This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/1/1798EFBE5D1BCAD0E943F8010C795C1294AC2647.mft
File:                     1798EFBE5D1BCAD0E943F8010C795C1294AC2647.mft (raw, json)
Hash identifier:          edmnVlGFrFhbFeVNGqHFxOmAq4BIR9HxM1355BzhYVM=
Subject key identifier:   D3:DF:C5:CC:D1:56:78:FF:AA:A8:B9:2B:2A:FA:6E:00:44:6D:D6:32
Authority key identifier: 17:98:EF:BE:5D:1B:CA:D0:E9:43:F8:01:0C:79:5C:12:94:AC:26:47
Certificate issuer:       /CN=1798EFBE5D1BCAD0E943F8010C795C1294AC2647
Certificate serial:       4382CDDC047817026BA073B9380476C1AD5383FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1798EFBE5D1BCAD0E943F8010C795C1294AC2647.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/1/1798EFBE5D1BCAD0E943F8010C795C1294AC2647.mft
Manifest number:          033F
Signing time:             Mon 22 Dec 2025 12:20:50 +0000
Manifest this update:     Mon 22 Dec 2025 12:15:50 +0000
Manifest next update:     Tue 23 Dec 2025 13:57:50 +0000
Files and hashes:         1: 3230312e3133312e39322e302f32322d3235203d3e203631393434.roa (hash: f+461E62/eYNpVDcOId4LSibkaFUCG4/o73p85fqfL4=)
                          2: 323830343a313861303a3a2f33322d3334203d3e203631393434.roa (hash: mJwBBRlvrr2aHDNereBD0fC2jOTJJTYTq7AJESyEIII=)
                          3: 1798EFBE5D1BCAD0E943F8010C795C1294AC2647.crl (hash: g9gd5owqgowFYsU/2Yi+uAI3AwM0Vsc8RVtAvGs7ua8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/1/1798EFBE5D1BCAD0E943F8010C795C1294AC2647.crl
                          rsync://rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/1/1798EFBE5D1BCAD0E943F8010C795C1294AC2647.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1798EFBE5D1BCAD0E943F8010C795C1294AC2647.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 13:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:82:cd:dc:04:78:17:02:6b:a0:73:b9:38:04:76:c1:ad:53:83:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1798EFBE5D1BCAD0E943F8010C795C1294AC2647
        Validity
            Not Before: Dec 22 12:15:50 2025 GMT
            Not After : Dec 23 13:57:50 2025 GMT
        Subject: CN=D3DFC5CCD15678FFAAA8B92B2AFA6E00446DD632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cf:75:c0:91:29:58:b9:2f:fc:02:52:e9:7e:
                    91:8c:82:69:1d:d0:2d:1c:96:61:bb:e1:06:ef:f0:
                    dd:48:36:f0:18:af:ac:2b:45:37:21:04:15:68:b6:
                    1e:56:93:7d:66:7e:26:47:cd:37:8f:b0:f4:20:27:
                    42:89:28:d7:71:dd:8e:9b:01:6b:9d:91:f6:49:6e:
                    d6:f1:c2:59:24:83:23:bd:e3:42:64:5c:93:d5:d8:
                    0f:df:a3:59:de:c9:92:e7:56:57:f8:9a:12:2a:3c:
                    57:eb:64:d3:77:e2:d6:77:fa:05:21:bf:c9:9f:a1:
                    0d:3d:c3:57:8a:fd:65:d7:d8:6d:99:f7:43:81:f7:
                    84:26:1c:d5:28:fb:e1:5a:2d:dc:ba:c6:ca:a8:20:
                    f2:8e:17:5b:02:e5:d5:9c:03:96:52:75:7a:46:43:
                    a3:6e:7d:86:28:d1:95:d0:d3:df:f8:a7:69:46:79:
                    87:1b:05:2c:84:5c:df:5f:7b:9a:a4:2a:d8:c2:a6:
                    38:09:16:f6:6e:58:86:d9:52:18:b9:5c:cf:ef:9b:
                    2a:21:20:d4:11:6e:e4:2f:c1:b6:82:2c:d3:24:44:
                    c7:c3:9f:99:57:45:3a:33:53:4c:59:39:3b:07:51:
                    7d:e1:75:16:84:18:35:e2:00:a9:e7:78:eb:56:1b:
