This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/1E71509DDAF040F68CB7D75B73108CE2284487D7.mft
File:                     1E71509DDAF040F68CB7D75B73108CE2284487D7.mft (raw, json)
Hash identifier:          pmKzactfoRro394DqCTs5YuzKsZ0ffmOQ6JmMUNI+Ks=
Subject key identifier:   53:2F:6F:18:46:32:98:2E:FE:F8:7D:AA:D1:B2:F9:B9:9B:42:CE:81
Authority key identifier: 1E:71:50:9D:DA:F0:40:F6:8C:B7:D7:5B:73:10:8C:E2:28:44:87:D7
Certificate issuer:       /CN=1E71509DDAF040F68CB7D75B73108CE2284487D7
Certificate serial:       06EB1CE072CADD680462F82D2011384124EF038F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E71509DDAF040F68CB7D75B73108CE2284487D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/1E71509DDAF040F68CB7D75B73108CE2284487D7.mft
Manifest number:          0187
Signing time:             Sun 21 Dec 2025 21:47:29 +0000
Manifest this update:     Sun 21 Dec 2025 21:42:29 +0000
Manifest next update:     Tue 23 Dec 2025 01:41:29 +0000
Files and hashes:         1: 3230312e3231362e3130342e302f32322d3332203d3e20323732363435.roa (hash: gZaYlFtBaEw2oCdRSekp1gNFv/g+uyGOOpUwwyPpFTA=)
                          2: 323830343a383637383a3a2f33322d313238203d3e20323732363435.roa (hash: EKtwusb+Bln8DERhzhTCh0l0frHgFdvC1OAvnBuZuMg=)
                          3: 1E71509DDAF040F68CB7D75B73108CE2284487D7.crl (hash: rOihcU7paiooRsYhRdriZU5k/K/fvbQ7QAGsc4Q4LpQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/1E71509DDAF040F68CB7D75B73108CE2284487D7.crl
                          rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/1E71509DDAF040F68CB7D75B73108CE2284487D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E71509DDAF040F68CB7D75B73108CE2284487D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 01:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:eb:1c:e0:72:ca:dd:68:04:62:f8:2d:20:11:38:41:24:ef:03:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E71509DDAF040F68CB7D75B73108CE2284487D7
        Validity
            Not Before: Dec 21 21:42:29 2025 GMT
            Not After : Dec 23 01:41:29 2025 GMT
        Subject: CN=532F6F184632982EFEF87DAAD1B2F9B99B42CE81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3a:ab:13:37:b5:03:6f:d2:37:e9:b0:21:a5:
                    f2:e8:cd:60:06:8f:59:71:1a:76:69:c2:57:95:78:
                    fd:46:51:c0:7a:72:ac:af:99:87:41:fd:90:93:2b:
                    f8:83:59:ea:61:53:f6:e4:55:ab:2b:bf:49:9f:1d:
                    8b:4d:d2:02:89:b9:ac:71:0f:b8:e8:72:2d:08:73:
                    68:ea:c5:fc:ca:d4:7d:f4:3f:97:c5:0a:9a:33:de:
                    56:16:05:67:c6:e7:72:d4:c4:7a:98:d2:67:80:36:
                    70:77:56:8f:0d:d1:40:ca:09:6a:ed:88:ab:e6:26:
                    85:84:22:9a:1f:8e:87:ff:42:5f:dd:9b:f4:ed:18:
                    d0:79:60:bf:49:0a:ba:2f:73:0e:68:e8:86:cb:7b:
                    3e:40:cd:a5:08:80:5f:85:7e:ed:35:ed:f1:b6:de:
                    f6:b6:8b:c3:21:3a:6b:f4:bb:c9:e7:d5:50:30:60:
                    aa:d2:93:8a:48:08:74:1b:40:7a:c3:f6:fd:32:a6:
                    a7:43:7d:fb:8a:30:69:ed:b7:5f:ac:86:b2:94:05:
                    ab:f7:33:01:85:86:09:4b:2f:11:0d:cb:a1:0d:2e:
                    f1:e0:27:83:77:93:84:f7:6f:6c:39:41:75:e5:92:
                    6e:07:3b:cf:bd:8f:22:79:07:bd:a7:98:6c:5b:0c:
                    f9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2F:6F:18:46:32:98:2E:FE:F8:7D:AA:D1:B2:F9:B9:9B:42:CE:81
            X509v3 Authority Key Identifier:
                keyid:1E:71:50:9D:DA:F0:40:F6:8C:B7:D7:5B:73:10:8C:E2:28:44:87:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/1E71509DDAF040F68CB7D75B73108CE2284487D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E71509DDAF040F68CB7D75B73108CE2284487D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/1E71509DDAF040F68CB7D75B73108CE2284487D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:90:e9:70:5c:8d:46:1f:75:d0:02:2e:2b:b2:81:7d:5b:d6:
         95:35:c3:2a:a9:47:75:d2:eb:60:c9:36:01:c3:0e:24:05:d9:
         96:1e:fa:3a:81:9d:9b:d5:6f:fb:1b:aa:0f:ba:2b:c0:07:cc:
         7f:5d:b4:2a:8e:46:92:7e:01:24:2a:a3:38:a7:fb:29:98:89:
         54:d9:1e:2f:f3:d4:20:82:31:39:07:c9:68:53:bc:b1:3a:94:
         73:36:19:ae:c9:1f:eb:80:81:45:8b:79:ac:bd:42:c7:d1:ac:
         1b:f8:47:72:74:0b:39:1c:62:01:a4:a9:5b:56:e9:1b:78:c8:
         d8:2d:04:1c:46:59:37:5e:bb:4d:b7:83:32:a4:3a:e4:87:d2:
         84:37:45:70:9b:c0:04:4a:a1:e3:f4:b0:27:ae:9c:9a:26:3f:
         62:14:2b:be:05:85:7d:22:9b:fc:8b:ec:3c:c2:f9:e0:dc:7b:
         9d:87:ae:4f:62:c5:1c:8e:c1:d1:70:01:f5:31:9e:99:15:60:
         23:0d:3a:a2:bf:88:a6:d2:6c:01:95:c5:72:07:1e:99:88:d2:
         37:ef:4d:04:f5:e5:fe:d8:d0:84:bc:45:0e:c0:f3:ba:c3:dc:
         cb:54:9d:87:4c:8d:88:0f:a5:c2:8b:fb:5b:64:80:15:e1:b0:
         ed:04:8c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 09:08:15 2025 by rpki-client