This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DLDcuf35Yg78CQGCsrd7qHxa6dkRjokLb1nNKrx9SuSR/0/E4B445687C5FB9BC74E73FA432C723FEADB41DBE.mft
File:                     E4B445687C5FB9BC74E73FA432C723FEADB41DBE.mft (raw, json)
Hash identifier:          Pek3yOVKXBSYzWQK3RhCzMqDnGIiPvIT+qDFfHcVp9E=
Subject key identifier:   9C:88:CF:5F:28:77:9A:47:F1:67:A3:2C:85:CF:1D:19:C0:8B:C9:D4
Authority key identifier: E4:B4:45:68:7C:5F:B9:BC:74:E7:3F:A4:32:C7:23:FE:AD:B4:1D:BE
Certificate issuer:       /CN=E4B445687C5FB9BC74E73FA432C723FEADB41DBE
Certificate serial:       23F2037783F9F40D0CEE7FB475966F85028F0E0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B445687C5FB9BC74E73FA432C723FEADB41DBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DLDcuf35Yg78CQGCsrd7qHxa6dkRjokLb1nNKrx9SuSR/0/E4B445687C5FB9BC74E73FA432C723FEADB41DBE.mft
Manifest number:          0271
Signing time:             Tue 23 Dec 2025 19:40:43 +0000
Manifest this update:     Tue 23 Dec 2025 19:35:43 +0000
Manifest next update:     Wed 24 Dec 2025 20:03:43 +0000
Files and hashes:         1: 3139312e33362e3233322e302f32322d3234203d3e20323633333434.roa (hash: Uwhqw7uMZZamplNnLigarU9MsqvlYoNLq0QY+2OboNg=)
                          2: 323830343a313462303a3a2f33322d313238203d3e20323633333434.roa (hash: dB2r3wYOhbhVBvYg8xy+m4J7puOQLbX/E9/JBqrGnqc=)
                          3: E4B445687C5FB9BC74E73FA432C723FEADB41DBE.crl (hash: DN6ik3PQHOPW4KYmUiYOf6X8FGzZ1p/a9zVZOKhJt5o=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DLDcuf35Yg78CQGCsrd7qHxa6dkRjokLb1nNKrx9SuSR/0/E4B445687C5FB9BC74E73FA432C723FEADB41DBE.crl
                          rsync://rpki-repo.registro.br/repo/DLDcuf35Yg78CQGCsrd7qHxa6dkRjokLb1nNKrx9SuSR/0/E4B445687C5FB9BC74E73FA432C723FEADB41DBE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B445687C5FB9BC74E73FA432C723FEADB41DBE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 20:03:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f2:03:77:83:f9:f4:0d:0c:ee:7f:b4:75:96:6f:85:02:8f:0e:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4B445687C5FB9BC74E73FA432C723FEADB41DBE
        Validity
            Not Before: Dec 23 19:35:43 2025 GMT
            Not After : Dec 24 20:03:43 2025 GMT
        Subject: CN=9C88CF5F28779A47F167A32C85CF1D19C08BC9D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3f:e0:b4:a2:01:cf:ad:89:95:da:65:9d:9d:
                    1b:3a:e5:4f:5f:48:ee:f9:7e:6f:52:1c:dc:b4:49:
                    f6:c4:c7:cd:30:2e:b0:bf:ea:21:ae:d8:84:11:77:
                    38:14:6d:9c:86:be:1a:9b:ff:c2:c4:5a:d3:a4:93:
                    66:9a:c6:52:11:66:ec:b5:f8:ea:dc:d8:0b:71:1a:
                    2a:aa:b4:12:be:da:f0:a1:72:f2:9b:6c:a7:b6:11:
                    af:8b:d7:83:5e:4c:3f:77:c6:cc:ad:84:53:96:d6:
                    c9:fe:06:ed:9a:74:1c:72:8f:a6:ab:84:19:75:9f:
                    51:06:e6:fa:c5:60:e4:03:2b:52:f4:12:0a:c7:a2:
                    8f:e8:c1:e3:47:b6:5d:a2:a4:cf:32:6b:20:a1:58:
                    bb:fe:b0:06:2d:24:6c:2b:5e:b8:74:49:a2:96:ee:
                    8a:14:21:95:40:cb:79:56:03:f7:c2:b2:a7:2a:84:
                    35:d8:87:ce:bb:66:1d:01:89:04:b1:a7:4e:07:a3:
                    a9:b9:67:16:15:6e:c9:30:62:52:2c:7a:ef:00:f3:
                    44:84:4c:9c:ea:4d:6f:a8:ed:97:ca:56:14:b0:24:
                    34:ce:88:d3:17:e3:fe:e3:d0:99:20:11:48:ba:d9:
                    e5:1d:2c:24:04:b0:ec:1c:b3:f2:05:94:af:77:ac:
                    69:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:88:CF:5F:28:77:9A:47:F1:67:A3:2C:85:CF:1D:19:C0:8B:C9:D4
            X509v3 Authority Key Identifier:
                keyid:E4:B4:45:68:7C:5F:B9:BC:74:E7:3F:A4:32:C7:23:FE:AD:B4:1D:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DLDcuf35Yg78CQGCsrd7qHxa6dkRjokLb1nNKrx9SuSR/0/E4B445687C5FB9BC74E73FA432C723FEADB41DBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B445687C5FB9BC74E73FA432C723FEADB41DBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DLDcuf35Yg78CQGCsrd7qHxa6dkRjokLb1nNKrx9SuSR/0/E4B445687C5FB9BC74E73FA432C723FEADB41DBE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:98:ce:86:83:61:a7:e8:3f:b9:57:ce:16:4e:31:46:6b:00:
         29:d3:e9:f6:76:2d:b9:a8:b6:ac:ed:ee:89:0e:d2:ab:cb:96:
         c6:2c:cb:e1:48:11:5d:15:6e:72:16:e3:5e:81:dc:a2:09:31:
         20:6d:4d:1d:a9:f0:98:d0:4d:fd:8a:22:ab:13:bf:4a:0a:8d:
         31:9e:41:77:d1:9b:81:f2:51:34:5c:21:70:1e:30:a2:8e:c0:
         9e:b9:e9:84:b5:aa:15:f7:b3:a0:0e:9b:64:59:32:c6:8a:27:
         fd:2a:23:b5:d2:f0:f5:e1:fc:83:c7:f3:d1:ad:f5:3f:54:15:
         e2:b6:95:55:7a:7c:09:fa:69:90:3a:e7:cc:3e:d8:18:d1:23:
         31:ab:bd:d7:8c:1c:4c:1f:63:bf:00:56:aa:8c:66:16:d1:b2:
         27:68:86:58:ce:0c:b3:ca:fe:ef:26:98:60:75:5c:9b:bf:ae:
         ab:d1:74:26:61:ea:04:37:bc:39:9b:b2:d8:3b:1a:3e:d8:ca:
         d9:e6:13:b6:5a:6e:23:1c:b4:89:a4:a8:76:08:67:5a:ff:65:
         6c:74:83:58:a0:89:c0:13:07:d5:df:f7:6f:d5:17:25:20:06:
         15:08:ba:1d:eb:d0:16:cf:d0:bd:38:be:2b:9c:ec:4f:d2:5e:
         ce:43:cf:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 04:01:42 2025 by rpki-client