This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CanptWuwGq58XnR4ZqXEVoSgDzWmkikjjTrfJgfNNvpN/0/07AB5BF703FA8CCB0F6475B5C92CCD05F92C882D.mft
File:                     07AB5BF703FA8CCB0F6475B5C92CCD05F92C882D.mft (raw, json)
Hash identifier:          Dd2QiblK72Yu9Viripv4gncGQNfqERXrinPShdnZnPk=
Subject key identifier:   36:B2:36:5F:1E:1C:5B:B5:D8:7E:75:27:4E:19:45:58:9E:7E:8C:16
Authority key identifier: 07:AB:5B:F7:03:FA:8C:CB:0F:64:75:B5:C9:2C:CD:05:F9:2C:88:2D
Certificate issuer:       /CN=07AB5BF703FA8CCB0F6475B5C92CCD05F92C882D
Certificate serial:       48EC966CBA632A98A7F1F761E3EA720AAE5121D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07AB5BF703FA8CCB0F6475B5C92CCD05F92C882D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CanptWuwGq58XnR4ZqXEVoSgDzWmkikjjTrfJgfNNvpN/0/07AB5BF703FA8CCB0F6475B5C92CCD05F92C882D.mft
Manifest number:          A8
Signing time:             Tue 23 Dec 2025 23:28:19 +0000
Manifest this update:     Tue 23 Dec 2025 23:23:19 +0000
Manifest next update:     Thu 25 Dec 2025 01:06:19 +0000
Files and hashes:         1: 323830343a326138633a3a2f33322d313238203d3e20323634303738.roa (hash: Hx489dbw0xBKHvFEVEJjZMcl6oVuFF1lFEMMSNPFpPI=)
                          2: 07AB5BF703FA8CCB0F6475B5C92CCD05F92C882D.crl (hash: FdeeBhmlYFVFbfG9+pN/MDLhkwpzsnKYxg2PQ4BdZ3o=)
                          3: 3134332e3133372e3133362e302f32322d3332203d3e20323634303738.roa (hash: IKm+1/HRMkIWcW5YzWy+gYhrmELSqZDrtkSproMJf5c=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CanptWuwGq58XnR4ZqXEVoSgDzWmkikjjTrfJgfNNvpN/0/07AB5BF703FA8CCB0F6475B5C92CCD05F92C882D.crl
                          rsync://rpki-repo.registro.br/repo/CanptWuwGq58XnR4ZqXEVoSgDzWmkikjjTrfJgfNNvpN/0/07AB5BF703FA8CCB0F6475B5C92CCD05F92C882D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07AB5BF703FA8CCB0F6475B5C92CCD05F92C882D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 01:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ec:96:6c:ba:63:2a:98:a7:f1:f7:61:e3:ea:72:0a:ae:51:21:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07AB5BF703FA8CCB0F6475B5C92CCD05F92C882D
        Validity
            Not Before: Dec 23 23:23:19 2025 GMT
            Not After : Dec 25 01:06:19 2025 GMT
        Subject: CN=36B2365F1E1C5BB5D87E75274E1945589E7E8C16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:50:6a:8e:fd:f8:3d:fe:d5:f1:0f:05:00:12:
                    54:9d:ca:d6:ba:e3:02:97:03:2a:a4:53:75:9e:94:
                    76:f8:42:c0:21:54:0a:39:1f:d4:bc:41:2d:9a:65:
                    fa:bc:cc:6f:5f:62:80:54:2f:7d:34:02:eb:ab:ec:
                    a3:eb:f4:44:fa:2b:cf:8e:1d:85:7c:d5:3e:f5:e6:
                    bc:ca:b8:32:bc:64:03:4b:bd:00:6f:51:70:37:82:
                    87:86:9c:21:f8:66:d1:46:3f:d7:b7:4a:71:7e:b0:
                    65:7d:48:4a:39:2b:50:ec:b7:f4:b7:cd:de:cd:05:
                    a8:ea:b9:f6:29:79:19:94:73:1d:6e:d9:93:54:ef:
                    6a:2f:fd:8a:d0:90:53:a4:8a:7f:a1:42:bb:a8:eb:
                    bf:1c:dc:fa:ea:a7:54:4c:63:9f:29:30:76:b1:5d:
                    7b:3a:84:54:f8:f4:a5:c6:63:4d:d6:c3:f3:59:e8:
                    c7:5d:44:76:cd:c6:f7:0c:53:a3:6f:0a:18:b8:7c:
                    c6:62:b8:53:09:30:c0:c5:ad:d9:11:08:e4:e8:cd:
                    53:dd:6b:26:5c:f3:3e:94:a4:9c:9e:59:27:b8:ad:
                    eb:80:90:e8:b3:8c:1b:5a:3c:ae:a6:33:2b:a5:ed:
                    bb:fe:2a:12:cb:e9:1d:66:78:d6:13:85:c6:fb:11:
                    9f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B2:36:5F:1E:1C:5B:B5:D8:7E:75:27:4E:19:45:58:9E:7E:8C:16
            X509v3 Authority Key Identifier:
                keyid:07:AB:5B:F7:03:FA:8C:CB:0F:64:75:B5:C9:2C:CD:05:F9:2C:88:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CanptWuwGq58XnR4ZqXEVoSgDzWmkikjjTrfJgfNNvpN/0/07AB5BF703FA8CCB0F6475B5C92CCD05F92C882D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07AB5BF703FA8CCB0F6475B5C92CCD05F92C882D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CanptWuwGq58XnR4ZqXEVoSgDzWmkikjjTrfJgfNNvpN/0/07AB5BF703FA8CCB0F6475B5C92CCD05F92C882D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:b5:d0:83:3e:c8:fc:e1:46:db:4c:c2:06:ca:1d:fe:10:c3:
         1f:62:d8:f0:ef:78:9c:17:34:e6:c1:60:47:f4:23:49:32:23:
         e4:34:ab:5a:64:7a:45:6d:c0:0e:9e:e1:21:fa:dd:6e:74:ed:
         f1:ed:38:9d:67:8c:cb:f7:99:43:f8:ca:d2:b9:ac:f7:fa:9e:
         cd:72:27:87:cf:54:8f:f8:9c:c3:a1:e7:77:26:23:02:e2:2d:
         df:cd:74:f1:16:64:1c:8d:4c:26:41:d9:e3:64:59:00:3a:d2:
         35:2a:0e:35:53:b0:f1:a1:e4:c1:bf:74:42:51:11:9e:39:bf:
         cd:ec:9e:01:92:dd:35:2b:25:8f:d0:db:d5:e7:35:d6:58:ca:
         e8:c4:f3:b5:5c:bb:1f:5e:57:05:9c:65:73:38:69:4d:70:6a:
         1d:95:b1:bc:21:b5:a9:f8:1a:5a:e9:67:e1:c2:8e:bc:8c:f9:
         47:6a:48:fb:60:f7:45:48:87:7c:84:01:0c:56:7f:bd:f5:b2:
         9b:7f:5e:68:00:70:47:3f:0c:54:a1:e8:3f:0f:fc:00:47:2f:
         e9:68:b7:f1:c4:e7:a6:87:0d:9c:3e:3f:85:cc:0f:d9:e5:8a:
         6c:e9:de:4b:73:79:8e:07:88:c5:8b:c4:1c:c9:fe:79:82:d8:
         4c:2e:bd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:16:52 2025 by rpki-client