This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/0/F4295DF9D903508C9752EE48D417C2E0F09072B9.mft
File:                     F4295DF9D903508C9752EE48D417C2E0F09072B9.mft (raw, json)
Hash identifier:          E+mKMjbBf7E1p7L/gQTNxE2bVRCGKhHnvBaW44Th03U=
Subject key identifier:   DC:08:66:FD:AE:41:ED:8E:1E:B6:67:3C:3C:5B:D9:67:D5:48:D0:61
Authority key identifier: F4:29:5D:F9:D9:03:50:8C:97:52:EE:48:D4:17:C2:E0:F0:90:72:B9
Certificate issuer:       /CN=F4295DF9D903508C9752EE48D417C2E0F09072B9
Certificate serial:       627E33F89ED7A468F3F0841B7DE9C514412DF909
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4295DF9D903508C9752EE48D417C2E0F09072B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/0/F4295DF9D903508C9752EE48D417C2E0F09072B9.mft
Manifest number:          EE
Signing time:             Fri 19 Dec 2025 01:05:52 +0000
Manifest this update:     Fri 19 Dec 2025 01:00:52 +0000
Manifest next update:     Sat 20 Dec 2025 02:22:52 +0000
Files and hashes:         1: 34352e3233372e3230382e302f32322d3332203d3e20323638323938.roa (hash: 6c3GdWcjKCcupf3f4vwcEM7/1n5r6TvUI5+yFIQGlag=)
                          2: 323830343a346630343a3a2f33322d313238203d3e20323638323938.roa (hash: Vrke0Oq4bo6mVeSeE988FSQcp7cmd2Nu1WQ35iKBUl0=)
                          3: F4295DF9D903508C9752EE48D417C2E0F09072B9.crl (hash: HeDlmWVnVOw7hNFHE0Qt5ugRmiqiyO8zF7gJy4K+7y4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/0/F4295DF9D903508C9752EE48D417C2E0F09072B9.crl
                          rsync://rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/0/F4295DF9D903508C9752EE48D417C2E0F09072B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4295DF9D903508C9752EE48D417C2E0F09072B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 02:22:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:7e:33:f8:9e:d7:a4:68:f3:f0:84:1b:7d:e9:c5:14:41:2d:f9:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4295DF9D903508C9752EE48D417C2E0F09072B9
        Validity
            Not Before: Dec 19 01:00:52 2025 GMT
            Not After : Dec 20 02:22:52 2025 GMT
        Subject: CN=DC0866FDAE41ED8E1EB6673C3C5BD967D548D061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:31:d2:07:71:f8:f2:6a:b2:21:54:35:fd:01:
                    6b:fd:7c:63:d5:6b:ca:de:75:c0:02:95:c8:af:73:
                    5e:f8:d9:f6:2a:71:b1:b1:da:fe:c8:c6:ce:92:3b:
                    a4:ef:6d:1d:fa:9f:e9:e2:7d:51:90:3f:1a:10:4c:
                    b0:75:9f:69:15:72:49:d1:18:ad:71:c8:6e:f2:d3:
                    95:5b:03:42:1c:57:b1:cf:8a:d4:27:4f:c4:e9:08:
                    92:ed:83:77:cc:59:a4:44:d6:fd:0e:cd:77:1d:da:
                    2c:d3:0c:cd:0e:f8:67:dd:17:3b:44:ee:99:22:85:
                    52:ce:0f:fd:2e:39:b8:39:fc:ee:32:dd:aa:25:b3:
                    67:c1:22:91:8d:4f:08:ec:04:88:2c:50:16:93:94:
                    46:56:e3:3c:9e:ae:d7:96:f9:f8:67:de:88:fa:04:
                    a9:c5:c0:7b:cb:82:83:1e:08:6f:ba:78:8b:ae:a9:
                    72:b7:1d:a5:62:02:25:e7:87:2b:a2:9b:47:19:c2:
                    09:7a:8c:8f:d8:34:a2:dd:69:f2:93:f4:37:cd:5d:
                    70:94:b1:45:1f:64:59:5a:c4:6d:bc:12:dc:2d:4e:
                    6b:69:4b:e8:5a:45:3b:11:51:9a:c9:04:1a:67:b3:
                    f6:12:7a:49:87:75:2c:ee:25:30:21:5a:60:67:0e:
                    bf:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:08:66:FD:AE:41:ED:8E:1E:B6:67:3C:3C:5B:D9:67:D5:48:D0:61
            X509v3 Authority Key Identifier:
                keyid:F4:29:5D:F9:D9:03:50:8C:97:52:EE:48:D4:17:C2:E0:F0:90:72:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/0/F4295DF9D903508C9752EE48D417C2E0F09072B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4295DF9D903508C9752EE48D417C2E0F09072B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/0/F4295DF9D903508C9752EE48D417C2E0F09072B9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:84:43:59:30:b0:0d:34:b6:0a:18:e3:78:dd:26:b3:af:23:
         89:ec:bd:e4:c8:c8:81:3c:7e:f2:e4:17:cc:f3:71:d9:97:79:
         80:2e:b2:d8:fd:92:0a:55:9e:98:d8:52:32:30:82:26:ea:d4:
         7b:1f:4a:a0:9c:71:67:24:c6:3e:23:58:f7:6d:ce:3d:bd:03:
         9b:4f:cd:42:69:e4:1a:f8:c2:56:65:6a:d4:fb:fc:e3:09:fc:
         16:4e:f2:9f:4e:37:14:e7:ae:4c:21:0e:00:e9:24:35:14:e5:
         60:df:5f:08:56:ad:28:1d:bf:04:81:b3:44:d3:d8:6d:27:0d:
         9f:03:80:14:48:79:cd:01:3d:fa:a6:ce:d0:6f:ea:17:c7:27:
         1b:d8:d4:bf:ef:87:92:f3:95:7c:36:41:c1:6a:3e:b4:42:2c:
         a4:87:17:08:08:86:20:c7:b5:2a:fb:95:49:09:36:f2:f7:7b:
         56:3d:41:e7:95:d0:bb:71:5e:d1:0f:1d:17:4e:01:98:d7:9d:
         e7:95:e9:5c:a4:3f:cc:db:db:d7:4b:e5:1a:17:1d:75:be:dc:
         12:01:18:81:66:e5:7d:91:6a:8f:db:1a:53:76:eb:dc:92:5f:
         33:f7:c6:6a:a0:2f:97:bf:83:47:a5:e8:22:a8:8f:c2:03:ad:
         2d:c1:65:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:10:45 2025 by rpki-client