This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.mft
File:                     72D4C5EE34A043798ED938051AE717D10692045C.mft (raw, json)
Hash identifier:          ANTjyy7kB01L4ArRqLQ+/bceJr+8r/AB1Bh5VG/FGnw=
Subject key identifier:   5C:B4:40:2E:09:51:AF:FB:F7:02:71:FB:35:C6:B5:A4:F8:69:E3:13
Authority key identifier: 72:D4:C5:EE:34:A0:43:79:8E:D9:38:05:1A:E7:17:D1:06:92:04:5C
Certificate issuer:       /CN=72D4C5EE34A043798ED938051AE717D10692045C
Certificate serial:       2DF29AE81AFDF1E0DEFE01DE55731559F90D46CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D4C5EE34A043798ED938051AE717D10692045C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.mft
Manifest number:          02CB
Signing time:             Mon 22 Dec 2025 14:07:15 +0000
Manifest this update:     Mon 22 Dec 2025 14:02:15 +0000
Manifest next update:     Tue 23 Dec 2025 14:16:15 +0000
Files and hashes:         1: 323830343a353136343a3a2f33322d3332203d3e20323638343439.roa (hash: Cl16DiwJNumyv71pOGojDv+nWVRm7Lg2IzVvJEaSZoQ=)
                          2: 323830343a353136343a633030303a3a2f33342d3334203d3e20323638343439.roa (hash: W4stWl4poow/vUNiwEsPZ57lYpsOS4HGOeMKxmH7ZCA=)
                          3: 323830343a353136343a3a2f33342d3334203d3e20323638343439.roa (hash: 47kMw0n/UxRcH30I3DPJKfeyYgmG0drCHwI8ptwKAQw=)
                          4: 72D4C5EE34A043798ED938051AE717D10692045C.crl (hash: osw3CU818TjmxXG55EuqyAbtZER6QzJlEXkBRBpXQXk=)
                          5: 323830343a353136343a383030303a3a2f33342d3334203d3e20323638343439.roa (hash: JN32EgrgjizqbUbAtX1SYDeqmguBgQpzKTPi+awddl8=)
                          6: 323830343a353136343a343030303a3a2f33342d3334203d3e20323638343439.roa (hash: SAhtDrJAdKnYw+Wa3lyp+gm3tO9xH8/Pc/H2wqu8A/w=)
                          7: 34352e3136312e37322e302f32322d3332203d3e20323638343439.roa (hash: F5i/PSDWu4DJ8tYNAbgNEiFBIgrDglA7ho9bEvk0eAE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.crl
                          rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D4C5EE34A043798ED938051AE717D10692045C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 14:16:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:f2:9a:e8:1a:fd:f1:e0:de:fe:01:de:55:73:15:59:f9:0d:46:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D4C5EE34A043798ED938051AE717D10692045C
        Validity
            Not Before: Dec 22 14:02:15 2025 GMT
            Not After : Dec 23 14:16:15 2025 GMT
        Subject: CN=5CB4402E0951AFFBF70271FB35C6B5A4F869E313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d6:8b:f6:fd:be:e2:2f:9c:7b:69:1c:37:6e:
                    9a:11:e6:53:fe:9a:40:a8:23:9f:d4:0e:eb:94:9b:
                    c9:f7:2b:79:7d:cf:a6:78:a0:5c:05:c1:d5:ee:ab:
                    25:b0:6d:e0:11:17:23:f9:9f:7c:e3:05:31:d3:68:
                    89:5a:e3:3d:fa:41:3b:02:02:f4:d1:52:30:47:7e:
                    cd:24:2e:e4:e9:53:b1:08:ff:58:a3:c1:b6:c9:71:
                    fe:ea:e4:a3:60:23:02:89:20:1b:b7:a3:10:1f:bf:
                    08:6f:00:92:33:57:aa:fb:84:b4:fd:a7:26:ee:28:
                    8c:5b:6a:95:23:ba:d5:e4:97:00:f6:17:d5:64:1d:
                    5d:ef:8f:24:ad:f2:9e:1f:ce:2c:56:7f:13:73:51:
                    a7:2b:90:0f:6f:21:81:ef:7c:12:ae:07:a5:8d:e0:
                    d6:1e:9d:2e:14:a8:99:37:76:d0:78:d6:ee:d4:3d:
                    1b:8a:f5:46:60:71:ad:be:c6:e3:ab:58:83:6f:93:
                    e0:9a:a1:82:3b:63:ed:ea:43:46:fb:0a:ab:19:14:
                    e1:0d:ba:e6:61:8f:fd:6c:70:5e:5f:38:51:24:72:
                    98:9a:7a:5e:e4:b2:f0:a5:9e:42:5c:25:c4:4a:53:
                    db:2f:d1:a5:10:8e:7a:ad:4f:56:e2:68:b4:6a:ff:
                    71:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B4:40:2E:09:51:AF:FB:F7:02:71:FB:35:C6:B5:A4:F8:69:E3:13
            X509v3 Authority Key Identifier:
                keyid:72:D4:C5:EE:34:A0:43:79:8E:D9:38:05:1A:E7:17:D1:06:92:04:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D4C5EE34A043798ED938051AE717D10692045C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:40:0b:6e:28:1b:a4:16:54:39:06:1c:92:c8:ec:19:85:30:
         b0:f2:98:d9:2d:5d:75:09:b4:b9:24:a6:a2:07:ac:af:ce:87:
         9f:5f:ac:26:d3:39:7c:51:e2:c8:0b:9e:7f:59:40:b1:6c:b9:
         f8:c6:59:5e:15:09:af:e3:09:67:70:83:df:d5:cb:42:d7:bb:
         b0:a0:f2:18:80:6f:dc:61:84:65:76:46:f6:82:ea:63:56:df:
         e6:ea:0a:4b:00:30:a4:0e:a8:d3:af:88:79:fb:75:4d:f8:81:
         a5:d6:f9:33:b3:94:d1:f6:85:01:24:ff:78:68:6d:b5:5e:a4:
         ee:14:b8:54:cd:4b:08:6b:c1:35:91:2c:78:f7:1b:02:5d:37:
         0a:1c:c9:e3:b2:b4:c4:64:3b:b5:a0:31:f8:4f:54:5f:0b:09:
         86:22:9b:65:b7:1b:ed:d0:8e:9f:17:5f:e7:f2:aa:3d:df:ab:
         65:32:17:99:35:0e:ae:8d:9e:ac:4d:fa:a3:86:cc:4f:32:f1:
         e0:d1:bd:de:50:7a:62:c2:12:6f:b2:f7:50:20:78:01:52:a5:
         9d:d3:cc:ae:17:5f:79:a0:1d:14:75:25:e1:f0:a2:f1:65:d1:
         a3:73:60:ad:93:64:04:dc:a5:80:19:3d:89:9c:6f:0b:f5:92:
         08:c2:ec:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 20:42:55 2025 by rpki-client