This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/71xrP7gnBks27G3PgBJUHmoBrMjmmgtpQjAsCDobK3U3/0/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.mft
File:                     4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.mft (raw, json)
Hash identifier:          TK7YP3cHy6WBBOZwwD2RcxA6wmh119aXZI/vt2KzTwo=
Subject key identifier:   2B:22:3F:CA:B0:E1:F5:D5:5D:D9:25:E8:B6:F0:D2:BF:6A:49:7C:11
Authority key identifier: 4B:D7:CC:FB:86:83:AC:19:AE:AB:3A:61:49:3D:19:01:FA:2F:10:32
Certificate issuer:       /CN=4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032
Certificate serial:       7670F78355CFDF171A67A14C32EFE281F62B847E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/71xrP7gnBks27G3PgBJUHmoBrMjmmgtpQjAsCDobK3U3/0/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.mft
Manifest number:          73
Signing time:             Tue 23 Dec 2025 21:20:04 +0000
Manifest this update:     Tue 23 Dec 2025 21:15:04 +0000
Manifest next update:     Wed 24 Dec 2025 23:40:04 +0000
Files and hashes:         1: 323830343a386461303a3a2f33322d3332203d3e20323733333639.roa (hash: HjQO5eh7ERUMFZhVsKbT6TpHzBIamnp8IhL/o+140lo=)
                          2: 4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.crl (hash: Uk0z9cr8jpQNTbtF1jjql8drnI4Y9V+OdzApysXnMxo=)
                          3: 323830343a386461303a3a2f33322d3336203d3e20323733333639.roa (hash: WIz1lEiWOVRmnRh+/a1Qic/qEdB/+44xE/G7kHnckp4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/71xrP7gnBks27G3PgBJUHmoBrMjmmgtpQjAsCDobK3U3/0/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.crl
                          rsync://rpki-repo.registro.br/repo/71xrP7gnBks27G3PgBJUHmoBrMjmmgtpQjAsCDobK3U3/0/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 23:40:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:70:f7:83:55:cf:df:17:1a:67:a1:4c:32:ef:e2:81:f6:2b:84:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032
        Validity
            Not Before: Dec 23 21:15:04 2025 GMT
            Not After : Dec 24 23:40:04 2025 GMT
        Subject: CN=2B223FCAB0E1F5D55DD925E8B6F0D2BF6A497C11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ec:f1:ee:e6:d1:3a:c8:2e:fe:3c:7c:ff:43:
                    74:07:35:9f:7a:0c:99:54:68:18:72:86:65:d3:22:
                    c6:a0:6b:c8:76:b1:25:fb:f8:2c:67:ed:f2:c0:76:
                    bb:57:7b:f6:d5:3b:94:0e:d5:79:66:7f:7f:1c:00:
                    c2:80:37:21:f7:c8:bc:02:64:cc:4b:ff:68:cb:c0:
                    04:15:99:15:9d:1e:62:db:ad:5d:71:71:fb:d3:97:
                    5c:a6:70:35:09:cb:8a:87:ac:ce:68:3b:d6:6e:d2:
                    c6:47:38:58:ab:ff:b6:89:84:fb:52:bc:60:f8:17:
                    3f:95:2e:fa:1f:a0:6e:15:76:fd:09:2a:59:46:93:
                    46:6e:0d:c8:d5:bd:a9:33:c3:69:41:d5:d5:04:ce:
                    21:31:61:58:63:36:a7:36:61:20:56:b9:43:69:66:
                    ce:98:03:03:7e:0e:63:fe:6c:ca:12:ef:11:e2:e9:
                    27:97:55:bf:6a:51:d3:1c:ee:b3:66:94:34:30:8f:
                    fb:15:bb:58:d1:72:74:ee:e4:82:6d:31:4a:51:a3:
                    a4:45:de:fa:27:59:62:b6:d5:f4:24:35:b3:40:03:
                    65:e5:ae:c1:48:9e:92:6f:e6:5a:1b:85:24:46:d8:
                    16:bd:af:af:d8:a3:db:3b:9e:d7:10:63:94:9b:b0:
                    da:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:22:3F:CA:B0:E1:F5:D5:5D:D9:25:E8:B6:F0:D2:BF:6A:49:7C:11
            X509v3 Authority Key Identifier:
                keyid:4B:D7:CC:FB:86:83:AC:19:AE:AB:3A:61:49:3D:19:01:FA:2F:10:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/71xrP7gnBks27G3PgBJUHmoBrMjmmgtpQjAsCDobK3U3/0/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/71xrP7gnBks27G3PgBJUHmoBrMjmmgtpQjAsCDobK3U3/0/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:71:c2:ab:84:f7:9e:16:21:67:5f:26:a2:2d:6a:14:56:df:
         bd:b3:5b:2e:fd:f9:8f:7f:41:bd:50:83:d9:68:a1:17:8d:1b:
         9a:3a:74:ab:5c:f8:3c:47:bb:9c:bc:8f:a6:6e:a2:62:e8:1c:
         06:46:26:76:9a:56:35:f0:7f:33:21:d5:91:f2:b3:16:23:c5:
         22:70:71:d3:3f:e3:0b:77:1f:45:d5:21:93:73:79:c3:33:7f:
         4b:24:5e:33:ef:44:de:52:73:40:5e:61:1a:9b:85:de:59:1b:
         61:28:25:ae:e3:91:45:ac:1c:43:43:8c:0e:d7:f1:cd:84:17:
         e9:fc:65:b6:dc:ea:36:99:08:48:42:bf:58:c6:c6:9c:bd:97:
         12:9d:b9:e4:70:c5:65:1f:f4:b6:55:f4:aa:b1:8e:07:85:83:
         ec:e4:97:f1:a1:32:1e:53:49:2f:a9:97:71:f9:6b:dc:78:9a:
         49:29:11:1c:df:33:c7:e4:16:ca:c6:b3:c1:f5:92:0e:e6:a0:
         be:76:51:49:57:27:78:c0:6f:18:bd:cc:3d:56:6b:ba:55:20:
         7c:f3:f2:a4:05:0d:69:e6:23:18:86:38:b8:ec:5d:59:08:d3:
         fa:36:fa:f7:63:64:b7:11:16:91:27:ac:61:20:9d:91:ca:ed:
         4e:63:70:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:29:21 2025 by rpki-client