This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/B4EnzVr3K4fda7htrHXxa3zCuJZhj6s4akdN2kjNEgTg/0/01E324E0856935E5A923E1963BBE18F5274878DD.mft
File:                     01E324E0856935E5A923E1963BBE18F5274878DD.mft (raw, json)
Hash identifier:          74EqTzEwZp2qOsmKuakwUBlmzkk6sOHgkrOl4mscHH0=
Subject key identifier:   12:7C:67:99:FF:A5:26:BB:36:C6:26:E4:2E:E2:59:1A:99:17:17:04
Authority key identifier: 01:E3:24:E0:85:69:35:E5:A9:23:E1:96:3B:BE:18:F5:27:48:78:DD
Certificate issuer:       /CN=01E324E0856935E5A923E1963BBE18F5274878DD
Certificate serial:       1CF5A0EEEEDA3977A47BAC28FA2300403271EA20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01E324E0856935E5A923E1963BBE18F5274878DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4EnzVr3K4fda7htrHXxa3zCuJZhj6s4akdN2kjNEgTg/0/01E324E0856935E5A923E1963BBE18F5274878DD.mft
Manifest number:          0119
Signing time:             Tue 23 Dec 2025 02:29:10 +0000
Manifest this update:     Tue 23 Dec 2025 02:24:10 +0000
Manifest next update:     Wed 24 Dec 2025 04:28:10 +0000
Files and hashes:         1: 01E324E0856935E5A923E1963BBE18F5274878DD.crl (hash: 4SZr18wgecNLx3suYKcCH4kIapCGBFpjbn7l+3JU39k=)
                          2: 34352e3136362e3232362e302f32332d3233203d3e20323733353333.roa (hash: bKUANUEveP5uPf0qXFTnYAskMZEEUBbO2ylFtpnSd0E=)
                          3: 34352e3136362e3232372e302f32342d3234203d3e20323733353333.roa (hash: 5NKB6450V4DKuohSLNhNXRq6Kn2Lu73aCxUUt55zPac=)
                          4: 323830343a393032343a3a2f33322d3332203d3e20323733353333.roa (hash: 7Cg6co7ivqH1e/Pv0axGJtiPyZLQ3w/rB/DWM9Awdy0=)
                          5: 323830343a393032343a3a2f34302d3430203d3e20323733353333.roa (hash: fNopnZH6Gojj5olVy/Ug9t0w9887khojp8Hnh0a/pno=)
                          6: 34352e3136362e3232362e302f32342d3234203d3e20323733353333.roa (hash: beQ49c2NMhSZa7vgUmtNXegdiwktGYYWFK5YtwAWjfs=)
                          7: 323830343a393032343a3130303a3a2f34302d3430203d3e20323733353333.roa (hash: BQh1h/FpGvgiIK8XQUKJMOoLKnSYHtMpK7BxTi5/A/c=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B4EnzVr3K4fda7htrHXxa3zCuJZhj6s4akdN2kjNEgTg/0/01E324E0856935E5A923E1963BBE18F5274878DD.crl
                          rsync://rpki-repo.registro.br/repo/B4EnzVr3K4fda7htrHXxa3zCuJZhj6s4akdN2kjNEgTg/0/01E324E0856935E5A923E1963BBE18F5274878DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01E324E0856935E5A923E1963BBE18F5274878DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 04:28:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:f5:a0:ee:ee:da:39:77:a4:7b:ac:28:fa:23:00:40:32:71:ea:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01E324E0856935E5A923E1963BBE18F5274878DD
        Validity
            Not Before: Dec 23 02:24:10 2025 GMT
            Not After : Dec 24 04:28:10 2025 GMT
