This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8QdjF4Xc5pDBBo8Q5uJNmEzXpFDJrUVQManKZjF3tcdd/0/E47AF0817A9B89E1455788819C60FCFF44BA6C74.mft
File:                     E47AF0817A9B89E1455788819C60FCFF44BA6C74.mft (raw, json)
Hash identifier:          XvioluKc8rFNPM7ZGtiUHZxVWpdQWR9X6eXiAxEZafo=
Subject key identifier:   3C:8F:E7:90:5A:ED:9F:47:F9:AE:58:88:4D:1E:F5:0D:BC:25:5D:17
Authority key identifier: E4:7A:F0:81:7A:9B:89:E1:45:57:88:81:9C:60:FC:FF:44:BA:6C:74
Certificate issuer:       /CN=E47AF0817A9B89E1455788819C60FCFF44BA6C74
Certificate serial:       4DD3EEC8E80A4CB5D729495A63AD2DBCFB5F9B8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E47AF0817A9B89E1455788819C60FCFF44BA6C74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QdjF4Xc5pDBBo8Q5uJNmEzXpFDJrUVQManKZjF3tcdd/0/E47AF0817A9B89E1455788819C60FCFF44BA6C74.mft
Manifest number:          0151
Signing time:             Mon 22 Dec 2025 15:18:44 +0000
Manifest this update:     Mon 22 Dec 2025 15:13:44 +0000
Manifest next update:     Tue 23 Dec 2025 15:56:44 +0000
Files and hashes:         1: 323830343a386662343a3a2f33322d3438203d3e20323733353036.roa (hash: c1Na6691Hmvfjk4VXK1rsoaJiNDkg6n3Q+OCF3ozeaQ=)
                          2: E47AF0817A9B89E1455788819C60FCFF44BA6C74.crl (hash: Cw/f/wMEleGwtLwUQLyhFyW5SXIxOQ4Cy9lmSl38Ixc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8QdjF4Xc5pDBBo8Q5uJNmEzXpFDJrUVQManKZjF3tcdd/0/E47AF0817A9B89E1455788819C60FCFF44BA6C74.crl
                          rsync://rpki-repo.registro.br/repo/8QdjF4Xc5pDBBo8Q5uJNmEzXpFDJrUVQManKZjF3tcdd/0/E47AF0817A9B89E1455788819C60FCFF44BA6C74.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E47AF0817A9B89E1455788819C60FCFF44BA6C74.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 15:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d3:ee:c8:e8:0a:4c:b5:d7:29:49:5a:63:ad:2d:bc:fb:5f:9b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E47AF0817A9B89E1455788819C60FCFF44BA6C74
        Validity
            Not Before: Dec 22 15:13:44 2025 GMT
            Not After : Dec 23 15:56:44 2025 GMT
        Subject: CN=3C8FE7905AED9F47F9AE58884D1EF50DBC255D17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:00:40:e2:db:c4:1c:fe:9c:e6:00:1f:e0:f2:
                    26:96:e9:88:a2:85:3c:d5:60:17:6d:2f:3e:80:f2:
                    68:18:50:86:db:94:c6:41:2c:3b:fd:bb:f4:f9:20:
                    a8:53:10:b3:5e:e1:20:53:5c:8b:4c:0b:43:30:e3:
                    ac:3e:51:5f:15:9f:99:b8:75:ee:4f:6e:8e:2b:29:
                    4d:fa:0d:83:80:ea:86:9d:f8:da:c6:1f:74:c4:ed:
                    47:b4:be:7e:56:ed:f3:2c:b0:e0:01:2d:a3:83:4c:
                    39:2c:39:e0:87:a9:e2:b7:2c:4b:03:68:ce:5f:20:
                    fc:fa:71:98:7b:ec:c3:88:d2:0e:4c:46:13:99:04:
                    b7:b6:82:be:4a:09:ab:44:20:0f:fe:cc:68:19:75:
                    ca:14:8d:3f:d9:3e:c6:7c:61:4b:fb:a0:ac:28:a1:
                    08:78:e3:49:51:7d:ce:e5:84:c5:20:7f:00:d4:99:
                    0e:ed:27:70:da:cc:0d:a2:44:c7:82:21:0d:f7:47:
                    e0:3b:a4:e8:7e:a7:28:5c:cb:7d:b2:21:f9:b6:07:
                    0d:76:e7:8f:78:13:1f:9a:02:ae:81:83:5d:60:b8:
                    ee:29:c8:0b:f8:ea:ea:30:ba:99:f6:f5:61:8d:63:
                    50:4b:14:15:55:74:2c:f2:81:d8:57:6d:b3:a1:01:
