This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/041B44A9F96A2E80EA192819BE9533FF7CE1F401.mft
File:                     041B44A9F96A2E80EA192819BE9533FF7CE1F401.mft (raw, json)
Hash identifier:          +JY1oOmo3CNHUDYQRrMNNeKljPGbiXmoPsQHfirWN0U=
Subject key identifier:   46:F6:71:E8:F0:42:E1:49:1E:1D:22:05:90:1A:B4:45:59:ED:2A:49
Authority key identifier: 04:1B:44:A9:F9:6A:2E:80:EA:19:28:19:BE:95:33:FF:7C:E1:F4:01
Certificate issuer:       /CN=041B44A9F96A2E80EA192819BE9533FF7CE1F401
Certificate serial:       6F9BFF8D3662B89FCF26D7FD469EB8110EC79CFE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041B44A9F96A2E80EA192819BE9533FF7CE1F401.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/041B44A9F96A2E80EA192819BE9533FF7CE1F401.mft
Manifest number:          0153
Signing time:             Sat 20 Dec 2025 23:08:25 +0000
Manifest this update:     Sat 20 Dec 2025 23:03:25 +0000
Manifest next update:     Mon 22 Dec 2025 00:02:25 +0000
Files and hashes:         1: 3138362e322e3234382e302f32332d3234203d3e20323636313633.roa (hash: /fbOsOYs6AxQese14fmYriT6Fyl3hntENuETfI0hxzo=)
                          2: 323830343a336261383a3a2f33322d3438203d3e20323636313633.roa (hash: ZUYmh0T71CzQM4yz2odlnvMCE7L2ORZB0YBQinBzj1Q=)
                          3: 3138362e322e3235302e302f32342d3234203d3e20323636313633.roa (hash: Kpf2RKCB6lOVWwZlKUC3hbK07a2qb/p0d32tUukbR/c=)
                          4: 3138362e322e3235312e302f32342d3234203d3e20323636313633.roa (hash: T942+I22olKUoF8g7UuB2ov3yuULn7rkquCI51mc40w=)
                          5: 041B44A9F96A2E80EA192819BE9533FF7CE1F401.crl (hash: VVnLLHvBZrQAG983NZh5M7HHinnYlQRMPL26w0NbulA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/041B44A9F96A2E80EA192819BE9533FF7CE1F401.crl
                          rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/041B44A9F96A2E80EA192819BE9533FF7CE1F401.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041B44A9F96A2E80EA192819BE9533FF7CE1F401.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 00:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:9b:ff:8d:36:62:b8:9f:cf:26:d7:fd:46:9e:b8:11:0e:c7:9c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041B44A9F96A2E80EA192819BE9533FF7CE1F401
        Validity
            Not Before: Dec 20 23:03:25 2025 GMT
            Not After : Dec 22 00:02:25 2025 GMT
        Subject: CN=46F671E8F042E1491E1D2205901AB44559ED2A49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4f:20:53:8e:be:f4:75:c2:d1:1f:93:72:96:
                    f0:c3:5a:e2:c0:71:c8:51:cd:d9:72:d2:7b:d3:f2:
                    71:1c:9a:52:4b:21:46:bc:cf:7a:f5:79:59:e5:25:
                    74:b6:af:c7:ff:d2:db:0b:2b:a8:44:be:53:57:ef:
                    f4:b9:4c:63:0d:91:d9:76:f5:cc:84:12:b0:53:c7:
                    09:95:bd:f5:bc:23:1c:30:88:5e:e4:8f:67:79:05:
                    37:0f:66:22:0b:34:53:83:a5:69:8d:ba:9b:95:15:
                    e2:a1:97:3d:97:af:9b:52:6c:c3:1c:7e:80:25:bf:
                    9b:1e:b8:55:38:6a:e9:50:dd:f4:28:ca:40:f5:ab:
                    42:1c:be:4f:25:eb:8d:66:83:2c:6f:42:e6:0f:de:
                    c1:88:b8:44:4a:a2:10:e0:32:92:d2:7f:ed:b1:9e:
                    b5:1b:80:11:1d:2c:53:82:77:57:2c:69:83:4f:dc:
                    77:15:7d:35:21:5d:49:e7:3e:1f:ee:e2:ae:ca:01:
                    5a:31:40:26:bd:ed:56:04:28:41:f7:b5:e9:70:2b:
                    e6:1e:a3:84:fa:2d:2d:b6:56:e9:0c:04:47:6b:eb:
                    46:18:1e:68:9a:fb:ec:7e:44:e1:b6:93:0b:52:f3:
                    30:77:75:e0:0e:fa:88:73:59:a3:99:d1:13:f5:8f:
                    a4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F6:71:E8:F0:42:E1:49:1E:1D:22:05:90:1A:B4:45:59:ED:2A:49
            X509v3 Authority Key Identifier:
                keyid:04:1B:44:A9:F9:6A:2E:80:EA:19:28:19:BE:95:33:FF:7C:E1:F4:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/041B44A9F96A2E80EA192819BE9533FF7CE1F401.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041B44A9F96A2E80EA192819BE9533FF7CE1F401.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/041B44A9F96A2E80EA192819BE9533FF7CE1F401.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:fe:d7:67:88:1e:44:62:05:fb:51:a2:5e:db:7a:53:fc:16:
         eb:5c:a9:bd:70:33:cf:2a:5c:82:fa:ae:79:77:25:ad:ec:b9:
         a8:31:32:31:f9:75:35:6d:61:98:7d:d8:23:c7:7b:5a:bc:ca:
         f8:1b:65:ef:bd:72:b7:2c:b6:2c:19:43:c5:66:a9:7c:95:29:
         bf:31:40:1f:06:d2:dc:f5:f4:8b:5b:ba:43:e7:7e:a2:dc:9e:
         28:35:16:17:7c:74:da:7c:17:fa:bb:18:38:54:85:cf:12:a2:
         1b:c7:35:14:3b:5c:7e:e6:2b:c4:ff:2c:e4:e6:b8:24:e1:28:
         e0:6d:4f:b2:60:5d:1b:f7:10:f8:0a:7d:c6:34:07:f3:15:09:
         c8:0f:22:ae:2b:69:3c:db:16:f4:a6:19:0f:3f:26:bc:dc:8b:
         ce:a9:e2:5a:d5:78:3e:27:f7:29:e6:af:77:71:f7:79:df:81:
         fa:0f:e2:5b:ab:35:42:b1:af:3d:b1:91:3e:83:d4:19:89:f3:
         ac:3a:aa:00:4d:91:d3:6c:4a:b7:e2:28:0a:06:e8:fa:b7:e7:
         04:33:f6:7d:21:52:0f:6e:2a:48:1e:7d:50:4d:32:de:52:e6:
         d9:17:f7:82:32:06:c5:23:ca:72:2f:e1:64:92:30:25:20:f2:
         f4:9a:8d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----