This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2VvJ4R92QD8jtcxUqPMifL15B6LQiZM4gU3t55TwKaWZ/0/1C56253CEF2C7C6D01C4D0C06935463CFCD2140F.mft
File:                     1C56253CEF2C7C6D01C4D0C06935463CFCD2140F.mft (raw, json)
Hash identifier:          QQRjNAX8ix9S2eiUZeXFjiPFeD0Smqb+v4WhSP59fFs=
Subject key identifier:   A3:6C:E4:CA:4A:7A:C2:94:C9:D0:96:8D:62:EB:55:A0:08:FF:DA:F9
Authority key identifier: 1C:56:25:3C:EF:2C:7C:6D:01:C4:D0:C0:69:35:46:3C:FC:D2:14:0F
Certificate issuer:       /CN=1C56253CEF2C7C6D01C4D0C06935463CFCD2140F
Certificate serial:       14E0EA9D649AF2876AADA644231C63C6A86FF7D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C56253CEF2C7C6D01C4D0C06935463CFCD2140F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VvJ4R92QD8jtcxUqPMifL15B6LQiZM4gU3t55TwKaWZ/0/1C56253CEF2C7C6D01C4D0C06935463CFCD2140F.mft
Manifest number:          0269
Signing time:             Wed 24 Dec 2025 12:34:04 +0000
Manifest this update:     Wed 24 Dec 2025 12:29:04 +0000
Manifest next update:     Thu 25 Dec 2025 15:49:04 +0000
Files and hashes:         1: 323830343a326239383a3a2f33322d3438203d3e20323635313632.roa (hash: oGEx7UCWGH3nKunBd6gfqwXankJG3okjhQPegsUQRec=)
                          2: 3134332e3235352e3232382e302f32322d3234203d3e20323635313632.roa (hash: fl7vW3+LUm+RIGQTEoZnc11Xhcd25IUGm0hMvUjU/HI=)
                          3: 1C56253CEF2C7C6D01C4D0C06935463CFCD2140F.crl (hash: EqJcW6bPzqBEe+QIvDCY5cSSCYJ4Y+jDJ46lBy+6h20=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2VvJ4R92QD8jtcxUqPMifL15B6LQiZM4gU3t55TwKaWZ/0/1C56253CEF2C7C6D01C4D0C06935463CFCD2140F.crl
                          rsync://rpki-repo.registro.br/repo/2VvJ4R92QD8jtcxUqPMifL15B6LQiZM4gU3t55TwKaWZ/0/1C56253CEF2C7C6D01C4D0C06935463CFCD2140F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C56253CEF2C7C6D01C4D0C06935463CFCD2140F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 15:17:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e0:ea:9d:64:9a:f2:87:6a:ad:a6:44:23:1c:63:c6:a8:6f:f7:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C56253CEF2C7C6D01C4D0C06935463CFCD2140F
        Validity
            Not Before: Dec 24 12:29:04 2025 GMT
            Not After : Dec 25 15:49:04 2025 GMT
        Subject: CN=A36CE4CA4A7AC294C9D0968D62EB55A008FFDAF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:6d:89:e7:30:ed:65:50:06:1c:02:5c:fb:5d:
                    cc:17:ae:4e:42:dc:64:15:96:cd:56:fe:79:0e:4d:
                    16:cc:77:8f:3d:9d:55:49:d1:6f:c1:4a:11:1b:92:
                    11:f9:4e:fa:68:3b:45:bc:d1:cf:b3:36:87:0e:54:
                    0e:99:76:02:9e:9a:2d:41:85:6d:6d:50:e9:89:56:
                    16:a0:50:95:bd:63:60:2e:0a:4d:9b:69:9f:d7:5d:
                    1c:94:9d:e6:01:22:cb:25:a0:b2:a0:e8:6c:35:98:
                    d9:44:86:65:b1:a2:f7:d7:d9:1d:9e:52:bc:5e:d0:
                    56:cd:68:2e:72:95:8e:90:a1:bb:3f:55:89:c2:33:
                    db:23:14:c8:fe:83:d3:2c:6c:19:af:25:26:fd:f6:
                    7b:ba:df:01:f9:1f:63:61:41:f0:54:5f:59:71:df:
                    b1:d9:85:59:6d:94:18:cc:28:22:69:e0:63:69:24:
                    71:1d:86:1c:e2:b2:7a:55:29:36:a2:40:5e:bd:e4:
                    fd:f3:9f:81:75:92:3f:43:82:a4:3d:14:a4:16:79:
                    f3:9d:68:33:6b:0b:41:cf:76:20:ac:c5:bc:03:94:
                    f9:05:04:3a:dc:9e:f6:e6:3c:36:3b:93:61:2d:15:
                    cc:69:f9:64:90:13:09:3b:a5:95:22:93:73:f0:3c:
                    f5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:6C:E4:CA:4A:7A:C2:94:C9:D0:96:8D:62:EB:55:A0:08:FF:DA:F9
            X509v3 Authority Key Identifier:
                keyid:1C:56:25:3C:EF:2C:7C:6D:01:C4:D0:C0:69:35:46:3C:FC:D2:14:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VvJ4R92QD8jtcxUqPMifL15B6LQiZM4gU3t55TwKaWZ/0/1C56253CEF2C7C6D01C4D0C06935463CFCD2140F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C56253CEF2C7C6D01C4D0C06935463CFCD2140F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VvJ4R92QD8jtcxUqPMifL15B6LQiZM4gU3t55TwKaWZ/0/1C56253CEF2C7C6D01C4D0C06935463CFCD2140F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:a4:48:e8:a3:89:30:12:c7:a2:bd:f0:e9:d4:87:a9:c4:10:
         c9:06:fa:9c:70:2b:96:51:7e:7d:41:37:ea:86:19:46:13:65:
         9e:32:56:10:03:08:03:8d:23:90:e4:29:21:a8:3b:cf:1b:87:
         61:b8:99:55:96:86:8b:90:1c:b5:cf:4b:a0:1c:ec:6d:16:3f:
         f2:57:75:9e:01:fb:a1:e2:5d:40:71:54:18:9a:a1:f2:c3:97:
         55:eb:b7:9d:4e:9a:5b:ae:1e:a8:3c:63:80:07:a8:4e:09:7b:
         a2:96:33:f2:1e:27:e8:74:54:5e:e0:09:bf:d2:7d:ac:cd:14:
         e2:16:97:07:b6:a0:74:ab:75:50:d3:0e:27:51:26:af:c5:77:
         83:2c:e3:b2:1c:36:08:0f:30:f8:04:e0:0f:37:17:e7:be:40:
         5f:6f:1a:26:d7:bd:2c:f0:f7:dc:0a:56:b2:e4:d2:30:9b:b7:
         bf:ce:8a:4b:f4:f9:fb:60:92:42:0a:1b:68:a3:13:14:71:52:
         0b:b7:5d:11:0c:31:ff:0b:45:f6:81:6b:38:52:29:80:6e:b5:
         48:df:28:90:42:31:7e:60:37:7c:d4:97:54:1f:a3:e4:12:8f:
         79:83:f0:ba:2f:cb:57:80:15:35:e6:72:6c:fa:4a:2a:8e:ff:
         bf:dd:68:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----