This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.mft
File:                     433BC56DE61BF5759F79705E437131F09597AF13.mft (raw, json)
Hash identifier:          f4tBuOGGEYp4KJ8ggD0kMqxtEsb7/qtE2CSv3vfIk0o=
Subject key identifier:   7C:2C:74:8A:13:DC:21:CF:4E:FF:D2:D9:9F:21:F3:10:B6:30:CB:EB
Authority key identifier: 43:3B:C5:6D:E6:1B:F5:75:9F:79:70:5E:43:71:31:F0:95:97:AF:13
Certificate issuer:       /CN=433BC56DE61BF5759F79705E437131F09597AF13
Certificate serial:       74C056D1FE77DBEEB60821A2126F65F6754B1973
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.mft
Manifest number:          015E
Signing time:             Tue 23 Dec 2025 02:57:06 +0000
Manifest this update:     Tue 23 Dec 2025 02:52:06 +0000
Manifest next update:     Wed 24 Dec 2025 04:10:06 +0000
Files and hashes:         1: 34352e3137392e3133322e302f32322d3232203d3e20323639303739.roa (hash: lSHjL4SYeuodW0xgVpynxr5uWpWZiUN+/cxrqS2wpvk=)
                          2: 433BC56DE61BF5759F79705E437131F09597AF13.crl (hash: /439YETSj97Jb/uak6kPGWwHuSV0k9occ5Wz2QcCc8U=)
                          3: 323830343a356632343a3a2f33322d3332203d3e20323639303739.roa (hash: EZAq029zsCtQXRzu/J/8xnnemD6RLViOIikO8FPSvqE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.crl
                          rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 04:10:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c0:56:d1:fe:77:db:ee:b6:08:21:a2:12:6f:65:f6:75:4b:19:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=433BC56DE61BF5759F79705E437131F09597AF13
        Validity
            Not Before: Dec 23 02:52:06 2025 GMT
            Not After : Dec 24 04:10:06 2025 GMT
        Subject: CN=7C2C748A13DC21CF4EFFD2D99F21F310B630CBEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6e:ee:ff:69:71:7b:08:4d:c4:dc:f6:f7:c6:
                    0d:e0:5c:29:2b:b5:67:01:2d:db:3c:62:bf:96:53:
                    39:70:12:88:5e:e1:8c:e7:84:bb:a2:d6:9e:d2:23:
                    95:50:38:77:08:12:bd:bc:50:28:0a:62:4e:33:0d:
                    99:77:eb:01:c6:4e:31:a1:af:58:26:43:19:32:67:
                    9d:09:ac:7d:3f:cd:c5:93:fc:e8:d3:4c:5b:34:6f:
                    8e:5c:23:88:fd:8c:8e:a8:f5:e3:e9:d3:e9:28:0f:
                    90:b6:04:c2:ee:11:f8:60:f9:ff:f4:2a:80:7e:4e:
                    f0:5c:9c:05:7c:7b:6b:09:4f:5c:a5:27:13:95:da:
                    f9:e9:b7:f0:22:d4:76:e1:27:a2:01:0d:4f:24:70:
                    c3:00:eb:15:13:00:c0:99:7a:a4:cb:fa:2b:50:3e:
                    b6:94:d1:98:c2:ee:38:a7:f4:4e:d1:18:9c:90:79:
                    b2:17:fb:bc:6d:e6:8b:fd:f7:00:cf:42:2b:56:cb:
                    99:8f:2e:2f:57:f3:f2:1b:11:fd:0f:6c:fc:9c:43:
                    17:ec:98:a1:de:5c:0b:06:03:fb:f2:93:36:cd:98:
                    4c:1f:86:17:08:1d:2b:70:49:4f:23:38:df:a2:27:
                    95:d8:6f:77:dd:0e:12:41:fa:db:60:da:57:51:42:
                    dc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:2C:74:8A:13:DC:21:CF:4E:FF:D2:D9:9F:21:F3:10:B6:30:CB:EB
            X509v3 Authority Key Identifier:
                keyid:43:3B:C5:6D:E6:1B:F5:75:9F:79:70:5E:43:71:31:F0:95:97:AF:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:de:dc:49:52:65:6c:57:3c:22:db:78:6f:e8:f9:df:ce:32:
         60:47:9b:37:58:d3:2d:7a:1d:43:5c:29:a1:41:95:2f:c7:37:
         7a:d5:19:f6:7a:c2:19:8d:4d:51:aa:66:42:24:44:74:c5:8a:
         49:46:47:a0:f7:61:01:cc:81:44:f9:8f:2d:ee:f4:cd:8e:fa:
         2f:8f:57:58:91:d8:9a:5b:4f:92:40:2f:e0:c4:62:3f:ba:a5:
         d7:eb:73:b5:0a:25:71:c9:ec:d7:c7:ff:57:ca:d7:b2:d8:54:
         3a:f1:5a:7c:66:3e:8f:41:63:71:64:8e:53:47:14:53:77:de:
         8b:31:58:28:84:2a:3a:9e:4f:1c:49:ec:61:8a:0c:41:ed:15:
         1a:00:60:48:38:44:95:b6:2b:97:17:4b:71:61:f1:39:37:c3:
         b2:8e:fd:3f:86:77:dd:cf:ea:d5:15:07:de:b8:dd:82:90:50:
         54:5a:56:de:6d:a4:c6:37:5d:90:04:22:cd:1f:6f:57:5c:06:
         88:35:10:09:a1:fb:32:e3:2e:56:2c:bb:87:ca:66:c5:a6:1b:
         a6:3f:fd:a4:14:d4:7e:ee:5a:fe:63:5b:04:e7:e5:6d:90:d4:
         aa:44:07:ce:ea:76:dd:c6:82:6d:36:48:fe:1c:cc:a7:d3:e9:
         c7:74:7b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 06:05:01 2025 by rpki-client