This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/43AAB70BF5D486443B357EA3923B581F0075D23A.mft
File:                     43AAB70BF5D486443B357EA3923B581F0075D23A.mft (raw, json)
Hash identifier:          9yKdLywnjbs1N/W0t+WY/TXDSfFoLu5TkI809/3fpEs=
Subject key identifier:   F7:D1:EF:9A:9A:DF:B3:25:06:D9:E6:BE:B1:05:57:15:3B:B7:D6:4D
Authority key identifier: 43:AA:B7:0B:F5:D4:86:44:3B:35:7E:A3:92:3B:58:1F:00:75:D2:3A
Certificate issuer:       /CN=43AAB70BF5D486443B357EA3923B581F0075D23A
Certificate serial:       40835F7622AB3B17E289153601C1DDF81B5C81EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43AAB70BF5D486443B357EA3923B581F0075D23A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/43AAB70BF5D486443B357EA3923B581F0075D23A.mft
Manifest number:          24
Signing time:             Fri 19 Dec 2025 10:49:12 +0000
Manifest this update:     Fri 19 Dec 2025 10:44:12 +0000
Manifest next update:     Sat 20 Dec 2025 13:04:12 +0000
Files and hashes:         1: 43AAB70BF5D486443B357EA3923B581F0075D23A.crl (hash: 7FCa9ULORx7kxS6/0fjlxCbpAtozYYu5CboJaCRjpYk=)
                          2: 323830343a336237383a3a2f33322d313238203d3e20323636313531.roa (hash: QLb7skkEmJQF17WGWiLpN5j3LMyzuGsNwQnP4qVNzRQ=)
                          3: 3136302e3233382e3130342e302f32322d3332203d3e20323636313531.roa (hash: H9dv+DeRya1w3P02U1BRKsbDqLWpgPUpIvV9Tk+fnFM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/43AAB70BF5D486443B357EA3923B581F0075D23A.crl
                          rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/43AAB70BF5D486443B357EA3923B581F0075D23A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43AAB70BF5D486443B357EA3923B581F0075D23A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 13:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:83:5f:76:22:ab:3b:17:e2:89:15:36:01:c1:dd:f8:1b:5c:81:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43AAB70BF5D486443B357EA3923B581F0075D23A
        Validity
            Not Before: Dec 19 10:44:12 2025 GMT
            Not After : Dec 20 13:04:12 2025 GMT
        Subject: CN=F7D1EF9A9ADFB32506D9E6BEB10557153BB7D64D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:57:44:27:2f:86:76:e3:60:0f:62:38:6e:a4:
                    59:6e:07:45:25:cc:f0:b3:06:e9:14:b1:f6:38:d8:
                    80:a3:ef:8b:91:3b:52:de:f6:8a:72:08:18:1c:c0:
                    c6:f3:2a:7d:d8:b7:02:97:fe:f5:34:93:7c:e4:df:
                    d2:4d:7b:93:02:e9:bd:8b:dc:5e:11:63:c0:ce:9c:
                    69:df:56:14:9e:2d:c5:f7:f6:f7:cd:87:3f:7c:0b:
                    37:8a:e5:8a:2c:36:bb:c7:1a:a4:60:c4:93:17:a5:
                    cc:5d:ae:a4:f9:10:0f:d3:b3:40:75:c6:68:d5:9e:
                    87:04:36:6e:6f:72:49:70:71:e6:ac:a8:25:6b:1a:
                    af:77:3b:2e:df:78:1a:24:0a:ac:3d:ba:eb:9a:f9:
                    c5:59:f7:d4:13:b3:87:79:b0:b7:2e:33:3a:c6:9b:
                    03:a3:c6:24:1c:4c:e3:39:7f:0c:58:90:bf:b1:31:
                    06:50:15:ba:6b:ad:96:9c:3d:b7:2f:57:0f:bc:aa:
                    8a:b0:16:b2:56:e8:b0:92:07:e2:2f:be:04:f6:17:
                    40:b9:50:47:16:d3:7e:86:f4:92:c0:0b:08:e8:14:
                    67:3e:97:54:13:07:ab:e3:c5:5c:8a:97:26:81:97:
                    8c:f9:a2:70:1d:8a:ad:cb:69:33:5c:81:37:3d:ee:
                    22:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D1:EF:9A:9A:DF:B3:25:06:D9:E6:BE:B1:05:57:15:3B:B7:D6:4D
            X509v3 Authority Key Identifier:
                keyid:43:AA:B7:0B:F5:D4:86:44:3B:35:7E:A3:92:3B:58:1F:00:75:D2:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/43AAB70BF5D486443B357EA3923B581F0075D23A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43AAB70BF5D486443B357EA3923B581F0075D23A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/43AAB70BF5D486443B357EA3923B581F0075D23A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:c3:e8:5f:9c:ea:bc:0e:af:a1:59:90:72:b7:fe:ae:4f:10:
         bc:b5:69:77:b2:05:70:28:71:0c:46:de:dc:fb:27:69:93:1f:
         07:21:53:1c:59:fd:c1:90:aa:48:19:92:f1:1b:57:1b:c7:2b:
         1e:94:37:14:d2:43:0f:c7:c2:0a:ae:06:e5:02:3b:90:2e:dc:
         54:f7:6a:62:88:51:9e:8b:b7:1a:40:c9:b1:1e:00:1b:d1:9c:
         81:7f:52:91:1f:59:54:c8:8f:55:2c:f0:75:eb:22:f9:f1:2d:
         e7:f2:ee:6c:e1:a1:57:45:50:c7:10:17:ec:e0:48:ea:ae:0d:
         35:ee:d1:bb:23:48:01:0a:a2:4c:30:a3:83:ec:83:b4:23:02:
         61:9a:62:c2:f5:64:96:a7:d6:f6:a0:35:2d:a3:b1:d8:b7:0b:
         20:8f:20:f6:8e:b1:36:78:0b:14:61:80:52:19:ac:27:bc:ea:
         11:87:d7:bc:79:9b:0d:55:01:5f:05:d1:5e:ce:cb:23:50:58:
         26:ec:b5:07:ef:ba:0e:36:2a:c2:d8:3b:26:b2:00:48:26:90:
         52:55:33:d4:cc:85:53:f7:74:d6:f8:a8:e7:91:6d:32:b9:62:
         ab:14:f1:96:1c:f2:0f:16:1c:46:2b:d6:89:e0:d7:1e:cd:30:
         3b:44:86:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:42:16 2025 by rpki-client