This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.mft
File:                     ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.mft (raw, json)
Hash identifier:          2IdvAxIm+U2O+wkqgtbKZJFR1cLTAqs00erTK/Ttyp4=
Subject key identifier:   37:57:0C:1B:53:9A:AF:C0:BB:05:66:76:87:BA:BA:26:D8:01:72:62
Authority key identifier: AC:E8:E0:81:BB:25:25:CD:B1:FC:85:C9:CE:1C:36:67:C8:3E:AC:1F
Certificate issuer:       /CN=ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F
Certificate serial:       43668D0783B8AB64BD81AF5F3119FEFB7D7E2F9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.mft
Manifest number:          F0
Signing time:             Mon 22 Dec 2025 00:30:03 +0000
Manifest this update:     Mon 22 Dec 2025 00:25:03 +0000
Manifest next update:     Tue 23 Dec 2025 00:51:03 +0000
Files and hashes:         1: 3134332e302e3133362e302f32322d3232203d3e20323634303131.roa (hash: yLdeTcnv1NdbuM/lnH5oQE82RG04eOyAcuE+WQNkhJc=)
                          2: AS264011.asa (hash: aKti5PO3+eKPGpfYq1y92FXs+uyIvP6QJNFiJe6BX4M=)
                          3: 3134332e302e3133362e302f32332d3233203d3e20323634303131.roa (hash: oCCbozumKWHZNHnsrflEH8CMEBxq5kK+7kdgsxrCOpk=)
                          4: 323830343a323936303a3a2f33322d3332203d3e20323634303131.roa (hash: uwtntgDhZ8NLwZsO5HmD9mt3dlpHQTwDXJ+5+Ywo8ss=)
                          5: ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.crl (hash: nxa50xmWXyqSSbVT1Wilh3Gzmadbc8AM9JwWXyAPlwc=)
                          6: 3134332e302e3133382e302f32332d3233203d3e20323634303131.roa (hash: a5waSVlquwcNa0Nsm6dZUKIcH/5Vp01v3948d0ByAhc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.crl
                          rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 00:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:66:8d:07:83:b8:ab:64:bd:81:af:5f:31:19:fe:fb:7d:7e:2f:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F
        Validity
            Not Before: Dec 22 00:25:03 2025 GMT
            Not After : Dec 23 00:51:03 2025 GMT
        Subject: CN=37570C1B539AAFC0BB05667687BABA26D8017262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:98:f6:ac:00:71:b5:a1:17:a5:86:93:98:2b:
                    73:d9:56:5c:52:fb:4a:11:2d:1b:44:7c:06:76:9c:
                    37:66:b8:22:4e:76:02:86:68:a0:8f:e0:1e:c7:5f:
                    18:1f:c5:e7:17:50:7a:9f:87:58:54:a1:5e:d0:a4:
                    f4:5f:92:81:7a:a8:ba:5c:c2:1d:de:e4:60:55:9b:
                    85:17:db:e1:38:9c:9d:a8:58:56:bf:5c:69:1e:70:
                    91:bb:36:28:8f:c0:f3:52:0f:9a:31:4f:4c:12:87:
                    41:dd:a0:fc:68:67:77:49:e7:6e:a3:32:a1:b6:cf:
                    01:41:99:db:b4:d2:21:78:d4:5c:ca:6f:2c:c9:76:
                    5d:d0:07:6a:b2:68:3f:31:96:ea:6e:ad:bd:e4:5c:
                    f3:0f:f1:10:99:fe:d9:58:87:d1:13:2f:db:4a:9a:
                    87:bb:b5:16:1d:33:e3:27:89:d0:db:00:bf:f1:69:
                    a3:a2:86:9a:e7:5f:ff:7a:ac:11:ba:49:f6:63:6d:
                    a2:41:26:6a:11:31:75:bb:11:44:6f:c5:28:62:84:
                    cb:7a:f2:58:f0:cb:82:c5:d4:d8:4b:20:fe:0a:bf:
                    f0:95:e4:91:1a:0c:33:cb:75:d6:71:d2:16:ab:31:
                    5f:e4:9d:d8:fe:54:32:5c:e8:6c:91:56:29:3a:61:
                    e2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:57:0C:1B:53:9A:AF:C0:BB:05:66:76:87:BA:BA:26:D8:01:72:62
            X509v3 Authority Key Identifier:
                keyid:AC:E8:E0:81:BB:25:25:CD:B1:FC:85:C9:CE:1C:36:67:C8:3E:AC:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:b4:4b:32:22:a5:a9:fe:16:cd:fc:ef:41:fd:10:ae:cc:78:
         66:a8:ca:a1:21:31:c1:7e:be:86:19:0c:da:6f:08:eb:f6:91:
         41:fa:2d:65:36:f8:4a:43:15:bf:89:84:71:34:43:cb:7c:91:
         86:a5:ec:10:cc:bb:88:aa:b4:4d:21:92:8a:45:cd:3e:16:2e:
         57:8f:14:24:d1:66:62:19:01:52:93:ea:1b:ff:6f:0e:29:09:
         d4:64:d4:2a:ca:29:a9:88:76:8d:c6:fa:4c:d9:22:6b:59:03:
         0b:99:5f:8c:8e:5b:d2:15:77:61:36:48:b8:59:a5:7c:65:28:
         86:03:f7:33:16:7a:19:af:9d:8d:43:5d:7d:83:e2:10:00:84:
         65:89:3c:40:46:4b:1b:22:57:9d:5c:c6:62:da:a1:f8:c6:0d:
         96:b6:35:20:a3:f1:7d:d0:d8:c7:53:ef:e1:23:3c:3b:f5:27:
         4e:82:72:ac:c7:2d:4c:24:1b:40:cb:cd:c2:e3:7b:b4:55:e0:
         aa:5b:07:88:dc:6c:d9:54:5a:79:8b:e6:e1:c0:2c:5f:7a:4b:
         8d:4b:0b:b2:11:b5:29:1d:a7:12:e1:fe:ca:66:ce:bf:73:88:
         e0:cd:17:59:c9:d3:6a:9b:e0:f9:66:b9:69:e4:ce:a2:f6:ac:
         0a:51:27:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 14:31:33 2025 by rpki-client