This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/70EA909324397A558577D3D460D16896E1F7AA80.mft
File:                     70EA909324397A558577D3D460D16896E1F7AA80.mft (raw, json)
Hash identifier:          jEvmyt6bKlQSR7GlJEHkk2D5pBCKD0mQI9paedKkHOs=
Subject key identifier:   48:EE:56:77:DF:BB:EE:AC:25:07:4E:CD:4C:F6:37:E5:89:AA:97:EF
Authority key identifier: 70:EA:90:93:24:39:7A:55:85:77:D3:D4:60:D1:68:96:E1:F7:AA:80
Certificate issuer:       /CN=70EA909324397A558577D3D460D16896E1F7AA80
Certificate serial:       6922C1DEFB8560A5FC8079B505344DE90FCCB8C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EA909324397A558577D3D460D16896E1F7AA80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/70EA909324397A558577D3D460D16896E1F7AA80.mft
Manifest number:          25
Signing time:             Tue 23 Dec 2025 17:10:49 +0000
Manifest this update:     Tue 23 Dec 2025 17:05:49 +0000
Manifest next update:     Wed 24 Dec 2025 20:22:49 +0000
Files and hashes:         1: 323830343a316338383a3a2f33322d313238203d3e203631363630.roa (hash: ciIZ7+5aFK1VskvVeNJ0NtH7WWv4twJoDLKAnGCLAbw=)
                          2: 3133382e3138352e3130302e302f32322d3332203d3e203631363630.roa (hash: ROo4XSnyWREyyJBi9BxrvTbZS2bs1v6uVbTRNR0oqOg=)
                          3: 3133312e3130382e34342e302f32322d3332203d3e203631363630.roa (hash: WjtjCe7u8GJQPVsEsI0q2pziTz+jHxgiJR2ggY4eWcc=)
                          4: 70EA909324397A558577D3D460D16896E1F7AA80.crl (hash: U3yaJcBnrSliX92NYSSYkuoXgAgE2FFbjK+1yE7Bud0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/70EA909324397A558577D3D460D16896E1F7AA80.crl
                          rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/70EA909324397A558577D3D460D16896E1F7AA80.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EA909324397A558577D3D460D16896E1F7AA80.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 20:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:22:c1:de:fb:85:60:a5:fc:80:79:b5:05:34:4d:e9:0f:cc:b8:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70EA909324397A558577D3D460D16896E1F7AA80
        Validity
            Not Before: Dec 23 17:05:49 2025 GMT
            Not After : Dec 24 20:22:49 2025 GMT
        Subject: CN=48EE5677DFBBEEAC25074ECD4CF637E589AA97EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9a:c6:44:2d:78:41:16:39:17:42:47:af:bc:
                    d9:27:4f:a7:56:9e:16:d3:e6:52:ff:ed:16:e7:63:
                    e9:50:18:63:79:1a:88:62:f5:d8:7b:55:26:52:cf:
                    47:b5:93:22:f8:76:7c:83:de:6e:e5:fd:bb:89:78:
                    b8:a2:56:69:4e:00:b0:4d:a9:75:ec:ab:03:80:10:
                    33:c5:ae:e2:d4:72:a4:5c:59:c2:47:00:ee:4c:be:
                    7a:5f:a5:86:4d:43:9d:6c:c7:ce:12:54:08:f8:02:
                    e9:93:68:bb:e2:72:b8:c9:e6:ef:39:3b:f9:51:eb:
                    70:8c:13:be:a4:d4:f1:ab:c0:e5:ec:b9:7b:0e:29:
                    67:93:11:af:b9:9c:bf:36:24:7b:3d:5f:0f:af:d5:
                    46:fa:10:50:87:7f:f2:f6:56:33:3b:f7:81:48:c3:
                    1b:19:32:45:ee:f1:7a:a8:56:c3:c6:a4:60:37:4f:
                    27:45:f0:9e:b4:e6:aa:51:84:38:93:cf:d1:23:e1:
                    c2:17:ac:56:d7:90:bf:28:fc:14:da:d0:5c:57:36:
                    73:24:f8:d8:75:49:e4:91:1c:eb:f2:72:2d:a6:e9:
                    38:dc:bd:6e:c9:a3:85:a2:61:56:43:49:74:63:87:
                    4c:c2:1c:e0:f1:fa:69:32:9b:ad:54:70:ca:30:d7:
                    02:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:EE:56:77:DF:BB:EE:AC:25:07:4E:CD:4C:F6:37:E5:89:AA:97:EF
            X509v3 Authority Key Identifier:
                keyid:70:EA:90:93:24:39:7A:55:85:77:D3:D4:60:D1:68:96:E1:F7:AA:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/70EA909324397A558577D3D460D16896E1F7AA80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EA909324397A558577D3D460D16896E1F7AA80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/70EA909324397A558577D3D460D16896E1F7AA80.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:f5:05:9a:85:a6:62:80:f6:b7:81:74:62:fd:7f:e9:b2:96:
         ac:f9:9c:29:35:cd:14:59:4f:54:e0:ef:d8:cd:fb:82:f4:a1:
         2d:7d:15:d2:9a:dd:9b:23:88:0b:4c:28:b6:3f:88:9c:90:33:
         fa:a7:c2:1e:85:67:53:0d:25:7a:bd:ef:df:2e:62:3a:7f:58:
         c5:e7:2a:fb:a2:97:d6:f6:77:ca:78:7e:67:03:1e:56:ed:50:
         7f:46:2a:2a:e9:7e:51:0e:11:2f:e1:a3:40:2c:bb:43:c6:ad:
         11:8a:b3:3f:c8:84:46:cd:4d:51:a3:51:48:10:1b:28:43:09:
         17:0d:20:3f:58:ea:33:91:5d:aa:0f:a2:06:ff:d7:d4:8a:0a:
         57:ec:93:27:94:ad:ea:33:9e:19:5e:13:c9:01:57:45:41:cf:
         4f:60:de:af:4e:45:b2:4d:5c:27:1a:b7:ac:96:56:e1:d2:2a:
         f6:3f:60:32:15:62:8f:50:ab:68:a7:eb:f2:cd:0e:6b:12:91:
         95:8f:01:82:32:be:78:16:65:1d:14:dd:ee:18:c9:39:45:d9:
         2f:5c:30:8a:bf:9d:1d:e1:43:35:45:1c:68:a9:ea:49:a7:01:
         0c:0e:d5:99:0c:82:22:55:b5:39:b1:a7:fa:f4:59:b3:10:c7:
         ee:6a:a7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 03:54:15 2025 by rpki-client