This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5fbKWBuA5wDeG8nMUKAUokahdjghf6EazfVWhgLGd93V/0/404EF1E548374354D9B828749323416749EF23B4.mft
File:                     404EF1E548374354D9B828749323416749EF23B4.mft (raw, json)
Hash identifier:          1CdtPPY6NYCkqXIWSKyZ7Bmc23NSjuhspfhGlIbKGTM=
Subject key identifier:   68:2C:91:3B:AA:7F:1A:FD:34:E4:BE:5A:64:5E:E4:DA:42:FD:12:5B
Authority key identifier: 40:4E:F1:E5:48:37:43:54:D9:B8:28:74:93:23:41:67:49:EF:23:B4
Certificate issuer:       /CN=404EF1E548374354D9B828749323416749EF23B4
Certificate serial:       75BDF31BDD96C4C7DA30BF51721B2503BAFEC9B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/404EF1E548374354D9B828749323416749EF23B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5fbKWBuA5wDeG8nMUKAUokahdjghf6EazfVWhgLGd93V/0/404EF1E548374354D9B828749323416749EF23B4.mft
Manifest number:          014B
Signing time:             Wed 24 Dec 2025 12:07:05 +0000
Manifest this update:     Wed 24 Dec 2025 12:02:05 +0000
Manifest next update:     Thu 25 Dec 2025 13:30:05 +0000
Files and hashes:         1: 323830343a383539343a3a2f33322d3333203d3e20323732353838.roa (hash: ug0K6WFDKBWM3KOJ4cnBW4ah011CH9FeGcHhPHd0qkI=)
                          2: 404EF1E548374354D9B828749323416749EF23B4.crl (hash: xI70lEZWQ+kvaRDG2eguLcxj/Ul2X5zX/1c7LPhV7Dg=)
                          3: 34352e3233372e3134342e302f32322d3234203d3e20323732353838.roa (hash: oASW9Id0/0MkAJnlH+9nxdmaLsz8e2CZZnCyNfG1H0g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5fbKWBuA5wDeG8nMUKAUokahdjghf6EazfVWhgLGd93V/0/404EF1E548374354D9B828749323416749EF23B4.crl
                          rsync://rpki-repo.registro.br/repo/5fbKWBuA5wDeG8nMUKAUokahdjghf6EazfVWhgLGd93V/0/404EF1E548374354D9B828749323416749EF23B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/404EF1E548374354D9B828749323416749EF23B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 13:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:bd:f3:1b:dd:96:c4:c7:da:30:bf:51:72:1b:25:03:ba:fe:c9:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=404EF1E548374354D9B828749323416749EF23B4
        Validity
            Not Before: Dec 24 12:02:05 2025 GMT
            Not After : Dec 25 13:30:05 2025 GMT
        Subject: CN=682C913BAA7F1AFD34E4BE5A645EE4DA42FD125B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:46:cc:12:68:66:ac:d6:77:06:46:e0:5e:d2:
                    ad:98:ac:34:ff:f6:ca:45:55:8c:e2:80:dd:dd:b1:
                    fe:62:3d:72:7f:ec:1c:4a:d6:0d:dd:9c:f6:f2:a9:
                    3d:f4:8a:22:f1:03:30:31:3c:e4:8c:4d:2d:e4:57:
                    18:a4:25:b1:d5:3b:7d:4d:2e:c3:b7:c7:b8:d7:34:
                    44:7a:f7:ba:fc:9a:ba:c6:06:d2:0c:45:98:cc:0c:
                    69:ea:9e:b6:4f:25:2d:1b:17:2d:a2:f1:f0:ef:1b:
                    5f:06:7c:38:33:cb:ed:68:b7:dc:1a:92:5e:24:02:
                    ed:a6:8e:53:5f:c4:02:55:23:91:7e:79:55:fa:e1:
                    b1:ae:cb:49:05:e9:d3:af:5a:56:eb:4e:31:58:ad:
                    29:64:99:08:7b:2c:53:e1:b1:22:d4:0b:b8:cc:1e:
                    8f:8d:73:58:a5:de:02:e9:78:98:ee:97:96:8d:70:
                    1f:13:be:86:e3:36:79:f2:85:68:5d:ac:56:30:0e:
                    1b:0a:c3:0e:bc:cd:cd:9a:51:69:d7:4a:57:0e:77:
                    19:bd:0a:52:18:3f:02:81:81:b6:9d:2f:d4:b9:8c:
                    b9:0b:40:1e:6c:55:ff:c4:a5:eb:bf:0b:e5:9e:4e:
                    ae:68:cf:7c:fe:7f:1d:02:46:78:55:58:a0:0e:6e:
                    7c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:2C:91:3B:AA:7F:1A:FD:34:E4:BE:5A:64:5E:E4:DA:42:FD:12:5B
            X509v3 Authority Key Identifier:
                keyid:40:4E:F1:E5:48:37:43:54:D9:B8:28:74:93:23:41:67:49:EF:23:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5fbKWBuA5wDeG8nMUKAUokahdjghf6EazfVWhgLGd93V/0/404EF1E548374354D9B828749323416749EF23B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/404EF1E548374354D9B828749323416749EF23B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5fbKWBuA5wDeG8nMUKAUokahdjghf6EazfVWhgLGd93V/0/404EF1E548374354D9B828749323416749EF23B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:85:63:98:1f:aa:04:ba:75:e6:a4:b8:91:38:b4:5c:d2:57:
         61:31:34:36:6f:c5:0c:41:15:38:76:e9:50:7c:26:d1:93:88:
         c5:e7:99:11:a8:34:43:3f:cd:e3:f5:77:4b:7a:f9:b1:4d:3b:
         5f:f7:e1:88:f2:fc:b1:3f:bb:a0:a7:34:fc:61:9f:ae:70:c0:
         37:07:f2:9a:95:1a:36:46:72:c3:02:99:ad:06:68:db:e6:79:
         58:3e:11:b4:c9:80:0d:54:aa:51:90:57:ac:43:7f:3e:be:b2:
         dd:82:29:1b:a7:45:b9:63:38:96:b1:11:eb:df:bc:4e:76:29:
         9b:f2:4d:51:fe:2a:96:93:20:4c:ef:c8:58:e3:6d:a1:fa:31:
         ad:ff:f4:31:de:0f:d4:69:26:df:38:c7:17:a6:9f:59:22:4d:
         8a:1f:4d:66:f1:e8:a9:69:ba:99:ea:a9:0d:df:ec:0d:8a:f6:
         23:d2:92:f9:89:00:fe:6f:6f:ea:5a:b2:40:9b:4c:ea:1c:c6:
         3b:e9:7e:32:e0:56:fd:75:73:6d:0f:da:ee:cc:a4:7d:40:63:
         db:d4:f1:95:7c:96:1f:86:7c:04:6c:4a:66:da:83:54:7a:7c:
         43:c3:0e:40:26:f2:f9:46:ca:39:4e:b3:3d:98:14:21:66:bd:
         a8:f0:3e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:29:24 2025 by rpki-client