This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.mft
File:                     FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.mft (raw, json)
Hash identifier:          xQlCMh+z+vP5d2jC1lXPnoTYE6p/6Ewr4JgP1MskrHo=
Subject key identifier:   41:5E:5A:22:08:D7:31:62:87:CD:CA:D3:47:EC:F1:B4:FB:D1:11:E6
Authority key identifier: FF:4A:CB:08:28:10:1F:FD:6F:91:BF:BC:FB:F0:5E:E9:8F:2F:99:22
Certificate issuer:       /CN=FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922
Certificate serial:       2D172555845327D3D8B1BE1D3AC248C3E7964656
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.mft
Manifest number:          020E
Signing time:             Fri 19 Dec 2025 07:02:03 +0000
Manifest this update:     Fri 19 Dec 2025 06:57:03 +0000
Manifest next update:     Sat 20 Dec 2025 10:04:03 +0000
Files and hashes:         1: FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.crl (hash: XLmI7LLGmu/APEtazgIodR24w9qkcieKHik7Af9RBEU=)
                          2: 3136342e3136332e39362e302f32322d3234203d3e20323635393439.roa (hash: jw85MTe3oGlWpAv3CMkQxdk6lbR+gevHpittCauTbjo=)
                          3: 323830343a343034383a633030303a3a2f34382d3438203d3e20323635393439.roa (hash: yNWsDSXI0ojc83gWzcz/ezCfrNQSleAUCqeINfZRGUI=)
                          4: 323830343a343034383a343131303a3a2f34342d3434203d3e20323635393439.roa (hash: hB6GZrapWVT+nZyDAtSBayPQVOJQA3CPhxdpm15MnK0=)
                          5: 323830343a343034383a3a2f33322d3332203d3e20323635393439.roa (hash: PJVFr/8LbXIOpb6FEWfNrqUpXzqDkNqYCUBShsnPL+U=)
                          6: 323830343a343034383a343130303a3a2f34342d3434203d3e20323635393439.roa (hash: g8l0/tSjcKhIaUC0SlVVhkO3pLYOBU75RScol8wWaJ8=)
                          7: 323830343a343034383a343139303a3a2f34342d3434203d3e20323635393439.roa (hash: mFBvQ9U6S9ziGHYVsmFoKj+ZF8wnQ9qJb6vsgKrGp8c=)
                          8: 323830343a343034383a343138303a3a2f34342d3434203d3e20323635393439.roa (hash: 8pRzyt9oKL936Lq1pXfOXg0CrOSFWQSd7jQBgXRtGTs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.crl
                          rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 10:04:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:17:25:55:84:53:27:d3:d8:b1:be:1d:3a:c2:48:c3:e7:96:46:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922
        Validity
            Not Before: Dec 19 06:57:03 2025 GMT
            Not After : Dec 20 10:04:03 2025 GMT
        Subject: CN=415E5A2208D7316287CDCAD347ECF1B4FBD111E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2c:ff:ba:9c:f3:68:e1:30:b4:a5:31:2c:9c:
                    f7:fe:ed:b5:de:ef:56:fd:e8:33:97:e1:7a:cb:c4:
                    7e:1e:65:51:8f:1b:23:78:45:4b:80:41:8d:06:05:
                    cb:63:12:ee:bc:f2:3a:82:e9:ca:1c:11:90:5a:33:
                    c1:12:ba:f5:8a:5a:56:4e:1a:7c:fb:5c:54:db:68:
                    31:9a:44:13:60:1a:39:c8:17:c1:5d:2f:91:97:e1:
                    52:7c:59:07:90:ef:5c:1b:ba:cb:1d:86:c1:4f:a3:
                    4a:9d:6b:da:3a:71:44:9b:c7:44:93:aa:17:d6:cf:
                    ce:8f:4b:96:7d:27:c8:1a:76:e4:6b:21:da:27:c7:
                    50:a8:3a:2e:b2:e4:37:27:2f:76:86:7d:d8:d9:70:
                    ef:95:75:37:33:ee:ef:df:f6:d4:fb:56:b2:a8:07:
                    21:bd:aa:a8:ed:c8:2b:c1:98:f3:0c:60:9f:89:fa:
                    9c:11:fc:13:9c:52:cc:66:5d:84:68:55:ab:2d:4c:
                    c3:d2:15:d8:89:5a:ea:b2:5c:f8:3d:b9:bc:45:3b:
                    9e:78:32:d8:bd:c8:78:9d:20:1a:66:e3:3d:40:2d:
                    5e:ed:05:ea:9a:ab:fb:5d:15:15:6e:6f:70:a4:15:
                    46:a3:b6:cf:1e:5b:19:77:23:50:82:ca:5a:67:da:
                    e6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5E:5A:22:08:D7:31:62:87:CD:CA:D3:47:EC:F1:B4:FB:D1:11:E6
            X509v3 Authority Key Identifier:
                keyid:FF:4A:CB:08:28:10:1F:FD:6F:91:BF:BC:FB:F0:5E:E9:8F:2F:99:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:83:de:c7:d7:59:ee:ba:7a:35:d4:5a:61:6d:ac:0e:0d:ae:
         cb:d5:f7:f3:62:11:34:61:f0:d1:11:eb:56:23:90:7c:50:eb:
         9b:7e:86:80:03:bf:bd:b6:0b:38:62:ef:80:4e:b3:d5:b4:0e:
         16:18:17:59:f0:50:54:2c:71:e3:24:10:25:01:fe:2c:cb:8f:
         e5:1b:ed:14:44:e3:54:a4:3e:de:75:f6:0e:e5:58:06:35:11:
         b7:c8:52:e2:f2:e4:85:f2:25:84:94:f5:68:91:7a:6a:5f:ae:
         73:a8:ef:b2:3d:85:ab:47:a7:fc:30:f0:cf:c5:2c:5a:b4:04:
         7d:88:ec:84:d8:f4:c1:9a:f7:a8:5d:46:58:0f:d9:e9:ae:28:
         2b:1a:e0:36:63:ea:0c:a4:d0:16:69:f3:b7:28:43:c8:73:c5:
         3a:ff:aa:98:bb:20:a8:63:5f:7c:b1:d0:0c:1e:24:60:6e:f2:
         d0:66:b1:02:e0:3c:0f:eb:f8:d5:e5:b5:01:63:ab:5d:c3:09:
         47:67:7d:01:fa:29:91:22:fc:90:ea:9d:d8:5f:4a:95:21:d3:
         33:d5:24:f2:38:01:29:90:bb:ed:4e:57:db:d0:56:55:21:a0:
         8d:ae:00:fe:c7:50:f3:34:c3:a0:6e:42:36:16:af:09:e4:d6:
         9a:5f:3d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:58:16 2025 by rpki-client