        Subject: CN=127C6799FFA526BB36C626E42EE2591A99171704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c6:50:e6:64:af:b6:be:a2:70:ea:58:ec:4f:
                    bf:26:b3:95:a9:9b:46:5c:af:42:f4:c6:bc:22:db:
                    0f:b6:f5:d7:51:9a:f1:fb:72:3b:9e:a3:d1:d0:c4:
                    cb:11:8f:c7:c5:8e:e2:aa:52:ff:59:5c:1a:18:01:
                    e0:cc:d8:a0:23:2a:bf:1b:3a:6f:8a:ea:58:a8:c8:
                    cc:c0:05:c5:dc:34:33:02:a8:24:fc:0f:69:0d:6f:
                    30:9f:6e:91:31:5d:eb:0c:cf:2e:c0:e7:f0:dd:7f:
                    3c:94:d6:97:1d:80:ca:05:3a:46:9b:47:fb:6b:ea:
                    f6:fe:60:0a:38:01:2c:5b:e9:39:f2:0e:4e:96:66:
                    5e:9e:f0:ce:b2:5d:07:13:29:ca:68:59:04:a5:43:
                    a0:5c:33:79:90:29:d2:aa:5b:16:6c:aa:14:42:54:
                    fe:39:0f:68:0d:c1:56:3e:a6:39:b8:d1:00:a0:ad:
                    09:1d:d2:a4:e8:3c:95:36:2b:4d:60:e2:30:e5:50:
                    fc:97:b0:8f:b7:f3:0b:5c:8d:ed:51:af:dd:27:7b:
                    69:34:1b:a6:df:ee:38:fc:fd:18:95:04:51:20:f9:
                    7d:81:63:b4:06:d4:0f:8d:0d:34:3f:79:64:c8:31:
                    97:de:d9:9d:3b:71:48:95:3d:be:dd:02:8a:ee:60:
                    c2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:7C:67:99:FF:A5:26:BB:36:C6:26:E4:2E:E2:59:1A:99:17:17:04
            X509v3 Authority Key Identifier:
                keyid:01:E3:24:E0:85:69:35:E5:A9:23:E1:96:3B:BE:18:F5:27:48:78:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4EnzVr3K4fda7htrHXxa3zCuJZhj6s4akdN2kjNEgTg/0/01E324E0856935E5A923E1963BBE18F5274878DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01E324E0856935E5A923E1963BBE18F5274878DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4EnzVr3K4fda7htrHXxa3zCuJZhj6s4akdN2kjNEgTg/0/01E324E0856935E5A923E1963BBE18F5274878DD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:a5:fc:e4:7a:17:0b:a7:50:91:25:c7:48:d8:42:8b:54:db:
         64:fc:29:36:29:6e:ef:20:d7:e4:25:8e:77:92:6a:00:af:93:
         af:55:87:55:33:64:7b:a7:2c:8d:0b:d7:fa:91:a2:9e:8c:6d:
         35:0a:38:7a:73:2f:7d:21:f8:34:d3:4b:e7:c1:1f:8e:72:e7:
         37:76:ce:16:9a:ff:f8:0b:1e:36:43:e8:e4:30:a4:fc:b0:d0:
         a9:fa:05:77:50:fc:f7:d0:a5:a7:22:be:a2:cf:08:08:32:29:
         61:49:10:90:1d:26:27:bc:94:69:b5:3e:2e:15:a1:d2:c1:90:
         03:d5:ca:81:d9:42:21:4f:60:cf:3e:7a:21:ae:40:47:28:73:
         08:79:89:55:c1:77:d4:ee:de:71:eb:5a:16:c4:d9:52:e0:e0:
         a7:b3:6a:c2:92:44:7e:f4:2d:64:38:02:52:87:4c:a4:71:d0:
         5a:60:d8:10:27:0e:d4:95:e1:93:61:22:b0:ba:2b:02:1a:e8:
         8f:1f:a8:3d:ed:16:1b:c8:e0:d6:97:36:e1:05:4c:99:f8:04:
         25:97:e2:6e:6d:5f:06:72:20:5e:69:f7:71:ac:30:bb:2a:41:
         a3:cd:40:1e:a2:94:b0:4a:d4:80:66:3c:4b:22:eb:84:0b:f7:
         8c:a0:80:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 08:28:04 2025 by rpki-client