This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/C4A0C992AC81775846EF3EACD736353F739F7D8D.mft
File:                     C4A0C992AC81775846EF3EACD736353F739F7D8D.mft (raw, json)
Hash identifier:          IcUQpEJUJlh3YSF926ORZ1V2RBB3Q4rYvoxcFqnq9I4=
Subject key identifier:   44:51:A4:EA:1E:6A:87:2D:74:2D:7A:66:8A:D6:3A:ED:88:5B:3E:A4
Authority key identifier: C4:A0:C9:92:AC:81:77:58:46:EF:3E:AC:D7:36:35:3F:73:9F:7D:8D
Certificate issuer:       /CN=C4A0C992AC81775846EF3EACD736353F739F7D8D
Certificate serial:       6A491A81F14C902C31ADE89F13AF5D03665A99F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4A0C992AC81775846EF3EACD736353F739F7D8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/C4A0C992AC81775846EF3EACD736353F739F7D8D.mft
Manifest number:          0151
Signing time:             Sun 21 Dec 2025 07:45:47 +0000
Manifest this update:     Sun 21 Dec 2025 07:40:47 +0000
Manifest next update:     Mon 22 Dec 2025 10:54:47 +0000
Files and hashes:         1: 3133312e37322e34382e302f32322d3234203d3e203532353435.roa (hash: Bb0kJTvT13zXjhXQKAhJWgr/b2sBD6PguhCL0LmXPFc=)
                          2: 3136382e3132312e3136382e302f32322d3234203d3e203532353435.roa (hash: sPmYwrleYk60iVzRKjEPkW2mXoJ21mRmEiFeQ8dlLWw=)
                          3: 323830343a6531633a666230303a3a2f34302d3430203d3e203532353435.roa (hash: UltvwK1IjkiZQh4BCvjHwbqzp4fVl0TTCRXlrGrBNz4=)
                          4: 3137302e38322e3136382e302f32322d3234203d3e203532353435.roa (hash: ZoebQ8nWQa3jdbb3EtwGSfMgCsFTKXtcv2/F7kCqlmY=)
                          5: C4A0C992AC81775846EF3EACD736353F739F7D8D.crl (hash: KbSIS1B8EzsVcdM2MYO7SMujaMm6XSJXlSNXQBVR+yQ=)
                          6: 3137392e3130372e38302e302f32322d3234203d3e203532353435.roa (hash: 65gA/77fIfi/AzedgoYOwttHc1VkZPbASGxxcWoce2U=)
                          7: 323830343a6531633a3a2f33322d3334203d3e203532353435.roa (hash: Y+Nm9Qg5bdUyRGd6aV5jpXl7oAxM5JXbGjkTuIUfvag=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/C4A0C992AC81775846EF3EACD736353F739F7D8D.crl
                          rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/C4A0C992AC81775846EF3EACD736353F739F7D8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4A0C992AC81775846EF3EACD736353F739F7D8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 10:54:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:49:1a:81:f1:4c:90:2c:31:ad:e8:9f:13:af:5d:03:66:5a:99:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4A0C992AC81775846EF3EACD736353F739F7D8D
        Validity
            Not Before: Dec 21 07:40:47 2025 GMT
            Not After : Dec 22 10:54:47 2025 GMT
        Subject: CN=4451A4EA1E6A872D742D7A668AD63AED885B3EA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8b:17:ae:a9:14:75:28:e6:56:60:ce:50:90:
                    d9:43:bf:98:86:3c:82:7b:f3:89:77:13:40:6f:f2:
                    41:97:8e:e0:eb:1d:61:4e:47:fa:1e:11:fb:98:f3:
                    f4:d5:b7:db:ab:55:38:56:32:29:d3:5c:fb:30:bf:
                    4b:d4:d1:2b:e6:16:f4:fc:50:20:f3:f1:24:5b:39:
                    fc:09:34:1e:43:68:f6:64:61:58:22:bc:8a:b5:e7:
                    e6:57:2a:96:c5:55:54:49:65:a7:d3:be:db:ed:d4:
                    ec:6c:fc:5c:cb:4c:a3:13:00:e6:d8:67:cb:b9:9d:
                    6f:f9:59:d4:e8:a6:55:af:76:5d:3d:62:79:a9:7f:
                    ad:3c:35:ac:df:8e:c4:45:8f:c6:9e:10:56:4b:3c:
                    ea:95:f7:af:e0:87:68:c9:cf:1d:28:42:d4:8e:e3:
                    39:83:65:20:e2:15:e3:1d:6f:63:39:a6:1d:5e:85:
                    3d:2a:ca:d8:62:cb:a2:54:b7:d3:fd:fc:9e:62:8d:
                    fe:21:c8:e5:cd:31:af:8b:82:a6:5f:5c:9f:7c:7e:
                    b1:54:86:bb:a5:f5:a2:80:06:57:72:31:a8:f0:79:
                    14:02:5f:94:a8:0d:91:57:dd:e0:e8:03:3a:a7:c1:
                    d8:26:e1:a4:1c:68:85:dc:29:72:5b:a7:19:b5:16:
                    e8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:51:A4:EA:1E:6A:87:2D:74:2D:7A:66:8A:D6:3A:ED:88:5B:3E:A4
            X509v3 Authority Key Identifier:
                keyid:C4:A0:C9:92:AC:81:77:58:46:EF:3E:AC:D7:36:35:3F:73:9F:7D:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/C4A0C992AC81775846EF3EACD736353F739F7D8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4A0C992AC81775846EF3EACD736353F739F7D8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/C4A0C992AC81775846EF3EACD736353F739F7D8D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:17:21:1e:c8:dc:3f:22:f9:22:fe:29:07:6c:c5:8d:bc:f4:
         99:f0:a4:39:91:83:b3:11:19:8a:91:6c:4d:d4:ee:8e:40:af:
         d3:85:f1:ab:27:6f:28:20:30:54:65:80:70:61:13:5f:a5:4b:
         53:58:5b:9d:52:27:2f:07:41:eb:ab:d0:38:77:d5:ae:57:09:
         cc:f9:2a:f3:df:15:7f:5b:91:16:9a:78:f4:b9:b3:07:6c:22:
         cf:71:d0:c2:cc:8a:a1:eb:ff:a8:cf:99:df:62:55:c7:4a:04:
         26:75:e0:d3:9e:3c:8c:fb:08:18:d7:c1:70:1a:f6:ba:e7:20:
         44:b2:4d:64:29:37:73:65:e3:b5:29:49:a9:86:e8:68:4f:1b:
         46:14:bf:b5:7b:20:ec:dd:f5:10:16:ce:cc:38:2f:fe:d6:8e:
         8d:39:fd:95:d5:bc:b0:eb:e2:71:00:4e:78:a4:06:f4:d1:3b:
         b7:67:5c:44:ab:4a:44:9c:0f:57:b0:e8:d5:c1:8a:aa:c1:a8:
         74:5f:8f:71:63:eb:30:b0:7e:b0:3e:09:c5:13:9e:1a:9f:5b:
         15:e5:cd:6c:1b:55:ba:ac:5a:d0:0c:3c:c8:d4:c0:c0:86:a7:
         49:96:04:34:44:db:77:ca:03:30:70:66:cc:f0:a7:3a:62:67:
         2e:22:3f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 19:28:49 2025 by rpki-client