This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/94RULAMeo5kMW6MHK1CYbq4mkZPW6BpmEaocjWkivi94/0/4049B561C9A61AE290D82B36EF7FB549758009D2.mft
File:                     4049B561C9A61AE290D82B36EF7FB549758009D2.mft (raw, json)
Hash identifier:          1Lm1wmQqE8VQfP4CqrS5+m5qIgktmOOk+3l0k/VId8I=
Subject key identifier:   C3:17:A4:02:6B:D9:FA:5A:79:D8:AA:08:00:E0:A0:F1:AC:F0:73:12
Authority key identifier: 40:49:B5:61:C9:A6:1A:E2:90:D8:2B:36:EF:7F:B5:49:75:80:09:D2
Certificate issuer:       /CN=4049B561C9A61AE290D82B36EF7FB549758009D2
Certificate serial:       3BEE9697DACBE998F18D1F79A4F367F05283BE6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4049B561C9A61AE290D82B36EF7FB549758009D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/94RULAMeo5kMW6MHK1CYbq4mkZPW6BpmEaocjWkivi94/0/4049B561C9A61AE290D82B36EF7FB549758009D2.mft
Manifest number:          017B
Signing time:             Sat 20 Dec 2025 21:02:52 +0000
Manifest this update:     Sat 20 Dec 2025 20:57:52 +0000
Manifest next update:     Mon 22 Dec 2025 00:17:52 +0000
Files and hashes:         1: 4049B561C9A61AE290D82B36EF7FB549758009D2.crl (hash: VfmzB1Fvl6nao+CSzhfVIdKNvCKX1q1iD96h8QviMqg=)
                          2: 34352e3137312e3134302e302f32322d3234203d3e20323638373938.roa (hash: awoJSLQH0Z3zQ53YqkdTIE6RGXu3X7gfoPPUGv8k+/U=)
                          3: 323830343a356164303a3a2f33322d3438203d3e20323638373938.roa (hash: gDJ1HMe7nan7vDMdc33IU0imlncLfSDtSPsZfu+yN4o=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/94RULAMeo5kMW6MHK1CYbq4mkZPW6BpmEaocjWkivi94/0/4049B561C9A61AE290D82B36EF7FB549758009D2.crl
                          rsync://rpki-repo.registro.br/repo/94RULAMeo5kMW6MHK1CYbq4mkZPW6BpmEaocjWkivi94/0/4049B561C9A61AE290D82B36EF7FB549758009D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4049B561C9A61AE290D82B36EF7FB549758009D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 00:17:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ee:96:97:da:cb:e9:98:f1:8d:1f:79:a4:f3:67:f0:52:83:be:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4049B561C9A61AE290D82B36EF7FB549758009D2
        Validity
            Not Before: Dec 20 20:57:52 2025 GMT
            Not After : Dec 22 00:17:52 2025 GMT
        Subject: CN=C317A4026BD9FA5A79D8AA0800E0A0F1ACF07312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:97:ea:3c:b3:d0:b8:94:cf:ef:e5:8c:4e:db:
                    60:43:5c:73:6d:24:bf:16:3c:19:70:24:0f:d2:a0:
                    89:1a:00:b8:96:03:1b:05:69:1f:39:79:3a:73:04:
                    12:eb:d6:0f:d8:d9:93:3c:87:7d:5a:73:b6:38:77:
                    34:de:34:ab:e5:a6:63:28:9f:be:2b:ae:bb:9c:aa:
                    e2:4c:66:1c:8d:31:01:65:3a:0d:eb:4f:61:6c:4b:
                    1f:c3:b4:2b:06:7d:0d:8a:dd:f7:45:f2:40:09:01:
                    89:73:d5:5d:a1:05:16:5b:bf:e5:87:f8:10:96:2d:
                    d7:31:da:45:1a:7b:7a:00:cf:67:3a:e7:2b:06:d4:
                    2f:68:e1:4b:31:2d:c7:63:78:9c:6f:44:b2:69:cc:
                    c9:c2:1c:0c:a8:9c:b5:5f:54:8d:3b:03:d2:e0:8a:
                    6d:35:07:50:1b:95:74:a0:ee:d9:9e:d0:33:66:0b:
                    f7:7b:1f:1c:73:fe:f6:d3:3c:34:5a:09:87:6c:37:
                    ff:bc:7d:0a:66:46:c6:05:db:3f:a2:de:72:5e:bf:
                    ef:3d:b6:ad:8d:29:73:f0:a9:2e:aa:9f:5e:d4:ec:
                    fa:a5:ef:72:4b:51:6e:84:02:f2:c5:61:ba:47:ca:
                    7e:9d:b3:dd:10:19:de:99:a0:cf:9c:04:de:b6:f7:
                    63:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:17:A4:02:6B:D9:FA:5A:79:D8:AA:08:00:E0:A0:F1:AC:F0:73:12
            X509v3 Authority Key Identifier:
                keyid:40:49:B5:61:C9:A6:1A:E2:90:D8:2B:36:EF:7F:B5:49:75:80:09:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/94RULAMeo5kMW6MHK1CYbq4mkZPW6BpmEaocjWkivi94/0/4049B561C9A61AE290D82B36EF7FB549758009D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4049B561C9A61AE290D82B36EF7FB549758009D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/94RULAMeo5kMW6MHK1CYbq4mkZPW6BpmEaocjWkivi94/0/4049B561C9A61AE290D82B36EF7FB549758009D2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:58:89:a3:3b:2e:27:04:0d:fe:30:f2:1c:30:69:c6:cd:e0:
         0b:69:4f:1f:40:66:0a:49:44:f6:5f:c3:30:c8:42:30:4c:7f:
         f7:d0:a2:bb:d8:7c:3a:68:a0:b0:ef:72:d1:90:d0:43:a3:ba:
         ce:33:f7:be:7c:a8:c5:7d:11:8f:e4:07:1b:c1:ee:6a:1e:fd:
         d7:7e:19:0e:de:20:90:2c:ba:04:95:6e:9e:a6:91:88:55:72:
         da:36:b6:09:bf:15:93:a3:22:db:0a:ac:e8:b6:79:d2:ba:7f:
         f1:d2:38:db:8b:9d:b5:76:76:a8:43:8d:ae:b9:6a:a4:21:9b:
         fe:30:77:64:5a:9f:61:bf:0f:4b:5b:26:58:66:9c:e8:2a:03:
         c2:2c:7a:36:c6:ef:ed:97:20:07:fa:85:96:96:fd:c4:cb:ae:
         d8:81:4a:d4:47:0e:28:c3:54:c9:ea:30:53:d4:f5:a5:1b:21:
         1d:57:20:dd:db:73:4a:92:1e:9a:e8:58:7a:39:da:0c:86:f2:
         f3:89:91:ea:93:f3:7e:d6:2b:36:6f:34:0c:d2:29:44:c5:14:
         b1:ec:2e:6a:92:e2:2d:21:72:cc:5e:56:1b:be:0b:b5:30:ae:
         7f:e6:95:b8:2b:d8:00:63:89:d9:5d:38:81:d9:c2:d9:8b:bb:
         ba:62:4c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:59:28 2025 by rpki-client