This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/D44D50D076872C7AF0CA51E36D70020A681F7E30.mft
File:                     D44D50D076872C7AF0CA51E36D70020A681F7E30.mft (raw, json)
Hash identifier:          rCvZDJXAqh5I0FJ89EUYGky1EgUIotP0xqmMuhzJUG4=
Subject key identifier:   F8:AB:01:54:21:4C:21:6A:74:D6:AD:71:B5:BD:07:82:C6:7E:12:DC
Authority key identifier: D4:4D:50:D0:76:87:2C:7A:F0:CA:51:E3:6D:70:02:0A:68:1F:7E:30
Certificate issuer:       /CN=D44D50D076872C7AF0CA51E36D70020A681F7E30
Certificate serial:       3E386A93ED601DCF67F91589B0E782CEF31A7920
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D44D50D076872C7AF0CA51E36D70020A681F7E30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/D44D50D076872C7AF0CA51E36D70020A681F7E30.mft
Manifest number:          FC
Signing time:             Tue 23 Dec 2025 23:40:40 +0000
Manifest this update:     Tue 23 Dec 2025 23:35:40 +0000
Manifest next update:     Thu 25 Dec 2025 00:25:40 +0000
Files and hashes:         1: 323830343a353831303a3a2f33322d3438203d3e20323638313034.roa (hash: h0v9+riMHdqkwtFuQSSEydv/fsiI0Ysz69HDjtIG1MU=)
                          2: D44D50D076872C7AF0CA51E36D70020A681F7E30.crl (hash: ihQ3b9hQtJF+iyBVIp1Oj1f7NMMx1vcakce7ABJEoJk=)
                          3: 34352e3136372e3232342e302f32322d3234203d3e20323638313034.roa (hash: zdFqDTwU6sMyVYv8G6jfL9Y50Yu71K5+n8Nb7AkT9vU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/D44D50D076872C7AF0CA51E36D70020A681F7E30.crl
                          rsync://rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/D44D50D076872C7AF0CA51E36D70020A681F7E30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D44D50D076872C7AF0CA51E36D70020A681F7E30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 00:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:38:6a:93:ed:60:1d:cf:67:f9:15:89:b0:e7:82:ce:f3:1a:79:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D44D50D076872C7AF0CA51E36D70020A681F7E30
        Validity
            Not Before: Dec 23 23:35:40 2025 GMT
            Not After : Dec 25 00:25:40 2025 GMT
        Subject: CN=F8AB0154214C216A74D6AD71B5BD0782C67E12DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:30:66:01:3a:61:5f:31:40:7a:ba:94:e1:f1:
                    f7:23:19:8b:9c:bf:60:cb:4d:f3:2c:c4:e6:45:20:
                    16:c5:19:05:c9:79:d0:50:f7:37:bf:04:66:c5:2e:
                    48:0d:bd:cf:22:1a:0c:f6:12:2f:de:9f:b7:f1:c5:
                    a3:52:a5:19:02:3d:4c:70:3b:70:36:08:52:0d:d2:
                    1e:52:4d:b0:e0:9c:35:ee:24:ac:b0:c9:52:4b:b4:
                    77:bb:85:ca:53:94:52:08:71:09:49:dd:28:82:6d:
                    a5:57:ff:45:9b:8d:f9:1c:90:80:10:7b:91:ba:33:
                    1b:2a:4e:35:e9:73:12:0f:d5:db:d9:a3:ac:d6:24:
                    56:ee:78:a6:f2:0b:ec:72:00:a9:97:38:91:04:50:
                    81:40:1b:30:53:f9:3c:ef:49:63:d9:3d:28:5b:6a:
                    ab:42:2a:20:72:d4:a6:fd:4a:b9:4b:11:62:ff:8c:
                    cd:a9:cd:8f:3b:d2:6e:cb:0c:82:f7:db:88:76:a5:
                    68:78:2b:89:44:ff:bd:7e:23:7c:36:db:90:75:17:
                    a4:23:23:ff:7a:cc:15:30:43:72:c9:05:58:a5:0f:
                    42:6f:3a:50:25:c8:47:b9:6e:64:87:cc:69:7c:22:
                    4d:dc:dd:40:f0:cf:c0:da:45:b1:e2:8f:59:1e:7d:
                    11:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:AB:01:54:21:4C:21:6A:74:D6:AD:71:B5:BD:07:82:C6:7E:12:DC
            X509v3 Authority Key Identifier:
                keyid:D4:4D:50:D0:76:87:2C:7A:F0:CA:51:E3:6D:70:02:0A:68:1F:7E:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/D44D50D076872C7AF0CA51E36D70020A681F7E30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D44D50D076872C7AF0CA51E36D70020A681F7E30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/D44D50D076872C7AF0CA51E36D70020A681F7E30.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:e7:d2:f1:1b:6e:d3:22:f0:81:78:e9:56:78:2f:7e:65:0b:
         38:c9:c1:d0:df:87:41:f4:6c:39:2f:4f:86:0e:5d:85:5d:2c:
         6b:5f:c9:b3:d0:7c:57:fd:58:2d:68:c5:68:33:07:5c:b5:79:
         ce:42:08:70:7f:f3:71:26:24:5e:d8:52:d0:7e:92:ba:24:ed:
         f3:dc:b5:a7:6c:4a:56:7f:25:ed:20:bc:07:25:a7:42:f8:85:
         96:b1:00:58:13:28:73:f5:ba:32:6d:95:ab:56:e4:93:32:67:
         09:23:70:1f:49:7b:0e:aa:9c:1d:db:6b:56:74:85:66:f8:34:
         65:f6:e2:8b:a1:29:91:fd:4c:4b:d1:e3:7e:65:7d:ac:f4:0c:
         7f:d7:96:9e:7f:ad:f0:be:4e:4b:49:03:37:8d:92:16:4a:1e:
         33:78:90:cd:11:22:51:03:08:99:e4:c0:69:8a:c1:34:c5:e5:
         41:26:a1:3a:c4:47:c4:7f:3f:40:cb:43:db:cc:fd:82:62:ab:
         dd:9a:be:de:33:9c:5e:67:5a:4d:05:9d:0d:8e:48:8a:0c:e9:
         ab:e4:1b:34:ea:5c:06:6e:59:0c:5f:62:fe:9a:1a:7c:ca:68:
         2d:10:3c:50:74:57:1e:79:b5:24:24:aa:cf:6c:5f:7f:aa:50:
         9f:df:61:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:27:30 2025 by rpki-client