This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/4F13601ED15DE77633F89012A7D2AD0E725C8891.mft
File:                     4F13601ED15DE77633F89012A7D2AD0E725C8891.mft (raw, json)
Hash identifier:          8HvllKtEH0zqi290gCVWiiObT/syExX1Jw9qxfBZM5A=
Subject key identifier:   8C:A2:0E:CD:3E:13:D4:91:13:C7:44:78:07:36:EA:74:56:EE:5A:85
Authority key identifier: 4F:13:60:1E:D1:5D:E7:76:33:F8:90:12:A7:D2:AD:0E:72:5C:88:91
Certificate issuer:       /CN=4F13601ED15DE77633F89012A7D2AD0E725C8891
Certificate serial:       30658B30BE6FFAD2669E803AD3EDF0B69A68C3BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F13601ED15DE77633F89012A7D2AD0E725C8891.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/4F13601ED15DE77633F89012A7D2AD0E725C8891.mft
Manifest number:          02D6
Signing time:             Thu 18 Dec 2025 20:41:39 +0000
Manifest this update:     Thu 18 Dec 2025 20:36:39 +0000
Manifest next update:     Fri 19 Dec 2025 23:03:39 +0000
Files and hashes:         1: 4F13601ED15DE77633F89012A7D2AD0E725C8891.crl (hash: 1sQSBEa8HG2kOa9igkmSXnkYg6BvMqX276xtyGcjlfg=)
                          2: 323830343a386662633a3a2f33322d313238203d3e20323733353038.roa (hash: PgnAjQjtCXsOdg7BLRWirXsf07CcpSkOYKeceD7ZWuo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/4F13601ED15DE77633F89012A7D2AD0E725C8891.crl
                          rsync://rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/4F13601ED15DE77633F89012A7D2AD0E725C8891.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F13601ED15DE77633F89012A7D2AD0E725C8891.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 23:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:65:8b:30:be:6f:fa:d2:66:9e:80:3a:d3:ed:f0:b6:9a:68:c3:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F13601ED15DE77633F89012A7D2AD0E725C8891
        Validity
            Not Before: Dec 18 20:36:39 2025 GMT
            Not After : Dec 19 23:03:39 2025 GMT
        Subject: CN=8CA20ECD3E13D49113C744780736EA7456EE5A85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:15:4f:60:ef:f0:c0:85:94:f2:55:e2:c5:88:
                    89:82:60:a0:20:2d:63:9c:61:bf:7b:62:73:e1:fd:
                    5a:e4:54:03:d2:19:2c:65:38:b9:f1:26:be:3b:66:
                    8f:04:71:b9:63:68:93:bc:e8:9c:b7:20:59:e1:07:
                    cd:31:cb:9a:71:77:dc:a4:4e:5d:60:f6:e2:68:45:
                    fe:26:72:72:d3:6b:cf:32:73:da:8b:eb:4e:62:94:
                    4c:dc:6a:a6:8f:aa:a5:4a:dd:c6:3d:14:24:03:67:
                    29:f9:5c:70:0a:0d:39:fb:9b:9d:d7:0e:c5:c2:63:
                    55:da:99:18:70:61:55:b7:0e:e1:bf:c3:50:cc:b9:
                    83:29:e9:aa:ef:12:d2:f9:2b:ed:61:c5:f1:37:a6:
                    87:3f:b0:f2:36:d2:ed:5c:68:70:d9:a3:7b:50:da:
                    87:3e:51:93:f7:8c:66:2b:47:56:42:eb:ff:35:a1:
                    b7:90:cb:bd:ad:88:1e:b6:b8:2c:d6:07:59:46:3c:
                    f6:8b:98:8e:91:b1:20:96:32:b3:7d:b1:09:7d:f7:
                    9f:9e:c0:a8:99:f0:79:29:7d:0c:d6:78:81:21:7a:
                    a2:8d:f8:15:80:43:66:ec:46:37:9d:d9:dd:86:d7:
                    26:1b:20:65:fa:9d:15:3a:12:45:67:3e:54:a7:d7:
                    c3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A2:0E:CD:3E:13:D4:91:13:C7:44:78:07:36:EA:74:56:EE:5A:85
            X509v3 Authority Key Identifier:
                keyid:4F:13:60:1E:D1:5D:E7:76:33:F8:90:12:A7:D2:AD:0E:72:5C:88:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/4F13601ED15DE77633F89012A7D2AD0E725C8891.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F13601ED15DE77633F89012A7D2AD0E725C8891.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/4F13601ED15DE77633F89012A7D2AD0E725C8891.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:ac:6c:ec:27:e6:96:83:a5:09:e3:28:d8:ce:f5:bf:36:2b:
         57:19:c9:ba:6e:74:12:97:72:ef:70:b6:b2:a4:f7:75:c7:99:
         d9:36:35:f2:33:72:80:c9:c0:c3:bf:a8:47:bb:35:f2:97:b1:
         22:08:a1:57:b8:45:b0:bc:29:cf:09:68:ff:a3:a4:b8:a8:86:
         fe:7d:2f:9a:b9:62:ee:ce:97:6e:19:d2:06:8e:f1:82:b6:74:
         8d:b5:f1:b2:6c:3a:d8:57:2a:f4:cb:22:9b:62:ad:65:1b:2f:
         1a:c1:ad:c1:28:d8:c8:4e:87:f5:98:f6:89:a8:c4:1c:d9:cd:
         ad:55:ea:81:0e:24:4d:bf:60:34:1d:f6:13:16:ef:c6:fe:ed:
         ac:1a:c4:52:1f:de:f6:a6:5f:6f:4f:96:a6:3e:f5:21:4f:be:
         80:f1:4e:5f:71:21:04:ac:d6:a6:19:04:7e:01:2a:5d:61:30:
         0d:be:bf:17:33:f6:df:d6:5b:94:d2:89:a2:ce:6b:66:f4:d7:
         09:3a:14:0b:54:59:18:02:af:b6:5a:0f:a6:55:28:f0:15:4b:
         e6:55:ac:e1:b4:01:44:e2:5c:05:d9:f1:d2:48:60:a7:3d:72:
         56:9a:07:f8:6f:9a:0b:da:0d:fc:83:44:42:33:b4:3e:00:32:
         17:59:85:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:25:11 2025 by rpki-client