:ce:1f:b6:6d:3b:88:dd:9d:6f:86:62:2b:56:
                    94:87:71:ac:b1:38:cc:4c:fd:bc:6a:c8:b1:aa:b2:
                    84:a9:8a:10:0c:64:d2:be:e0:55:35:26:f7:56:27:
                    f1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:40:4F:DD:40:CA:15:D4:13:DE:13:77:4D:9C:7C:D6:2B:0E:AA:91
            X509v3 Authority Key Identifier:
                keyid:40:CA:A2:BC:57:B3:3D:FB:E5:5B:3E:B4:EA:58:A7:E9:A1:71:55:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:03:4b:54:c4:98:97:bb:2e:10:78:f8:b1:15:13:82:c1:07:
         b8:9a:2f:9d:39:cd:40:ed:1e:09:c7:57:5b:0a:05:dd:94:06:
         02:a9:4d:c5:ff:30:8f:35:ab:70:69:8e:c3:c3:86:73:ea:0d:
         c7:77:33:fc:a7:b0:80:09:48:93:f9:7b:65:15:68:93:41:6d:
         e3:63:0b:7c:c6:db:3d:c9:d1:a1:c5:a8:ce:b0:7c:2d:77:9c:
         9b:16:38:ee:f5:39:ae:95:84:71:76:12:41:e1:9e:17:4c:dc:
         48:ba:c2:d3:9c:51:9b:7f:49:ca:0d:8e:07:c2:ab:ab:9a:92:
         e7:3a:52:09:36:b8:d4:58:1c:65:e5:ca:36:ce:e8:a2:dd:a4:
         d5:f8:a1:c3:09:9f:1d:d4:0a:8e:95:91:5f:fb:a9:3a:75:e6:
         40:ac:50:7f:2b:4e:64:a1:22:ae:20:84:74:bc:b5:c4:a6:0a:
         83:08:a6:7f:3b:9a:15:d4:45:59:fa:91:b6:6a:2f:fa:6e:5b:
         c5:27:97:70:e7:b5:12:19:2e:4f:c2:e7:1e:49:db:cb:9c:7a:
         5d:60:b2:2b:ff:5b:4b:0a:02:c4:cd:93:f6:9d:e8:b3:69:0c:
         3f:bd:59:d7:b7:07:68:6f:fb:dd:e5:34:f7:04:ff:70:98:c8:
         18:e0:a0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 22:12:05 2025 by rpki-client