                    30:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:8F:E7:90:5A:ED:9F:47:F9:AE:58:88:4D:1E:F5:0D:BC:25:5D:17
            X509v3 Authority Key Identifier:
                keyid:E4:7A:F0:81:7A:9B:89:E1:45:57:88:81:9C:60:FC:FF:44:BA:6C:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QdjF4Xc5pDBBo8Q5uJNmEzXpFDJrUVQManKZjF3tcdd/0/E47AF0817A9B89E1455788819C60FCFF44BA6C74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E47AF0817A9B89E1455788819C60FCFF44BA6C74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QdjF4Xc5pDBBo8Q5uJNmEzXpFDJrUVQManKZjF3tcdd/0/E47AF0817A9B89E1455788819C60FCFF44BA6C74.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:a8:88:0a:e9:49:42:6a:02:54:a0:5f:13:f2:da:8b:c7:37:
         60:d3:fa:c0:d8:01:2d:af:0d:ea:7f:c1:81:55:37:bf:72:a3:
         e4:1e:28:2f:b4:d5:13:52:a7:b1:4a:f8:47:2a:d7:13:00:71:
         5c:c1:3f:29:55:b5:6d:9e:d6:3c:78:d9:b9:f9:95:c8:ea:59:
         be:82:37:dd:f6:4f:83:5e:19:72:d2:df:a4:28:35:b6:00:c9:
         e5:af:a6:9e:eb:9d:55:35:68:f3:2a:d8:5e:49:c9:af:d5:2f:
         4e:0b:a6:06:56:81:bf:a3:a5:67:61:19:f0:32:ef:00:36:df:
         b1:2b:ea:cc:b9:d8:52:7a:da:95:32:68:33:f3:27:92:6e:4f:
         45:1a:6b:ff:98:cc:77:00:e2:6a:5a:13:23:ff:60:5e:a2:b8:
         c7:dc:27:13:f2:5b:fa:cb:fe:7c:a6:41:a8:1c:99:a6:73:a7:
         90:d5:6f:1a:a8:91:94:95:01:0f:da:19:e4:da:9e:57:08:f1:
         85:57:78:2d:6f:2c:77:67:cb:61:42:4e:f0:ca:60:07:05:a8:
         29:39:45:33:6a:0f:48:e4:33:d5:fe:30:c5:c4:4b:16:71:9c:
         8b:5c:5d:37:14:7d:c7:2d:ab:f0:13:cb:06:ab:73:1f:62:c0:
         94:6e:c7:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTdPuyOgKTLXXKUlaY60tvPtfm4swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ3QUYwODE3QTlCODlFMTQ1NTc4ODgxOUM2MEZDRkY0
NEJBNkM3NDAeFw0yNTEyMjIxNTEzNDRaFw0yNTEyMjMxNTU2NDRaMDMxMTAvBgNV
BAMTKDNDOEZFNzkwNUFFRDlGNDdGOUFFNTg4ODREMUVGNTBEQkMyNTVEMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOAEDi28Qc/pzmAB/g8iaW6Yii
hTzVYBdtLz6A8mgYUIbblMZBLDv9u/T5IKhTELNe4SBTXItMC0Mw46w+UV8Vn5m4
de5Pbo4rKU36DYOA6oad+NrGH3TE7Ue0vn5W7fMssOABLaODTDksOeCHqeK3LEsD
aM5fIPz6cZh77MOI0g5MRhOZBLe2gr5KCatEIA/+zGgZdcoUjT/ZPsZ8YUv7oKwo
oQh440lRfc7lhMUgfwDUmQ7tJ3DazA2iRMeCIQ33R+A7pOh+pyhcy32yIfm2Bw12
5494Ex+aAq6Bg11guO4pyAv46uowupn29WGNY1BLFBVVdCzygdhXbbOhATBTAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUPI/nkFrtn0f5rliITR71DbwlXRcwHwYDVR0j
BBgwFoAU5HrwgXqbieFFV4iBnGD8/0S6bHQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFFkakY0WGM1cERCQm84UTV1Sk5tRXpYcEZESnJVVlFNYW5LWmpGM3Rj
ZGQvMC9FNDdBRjA4MTdBOUI4OUUxNDU1Nzg4ODE5QzYwRkNGRjQ0QkE2Qzc0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U0N0FGMDgxN0E5Qjg5RTE0
NTU3ODg4MTlDNjBGQ0ZGNDRCQTZDNzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OFFkakY0WGM1cERCQm84UTV1Sk5tRXpYcEZESnJVVlFNYW5LWmpGM3RjZGQvMC9F
NDdBRjA4MTdBOUI4OUUxNDU1Nzg4ODE5QzYwRkNGRjQ0QkE2Qzc0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAM6iICulJQmoCVKBfE/Lai8c3YNP6wNgBLa8N6n/BgVU3v3Kj5B4oL7TVE1Kn
sUr4RyrXEwBxXME/KVW1bZ7WPHjZufmVyOpZvoI33fZPg14ZctLfpCg1tgDJ5a+m
nuudVTVo8yrYXknJr9UvTgumBlaBv6OlZ2EZ8DLvADbfsSvqzLnYUnralTJoM/Mn
km5PRRpr/5jMdwDialoTI/9gXqK4x9wnE/Jb+sv+fKZBqByZpnOnkNVvGqiRlJUB
D9oZ5NqeVwjxhVd4LW8sd2fLYUJO8MpgBwWoKTlFM2oPSOQz1f4wxcRLFnGci1xd
NxR9xy2r8BPLBqtzH2LAlG7HXw==
-----END CERTIFICATE-----
Generated at Tue Dec 23 07:45:21 2025 by rpki-client