This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.mft
File:                     721FDEF0EC64EC9ECB8963D4279535836A0A16EB.mft (raw, json)
Hash identifier:          OEdXRk9U9bYKEnijOqlgP69DgLnVtoRep5J+Y7msa8c=
Subject key identifier:   75:BE:31:7D:D8:CD:1F:91:A0:F2:47:2F:A7:5D:56:66:B3:F3:2C:AA
Authority key identifier: 72:1F:DE:F0:EC:64:EC:9E:CB:89:63:D4:27:95:35:83:6A:0A:16:EB
Certificate issuer:       /CN=721FDEF0EC64EC9ECB8963D4279535836A0A16EB
Certificate serial:       1AF4E8663537FE127BD971CC566EBDC9A606F555
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.mft
Manifest number:          4B
Signing time:             Fri 19 Dec 2025 05:23:12 +0000
Manifest this update:     Fri 19 Dec 2025 05:18:12 +0000
Manifest next update:     Sat 20 Dec 2025 06:04:12 +0000
Files and hashes:         1: 34352e3137372e3138342e302f32322d3332203d3e20323638393933.roa (hash: 1fsdSmR4TdjbL1xr7Loe4KWvKXQMJAqt1mSxZ8Jgpyo=)
                          2: 721FDEF0EC64EC9ECB8963D4279535836A0A16EB.crl (hash: B/EbQI5dkqqY+7JxKJUCIXmMFN6aDwARmGS7/dQ3AqI=)
                          3: 323830343a356463633a3a2f33322d313238203d3e20323638393933.roa (hash: 8+Ghan3SgXuTsYmRhspkbGki+wRJrZx9AdfY1l2WwTE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.crl
                          rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 06:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f4:e8:66:35:37:fe:12:7b:d9:71:cc:56:6e:bd:c9:a6:06:f5:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=721FDEF0EC64EC9ECB8963D4279535836A0A16EB
        Validity
            Not Before: Dec 19 05:18:12 2025 GMT
            Not After : Dec 20 06:04:12 2025 GMT
        Subject: CN=75BE317DD8CD1F91A0F2472FA75D5666B3F32CAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d2:ac:d6:c2:e1:87:5f:c9:1a:fc:3c:7d:8c:
                    3d:91:87:4f:21:00:2e:66:a4:d7:11:ae:b7:ba:42:
                    8c:a7:18:00:93:8a:76:7f:a5:20:ad:a0:80:fd:48:
                    3f:e1:fc:ca:0c:bb:e8:9e:b6:d3:35:07:1e:b1:41:
                    c6:a1:bc:af:0d:81:10:62:12:f0:d9:91:aa:c2:c5:
                    ad:40:b3:c5:b9:e2:14:fd:5c:bc:41:70:51:42:89:
                    d7:91:aa:d8:27:8c:23:5d:c1:3c:7a:f2:da:71:ea:
                    c8:49:94:6f:cb:05:6a:6f:10:dd:12:71:17:23:ef:
                    4b:88:d9:18:82:45:b5:75:42:dd:b6:1f:33:68:7c:
                    44:12:fc:19:f2:24:74:e9:90:cc:5f:bd:10:92:8e:
                    af:93:e1:72:12:2f:05:a0:58:0b:8d:0a:7e:aa:7c:
                    c9:2c:01:ba:6b:9c:4a:c6:b9:ba:bc:44:58:f9:c6:
                    92:99:a3:ab:57:ea:a2:9b:fc:b9:9a:c1:57:12:2a:
                    be:e3:cc:f0:af:a5:01:74:5b:d4:63:4f:11:a9:8f:
                    f1:86:fe:95:0c:0e:29:5a:94:ce:d8:49:34:21:4d:
                    db:f5:ef:55:2f:6c:90:4f:6c:e4:ce:44:f2:71:d5:
                    fe:af:ca:02:6a:a9:63:dc:4f:49:e1:b9:e0:78:3a:
                    24:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BE:31:7D:D8:CD:1F:91:A0:F2:47:2F:A7:5D:56:66:B3:F3:2C:AA
            X509v3 Authority Key Identifier:
                keyid:72:1F:DE:F0:EC:64:EC:9E:CB:89:63:D4:27:95:35:83:6A:0A:16:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:9b:09:93:d4:d6:9d:5d:0c:26:dc:ee:43:1f:30:ff:a2:6b:
         b6:04:9d:26:c5:09:16:ab:2a:14:65:93:a8:55:83:31:c8:83:
         05:5a:e5:b1:c4:86:59:51:56:52:40:c1:be:9e:ed:64:81:e9:
         50:ee:dc:4e:bb:61:d5:86:e6:d8:c8:09:c1:4a:62:ee:e1:fd:
         23:59:52:51:08:87:0c:86:03:33:de:a3:d6:44:1b:2e:28:52:
         cb:43:24:15:af:45:de:1c:bf:20:f4:2f:1b:17:9f:1a:0b:0d:
         8b:71:0a:c3:48:f4:f2:9e:3c:0a:06:f7:91:30:12:4a:49:8a:
         1d:7e:4c:93:fd:c0:ac:b0:61:79:67:de:53:30:d8:d8:c0:b2:
         d5:eb:e4:f5:7b:a0:9a:e4:e7:70:1e:c0:b8:19:66:87:38:de:
         24:75:4b:75:0d:70:a0:3f:88:5a:d3:11:e5:2b:55:2e:c9:16:
         9b:63:a9:63:c2:b4:2e:1f:82:c2:5f:79:75:af:27:d2:77:bd:
         3e:66:df:b4:8d:50:90:c9:84:db:42:68:f7:bc:88:4e:51:51:
         99:85:99:f1:6d:5b:95:b8:cd:66:28:ec:32:ab:d8:f6:e5:d4:
         05:52:fb:13:6e:c6:19:86:d5:30:5d:7f:db:e1:00:ed:c7:34:
         42:5a:61:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 16:57:06 2025 by rpki-client