This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AsKsUNeAbwnhc3JQgUrgXZC9pF7W5dQMkS2ALZaXSSEa/0/40EA943B9928A2416D417FB39A392494904FD334.mft
File:                     40EA943B9928A2416D417FB39A392494904FD334.mft (raw, json)
Hash identifier:          kfBMtIY9NigJf0J+VJPqvGiAzheZaDLAfeqsZfu11tI=
Subject key identifier:   57:D8:56:C5:AE:50:63:75:61:24:BD:E1:EF:C5:B8:D7:B7:CA:39:DA
Authority key identifier: 40:EA:94:3B:99:28:A2:41:6D:41:7F:B3:9A:39:24:94:90:4F:D3:34
Certificate issuer:       /CN=40EA943B9928A2416D417FB39A392494904FD334
Certificate serial:       25584B761C1F5A7B83B397CCA72C51060B3B47D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40EA943B9928A2416D417FB39A392494904FD334.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsKsUNeAbwnhc3JQgUrgXZC9pF7W5dQMkS2ALZaXSSEa/0/40EA943B9928A2416D417FB39A392494904FD334.mft
Manifest number:          A8
Signing time:             Wed 24 Dec 2025 07:33:51 +0000
Manifest this update:     Wed 24 Dec 2025 07:28:51 +0000
Manifest next update:     Thu 25 Dec 2025 08:43:51 +0000
Files and hashes:         1: 323830343a333966303a663030303a3a2f33362d3634203d3e20323636303630.roa (hash: Ho3oehfUuf7qNz61F35C1bMiS0o19Y/NqOTwWzA+FhQ=)
                          2: 34352e342e3232372e302f32342d3234203d3e20323636303630.roa (hash: ZgvyOyh3glzPndMQDfXf+LFJcMaPKH6m2BBjFx5kHEQ=)
                          3: 34352e342e3232362e302f32342d3234203d3e20323636303630.roa (hash: MZPNhB9qi7mIQv1q0d7rVh8LO8iKKZAVrcZhpuRCX6s=)
                          4: 40EA943B9928A2416D417FB39A392494904FD334.crl (hash: Q1a4+EoUjo91y0wZYSDcM+KufKL6uFkYh+YvtpKxrHk=)
                          5: 34352e342e3232362e302f32332d3233203d3e20323636303630.roa (hash: 7YsVQFDpbLOileNEYOdv5DEJvLmp13z3LBSTFq0iJVQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AsKsUNeAbwnhc3JQgUrgXZC9pF7W5dQMkS2ALZaXSSEa/0/40EA943B9928A2416D417FB39A392494904FD334.crl
                          rsync://rpki-repo.registro.br/repo/AsKsUNeAbwnhc3JQgUrgXZC9pF7W5dQMkS2ALZaXSSEa/0/40EA943B9928A2416D417FB39A392494904FD334.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40EA943B9928A2416D417FB39A392494904FD334.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 08:43:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:58:4b:76:1c:1f:5a:7b:83:b3:97:cc:a7:2c:51:06:0b:3b:47:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40EA943B9928A2416D417FB39A392494904FD334
        Validity
            Not Before: Dec 24 07:28:51 2025 GMT
            Not After : Dec 25 08:43:51 2025 GMT
        Subject: CN=57D856C5AE5063756124BDE1EFC5B8D7B7CA39DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2b:aa:35:56:62:cb:a4:51:5f:51:b3:e0:c1:
                    3a:2a:9d:ef:96:5a:39:9a:ad:f1:da:8d:87:3d:2c:
                    42:f7:7d:4b:2f:7a:f6:67:69:a0:c0:01:3f:9b:05:
                    8e:43:bb:35:d2:7f:e3:89:d1:91:03:06:48:27:fe:
                    d8:db:04:85:ef:ea:ca:20:71:79:c3:3d:52:07:e7:
                    59:9f:0c:bb:a6:fb:e4:5f:43:f3:81:9a:64:e5:9d:
                    e3:18:4c:e5:10:35:d5:59:9d:59:53:e8:f2:83:f1:
                    15:5c:a1:61:e4:4c:28:d7:fb:50:a6:6c:f2:28:ae:
                    3f:f6:f8:9f:65:da:4d:09:f7:97:88:29:c6:86:51:
                    06:2c:20:7b:2a:ef:b3:e2:de:1a:b6:bc:3f:0d:51:
                    58:d5:a7:90:d9:a1:6d:20:8f:33:1e:11:06:b6:82:
                    a5:c2:c9:e4:d4:0e:ea:cf:fa:51:98:e6:d2:11:19:
                    90:f4:78:5a:50:59:a9:ce:50:6b:e6:33:67:18:5b:
                    2e:12:dd:e0:c4:f3:07:1c:3e:fe:27:ea:82:90:68:
                    3f:19:e8:39:53:8f:29:47:74:73:4f:5c:61:29:98:
                    44:f4:50:00:e9:cb:e0:f5:e9:ee:5b:4c:4b:07:cf:
                    22:9c:03:8b:16:1b:a5:65:12:0a:51:10:12:83:0d:
                    af:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D8:56:C5:AE:50:63:75:61:24:BD:E1:EF:C5:B8:D7:B7:CA:39:DA
            X509v3 Authority Key Identifier:
                keyid:40:EA:94:3B:99:28:A2:41:6D:41:7F:B3:9A:39:24:94:90:4F:D3:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsKsUNeAbwnhc3JQgUrgXZC9pF7W5dQMkS2ALZaXSSEa/0/40EA943B9928A2416D417FB39A392494904FD334.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40EA943B9928A2416D417FB39A392494904FD334.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsKsUNeAbwnhc3JQgUrgXZC9pF7W5dQMkS2ALZaXSSEa/0/40EA943B9928A2416D417FB39A392494904FD334.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:24:f5:3b:5e:df:5b:fd:5f:4e:08:54:14:83:a7:d4:59:f3:
         21:3b:06:21:1f:d4:1c:08:02:b8:68:e5:7b:dd:fb:33:50:10:
         23:2d:2a:b4:6f:45:7b:ac:76:e4:44:12:6d:db:d5:6a:92:8e:
         42:53:31:bd:b3:d8:af:1f:f0:11:cd:ce:74:45:6b:c6:d6:3b:
         8f:36:63:e0:6e:37:e3:26:7f:3c:2f:0f:9b:b9:b1:b0:d5:d1:
         12:9d:c8:b4:42:1f:35:c3:d1:be:87:06:1a:e8:ac:19:6a:1d:
         0e:cb:3b:ed:d5:c6:14:df:7c:47:42:dd:a7:dd:ef:14:6e:09:
         ea:8e:70:55:d0:ae:90:6d:3b:6a:35:c2:ff:99:8d:5e:c1:8a:
         cc:25:a4:ef:86:78:6e:4f:cc:73:3e:12:00:9a:87:cb:8b:f3:
         57:88:0e:4c:76:50:d7:9e:90:38:3c:8f:5e:90:da:88:b3:84:
         62:12:11:ab:4e:6c:48:cc:23:fe:dd:04:fa:61:f7:d8:a6:f3:
         13:fe:c4:9d:4f:23:f7:91:f7:01:df:59:55:29:ef:76:66:20:
         b7:70:8f:49:78:bc:55:e8:92:d8:a6:c8:05:ed:af:f3:20:d5:
         1d:67:fc:fe:3f:81:e6:64:39:6a:c1:13:7b:8c:a5:20:87:81:
         14:94:d8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:27:26 2025 by rpki-client