This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.mft
File:                     7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.mft (raw, json)
Hash identifier:          lm1KjdU8hNFdrkPA3qP3QofgtZsmg8uhAh6KsWkwpQM=
Subject key identifier:   C7:8E:32:32:FD:82:52:2F:4F:BF:0F:23:48:F5:A0:D6:1A:C8:2D:FF
Authority key identifier: 71:62:F9:F3:C7:B8:AF:4A:D2:D8:31:3E:9D:00:B3:2A:E3:5D:30:23
Certificate issuer:       /CN=7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023
Certificate serial:       0C6AEF8C32A3E6D11BB7F35017F5B17582BF5890
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.mft
Manifest number:          47
Signing time:             Tue 23 Dec 2025 04:40:04 +0000
Manifest this update:     Tue 23 Dec 2025 04:35:04 +0000
Manifest next update:     Wed 24 Dec 2025 08:15:04 +0000
Files and hashes:         1: 34352e3138332e3133322e302f32322d3234203d3e20323637353031.roa (hash: MgiPJKjQ74ldpmf673lk0UClRYBtZCsAHjX15iwaiGU=)
                          2: 7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.crl (hash: kgsrKTvAvvmVpy0wTKI2OanVW/uewv4qvBWEgnSL+2E=)
                          3: 3230312e3138322e36342e302f32322d3234203d3e20323637353031.roa (hash: Cb9uBAF2EaOUHmrHAFVYmgpxWgVV9Rb8YyF72RVTEL8=)
                          4: 323830343a343237343a3a2f33322d3438203d3e20323637353031.roa (hash: gkg5WucXeB39IkBNzUJ/wROSzkjcCy2rjzLCNwKcOIE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.crl
                          rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 08:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:6a:ef:8c:32:a3:e6:d1:1b:b7:f3:50:17:f5:b1:75:82:bf:58:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023
        Validity
            Not Before: Dec 23 04:35:04 2025 GMT
            Not After : Dec 24 08:15:04 2025 GMT
        Subject: CN=C78E3232FD82522F4FBF0F2348F5A0D61AC82DFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a4:e8:07:a6:8d:08:b0:a9:31:55:28:d8:32:
                    65:9a:0d:58:bd:1c:33:97:a6:02:44:83:9e:b6:40:
                    c5:15:8a:d8:1d:7b:e1:ae:a6:1d:58:35:c0:b5:10:
                    7a:03:31:55:9e:75:2e:a1:4a:6c:7b:cd:52:81:d7:
                    fc:f7:22:9b:c7:dc:6b:4a:b5:4d:a0:8c:81:34:d3:
                    6e:19:8b:f2:9b:89:a3:e9:cf:2d:93:c1:e2:8e:de:
                    6f:26:b9:dc:af:41:f1:00:a0:96:d7:b7:0c:3e:ab:
                    3a:98:cb:fa:8b:50:a1:80:7c:8c:f0:b9:ff:86:d2:
                    bb:e6:c1:24:97:1f:03:65:0b:9d:b5:9f:50:01:15:
                    17:10:03:83:f6:91:e4:a9:6e:b2:8e:8e:7c:cf:1f:
                    cb:0f:d3:cc:52:f9:83:79:4d:ec:01:31:d1:f0:ff:
                    7b:99:4f:6f:ae:66:44:69:81:8b:f3:2d:a7:96:54:
                    e2:32:ce:b7:a7:95:f6:5a:56:d4:b7:a1:a1:cb:cb:
                    99:9d:e0:8d:3e:41:ad:5d:cf:46:7c:e6:7d:a1:e7:
                    a4:93:06:8b:56:4b:dc:0b:f9:43:7b:49:10:bf:00:
                    8a:62:22:c6:4c:82:8b:51:29:b1:d2:00:eb:b7:ce:
                    15:8a:08:2c:1e:10:58:cf:83:29:fb:6c:d3:8c:f7:
                    75:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:8E:32:32:FD:82:52:2F:4F:BF:0F:23:48:F5:A0:D6:1A:C8:2D:FF
            X509v3 Authority Key Identifier:
                keyid:71:62:F9:F3:C7:B8:AF:4A:D2:D8:31:3E:9D:00:B3:2A:E3:5D:30:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:86:37:6b:40:ec:22:2c:17:2e:54:f0:f7:08:a1:15:93:7a:
         83:6f:f4:22:bc:35:47:a4:b7:fe:86:29:19:c2:a2:f5:23:97:
         c1:88:2c:81:af:02:16:24:ef:73:8f:de:ca:08:51:bc:25:6a:
         53:4c:9e:23:67:1b:0d:05:84:62:cc:89:81:40:4f:e6:cd:9f:
         62:45:95:6f:42:24:9b:92:bd:88:67:af:5f:a9:28:a2:42:aa:
         ad:6b:e3:f7:f8:76:9b:fa:99:8c:5b:d7:85:71:78:a1:ca:b3:
         27:da:4d:8b:9d:c2:a8:bc:83:2e:f3:23:d8:e1:1e:43:0d:6a:
         b8:89:8e:a1:ef:56:cd:df:5e:45:3e:6e:d8:3b:c3:f1:a0:6e:
         00:9e:cd:6e:06:f4:d3:1e:79:12:cb:3f:bf:84:51:dc:36:b0:
         2a:44:38:37:e0:6e:95:94:14:68:6b:1e:93:6b:9d:eb:6e:4a:
         06:52:fd:08:cb:87:46:89:da:f6:57:e3:9b:05:d0:06:24:ae:
         33:32:d2:61:d6:6f:7a:1d:a5:e3:f1:1d:39:e1:83:0e:8f:1d:
         25:d3:95:ec:71:9d:a9:1a:af:2e:4b:31:f6:e1:14:0d:e5:a9:
         34:1d:56:d1:9b:a1:65:a9:8e:9e:42:90:e6:bc:02:d6:bc:ef:
         3b:82:be:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 11:02:51 2025 by rpki-client