This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.mft
File:                     1A384BFA8860D53ABCEDBC8A91B37A972B89181B.mft (raw, json)
Hash identifier:          /Ocooy45ksPbCOM94KkhuJm2Cs5iNIMKSPUJXNGqKFY=
Subject key identifier:   8F:DB:FE:DA:8B:AD:4D:E3:25:32:04:29:8A:3F:3F:B5:EB:F4:A3:E3
Authority key identifier: 1A:38:4B:FA:88:60:D5:3A:BC:ED:BC:8A:91:B3:7A:97:2B:89:18:1B
Certificate issuer:       /CN=1A384BFA8860D53ABCEDBC8A91B37A972B89181B
Certificate serial:       37CFDCE0844C5E1EAA0FDA0EEC6BF3C8A2B0DE46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.mft
Manifest number:          91
Signing time:             Wed 17 Dec 2025 20:26:20 +0000
Manifest this update:     Wed 17 Dec 2025 20:21:20 +0000
Manifest next update:     Fri 19 Dec 2025 00:02:20 +0000
Files and hashes:         1: 1A384BFA8860D53ABCEDBC8A91B37A972B89181B.crl (hash: scQ3228PDm+cPMi4qfvOhWD9n8a1jBsuTgXvSC++FFY=)
                          2: 3139302e382e3136302e302f32322d3332203d3e20323730363138.roa (hash: NFOlwNRCMdO9B97BInd7TuPA7qaYKAf/pG9TnCSjm5w=)
                          3: 323830343a366563383a3a2f33322d313238203d3e20323730363138.roa (hash: x87eBH+DzA1bwStUsY3ov3cCPNX6b/Fmr9pOc9L8pws=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.crl
                          rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 00:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:cf:dc:e0:84:4c:5e:1e:aa:0f:da:0e:ec:6b:f3:c8:a2:b0:de:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A384BFA8860D53ABCEDBC8A91B37A972B89181B
        Validity
            Not Before: Dec 17 20:21:20 2025 GMT
            Not After : Dec 19 00:02:20 2025 GMT
        Subject: CN=8FDBFEDA8BAD4DE3253204298A3F3FB5EBF4A3E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f8:88:a4:75:8b:fd:54:f4:f6:30:6f:c7:43:
                    86:fe:20:e0:da:38:53:a8:ea:d0:3c:9f:86:2c:b4:
                    90:34:6d:23:ee:8d:3b:1b:8e:b0:c9:b5:82:80:20:
                    b1:c5:7d:3b:c0:35:ba:6d:72:73:04:01:a0:7a:b8:
                    02:35:58:40:7d:a9:7d:88:0f:4c:ad:10:39:5d:11:
                    23:7b:28:c7:60:d2:d9:17:1d:83:37:b8:0f:87:2d:
                    90:bc:8c:c5:d4:95:f9:ef:44:32:54:e8:36:a7:88:
                    1f:be:bf:17:b6:02:1a:c6:c4:f0:3e:f2:8b:04:fd:
                    52:80:3d:ac:70:70:91:ea:fd:c7:32:66:15:90:9f:
                    4f:54:69:b5:04:8d:8e:85:10:49:0a:3e:73:1b:8f:
                    03:90:58:92:d6:a9:28:6e:83:0a:c5:97:b5:56:a6:
                    a4:00:2a:7b:20:e1:e7:82:28:e6:a9:f5:c0:37:4e:
                    6d:0e:83:10:8b:7e:bb:97:0e:b3:da:2f:92:af:21:
                    e8:5b:53:98:e6:6e:df:43:29:72:42:3a:b4:16:13:
                    b5:18:44:d9:f2:f6:1b:b2:b6:b9:52:28:d3:16:ac:
                    a3:ce:5d:3a:50:a2:b5:12:b3:a6:d7:2a:8b:19:98:
                    d4:1d:75:c3:40:7c:1b:38:01:21:b8:cf:be:50:52:
                    ce:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:DB:FE:DA:8B:AD:4D:E3:25:32:04:29:8A:3F:3F:B5:EB:F4:A3:E3
            X509v3 Authority Key Identifier:
                keyid:1A:38:4B:FA:88:60:D5:3A:BC:ED:BC:8A:91:B3:7A:97:2B:89:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:3a:45:10:e6:d7:be:9b:ad:94:cb:89:4f:9a:0e:d5:c0:bc:
         bd:5c:cb:e5:1a:5d:6b:62:65:16:5c:e4:e2:4d:94:8f:59:2e:
         09:36:86:ca:02:15:7c:8b:36:ef:c6:e7:81:9d:d1:8a:f4:cf:
         c2:9c:18:a1:01:eb:16:f3:1b:0e:6b:a4:c3:70:8e:48:94:ac:
         12:f8:18:39:d2:e2:10:ee:24:ac:27:11:f8:d5:9a:79:8d:c1:
         c8:b9:31:a1:d0:53:ea:41:e6:26:af:4e:90:c9:75:3a:93:42:
         ce:aa:f1:0d:bf:ab:f8:ed:34:a8:a1:8f:71:f9:b9:d1:4a:15:
         c9:b0:c6:67:a2:0c:a7:78:0c:2b:93:d5:72:e1:71:45:f0:30:
         ed:8f:93:43:96:c4:0d:0e:f9:ed:24:d6:31:a7:44:9b:b5:56:
         51:d3:1e:88:c3:c9:85:00:c9:d8:1c:23:6f:98:29:53:3f:a6:
         2a:7c:ae:f9:cf:ca:78:7d:e9:41:3e:a8:d3:a7:bb:31:55:4f:
         87:3c:96:7f:82:e8:f1:9a:6c:1e:0a:c7:e5:12:e2:9d:0e:46:
         e0:aa:3b:3c:42:0c:6f:a7:ce:27:64:0d:cb:0d:0f:ae:85:f7:
         c8:7f:93:cf:97:4f:88:74:06:06:39:4a:70:4b:8f:54:6b:0e:
         5d:e8:66:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 09:32:39 2025 by rpki-client