This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/63D4F77BFCAFBD91414D4FD4F3F426D797B8AF0F.mft
File:                     63D4F77BFCAFBD91414D4FD4F3F426D797B8AF0F.mft (raw, json)
Hash identifier:          mzPF0mDebBNASbQS1IcC+Db1OLKJFMre6H3dVvdxwS4=
Subject key identifier:   51:48:A4:1F:29:85:AD:30:31:74:C6:F0:0B:C4:94:3A:D1:58:18:AA
Authority key identifier: 63:D4:F7:7B:FC:AF:BD:91:41:4D:4F:D4:F3:F4:26:D7:97:B8:AF:0F
Certificate issuer:       /CN=63D4F77BFCAFBD91414D4FD4F3F426D797B8AF0F
Certificate serial:       24765E21E0AEEE450A9C321F4635349870211378
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63D4F77BFCAFBD91414D4FD4F3F426D797B8AF0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/63D4F77BFCAFBD91414D4FD4F3F426D797B8AF0F.mft
Manifest number:          CE
Signing time:             Sun 21 Dec 2025 17:15:55 +0000
Manifest this update:     Sun 21 Dec 2025 17:10:55 +0000
Manifest next update:     Mon 22 Dec 2025 21:04:55 +0000
Files and hashes:         1: 323830343a326131343a3a2f33322d313238203d3e20323634303535.roa (hash: hchUyYuVejSIRt2jUE56ZQlwhgTlS1SRZB8lyFeHT2s=)
                          2: 63D4F77BFCAFBD91414D4FD4F3F426D797B8AF0F.crl (hash: 3TTyOK6jL72483FhZaXrIBZigjZ4v3Jp/UcxPUTZVCI=)
                          3: 3134332e3133372e3230382e302f32322d3332203d3e20323634303535.roa (hash: BL+zWowupUMOwarDbUA6cAG5ZIhYklc75KCL3VwFpyc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/63D4F77BFCAFBD91414D4FD4F3F426D797B8AF0F.crl
                          rsync://rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/63D4F77BFCAFBD91414D4FD4F3F426D797B8AF0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63D4F77BFCAFBD91414D4FD4F3F426D797B8AF0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 21:04:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:76:5e:21:e0:ae:ee:45:0a:9c:32:1f:46:35:34:98:70:21:13:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63D4F77BFCAFBD91414D4FD4F3F426D797B8AF0F
        Validity
            Not Before: Dec 21 17:10:55 2025 GMT
            Not After : Dec 22 21:04:55 2025 GMT
        Subject: CN=5148A41F2985AD303174C6F00BC4943AD15818AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ff:ac:5f:6b:61:b9:73:f3:8b:43:2b:3d:d7:
                    ff:6a:5a:1f:cc:ec:2f:0c:1d:ff:6b:d2:1e:79:9d:
                    4b:7d:2c:ee:c9:7d:ef:06:a9:b8:d2:8f:98:41:e5:
                    1b:dd:3c:7c:12:2a:7a:17:f2:06:dd:eb:a6:a6:9f:
                    bc:8e:45:04:37:0c:77:59:46:dc:4e:d6:75:48:e4:
                    50:6f:56:21:b5:9e:8f:04:22:46:a3:9d:be:58:51:
                    1f:07:2b:5b:1b:03:5a:30:b9:60:c9:2b:38:fc:12:
                    96:da:13:3f:9e:2d:c3:ec:35:ee:74:f0:2e:16:a2:
                    5f:6b:09:ce:9d:b5:49:d8:99:d9:2b:05:9e:f6:7b:
                    75:e6:c6:cb:d6:7f:de:cc:0c:c0:4e:d7:89:36:07:
                    38:a8:27:08:47:f6:cf:50:63:51:b2:f6:7c:8c:d0:
                    86:ca:a3:ef:48:08:09:2d:f0:02:ab:69:1f:4b:eb:
                    1b:f0:d7:37:fb:58:88:a9:e6:71:20:e0:ca:1f:5e:
                    b4:a7:38:f8:9b:c0:eb:7b:54:37:31:89:66:5d:63:
                    84:12:90:9f:49:9f:83:9e:d5:46:0a:dd:2e:84:56:
                    b2:4d:53:97:c3:07:23:09:b2:e2:78:bf:aa:f1:51:
                    55:3d:43:9a:65:29:ac:72:c3:8c:8c:22:41:ab:e6:
                    0a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:48:A4:1F:29:85:AD:30:31:74:C6:F0:0B:C4:94:3A:D1:58:18:AA
            X509v3 Authority Key Identifier:
                keyid:63:D4:F7:7B:FC:AF:BD:91:41:4D:4F:D4:F3:F4:26:D7:97:B8:AF:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/63D4F77BFCAFBD91414D4FD4F3F426D797B8AF0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63D4F77BFCAFBD91414D4FD4F3F426D797B8AF0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/63D4F77BFCAFBD91414D4FD4F3F426D797B8AF0F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:e7:57:71:32:58:a3:44:37:b3:23:32:fb:b2:8e:14:e9:2f:
         78:1f:35:96:cb:0e:b5:1b:93:19:d5:79:b2:a2:e4:b3:3d:95:
         1d:80:d9:1a:4e:30:07:62:a7:38:33:47:22:f6:92:bb:d0:af:
         ba:fa:14:2f:f8:ea:92:b6:b2:f3:95:0b:47:82:82:46:74:15:
         cb:e9:ba:6b:36:6d:3e:e5:d2:5b:fd:55:37:8d:4a:3e:b5:82:
         6b:2e:ed:f1:a6:36:1c:9a:7c:ea:6a:14:40:a2:29:5c:ce:42:
         b3:cb:05:a4:25:4b:85:81:65:f0:19:73:c5:10:9a:7c:4b:ed:
         f3:a1:61:90:b2:20:7e:a0:eb:02:17:71:ba:99:78:67:44:f7:
         c5:ba:e7:93:86:0b:b7:a7:90:51:d8:5d:33:a1:7d:ff:15:b5:
         40:41:73:18:be:6b:ad:a2:3d:e6:40:3c:5a:29:b3:4c:e6:f4:
         ff:b3:a6:b1:51:8f:13:86:ee:18:fb:ca:1f:34:e3:1c:8c:2c:
         ad:76:0f:bd:3a:d6:ae:85:3e:8f:45:d9:c4:d2:6c:b6:59:74:
         07:c6:77:55:b6:58:a9:71:56:68:be:7c:ae:53:d4:ac:23:dc:
         f8:0a:df:bf:f4:3e:a8:db:82:1a:53:8a:df:7e:e9:f6:5e:4c:
         f7:fb:4f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 00:09:52 2025 by rpki-client