This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.mft
File:                     7B463853EA4AC012BD9F3194CFA33AF32591DF0B.mft (raw, json)
Hash identifier:          MPQwt1h0MTIAisiFJzMbsjcXb+8SyUvnZtTkUS0Mb70=
Subject key identifier:   CE:18:18:BA:8E:58:6F:2F:81:D7:DE:D1:2B:DD:A3:C2:9B:35:F7:2B
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       417913D20684001811CFDAC2693E7FBBAA2C2A77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.mft
Manifest number:          0347
Signing time:             Mon 22 Dec 2025 07:20:20 +0000
Manifest this update:     Mon 22 Dec 2025 07:15:20 +0000
Manifest next update:     Tue 23 Dec 2025 08:27:20 +0000
Files and hashes:         1: 3139312e33362e3138342e302f32322d3234203d3e20323633333338.roa (hash: ON6FwyOzwbxdFFXfLWe7r/i1EwNyJZoD9zdaI0RosG4=)
                          2: 3139312e33362e3138342e302f32312d3231203d3e20323633333338.roa (hash: RIdJKeWuoF05Y1jlyVzMpiRaJSpasitmMqVcL0neQ1M=)
                          3: 3139312e33362e3138382e302f32322d3234203d3e20323633333338.roa (hash: XcVriwwcCTxY5V2Le+3H+rNTVd4QsGZxRWug08TuTkw=)
                          4: 323830343a313439343a3a2f33322d3334203d3e20323633333338.roa (hash: fPpmI1Dru50jxEQJzD8b/AjN3GfuHRGqK8jneCLY+TM=)
                          5: 7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl (hash: IqeAY3HebIMOZ4m6I1BUatquvv/2Pyd9G5UO6Vm0u3A=)
                          6: 3137302e37382e3234342e302f32322d3234203d3e20323633333338.roa (hash: OF1svCqwdBiEOqXCMpVt3vBWOQW+bybqxfXEwW02I8o=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl
                          rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 08:27:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:79:13:d2:06:84:00:18:11:cf:da:c2:69:3e:7f:bb:aa:2c:2a:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: Dec 22 07:15:20 2025 GMT
            Not After : Dec 23 08:27:20 2025 GMT
        Subject: CN=CE1818BA8E586F2F81D7DED12BDDA3C29B35F72B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:42:e4:4a:90:c5:39:89:fb:8d:78:d4:6f:4c:
                    21:93:f5:b9:7c:05:02:b5:7c:ce:fe:07:ab:e3:63:
                    da:3a:ff:76:59:87:c0:1b:68:b1:e1:54:ed:2b:f0:
                    8d:d1:88:e7:6b:2f:dd:10:1f:38:88:0d:f9:cc:e7:
                    18:2a:a4:6a:11:06:a6:ac:24:b6:14:55:de:c3:0e:
                    a4:ec:5a:01:49:aa:15:63:2c:7b:1f:b5:02:7c:0b:
                    db:e4:e2:b7:b7:76:a8:c0:48:78:9f:1d:3f:e7:c3:
                    8b:69:c5:e7:69:66:f8:d9:34:ab:4e:52:10:5b:f0:
                    eb:ca:d8:2e:9d:fd:54:7d:07:17:92:f1:8f:d9:fc:
                    6b:ad:70:0e:23:60:16:7f:b0:9d:ac:07:c8:7d:de:
                    5c:d6:a0:a8:75:a5:f2:dd:39:69:a3:98:ab:6a:91:
                    87:74:c7:50:33:ab:c8:30:16:9d:1d:ed:eb:5b:2e:
                    4a:b0:42:0d:86:f2:0a:e9:25:a9:8e:d1:2c:b3:e4:
                    ab:b9:85:7b:1b:82:0c:a8:87:f9:51:b2:11:d9:d7:
                    1f:16:8a:4f:5f:43:a1:25:98:e6:44:21:6b:b7:40:
                    61:44:a0:13:54:90:6e:24:ea:bb:17:13:d7:16:4e:
                    71:a3:4e:cc:4c:14:25:3e:b3:f7:78:d7:ba:c7:c3:
                    6d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:18:18:BA:8E:58:6F:2F:81:D7:DE:D1:2B:DD:A3:C2:9B:35:F7:2B
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:c0:86:07:0f:b5:de:07:3e:c9:49:34:76:88:c2:76:ca:23:
         20:73:3f:e2:0d:be:73:7a:2f:6e:e0:5d:1b:0f:39:bb:20:ba:
         e5:fb:53:c1:c0:7f:5c:d6:7a:dd:ab:76:f9:42:55:6c:fb:aa:
         fe:03:d8:d7:39:2c:9f:ca:e7:15:51:44:6c:ad:2a:ef:b9:fa:
         c3:25:19:d4:a1:7f:d0:cb:44:ae:aa:ee:10:1a:42:76:a9:0c:
         c6:1b:5e:34:86:51:6a:70:30:ea:37:6c:7b:55:b1:1f:50:bd:
         a5:d2:31:94:09:2d:22:cb:92:1b:f3:a2:98:19:1c:7e:0d:8b:
         75:91:b1:87:50:c9:74:3a:a7:6d:36:ea:35:e5:bc:bc:c7:45:
         e7:ae:b0:47:80:a2:91:50:57:5d:7f:1b:7c:4e:8f:70:90:17:
         7a:23:20:f5:4f:91:5a:6f:3c:93:3b:7d:38:b2:b6:df:f5:2b:
         d7:4e:ea:1d:73:1b:2e:61:61:d8:a7:75:24:a0:2b:85:f6:eb:
         6d:e8:e8:4f:ce:f8:94:42:b5:14:dc:d1:5d:b0:c5:a9:94:4c:
         40:c7:c1:25:00:f9:7a:a5:be:cc:ca:40:91:c8:a1:16:fe:26:
         0e:ca:f4:03:b8:0d:b1:04:c8:5b:7f:e9:11:2a:33:71:df:7d:
         66:fb:55:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 03:19:37 2025 by rpki-client