                    72:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DF:C5:CC:D1:56:78:FF:AA:A8:B9:2B:2A:FA:6E:00:44:6D:D6:32
            X509v3 Authority Key Identifier:
                keyid:17:98:EF:BE:5D:1B:CA:D0:E9:43:F8:01:0C:79:5C:12:94:AC:26:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/1/1798EFBE5D1BCAD0E943F8010C795C1294AC2647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1798EFBE5D1BCAD0E943F8010C795C1294AC2647.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/1/1798EFBE5D1BCAD0E943F8010C795C1294AC2647.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:77:b7:74:0b:8e:48:8a:88:a1:21:b2:7d:cb:65:72:a0:ea:
         41:6c:7d:4e:e6:d9:41:99:b5:f9:6c:88:ce:4b:68:d4:95:42:
         79:a5:da:a5:ea:06:0e:a4:da:4d:fa:68:66:12:36:3c:fb:ff:
         fc:16:31:e3:57:93:24:fb:86:52:9d:f1:2a:6d:33:4b:d8:03:
         9d:5d:2e:65:f1:c0:38:c7:0c:c4:23:86:80:a2:f3:c1:7a:95:
         a0:0d:10:b0:ae:5a:ae:96:42:af:e3:b8:79:4b:56:7f:3d:a9:
         90:66:0a:c5:7d:74:d7:d5:46:e4:00:be:ad:9e:40:ca:cd:a6:
         70:84:1e:9d:ce:70:0d:a0:3a:be:f2:ab:1f:b8:58:b7:e7:62:
         8c:c3:dc:60:51:b7:f8:14:d3:82:72:57:55:38:1a:d9:d3:f4:
         25:fa:4b:94:88:65:a0:c2:e7:78:e8:68:a9:64:fc:56:e7:69:
         82:3e:61:ba:58:b6:30:c8:60:2a:10:19:e7:8c:c2:1c:b1:bb:
         24:c8:7e:58:c7:ad:ef:35:a7:e5:a7:cf:e5:10:09:6a:27:c6:
         59:67:15:6c:9f:96:a5:df:de:5b:08:9f:87:58:19:4a:35:9b:
         ad:76:2e:2e:25:a5:45:bf:ed:8a:1e:8e:26:73:44:72:ee:6f:
         53:ce:46:28
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQ4LN3AR4FwJroHO5OAR2wa1Tg/4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTc5OEVGQkU1RDFCQ0FEMEU5NDNGODAxMEM3OTVDMTI5
NEFDMjY0NzAeFw0yNTEyMjIxMjE1NTBaFw0yNTEyMjMxMzU3NTBaMDMxMTAvBgNV
BAMTKEQzREZDNUNDRDE1Njc4RkZBQUE4QjkyQjJBRkE2RTAwNDQ2REQ2MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsz3XAkSlYuS/8AlLpfpGMgmkd
0C0clmG74Qbv8N1INvAYr6wrRTchBBVoth5Wk31mfiZHzTePsPQgJ0KJKNdx3Y6b
AWudkfZJbtbxwlkkgyO940JkXJPV2A/fo1neyZLnVlf4mhIqPFfrZNN34tZ3+gUh
v8mfoQ09w1eK/WXX2G2Z90OB94QmHNUo++FaLdy6xsqoIPKOF1sC5dWcA5ZSdXpG
Q6NufYYo0ZXQ09/4p2lGeYcbBSyEXN9fe5qkKtjCpjgJFvZuWIbZUhi5XM/vmyoh
INQRbuQvwbaCLNMkRMfDn5lXRTozU0xZOTsHUX3hdRaEGDXiAKnneOtWG3KFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU09/FzNFWeP+qqLkrKvpuAERt1jIwHwYDVR0j
BBgwFoAUF5jvvl0bytDpQ/gBDHlcEpSsJkcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN043UkhaaFIzanY4VEY5akQ5NXFoemtyMVJ1V3Q0MnZaRHI5amVFWTVU
ZEcvMS8xNzk4RUZCRTVEMUJDQUQwRTk0M0Y4MDEwQzc5NUMxMjk0QUMyNjQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE3OThFRkJFNUQxQkNBRDBF
OTQzRjgwMTBDNzk1QzEyOTRBQzI2NDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N043UkhaaFIzanY4VEY5akQ5NXFoemtyMVJ1V3Q0MnZaRHI5amVFWTVUZEcvMS8x
Nzk4RUZCRTVEMUJDQUQwRTk0M0Y4MDEwQzc5NUMxMjk0QUMyNjQ3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlHe3dAuOSIqIoSGyfctlcqDqQWx9TubZQZm1+WyIzkto1JVCeaXapeoGDqTa
TfpoZhI2PPv//BYx41eTJPuGUp3xKm0zS9gDnV0uZfHAOMcMxCOGgKLzwXqVoA0Q
sK5arpZCr+O4eUtWfz2pkGYKxX1019VG5AC+rZ5Ays2mcIQenc5wDaA6vvKrH7hY
t+dijMPcYFG3+BTTgnJXVTga2dP0JfpLlIhloMLneOhoqWT8Vudpgj5huli2MMhg
KhAZ54zCHLG7JMh+WMet7zWn5afP5RAJaifGWWcVbJ+Wpd/eWwifh1gZSjWbrXYu
LiWlRb/tih6OJnNEcu5vU85GKA==
-----END CERTIFICATE-----
Generated at Mon Dec 22 15:45:23 2025 by rpki-client