This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/7B7CAE33EBE3975BE89971E3BD0EEE6EB221C019.mft
File:                     7B7CAE33EBE3975BE89971E3BD0EEE6EB221C019.mft (raw, json)
Hash identifier:          t34jDLnXIms8oGsTNEUJGRoj7TJpOI5XkHVsgs55UoA=
Subject key identifier:   76:4A:7F:03:B9:DB:11:A6:C0:72:97:4E:0C:DC:D0:61:00:F1:0C:79
Authority key identifier: 7B:7C:AE:33:EB:E3:97:5B:E8:99:71:E3:BD:0E:EE:6E:B2:21:C0:19
Certificate issuer:       /CN=7B7CAE33EBE3975BE89971E3BD0EEE6EB221C019
Certificate serial:       5F249EBB58FC24A9ECDC8EFE0F3DBFB5EDCA307C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B7CAE33EBE3975BE89971E3BD0EEE6EB221C019.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/7B7CAE33EBE3975BE89971E3BD0EEE6EB221C019.mft
Manifest number:          62
Signing time:             Wed 24 Dec 2025 13:15:16 +0000
Manifest this update:     Wed 24 Dec 2025 13:10:16 +0000
Manifest next update:     Thu 25 Dec 2025 15:57:16 +0000
Files and hashes:         1: 323830343a386335633a3a2f33322d3333203d3e20323733373938.roa (hash: M+/gYbU+pJ5B06F4a3PkbmoVfZnst22lg55a3Wnhkro=)
                          2: 3138372e3130392e3132312e302f32342d3234203d3e20323733373938.roa (hash: d+W3XvubqNNIglgN5RWQxLE/gmoTVl4+LjLSgnN4ra0=)
                          3: 7B7CAE33EBE3975BE89971E3BD0EEE6EB221C019.crl (hash: 1tsCzKk+e6hJZ2rHRP0WGuutwGbRWqMTsBlVBSj71+4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/7B7CAE33EBE3975BE89971E3BD0EEE6EB221C019.crl
                          rsync://rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/7B7CAE33EBE3975BE89971E3BD0EEE6EB221C019.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B7CAE33EBE3975BE89971E3BD0EEE6EB221C019.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 15:17:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:24:9e:bb:58:fc:24:a9:ec:dc:8e:fe:0f:3d:bf:b5:ed:ca:30:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B7CAE33EBE3975BE89971E3BD0EEE6EB221C019
        Validity
            Not Before: Dec 24 13:10:16 2025 GMT
            Not After : Dec 25 15:57:16 2025 GMT
        Subject: CN=764A7F03B9DB11A6C072974E0CDCD06100F10C79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8a:f3:9a:db:d6:1c:56:34:9d:01:a0:1f:62:
                    27:aa:c6:b1:6d:52:9b:1c:73:8a:3e:7b:81:f0:e6:
                    76:07:2f:20:c9:66:5d:5b:aa:4c:e3:20:ed:89:4c:
                    c2:14:a2:60:08:e1:0f:78:52:94:a0:f6:83:8b:9e:
                    14:71:40:71:08:c0:b5:2f:f9:c9:31:16:5f:f8:a4:
                    46:09:68:64:90:b8:1a:42:c9:65:30:9a:a2:56:45:
                    7a:6b:b4:61:fb:ab:6d:47:e6:aa:88:ec:59:d2:5a:
                    e9:b3:4c:bb:1e:dc:84:81:69:c7:9e:3c:f2:e2:d9:
                    22:85:57:2a:44:76:69:1d:ea:d8:f3:ed:dd:b3:3e:
                    8e:e2:b0:c2:c0:ce:eb:dd:87:30:51:92:cf:6e:93:
                    11:ae:27:00:7e:be:60:90:99:73:81:30:b7:38:8d:
                    aa:9b:92:65:bf:c3:ab:c6:9d:1d:00:83:b7:14:74:
                    1d:5d:9b:e1:bb:da:41:03:e5:fb:2c:fa:fb:c9:92:
                    d0:2f:ad:88:32:25:fe:5e:0f:56:fa:38:59:9b:0e:
                    12:cc:8a:29:52:16:01:fc:85:cc:17:e6:d8:7f:d5:
                    c1:ef:29:dd:5d:7c:12:f5:ac:d5:76:36:90:94:34:
                    e3:73:77:c1:14:1d:ca:78:92:9c:51:1a:c3:19:0c:
                    35:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:4A:7F:03:B9:DB:11:A6:C0:72:97:4E:0C:DC:D0:61:00:F1:0C:79
            X509v3 Authority Key Identifier:
                keyid:7B:7C:AE:33:EB:E3:97:5B:E8:99:71:E3:BD:0E:EE:6E:B2:21:C0:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/7B7CAE33EBE3975BE89971E3BD0EEE6EB221C019.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B7CAE33EBE3975BE89971E3BD0EEE6EB221C019.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/7B7CAE33EBE3975BE89971E3BD0EEE6EB221C019.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:0a:71:d0:f5:ef:aa:be:69:f6:2a:0d:8f:f9:6f:c1:78:22:
         40:20:ba:cd:b0:cd:5f:f1:91:49:29:ac:16:57:38:d4:e2:9d:
         a7:e5:52:5b:37:e4:bc:ff:2b:45:9c:97:2e:5f:ef:97:b7:14:
         e4:bf:c5:fe:63:48:96:4e:cc:ff:28:8b:4f:c8:d9:e4:b4:e0:
         77:ab:58:3e:98:8f:dd:08:d2:a1:f4:07:36:0a:6b:4e:ea:65:
         d3:26:fe:51:14:6a:31:fa:fd:0f:be:0c:b6:a8:82:ab:03:7b:
         43:ec:fb:27:9e:0c:e6:4d:40:d3:f1:e0:40:b0:f2:c2:91:75:
         48:d6:46:65:6f:2d:00:9f:db:a3:6f:d9:4b:7f:5a:5c:d8:56:
         02:04:39:d6:82:13:fd:74:4a:71:52:4a:17:f1:f5:94:29:49:
         45:a9:56:9c:dc:61:47:e8:c4:ba:39:38:e2:c6:72:c7:a6:bf:
         a7:dd:f9:18:c2:5b:c1:9f:18:ef:7f:f3:d0:4e:bc:96:e6:8f:
         02:20:5d:fb:1c:70:9a:34:af:ce:50:5a:b8:42:c4:1e:84:73:
         0f:48:e6:3a:18:55:b2:cb:62:b5:7e:a6:75:b7:1e:39:d3:86:
         41:c1:ce:0e:f4:53:ad:f6:6c:29:c3:b3:7e:c1:d2:e5:35:fd:
         6f:6a:c3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:30:12 2025 by rpki-client