This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.mft
File:                     4CE80122D6DDFCAC903327698E75EF1407FA8195.mft (raw, json)
Hash identifier:          W/gUTfD8Z4Ex+LDV3KERZruDWVxGV5XSvvfNtQiY/Ys=
Subject key identifier:   29:52:99:51:99:1A:DC:4E:EC:5D:8B:AE:43:8F:EC:FC:AE:DB:22:8D
Authority key identifier: 4C:E8:01:22:D6:DD:FC:AC:90:33:27:69:8E:75:EF:14:07:FA:81:95
Certificate issuer:       /CN=4CE80122D6DDFCAC903327698E75EF1407FA8195
Certificate serial:       37A6E152FB39B3D91A82D610446AC0B1163F6670
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE80122D6DDFCAC903327698E75EF1407FA8195.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.mft
Manifest number:          A8
Signing time:             Wed 24 Dec 2025 07:23:51 +0000
Manifest this update:     Wed 24 Dec 2025 07:18:51 +0000
Manifest next update:     Thu 25 Dec 2025 08:20:51 +0000
Files and hashes:         1: 3230302e35332e37362e302f32342d3234203d3e20323731333136.roa (hash: nIV6ZpOOJoFXarVbTgdRMvC2g1BanYy7ldked+11w1Y=)
                          2: 3230302e35332e37372e302f32342d3234203d3e20323731333136.roa (hash: X1ipdbYyA0gvYxdeI8aFDgD73ImCQ+DUuOrszHZNSlA=)
                          3: 323830343a373939633a3a2f33332d3333203d3e20323731333136.roa (hash: 9dyqlba/doiFEieE0RYOotWF/WfNx8FttH4AXlnPn5s=)
                          4: 3230302e35332e37392e302f32342d3234203d3e20323731333136.roa (hash: 93zKVOrKHbSo5HEeLoH37RJ11jpFLfz+QyEJo6hXuuk=)
                          5: 3230302e35332e37362e302f32332d3233203d3e20323731333136.roa (hash: JrtUeuMd7mlklugszg0TSGLi9BvMubCDLCd3d5HWus4=)
                          6: 4CE80122D6DDFCAC903327698E75EF1407FA8195.crl (hash: K2iGZrO0PmMkwTgGx2dmzmItHRTup9hwEpL32O191E8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.crl
                          rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE80122D6DDFCAC903327698E75EF1407FA8195.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 08:20:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:a6:e1:52:fb:39:b3:d9:1a:82:d6:10:44:6a:c0:b1:16:3f:66:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CE80122D6DDFCAC903327698E75EF1407FA8195
        Validity
            Not Before: Dec 24 07:18:51 2025 GMT
            Not After : Dec 25 08:20:51 2025 GMT
        Subject: CN=29529951991ADC4EEC5D8BAE438FECFCAEDB228D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c6:bc:4b:ac:da:ea:78:e1:4c:2b:77:81:20:
                    7a:a1:8d:de:29:39:51:ec:4f:dc:b7:07:15:d0:54:
                    c9:40:d1:42:3a:7a:cb:f7:ca:81:19:b3:fa:ce:a9:
                    55:01:76:d4:88:aa:f3:5e:56:9f:c3:3f:c1:9e:41:
                    72:bb:ba:53:42:81:74:ea:31:4a:e2:55:5c:03:15:
                    cd:a9:af:b9:75:92:5d:f7:6c:26:a4:78:36:f4:46:
                    4e:a0:fb:21:0d:ee:70:40:ac:f3:06:2d:39:f4:00:
                    64:eb:50:fe:a7:8e:ea:59:30:83:de:d4:b0:21:b0:
                    11:7a:a7:0b:8e:7a:52:20:81:6d:29:3c:ea:f0:60:
                    c7:fc:2b:4b:85:00:90:4f:3d:c7:70:b9:5c:ca:9f:
                    2b:68:22:cc:54:8f:f5:c6:ca:ed:24:a6:43:44:9d:
                    e8:31:e3:0e:4e:f4:13:cc:d3:9b:e1:7a:67:fb:cb:
                    4c:91:12:b2:a0:20:bb:b3:bc:e0:6f:41:b6:84:43:
                    7e:46:50:a7:ac:b9:e3:58:d1:ea:a5:97:5f:82:bb:
                    ab:53:3f:7c:0c:50:6e:bd:1e:05:c6:07:be:24:67:
                    06:a8:8d:fe:9f:e6:60:6e:1a:65:87:6d:80:ae:11:
                    05:49:39:0c:08:36:60:92:6d:fd:81:a2:c7:14:9d:
                    2b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:52:99:51:99:1A:DC:4E:EC:5D:8B:AE:43:8F:EC:FC:AE:DB:22:8D
            X509v3 Authority Key Identifier:
                keyid:4C:E8:01:22:D6:DD:FC:AC:90:33:27:69:8E:75:EF:14:07:FA:81:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE80122D6DDFCAC903327698E75EF1407FA8195.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:54:f3:bf:dd:41:49:77:e4:a4:86:6b:7e:fa:3e:bc:c1:a9:
         38:98:82:71:b4:2b:59:02:b2:d8:c8:e3:f6:76:d3:61:2a:c0:
         c5:44:db:f4:fa:b1:17:af:3f:f9:e4:2f:d4:b9:4f:e8:1c:69:
         76:04:37:71:37:0c:10:ab:9b:e3:e5:14:b0:7b:c8:d7:d3:61:
         a7:2c:e7:da:48:29:f3:c0:03:4c:d8:e1:fe:43:d1:03:75:6b:
         cc:bf:7c:c6:86:49:f2:38:a0:c0:db:6c:70:8b:3d:7d:3e:be:
         db:a4:ff:d9:88:c8:a6:f2:33:fa:c9:f4:c9:ef:71:ff:81:1f:
         6e:ec:7f:17:dd:f2:ae:cc:98:ea:26:fe:01:d3:6b:ab:5c:a4:
         fa:ce:8c:9c:76:4e:47:a8:76:97:a0:18:17:66:8c:b5:18:31:
         48:be:0c:87:a9:da:da:cc:d1:6f:6f:21:1a:fc:87:1a:59:c6:
         dd:73:e0:34:9d:fc:77:ff:b0:b2:20:ae:df:3d:8a:e5:89:73:
         b3:b0:6c:41:59:f0:83:c7:83:57:89:f7:8c:ba:c9:a7:bd:04:
         01:79:af:f8:ff:e9:99:55:0c:22:a8:fe:db:23:40:58:0e:4d:
         e3:80:c1:6e:90:d1:4c:1b:fe:7b:1f:e4:1a:1c:20:86:42:e5:
         7e:c8:4c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:27:32 2025 by rpki-client