This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft
File:                     D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft (raw, json)
Hash identifier:          w1N7mc2pThyFpoGvCt/tjCCO4XMReFYkd9wanic/yZw=
Subject key identifier:   8C:73:C0:60:09:B7:DA:B8:4C:EB:63:7D:3B:0A:4A:8B:BB:74:D1:47
Authority key identifier: D7:8B:D4:9F:16:98:DE:94:8F:47:13:6B:6B:8D:24:84:F5:3C:56:D5
Certificate issuer:       /CN=D78BD49F1698DE948F47136B6B8D2484F53C56D5
Certificate serial:       517F4AFC3BF12524F9815E7AFF3ADC4C4254CE5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D78BD49F1698DE948F47136B6B8D2484F53C56D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft
Manifest number:          014D
Signing time:             Mon 22 Dec 2025 16:05:07 +0000
Manifest this update:     Mon 22 Dec 2025 16:00:02 +0000
Manifest next update:     Tue 23 Dec 2025 19:46:02 +0000
Files and hashes:         1: 3137372e3132382e3232382e302f32322d3332203d3e203238353932.roa (hash: ZuDr+uoivnY73ETayT+plzAx38hIjwRMmlYEOg/XzDw=)
                          2: D78BD49F1698DE948F47136B6B8D2484F53C56D5.crl (hash: PouEA1isoYfWHxj9ZUTAgXC1lzCom+Z5Bii6W93s6zY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.crl
                          rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D78BD49F1698DE948F47136B6B8D2484F53C56D5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 19:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:7f:4a:fc:3b:f1:25:24:f9:81:5e:7a:ff:3a:dc:4c:42:54:ce:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D78BD49F1698DE948F47136B6B8D2484F53C56D5
        Validity
            Not Before: Dec 22 16:00:02 2025 GMT
            Not After : Dec 23 19:46:02 2025 GMT
        Subject: CN=8C73C06009B7DAB84CEB637D3B0A4A8BBB74D147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ec:ea:7b:eb:5b:bc:7c:00:26:2f:d5:24:c4:
                    72:74:4b:8c:f5:0c:dc:7d:cf:da:1e:76:1c:a2:b8:
                    b1:fd:2f:63:87:7c:a0:ea:6e:be:1c:26:33:c3:6d:
                    a8:b0:9f:5b:24:2e:ea:4f:e0:e4:38:68:53:ff:29:
                    51:dd:50:e3:6c:65:9f:94:35:0f:1a:d8:58:74:9c:
                    df:30:c7:d0:06:2b:b1:57:ec:af:b2:a8:8e:b6:7f:
                    03:ec:21:95:87:ac:c4:b4:1b:09:b2:c7:61:b8:87:
                    f2:33:4f:91:43:a0:ac:77:0a:65:1a:5f:7e:72:f1:
                    c9:f5:54:4d:5e:cf:1a:72:9b:8b:32:b4:c3:a1:b1:
                    ee:ce:30:e5:f1:04:e5:71:12:f9:cd:c0:3f:77:0a:
                    3e:40:8f:a2:04:af:6d:6e:fd:26:02:bf:89:72:b0:
                    35:6f:50:11:b1:46:69:8a:7c:ca:a7:07:6d:59:50:
                    8a:e0:24:a9:43:4c:2e:fa:a6:6e:00:f3:e8:51:c0:
                    2d:ed:ce:f3:d6:2b:e4:a6:b1:3d:05:eb:de:38:e3:
                    ed:d3:b8:ac:25:78:9a:ca:40:4c:e8:24:10:68:e2:
                    90:6a:8e:37:8f:57:b5:c9:20:db:8a:d9:79:c3:37:
                    e6:15:13:af:59:e4:f6:79:82:9e:b0:39:55:2d:2b:
                    43:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:73:C0:60:09:B7:DA:B8:4C:EB:63:7D:3B:0A:4A:8B:BB:74:D1:47
            X509v3 Authority Key Identifier:
                keyid:D7:8B:D4:9F:16:98:DE:94:8F:47:13:6B:6B:8D:24:84:F5:3C:56:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D78BD49F1698DE948F47136B6B8D2484F53C56D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:75:7d:f0:07:66:5d:49:1e:7e:04:c8:1a:24:92:29:87:be:
         1a:28:9c:d6:bc:2f:33:00:f9:5d:51:3d:04:4b:0b:84:92:c1:
         23:3f:4f:53:6b:47:a1:95:f6:88:41:09:8d:59:cf:a1:a0:94:
         4c:f9:16:8c:9a:9a:e2:7f:fd:f2:75:2d:51:19:8a:2e:b4:07:
         c7:d9:e2:77:2b:9c:2f:7e:3f:30:4f:62:3f:c5:fe:68:f2:7c:
         cc:ac:4d:24:c2:6a:be:16:c8:3f:c9:54:fe:64:ce:5b:2b:75:
         e8:ba:b0:af:a4:d1:56:5a:ee:ff:7a:83:55:96:8c:f7:06:a5:
         1a:58:72:26:09:d9:6b:a8:72:8f:4d:08:eb:ef:85:65:67:12:
         a1:bb:e9:2e:dd:2c:e3:86:99:67:ff:a0:56:d7:cc:ce:24:7c:
         0a:e4:71:38:a4:22:30:dc:98:1e:48:c8:ab:5c:06:78:f5:11:
         aa:ef:a6:e8:55:dd:59:c7:7a:86:60:d3:80:c5:4d:29:c2:d0:
         50:e8:03:69:1f:1b:4b:7c:ef:44:e3:83:1e:e5:42:ce:7f:ef:
         83:17:bf:81:01:fd:44:55:f2:b9:58:41:14:ed:09:d2:53:63:
         ef:ba:39:1d:f8:e5:9b:ae:35:93:89:d3:41:19:98:29:7f:ae:
         4a:da:ae:de
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUUX9K/DvxJST5gV56/zrcTEJUzlwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc4QkQ0OUYxNjk4REU5NDhGNDcxMzZCNkI4RDI0ODRG
NTNDNTZENTAeFw0yNTEyMjIxNjAwMDJaFw0yNTEyMjMxOTQ2MDJaMDMxMTAvBgNV
BAMTKDhDNzNDMDYwMDlCN0RBQjg0Q0VCNjM3RDNCMEE0QThCQkI3NEQxNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm7Op761u8fAAmL9UkxHJ0S4z1
DNx9z9oedhyiuLH9L2OHfKDqbr4cJjPDbaiwn1skLupP4OQ4aFP/KVHdUONsZZ+U
NQ8a2Fh0nN8wx9AGK7FX7K+yqI62fwPsIZWHrMS0Gwmyx2G4h/IzT5FDoKx3CmUa
X35y8cn1VE1ezxpym4sytMOhse7OMOXxBOVxEvnNwD93Cj5Aj6IEr21u/SYCv4ly
sDVvUBGxRmmKfMqnB21ZUIrgJKlDTC76pm4A8+hRwC3tzvPWK+SmsT0F69444+3T
uKwleJrKQEzoJBBo4pBqjjePV7XJINuK2XnDN+YVE69Z5PZ5gp6wOVUtK0MlAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUjHPAYAm32rhM62N9OwpKi7t00UcwHwYDVR0j
BBgwFoAU14vUnxaY3pSPRxNra40khPU8VtUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEtXdVh4SkhNVGJ4VlJvaGRYaThoYjlNOUhNUWt5cUVqSGhTVnNuTG5E
MzMvMC9ENzhCRDQ5RjE2OThERTk0OEY0NzEzNkI2QjhEMjQ4NEY1M0M1NkQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3OEJENDlGMTY5OERFOTQ4
RjQ3MTM2QjZCOEQyNDg0RjUzQzU2RDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NEtXdVh4SkhNVGJ4VlJvaGRYaThoYjlNOUhNUWt5cUVqSGhTVnNuTG5EMzMvMC9E
NzhCRDQ5RjE2OThERTk0OEY0NzEzNkI2QjhEMjQ4NEY1M0M1NkQ1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALHV98AdmXUkefgTIGiSSKYe+Giic1rwvMwD5XVE9BEsLhJLBIz9PU2tHoZX2
iEEJjVnPoaCUTPkWjJqa4n/98nUtURmKLrQHx9nidyucL34/ME9iP8X+aPJ8zKxN
JMJqvhbIP8lU/mTOWyt16Lqwr6TRVlru/3qDVZaM9walGlhyJgnZa6hyj00I6++F
ZWcSobvpLt0s44aZZ/+gVtfMziR8CuRxOKQiMNyYHkjIq1wGePURqu+m6FXdWcd6
hmDTgMVNKcLQUOgDaR8bS3zvROODHuVCzn/vgxe/gQH9RFXyuVhBFO0J0lNj77o5
Hfjlm641k4nTQRmYKX+uStqu3g==
-----END CERTIFICATE-----