This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4MrVC3dfLaNFSMUG4YudSJ7wcaS1F8DFq2SZYJpGwnE3/0/581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.mft
File:                     581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.mft (raw, json)
Hash identifier:          IwO042jIt8V1NCM6MLB0crizRGEjbcSmvs2xdf9toFo=
Subject key identifier:   91:0D:95:89:F8:C8:FE:12:07:4E:C7:0D:27:47:0E:20:D4:ED:02:F3
Authority key identifier: 58:1F:7F:0D:AD:FA:0E:16:F4:D2:FF:9A:84:88:3B:C6:70:69:89:C4
Certificate issuer:       /CN=581F7F0DADFA0E16F4D2FF9A84883BC6706989C4
Certificate serial:       0C21159C84003998E2F819CA981E002C7146EBB0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MrVC3dfLaNFSMUG4YudSJ7wcaS1F8DFq2SZYJpGwnE3/0/581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.mft
Manifest number:          019F
Signing time:             Sun 21 Dec 2025 01:37:40 +0000
Manifest this update:     Sun 21 Dec 2025 01:32:40 +0000
Manifest next update:     Mon 22 Dec 2025 05:22:40 +0000
Files and hashes:         1: 581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.crl (hash: ycDA3teEn/ZIlhQOPVGuAsH1uZkgt391Kf+j6Vjx+V0=)
                          2: 323830343a393038383a3a2f33322d313238203d3e20323733353538.roa (hash: 7SsgFVf4qilP6riElw0Dsp1S7JCn5aQdOBEBP0daWuw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4MrVC3dfLaNFSMUG4YudSJ7wcaS1F8DFq2SZYJpGwnE3/0/581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.crl
                          rsync://rpki-repo.registro.br/repo/4MrVC3dfLaNFSMUG4YudSJ7wcaS1F8DFq2SZYJpGwnE3/0/581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 05:22:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:21:15:9c:84:00:39:98:e2:f8:19:ca:98:1e:00:2c:71:46:eb:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=581F7F0DADFA0E16F4D2FF9A84883BC6706989C4
        Validity
            Not Before: Dec 21 01:32:40 2025 GMT
            Not After : Dec 22 05:22:40 2025 GMT
        Subject: CN=910D9589F8C8FE12074EC70D27470E20D4ED02F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:48:b3:23:06:c2:ba:fe:9b:e0:19:13:7f:3b:
                    49:7b:b7:49:e2:77:0f:b3:87:44:9f:4d:e3:a1:7b:
                    d5:36:d9:f1:ec:2d:04:03:02:4b:09:37:82:0c:e6:
                    c1:ca:d7:86:20:63:01:7f:11:70:76:d0:cd:9d:4a:
                    95:ba:8e:7d:f2:75:e0:fa:2f:65:6e:2f:e0:bb:b9:
                    b6:53:f5:3b:2f:9b:97:8b:01:7e:b5:cf:cd:e0:20:
                    e1:27:0c:c5:48:1a:3e:fa:b4:9a:c5:58:28:46:f0:
                    e1:ef:81:33:b2:38:0f:a5:3c:61:4c:90:b0:41:79:
                    96:dd:b1:47:66:b7:43:a5:bc:08:b0:f0:e3:5f:91:
                    c2:20:97:ad:18:ea:22:d0:0e:d9:25:0f:3c:45:ef:
                    55:8f:87:05:cc:24:42:c8:80:7b:df:c5:c7:73:13:
                    be:e5:17:1a:f2:7b:36:11:1b:b6:f5:c9:f7:3a:cd:
                    ab:b7:3a:6b:62:77:d8:a0:0c:84:39:67:e6:a7:0e:
                    a9:14:78:ad:b6:e0:06:ab:99:46:34:51:61:db:c6:
                    69:08:01:78:73:27:8b:36:c1:b9:80:7f:f2:57:25:
                    bd:8c:00:8a:d0:ba:84:72:e7:1e:62:84:37:b2:da:
                    0c:4d:27:91:d7:45:01:f2:e2:ff:7a:d5:b2:3e:11:
                    d9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:0D:95:89:F8:C8:FE:12:07:4E:C7:0D:27:47:0E:20:D4:ED:02:F3
            X509v3 Authority Key Identifier:
                keyid:58:1F:7F:0D:AD:FA:0E:16:F4:D2:FF:9A:84:88:3B:C6:70:69:89:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MrVC3dfLaNFSMUG4YudSJ7wcaS1F8DFq2SZYJpGwnE3/0/581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MrVC3dfLaNFSMUG4YudSJ7wcaS1F8DFq2SZYJpGwnE3/0/581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:68:fb:57:18:1d:29:63:66:9c:05:c0:98:03:c7:1a:84:04:
         61:92:f2:93:f7:b6:ee:80:42:dc:10:eb:b1:4f:4d:c8:98:21:
         eb:be:8f:01:aa:87:eb:ca:df:79:00:14:cf:2f:0b:8e:9a:b1:
         2a:89:69:2a:e9:bd:07:63:4f:6a:dd:9d:62:ec:10:c8:a5:ee:
         f3:f5:87:93:3c:47:7b:da:86:e0:89:79:6d:ff:e0:e8:a8:28:
         fc:89:e2:d3:6e:0b:15:8b:42:98:86:b6:8e:45:62:38:92:52:
         b1:3a:7b:4e:73:98:b9:25:4b:25:8d:b4:5c:d5:b6:f4:d4:9b:
         5e:ef:8d:83:23:56:d7:aa:64:f4:5e:fc:ca:7c:14:d3:c9:fb:
         5e:6d:31:17:3e:6f:17:12:4e:6d:1b:9d:db:e2:f0:78:d6:b1:
         53:bf:28:97:8e:80:7b:03:cd:54:3a:cd:6b:a5:df:22:27:99:
         c2:78:92:ff:b7:d9:92:cc:47:9e:62:7a:31:63:47:2b:12:15:
         63:90:1f:e5:72:17:08:74:5d:56:f8:e0:1e:07:a0:77:93:41:
         ee:c6:59:64:f9:91:65:e3:99:92:92:03:75:90:e7:fb:2b:dc:
         38:a1:7c:e6:52:ec:d7:4b:93:25:a9:f3:e2:a0:7e:1f:c0:16:
         61:b0:ce:0a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUDCEVnIQAOZji+BnKmB4ALHFG67AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgxRjdGMERBREZBMEUxNkY0RDJGRjlBODQ4ODNCQzY3
MDY5ODlDNDAeFw0yNTEyMjEwMTMyNDBaFw0yNTEyMjIwNTIyNDBaMDMxMTAvBgNV
BAMTKDkxMEQ5NTg5RjhDOEZFMTIwNzRFQzcwRDI3NDcwRTIwRDRFRDAyRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxSLMjBsK6/pvgGRN/O0l7t0ni
dw+zh0SfTeOhe9U22fHsLQQDAksJN4IM5sHK14YgYwF/EXB20M2dSpW6jn3ydeD6
L2VuL+C7ubZT9Tsvm5eLAX61z83gIOEnDMVIGj76tJrFWChG8OHvgTOyOA+lPGFM
kLBBeZbdsUdmt0OlvAiw8ONfkcIgl60Y6iLQDtklDzxF71WPhwXMJELIgHvfxcdz
E77lFxryezYRG7b1yfc6zau3Omtid9igDIQ5Z+anDqkUeK224AarmUY0UWHbxmkI
AXhzJ4s2wbmAf/JXJb2MAIrQuoRy5x5ihDey2gxNJ5HXRQHy4v961bI+EdlhAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUkQ2VifjI/hIHTscNJ0cOINTtAvMwHwYDVR0j
BBgwFoAUWB9/Da36Dhb00v+ahIg7xnBpicQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNE1yVkMzZGZMYU5GU01VRzRZdWRTSjd3Y2FTMUY4REZxMlNaWUpwR3du
RTMvMC81ODFGN0YwREFERkEwRTE2RjREMkZGOUE4NDg4M0JDNjcwNjk4OUM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU4MUY3RjBEQURGQTBFMTZG
NEQyRkY5QTg0ODgzQkM2NzA2OTg5QzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NE1yVkMzZGZMYU5GU01VRzRZdWRTSjd3Y2FTMUY4REZxMlNaWUpwR3duRTMvMC81
ODFGN0YwREFERkEwRTE2RjREMkZGOUE4NDg4M0JDNjcwNjk4OUM0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAE2j7VxgdKWNmnAXAmAPHGoQEYZLyk/e27oBC3BDrsU9NyJgh676PAaqH68rf
eQAUzy8LjpqxKolpKum9B2NPat2dYuwQyKXu8/WHkzxHe9qG4Il5bf/g6Kgo/Ini
024LFYtCmIa2jkViOJJSsTp7TnOYuSVLJY20XNW29NSbXu+NgyNW16pk9F78ynwU
08n7Xm0xFz5vFxJObRud2+LweNaxU78ol46AewPNVDrNa6XfIieZwniS/7fZksxH
nmJ6MWNHKxIVY5Af5XIXCHRdVvjgHgegd5NB7sZZZPmRZeOZkpIDdZDn+yvcOKF8
5lLs10uTJanz4qB+H8AWYbDOCg==
-----END CERTIFICATE-----