This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft
File:                     F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft (raw, json)
Hash identifier:          EOGgdBFU17WKNcdAyb1fhvns/JMcrXlwut2RnyglF7c=
Subject key identifier:   EE:02:48:C2:98:4E:7F:0E:2E:58:09:8D:9C:2C:ED:E1:24:B0:0F:F6
Authority key identifier: F0:A9:8F:77:9D:3B:EF:65:95:96:B6:4B:32:B2:8E:B6:AF:E8:EA:B5
Certificate issuer:       /CN=F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5
Certificate serial:       6A36E0CAA5CD2E6E26CDDCFCE32090F80F9540C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft
Manifest number:          033D
Signing time:             Sun 14 Dec 2025 19:21:59 +0000
Manifest this update:     Sun 14 Dec 2025 19:16:59 +0000
Manifest next update:     Mon 15 Dec 2025 21:23:59 +0000
Files and hashes:         1: F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.crl (hash: +3y2RMbU1qiyDT8xtfBCvM+YcPXsNTkJPNSiXta6yzI=)
                          2: 323830313a62363a3a2f33322d3438203d3e20323633303833.roa (hash: /sq5AM8I6YaMflMxl5q4xXK1dCuBrTD/NmShXyjbG5M=)
                          3: 3137392e3130362e3139322e302f31382d3234203d3e20323633303833.roa (hash: fFcuOyny+lMAM8e0QThYzGDXjn34h9O3teYEKFUfcPs=)
                          4: 3138362e3233332e31322e302f32322d3234203d3e20323633303833.roa (hash: rojlOjdeX3UrPuGCG6PrXeAls8xreKNh9ggg9OI9Em4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.crl
                          rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Dec 2025 21:23:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:36:e0:ca:a5:cd:2e:6e:26:cd:dc:fc:e3:20:90:f8:0f:95:40:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5
        Validity
            Not Before: Dec 14 19:16:59 2025 GMT
            Not After : Dec 15 21:23:59 2025 GMT
        Subject: CN=EE0248C2984E7F0E2E58098D9C2CEDE124B00FF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:94:ef:05:4b:91:e5:42:36:76:c8:57:49:84:
                    fd:3f:98:67:4c:6f:c8:29:4b:b4:79:b0:32:17:75:
                    a8:dd:b2:7f:18:66:a1:dd:a3:6a:4d:f8:e8:ba:12:
                    22:a9:1b:7d:1c:fc:7d:b5:5c:2b:da:f8:26:cc:20:
                    ad:d4:20:c5:f4:54:4c:77:78:81:ab:c7:50:b3:dd:
                    2f:c7:07:ec:0d:fb:74:cf:22:0f:e0:5f:77:73:e9:
                    f3:00:da:b9:a4:b1:ce:64:fe:85:21:dd:ab:b7:64:
                    09:ec:b3:82:9c:74:e2:ca:eb:4b:56:7c:40:3f:1f:
                    9d:35:32:f9:c6:f5:e2:eb:57:f7:98:38:86:71:12:
                    bf:87:ae:6b:32:eb:e0:b1:03:96:cb:fe:f2:af:1b:
                    83:ae:a2:b7:2b:c0:a7:71:78:28:78:86:41:11:86:
                    a2:70:38:1a:a7:fb:4f:81:fa:54:6c:46:58:74:04:
                    41:77:e9:0b:d2:e7:43:52:0f:e4:90:cd:e9:d8:ca:
                    72:5e:e7:07:72:9c:64:d7:8a:8b:39:85:c9:ef:b5:
                    98:c3:a8:05:1b:37:5a:aa:21:28:81:02:5c:4b:78:
                    9a:a3:9c:09:86:f4:a7:a2:a2:48:a3:e9:25:7b:b2:
                    ce:97:fb:d4:0a:99:19:b0:86:aa:ab:9b:c6:51:5e:
                    d5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:02:48:C2:98:4E:7F:0E:2E:58:09:8D:9C:2C:ED:E1:24:B0:0F:F6
            X509v3 Authority Key Identifier:
                keyid:F0:A9:8F:77:9D:3B:EF:65:95:96:B6:4B:32:B2:8E:B6:AF:E8:EA:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:7f:7d:27:7d:06:dc:b7:3b:69:da:8e:e6:c6:19:03:93:52:
         23:b4:09:6d:ac:ef:e2:de:3d:58:59:7f:74:31:ee:a7:ac:f9:
         5b:4b:71:62:ba:1f:52:9b:94:26:35:e1:25:33:95:fa:ad:86:
         1c:5b:20:74:39:f0:c1:1d:fc:e6:7f:ff:04:62:8d:06:99:25:
         71:41:c5:c8:aa:31:d2:42:a9:a1:fb:5d:a2:a1:a5:7c:a3:6d:
         ea:ed:bc:f6:10:6f:65:70:a7:e5:a5:25:4a:f2:aa:e4:e3:f7:
         cb:0e:2a:4e:69:dd:72:8f:9d:08:ee:7a:6e:aa:8a:c1:fc:ec:
         7e:83:60:f1:f4:6e:79:3c:d6:5a:4e:4d:ab:1b:d6:e3:f0:21:
         e1:0a:6d:5c:72:5b:42:94:f3:fa:17:7d:64:c7:62:22:6d:7f:
         f2:0d:36:44:ec:b7:70:15:e9:47:9b:3b:7d:7c:be:66:e6:7a:
         21:d7:e9:c8:e7:82:cc:9b:97:e6:ed:31:88:71:7d:7c:b2:5e:
         bc:01:f5:d3:cf:06:01:6a:4d:11:c3:ca:4c:2d:e1:d5:7f:f5:
         ba:86:21:c5:19:00:75:6d:8a:12:36:fa:84:23:be:19:b0:69:
         06:01:d2:db:aa:47:d3:0e:31:aa:41:a1:d1:2e:28:ef:ab:f5:
         8d:79:e8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 14:17:55 2025 by rpki-client