This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.mft
File:                     4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.mft (raw, json)
Hash identifier:          h+Y7tZDdwnKzXeAzFOmPGF0N/x3P3jzz5td0TP85UYs=
Subject key identifier:   4F:BB:46:A3:F0:00:37:0A:FA:19:51:35:3A:BC:05:33:4B:17:67:50
Authority key identifier: 4D:CB:5A:BC:62:FB:BC:89:0F:DA:F0:5E:0D:86:D7:99:9A:6E:AD:B2
Certificate issuer:       /CN=4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2
Certificate serial:       2A6632AA1F450D9C82055F29825985EB3DA49B1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.mft
Manifest number:          0271
Signing time:             Wed 24 Dec 2025 10:18:15 +0000
Manifest this update:     Wed 24 Dec 2025 10:13:15 +0000
Manifest next update:     Fri 26 Dec 2025 00:25:15 +0000
Files and hashes:         1: 323830343a386635383a3a2f33322d3334203d3e20323733343835.roa (hash: 8zTnDBU/ctRiwzvyYleMQiuI7BwUVubfXCCycOPdhGg=)
                          2: 4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.crl (hash: p1XpB4MTlyYAJRO5HcHWtueapT3iYxQ/vxndUb4kV+s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.crl
                          rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 15:38:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:66:32:aa:1f:45:0d:9c:82:05:5f:29:82:59:85:eb:3d:a4:9b:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2
        Validity
            Not Before: Dec 24 10:13:15 2025 GMT
            Not After : Dec 26 00:25:15 2025 GMT
        Subject: CN=4FBB46A3F000370AFA1951353ABC05334B176750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4e:86:9e:49:9f:32:17:b5:25:ed:44:bd:3b:
                    97:25:b6:bc:5a:fd:a7:49:25:a6:b3:12:ad:66:f5:
                    ab:47:7d:a4:f2:65:15:b8:b4:65:88:6f:d6:1d:fd:
                    31:76:6d:ed:d0:cf:5d:96:74:ff:df:ab:10:dc:b3:
                    11:96:40:7e:67:92:59:b2:6d:ab:a5:df:e6:cc:b7:
                    09:9e:3f:ca:c3:46:16:23:11:8d:59:73:27:e5:c7:
                    b6:f7:f7:b6:23:8d:ad:29:5b:71:7f:40:c0:b9:ad:
                    e5:22:09:1c:9c:77:5c:f6:89:93:23:91:de:7b:a8:
                    5f:a7:01:d1:7b:45:68:db:e8:d5:4c:f2:a9:89:0a:
                    a1:69:25:48:42:a1:87:76:90:0c:b8:19:90:8f:c6:
                    4a:a9:4e:57:d9:c7:f7:a6:17:66:81:39:25:9f:73:
                    7e:78:20:be:b6:31:00:5b:c4:b5:5d:b7:bb:f6:57:
                    a2:d9:2b:55:81:d9:b5:b0:62:dc:e4:0f:3a:c6:d1:
                    1d:47:eb:12:76:16:9a:09:ad:44:01:ca:0a:a7:04:
                    9e:30:ae:7c:2e:d0:1e:ce:15:4f:f4:ed:83:a2:07:
                    2c:0a:c6:bd:4b:e9:d8:55:7e:07:10:77:94:d5:76:
                    31:44:2a:44:ef:65:05:48:19:a4:71:3f:b9:b6:c8:
                    91:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:BB:46:A3:F0:00:37:0A:FA:19:51:35:3A:BC:05:33:4B:17:67:50
            X509v3 Authority Key Identifier:
                keyid:4D:CB:5A:BC:62:FB:BC:89:0F:DA:F0:5E:0D:86:D7:99:9A:6E:AD:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:e2:43:97:a0:ba:c8:3d:5d:20:9d:da:78:d0:aa:2c:a3:92:
         b3:e9:39:20:e3:07:dc:91:0a:41:09:e6:f7:ce:6d:49:28:ba:
         bd:fa:69:cc:16:5b:54:26:c3:3b:0b:42:a5:fd:aa:be:74:bc:
         01:b4:02:bd:55:e7:e7:a7:2c:14:29:01:75:b5:b1:b7:16:b4:
         73:fc:10:50:b6:11:8b:88:d2:9e:02:ff:1b:0d:b1:aa:0a:01:
         eb:12:4b:b1:d8:ee:76:67:6e:af:9a:fe:9a:a4:fc:c5:66:14:
         9d:cf:c2:02:20:9e:e2:7a:45:90:aa:f5:d7:f6:df:86:30:55:
         b9:a6:71:03:97:1c:49:ae:81:7d:82:e8:f9:57:89:16:6d:9f:
         b3:cf:9f:00:db:dd:89:51:36:7b:05:93:7e:fd:16:0a:33:df:
         00:dd:a2:35:a8:c2:52:62:a1:6e:e6:d1:74:7f:e4:b6:0e:5d:
         54:b2:78:a2:fe:7a:ed:5b:cb:bd:8f:9b:e6:8e:6c:00:16:74:
         fe:81:a8:79:ee:84:9a:9b:7c:f4:c2:b8:37:44:1e:b4:3f:67:
         4b:06:ab:2e:6d:96:56:81:19:aa:84:87:50:8d:89:39:1e:fe:
         cd:8c:28:eb:56:3d:90:5f:aa:d1:e3:0e:ce:7e:33:3c:64:11:
         cf:ff:51:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:15:47 2025 by rpki-client