This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7KPKDUZJrVkM5K5UDmHqaoDSmuaU1RQEbCdBY94VL67Z/0/4AB5A3BD9FDB751A3D822719D5839CAA994EA948.mft
File:                     4AB5A3BD9FDB751A3D822719D5839CAA994EA948.mft (raw, json)
Hash identifier:          HMS2hupaM74L/j6MNnfGZVKDN+BpgQjvcMPvr94Fk30=
Subject key identifier:   02:FC:73:3C:3C:D3:6D:F1:69:84:23:F8:94:21:08:AC:41:6B:29:7F
Authority key identifier: 4A:B5:A3:BD:9F:DB:75:1A:3D:82:27:19:D5:83:9C:AA:99:4E:A9:48
Certificate issuer:       /CN=4AB5A3BD9FDB751A3D822719D5839CAA994EA948
Certificate serial:       65E7F9BC0F91B60A6307EB243187D2342F780649
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB5A3BD9FDB751A3D822719D5839CAA994EA948.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KPKDUZJrVkM5K5UDmHqaoDSmuaU1RQEbCdBY94VL67Z/0/4AB5A3BD9FDB751A3D822719D5839CAA994EA948.mft
Manifest number:          1B
Signing time:             Tue 25 Nov 2025 16:55:39 +0000
Manifest this update:     Tue 25 Nov 2025 16:50:39 +0000
Manifest next update:     Wed 26 Nov 2025 17:15:39 +0000
Files and hashes:         1: 323830313a38313a3135303a3a2f34382d3438203d3e20323734353234.roa (hash: Hm8EMh3DzK2NLsiIRm/hU3HlDg4zv4H+2EaEfFd2hfo=)
                          2: 4AB5A3BD9FDB751A3D822719D5839CAA994EA948.crl (hash: ZQQQAZaeu7BB7n0OO3zBEnKPc8RV9KECOsXTgdPLK3A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KPKDUZJrVkM5K5UDmHqaoDSmuaU1RQEbCdBY94VL67Z/0/4AB5A3BD9FDB751A3D822719D5839CAA994EA948.crl
                          rsync://rpki-repo.registro.br/repo/7KPKDUZJrVkM5K5UDmHqaoDSmuaU1RQEbCdBY94VL67Z/0/4AB5A3BD9FDB751A3D822719D5839CAA994EA948.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB5A3BD9FDB751A3D822719D5839CAA994EA948.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Nov 2025 17:15:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e7:f9:bc:0f:91:b6:0a:63:07:eb:24:31:87:d2:34:2f:78:06:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AB5A3BD9FDB751A3D822719D5839CAA994EA948
        Validity
            Not Before: Nov 25 16:50:39 2025 GMT
            Not After : Nov 26 17:15:39 2025 GMT
        Subject: CN=02FC733C3CD36DF1698423F8942108AC416B297F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ba:d3:c6:e7:83:f9:79:cf:eb:fc:ae:d9:c5:
                    76:aa:c5:17:16:26:4d:7a:d1:27:cc:83:29:73:86:
                    a1:3b:bc:14:bf:57:6b:ba:2b:16:c5:d2:dd:8d:b9:
                    0b:60:b3:b4:e5:5d:cf:20:69:2d:1f:c3:a2:5e:8d:
                    3d:1f:c1:88:8d:03:67:2f:13:d0:5a:ba:9f:b8:20:
                    c3:1b:98:eb:74:53:25:c4:3f:36:53:ea:36:5b:5b:
                    1b:56:21:a1:c9:8b:e2:a1:9b:75:ce:20:9c:22:92:
                    fe:ab:23:50:05:ae:1c:2a:96:16:e5:2e:ea:8c:e3:
                    2d:24:41:3e:59:e2:b9:ef:e2:36:17:10:a4:6f:44:
                    9d:dd:b9:b3:d3:97:90:09:25:0a:ef:28:1f:5e:f5:
                    a0:b4:c1:27:5f:9a:17:2f:09:80:00:a4:a3:46:a2:
                    9f:06:ba:a6:f8:75:2f:57:a9:64:db:07:4a:ed:46:
                    a2:49:7b:f5:62:d0:de:71:68:43:12:54:b6:80:41:
                    4d:6c:58:d8:1d:12:f1:74:45:ac:a0:a0:1a:0b:59:
                    45:3a:30:2a:84:b0:45:40:a4:16:37:4a:58:16:5f:
                    5f:19:81:77:b0:21:48:12:d2:39:41:0f:09:70:b8:
                    96:d7:dd:63:25:6a:16:af:68:6a:0b:6a:81:3a:85:
