This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.mft
File:                     B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.mft (raw, json)
Hash identifier:          sPtWObgCIn5LLvUzaURPFTN4e70YPFazJWGsGYRSpSU=
Subject key identifier:   98:61:F8:96:6A:F8:02:74:CA:3D:C9:AA:37:15:4B:34:49:BE:42:C8
Authority key identifier: B4:35:88:C8:AB:54:53:3C:6B:AF:EC:39:CA:9E:C4:E2:6E:05:D7:7B
Certificate issuer:       /CN=B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B
Certificate serial:       4FF34B6FB1048E1CF2476A8A42DE056717D667E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.mft
Manifest number:          0383
Signing time:             Sun 21 Dec 2025 16:00:00 +0000
Manifest this update:     Sun 21 Dec 2025 15:55:00 +0000
Manifest next update:     Mon 22 Dec 2025 16:00:00 +0000
Files and hashes:         1: 3137392e3132372e38302e302f32302d3234203d3e203238323932.roa (hash: fWDx1Fi6mw6Ca6ZucRKlJCI/fMGdFESCD3/Jzd0xj/o=)
                          2: 323030313a313261303a3a2f33322d3438203d3e203238323932.roa (hash: dKQt4v2JdWqatl/R0rZkWZ5H3UnSmexxO6GH5f47Zss=)
                          3: 3138392e32382e3137362e302f32302d3234203d3e203238323932.roa (hash: Bnl9bp41rgXoRcKOfyv6fT3qi9QRw6WJNdIPgdsg8NI=)
                          4: B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.crl (hash: /kewUe2IKTJeJ96MASs2MBPdWn8FaoN6iu2qoJA+1Gk=)
                          5: 3138392e3132342e3131322e302f32302d3234203d3e203238323932.roa (hash: Iq9Imp3qaQEaGFQWqL4EpTLVcZyaAgjQqWljK8thbFo=)
                          6: 3137372e35342e34382e302f32302d3234203d3e203238323932.roa (hash: 40IYTjHiZO7EvGhruJ83FGAT4mQNUc8uvivoD/9QYP0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.crl
                          rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f3:4b:6f:b1:04:8e:1c:f2:47:6a:8a:42:de:05:67:17:d6:67:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B
        Validity
            Not Before: Dec 21 15:55:00 2025 GMT
            Not After : Dec 28 16:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f1:6e:ab:25:f2:e2:99:34:db:0d:90:f6:82:
                    cc:c6:cc:2f:02:9b:1b:cf:16:0e:24:94:e7:4a:ba:
                    a8:d8:e0:6c:ba:a2:80:8f:9d:f5:fc:90:dd:95:36:
                    6c:a9:83:07:d8:35:21:cc:40:17:32:1d:43:e1:a6:
                    1f:18:80:e1:25:34:62:ef:9e:91:b4:e0:37:35:f0:
                    b0:1e:52:a2:4b:07:7a:0a:c0:4e:1f:ba:5c:68:03:
                    a7:63:16:8f:da:98:bc:9c:1a:91:df:22:16:95:42:
                    60:dc:34:ba:76:8c:da:d7:67:97:a1:fd:8a:bc:3b:
                    a0:73:dc:3a:3b:c1:5b:9d:bf:19:4c:4c:87:25:1d:
                    a9:cd:1f:73:5d:be:e4:dd:ea:aa:ce:35:f1:1d:76:
                    70:76:34:cb:a4:40:9d:f9:9c:7a:c2:1b:62:23:46:
                    49:de:72:21:11:31:fd:75:ec:91:a1:2e:d7:37:ad:
                    5e:c9:bb:c6:bb:e5:65:64:3a:90:0b:9a:3f:b2:1c:
                    68:cf:f3:83:01:6c:c4:e4:69:04:a5:fc:9d:0d:0b:
                    1c:6d:0b:a5:55:82:3f:3b:db:b1:fa:86:ad:f7:5a:
                    76:3e:98:3c:4c:62:3e:ea:e5:77:7b:29:21:1d:49:
                    30:cb:e3:fc:3a:c2:85:0e:08:69:44:27:2f:b6:e0:
                    6e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:61:F8:96:6A:F8:02:74:CA:3D:C9:AA:37:15:4B:34:49:BE:42:C8
            X509v3 Authority Key Identifier:
                keyid:B4:35:88:C8:AB:54:53:3C:6B:AF:EC:39:CA:9E:C4:E2:6E:05:D7:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:d1:20:50:c8:2c:7c:e3:0e:a4:de:bb:ab:ad:31:23:e3:c7:
         58:79:66:11:5c:73:61:bd:79:03:6c:e3:4e:5a:c9:fe:67:97:
         72:16:f7:d5:e9:fc:d0:af:2f:74:22:1e:bc:81:81:7a:f6:74:
         4f:42:9c:11:e6:22:13:46:5d:a9:30:a3:20:25:5e:6c:41:5d:
         d1:d1:19:da:d1:5c:80:a3:a4:db:c5:51:a2:30:79:91:cb:dd:
         de:a3:fe:ce:12:d4:3b:fb:37:f8:56:81:20:2b:74:01:69:d1:
         57:f2:05:d6:12:7d:f3:ac:9c:f4:6e:0c:08:54:56:57:f4:a9:
         f0:f2:c8:67:33:1e:a7:17:e7:ea:25:50:6d:5c:a2:96:5a:1e:
         76:d4:71:18:be:67:ac:eb:ea:b5:2a:08:12:1f:26:03:b1:77:
         4d:29:a9:f6:42:45:03:02:b1:eb:c1:d5:70:a6:68:22:b7:aa:
         7e:46:4a:29:8f:3d:ca:e4:26:59:e4:79:86:76:b7:94:77:76:
         dd:70:56:4d:87:82:eb:9f:3d:a4:9c:13:3f:00:e7:b9:1e:ed:
         97:89:5a:50:19:71:ab:d9:52:3e:7a:1f:3a:a2:ab:5b:68:f6:
         e8:e9:2f:e1:fb:3e:42:95:9a:06:0e:e5:ba:65:91:b6:a1:5e:
         80:c2:4d:08
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Dec 21 17:26:19 2025 by rpki-client