This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/EC4AB1666D75B3BEABA78172ADB3839FE597A438.mft
File:                     EC4AB1666D75B3BEABA78172ADB3839FE597A438.mft (raw, json)
Hash identifier:          6UFhNRo+C8PUfYtjoxP0nh5Pmdg0DXt29l80azIh/j8=
Subject key identifier:   4C:53:EC:1D:A0:23:32:5D:1A:BB:59:92:55:82:1D:76:6B:FB:2B:8D
Authority key identifier: EC:4A:B1:66:6D:75:B3:BE:AB:A7:81:72:AD:B3:83:9F:E5:97:A4:38
Certificate issuer:       /CN=EC4AB1666D75B3BEABA78172ADB3839FE597A438
Certificate serial:       4FA4BDC642457E833FDE3CB8F1470F2C47942445
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC4AB1666D75B3BEABA78172ADB3839FE597A438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/EC4AB1666D75B3BEABA78172ADB3839FE597A438.mft
Manifest number:          0343
Signing time:             Thu 18 Dec 2025 16:55:13 +0000
Manifest this update:     Thu 18 Dec 2025 16:50:13 +0000
Manifest next update:     Fri 19 Dec 2025 19:38:13 +0000
Files and hashes:         1: 323830343a343264343a3a2f33322d313238203d3e20323637353330.roa (hash: 9PzM1by61kvgwpTalVMM1aDrQVBImyOuKQlXmIDOy14=)
                          2: 3230312e3138322e3139322e302f32322d3332203d3e20323637353330.roa (hash: sETbf6sRzJ67LgArSqJp/he1iwfQNy21QVgrKxmh3YE=)
                          3: EC4AB1666D75B3BEABA78172ADB3839FE597A438.crl (hash: NkXW8VFmtuBvdubwsW/tRgfU6xNpx0bTO+BH2x6ZKZ8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/EC4AB1666D75B3BEABA78172ADB3839FE597A438.crl
                          rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/EC4AB1666D75B3BEABA78172ADB3839FE597A438.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC4AB1666D75B3BEABA78172ADB3839FE597A438.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 19:38:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:a4:bd:c6:42:45:7e:83:3f:de:3c:b8:f1:47:0f:2c:47:94:24:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC4AB1666D75B3BEABA78172ADB3839FE597A438
        Validity
            Not Before: Dec 18 16:50:13 2025 GMT
            Not After : Dec 19 19:38:13 2025 GMT
        Subject: CN=4C53EC1DA023325D1ABB599255821D766BFB2B8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:67:92:4c:6b:50:a1:ca:c1:55:ce:b8:6b:dc:
                    5b:76:dc:4c:3d:58:65:06:25:76:6e:32:11:d1:b2:
                    b4:cf:8c:41:ce:20:36:ac:01:c9:cf:bb:d2:d1:95:
                    28:d0:10:3c:8f:d0:d9:29:54:ca:15:5d:a6:0c:61:
                    9c:3c:c8:a9:3f:36:1f:f6:e6:43:b7:7c:dc:40:a1:
                    5f:e0:46:67:c1:02:c0:a8:0d:9a:bd:be:ad:b1:91:
                    f6:ba:41:9c:31:48:ca:d1:c1:25:f8:c7:18:68:c8:
                    60:9b:d5:f2:40:6c:ba:8e:a4:7d:d4:93:46:f2:a2:
                    09:9e:07:33:ee:82:63:26:c7:3b:c3:61:45:25:60:
                    29:b5:55:12:80:0a:fa:84:f4:2d:97:b6:64:8a:5a:
                    69:f2:92:53:2e:92:d1:2e:34:20:d8:40:15:06:b8:
                    60:f2:aa:1b:37:b4:7a:c2:d6:3d:2e:a7:f7:d9:81:
                    80:da:fc:ba:16:0e:7b:46:a0:15:f3:ad:29:84:e5:
                    1c:3e:72:19:1c:47:14:41:58:8e:ca:e1:76:2d:10:
                    0f:60:8a:ae:5b:fe:6e:4d:90:8f:64:bd:8c:79:3b:
                    78:13:54:7e:66:40:c3:b0:0c:5b:7b:fe:70:31:35:
                    50:4a:d5:92:dc:fa:ef:9e:76:e5:79:4c:3a:e2:5b:
                    42:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:53:EC:1D:A0:23:32:5D:1A:BB:59:92:55:82:1D:76:6B:FB:2B:8D
            X509v3 Authority Key Identifier:
                keyid:EC:4A:B1:66:6D:75:B3:BE:AB:A7:81:72:AD:B3:83:9F:E5:97:A4:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/EC4AB1666D75B3BEABA78172ADB3839FE597A438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC4AB1666D75B3BEABA78172ADB3839FE597A438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/EC4AB1666D75B3BEABA78172ADB3839FE597A438.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ae:f2:37:67:2b:7b:b0:84:53:a6:7a:bf:51:8f:d9:f8:a2:
         0e:8e:c1:1f:4d:5c:ed:13:0a:58:90:99:f1:c6:9a:64:3e:4f:
         5f:ed:23:cb:a4:27:f1:77:7b:89:ce:d5:44:2b:6f:e2:8b:20:
         dd:84:b1:59:71:52:ba:52:26:bb:d2:ea:e1:5b:40:8f:a0:27:
         f4:04:f2:fd:66:a2:18:a6:99:66:a4:bf:ca:f7:59:01:67:d8:
         88:10:ec:ae:ab:c4:53:5b:30:10:92:6e:83:c8:f3:94:c2:15:
         1f:54:e3:41:60:e8:36:63:5e:b5:fd:b9:9d:eb:21:9b:99:a6:
         24:01:44:5f:10:ca:32:1e:7a:29:32:69:bc:a7:a2:ab:da:fc:
         90:b9:dd:9d:32:87:23:46:4f:dd:a1:45:ed:55:33:43:a8:85:
         4a:d6:01:03:f4:e2:ca:b9:37:ab:19:ad:58:ff:26:10:c0:05:
         61:69:14:fd:b7:81:ca:71:11:62:45:3e:6d:81:80:00:c1:4d:
         62:69:9f:0b:0b:5e:20:b3:84:aa:63:46:c2:a7:d5:3c:c0:c1:
         99:78:5c:24:c1:c1:8c:17:b9:7e:3c:6b:98:41:e3:a6:c4:f0:
         69:e7:81:0c:d6:f2:ee:f3:0c:8f:9d:e7:0d:37:0c:94:76:bf:
         cc:45:67:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 04:39:19 2025 by rpki-client