                    66:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:FC:73:3C:3C:D3:6D:F1:69:84:23:F8:94:21:08:AC:41:6B:29:7F
            X509v3 Authority Key Identifier:
                keyid:4A:B5:A3:BD:9F:DB:75:1A:3D:82:27:19:D5:83:9C:AA:99:4E:A9:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KPKDUZJrVkM5K5UDmHqaoDSmuaU1RQEbCdBY94VL67Z/0/4AB5A3BD9FDB751A3D822719D5839CAA994EA948.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB5A3BD9FDB751A3D822719D5839CAA994EA948.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KPKDUZJrVkM5K5UDmHqaoDSmuaU1RQEbCdBY94VL67Z/0/4AB5A3BD9FDB751A3D822719D5839CAA994EA948.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:23:e3:ce:b6:79:f8:0f:08:4f:69:75:4c:97:4c:fe:1c:a9:
         b7:fe:12:14:ec:a4:f2:1b:ce:76:35:96:88:f8:9d:f2:c2:65:
         31:69:69:e3:0f:32:54:c5:dc:a7:f2:f6:ed:d5:8a:43:f4:e2:
         6f:cf:25:31:80:db:45:96:29:0a:5c:09:78:d3:64:7a:b9:4c:
         ae:83:b4:fe:85:e8:82:c4:59:77:f5:d9:ef:4e:36:da:e8:2d:
         b1:81:12:14:11:86:60:b8:71:50:72:df:05:20:84:dd:fc:53:
         4c:88:b0:0c:ad:ee:02:92:04:45:68:1d:6f:c7:0e:3a:0e:fe:
         cd:4a:34:fb:64:89:af:af:9f:34:76:db:5a:ba:69:c8:4c:f5:
         d1:b2:d0:7f:5e:15:6b:22:75:57:84:5b:c9:0a:74:dd:1a:1b:
         ae:75:d2:63:2a:ea:bf:a8:fe:68:94:9c:39:d3:b0:eb:8b:27:
         df:f6:4f:58:dd:6b:a0:f7:b4:08:09:cf:25:53:aa:55:1d:c4:
         99:bd:6b:88:8c:bf:ce:49:2a:58:54:e7:16:8b:34:37:3a:f8:
         1c:92:87:9a:b3:d5:37:d1:b8:ab:f6:fa:05:94:09:f1:f8:84:
         d8:ba:fe:ee:5f:37:57:ac:69:4e:7d:dc:0d:f3:db:fd:63:14:
         0e:06:00:b3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZef5vA+RtgpjB+skMYfSNC94BkkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEFCNUEzQkQ5RkRCNzUxQTNEODIyNzE5RDU4MzlDQUE5
OTRFQTk0ODAeFw0yNTExMjUxNjUwMzlaFw0yNTExMjYxNzE1MzlaMDMxMTAvBgNV
BAMTKDAyRkM3MzNDM0NEMzZERjE2OTg0MjNGODk0MjEwOEFDNDE2QjI5N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCautPG54P5ec/r/K7ZxXaqxRcW
Jk160SfMgylzhqE7vBS/V2u6KxbF0t2NuQtgs7TlXc8gaS0fw6JejT0fwYiNA2cv
E9Baup+4IMMbmOt0UyXEPzZT6jZbWxtWIaHJi+Khm3XOIJwikv6rI1AFrhwqlhbl
LuqM4y0kQT5Z4rnv4jYXEKRvRJ3dubPTl5AJJQrvKB9e9aC0wSdfmhcvCYAApKNG
op8Guqb4dS9XqWTbB0rtRqJJe/Vi0N5xaEMSVLaAQU1sWNgdEvF0RaygoBoLWUU6
MCqEsEVApBY3SlgWX18ZgXewIUgS0jlBDwlwuJbX3WMlahavaGoLaoE6hWYPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUAvxzPDzTbfFphCP4lCEIrEFrKX8wHwYDVR0j
BBgwFoAUSrWjvZ/bdRo9gicZ1YOcqplOqUgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0tQS0RVWkpyVmtNNUs1VURtSHFhb0RTbXVhVTFSUUViQ2RCWTk0Vkw2
N1ovMC80QUI1QTNCRDlGREI3NTFBM0Q4MjI3MTlENTgzOUNBQTk5NEVBOTQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRBQjVBM0JEOUZEQjc1MUEz
RDgyMjcxOUQ1ODM5Q0FBOTk0RUE5NDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N0tQS0RVWkpyVmtNNUs1VURtSHFhb0RTbXVhVTFSUUViQ2RCWTk0Vkw2N1ovMC80
QUI1QTNCRDlGREI3NTFBM0Q4MjI3MTlENTgzOUNBQTk5NEVBOTQ4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALyPjzrZ5+A8IT2l1TJdM/hypt/4SFOyk8hvOdjWWiPid8sJlMWlp4w8yVMXc
p/L27dWKQ/Tib88lMYDbRZYpClwJeNNkerlMroO0/oXogsRZd/XZ70422ugtsYES
FBGGYLhxUHLfBSCE3fxTTIiwDK3uApIERWgdb8cOOg7+zUo0+2SJr6+fNHbbWrpp
yEz10bLQf14VayJ1V4RbyQp03RobrnXSYyrqv6j+aJScOdOw64sn3/ZPWN1roPe0
CAnPJVOqVR3Emb1riIy/zkkqWFTnFos0Nzr4HJKHmrPVN9G4q/b6BZQJ8fiE2Lr+
7l83V6xpTn3cDfPb/WMUDgYAsw==
-----END CERTIFICATE-----
Generated at Tue Nov 25 20:32:17 2025 by rpki-client