This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft
File:                     4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft (raw, json)
Hash identifier:          Lfd60Fj3+q/lIlOz1HxA1/miIjPsJfWAdtSA+6NguiU=
Subject key identifier:   C8:72:96:F7:EC:51:11:35:5E:41:0F:56:79:25:A8:31:A2:58:B3:C0
Authority key identifier: 44:07:DF:C1:CD:58:AD:40:09:74:B8:DC:4C:0A:31:D4:EE:5C:2A:13
Certificate issuer:       /CN=4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13
Certificate serial:       720D519A3C336DD8BC1A268AADA9E256EA390234
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft
Manifest number:          0150
Signing time:             Tue 23 Dec 2025 01:35:12 +0000
Manifest this update:     Tue 23 Dec 2025 01:30:12 +0000
Manifest next update:     Wed 24 Dec 2025 03:09:12 +0000
Files and hashes:         1: 3139312e3234332e3138342e302f32322d3332203d3e20323633353039.roa (hash: gplvuyLjGUhF+i6ssDirDxIMyE9T2g6roXbZ9yzSMSc=)
                          2: 3139312e3234332e3138302e302f32322d3332203d3e20323633353039.roa (hash: KlULxHMxyBYgHOWDvr82ep/Pt0PmGQBYgR+pKvkMFlE=)
                          3: 3139312e3234332e3137362e302f32322d3332203d3e20323633353039.roa (hash: 5MnHP1gwm6VSUR7iHYTvcw72QzSqthXM1z6v3zFxW5g=)
                          4: 4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.crl (hash: dXqaEOlC9Hklx6d0frAUS7hBFfNxwM+cMijh2TpCNh0=)
                          5: 3139312e3234332e3138382e302f32322d3332203d3e20323633353039.roa (hash: 2YCS6Yb/9D0/n8xix6Bzd5N6XCOxnBclmTpI31jfQuw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.crl
                          rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 03:09:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:0d:51:9a:3c:33:6d:d8:bc:1a:26:8a:ad:a9:e2:56:ea:39:02:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13
        Validity
            Not Before: Dec 23 01:30:12 2025 GMT
            Not After : Dec 24 03:09:12 2025 GMT
        Subject: CN=C87296F7EC5111355E410F567925A831A258B3C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4a:b6:76:62:e6:34:fe:d4:d5:fa:1e:09:32:
                    2b:77:04:f1:58:76:c1:34:e7:4a:be:fd:93:50:99:
                    ce:a2:89:e0:dd:a6:0d:01:50:1c:87:65:95:5b:78:
                    82:a9:dd:b5:8a:61:a3:80:82:96:ac:e3:03:58:d2:
                    61:0a:a3:30:a0:21:09:d3:51:f4:b3:a5:81:d3:a2:
                    61:a1:ea:4b:b2:77:c0:02:ab:6c:03:d8:bf:85:be:
                    1b:e0:53:1c:bf:d4:12:2c:f5:41:53:39:54:5d:8f:
                    49:58:fa:3f:78:da:e3:bd:13:22:6c:e9:de:c3:31:
                    c4:96:23:47:9d:11:0b:26:8b:56:80:84:2d:fb:c1:
                    e7:1b:50:be:d7:e8:1d:26:0d:36:72:60:4c:b5:6f:
                    65:31:e4:36:49:a5:f2:13:b6:98:03:1b:92:91:d7:
                    0e:28:1b:05:b9:81:df:fd:5e:89:8c:ad:9a:17:3c:
                    ff:74:85:d7:03:5e:ab:32:b9:46:1e:6c:d4:01:2e:
                    36:4c:9a:93:9b:0f:6c:da:e5:c8:8c:b7:e5:09:93:
                    1a:22:95:70:68:ee:38:a3:7b:2b:30:b2:a3:50:10:
                    b0:65:b0:ae:99:80:cb:67:c4:30:fa:09:5c:d3:68:
                    81:47:6c:b5:6c:6d:8e:b4:96:b8:23:f9:4a:cd:eb:
                    f2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:72:96:F7:EC:51:11:35:5E:41:0F:56:79:25:A8:31:A2:58:B3:C0
            X509v3 Authority Key Identifier:
                keyid:44:07:DF:C1:CD:58:AD:40:09:74:B8:DC:4C:0A:31:D4:EE:5C:2A:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:ca:0a:74:4b:b9:67:c6:82:aa:16:5c:55:f3:c1:8f:3a:15:
         ec:bd:7a:81:64:79:d3:05:16:f4:01:d2:10:a0:21:9f:33:7c:
         2f:51:e8:41:a2:6e:32:06:ed:5e:2f:a2:91:1b:25:4d:64:48:
         15:fb:36:31:44:94:cf:9c:51:f2:ff:be:75:1b:ad:f2:dd:9f:
         59:86:fd:a0:a5:60:93:d2:15:f9:e9:09:78:2e:9b:3e:a4:58:
         9a:bb:70:4f:f8:b8:3d:7c:7f:e3:16:19:a6:20:28:3a:ec:56:
         d9:d7:a0:ac:3b:f1:e2:0a:96:aa:42:a5:d6:6b:9f:bb:4b:cd:
         81:47:1b:cf:7c:f1:4a:66:79:89:c0:a2:6b:d0:3c:84:c9:79:
         78:c4:20:e6:34:fc:53:15:dd:d4:df:0c:7d:d9:e1:2f:58:cb:
         72:dc:30:a9:4b:3c:42:11:9e:18:67:6b:65:c1:90:fe:ae:fc:
         06:db:d2:16:a6:9f:16:81:18:0e:f5:07:49:ea:15:8d:ec:39:
         ef:e6:8a:3b:5e:77:c6:55:3e:f2:a3:ff:ba:dc:49:60:b0:dd:
         dd:b6:80:6f:ab:1a:75:cf:e9:d0:9d:f0:23:f2:c3:07:29:6f:
         f9:dd:38:86:6a:cf:2e:53:27:ef:b1:30:24:f4:36:6d:19:f5:
         b5:8b:e7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----