This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.mft
File:                     4ECB9B0B1B0DFBCA0197481108B068FF845655C6.mft (raw, json)
Hash identifier:          07KTsrusyoBU1UBxWOKuI4bYdOka0TVePaNHV72dNdg=
Subject key identifier:   5A:6D:78:9A:B2:73:64:75:E4:E6:61:1D:03:5A:C3:39:16:22:44:C8
Authority key identifier: 4E:CB:9B:0B:1B:0D:FB:CA:01:97:48:11:08:B0:68:FF:84:56:55:C6
Certificate issuer:       /CN=4ECB9B0B1B0DFBCA0197481108B068FF845655C6
Certificate serial:       12D39DFD2CBDFA93D48D006649090B30A2163337
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.mft
Manifest number:          0322
Signing time:             Tue 23 Dec 2025 18:20:26 +0000
Manifest this update:     Tue 23 Dec 2025 18:15:26 +0000
Manifest next update:     Wed 24 Dec 2025 22:00:26 +0000
Files and hashes:         1: 323830343a333536633a3a2f33322d3332203d3e20323636323835.roa (hash: QOy8TTZAZf+2a7D17lhq0HLXE5t3B7z+l7KT3DFDkYY=)
                          2: 4ECB9B0B1B0DFBCA0197481108B068FF845655C6.crl (hash: PrhJli2FNIiQt9qKUGKVdpowoNOBSXUQoQGQwufZFlg=)
                          3: 3137302e37392e3131362e302f32322d3232203d3e20323636323835.roa (hash: moY4XSa2QhUflPZ4x+2zXuK18mg5eK8Oc5vG2fxIyII=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.crl
                          rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 22:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:d3:9d:fd:2c:bd:fa:93:d4:8d:00:66:49:09:0b:30:a2:16:33:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ECB9B0B1B0DFBCA0197481108B068FF845655C6
        Validity
            Not Before: Dec 23 18:15:26 2025 GMT
            Not After : Dec 24 22:00:26 2025 GMT
        Subject: CN=5A6D789AB2736475E4E6611D035AC339162244C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:31:c7:d1:92:01:18:2c:dd:e0:82:0c:1b:12:
                    26:9a:7b:19:fb:1d:9d:79:27:51:20:2b:02:6c:22:
                    85:55:ea:64:14:ac:52:36:3b:a4:cd:23:e8:4d:88:
                    1f:b0:1e:1b:52:53:5c:b5:01:65:0a:dd:2e:db:b7:
                    36:16:01:43:6c:c6:00:96:0f:c8:1a:48:6a:7e:77:
                    51:27:cb:44:77:18:f7:1b:08:7e:6e:64:af:8d:94:
                    56:d1:0a:15:33:ea:1f:a8:b2:4e:4d:48:94:01:09:
                    9c:9c:f3:8d:ee:71:d5:4b:48:e9:4a:c1:2d:c3:97:
                    b9:7a:b4:8f:2c:e5:e5:23:7e:15:69:2f:87:98:e1:
                    6f:4a:85:de:b1:03:e2:21:66:bf:40:bb:f5:ba:cf:
                    68:22:82:83:86:65:03:d2:fe:70:67:07:7d:64:5a:
                    0c:b9:a7:de:b5:00:da:b8:4d:18:9e:d2:4c:ee:97:
                    4c:45:db:32:b6:7b:85:26:d1:87:16:af:76:2a:0d:
                    58:4f:4b:19:ca:2a:5f:d3:f2:f4:20:25:5d:fd:e4:
                    8d:fb:f8:ff:ff:81:db:b7:2c:73:9d:d6:6a:7e:f8:
                    10:c1:b0:42:2d:6d:af:b4:dd:e7:8d:57:1e:86:80:
                    42:ab:f6:49:7c:6d:b9:d4:f6:50:19:3f:2c:d3:55:
                    2f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:6D:78:9A:B2:73:64:75:E4:E6:61:1D:03:5A:C3:39:16:22:44:C8
            X509v3 Authority Key Identifier:
                keyid:4E:CB:9B:0B:1B:0D:FB:CA:01:97:48:11:08:B0:68:FF:84:56:55:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:76:f7:2a:4f:7c:35:75:b7:00:b8:64:a6:fb:32:40:8d:07:
         19:f6:34:c4:e9:8f:fd:cc:69:96:0f:43:08:6e:fc:ae:a0:b1:
         97:5e:e0:6b:ab:76:10:d3:45:54:b2:92:df:0c:a8:3c:6f:31:
         63:8f:1b:0f:ce:b3:35:0d:75:b5:a4:e6:f2:bf:f9:b5:e8:86:
         02:9a:75:49:21:05:5f:a3:78:41:19:0b:3d:15:24:ac:a9:19:
         19:99:4f:35:46:98:2a:41:4c:b2:b6:ce:6b:84:19:89:d2:92:
         15:34:92:30:d2:4a:55:03:44:0f:7d:88:ed:b4:f0:17:bc:74:
         c5:bb:57:92:79:62:7f:ce:2f:fb:d9:16:81:55:c2:9c:64:85:
         e8:47:14:a4:54:6c:6b:32:f7:f7:94:a6:33:bd:8a:9d:3a:61:
         62:6f:6a:25:cf:d3:9d:56:3e:86:6b:19:2d:e9:19:e5:db:a3:
         7b:ad:62:12:88:56:44:44:59:c3:12:53:13:d7:d5:dc:d3:f3:
         7f:f7:59:e6:fe:7d:56:5b:63:6f:7f:35:fd:3a:8a:22:34:35:
         ea:d4:56:9e:c7:06:9e:48:dc:d1:01:3e:8b:b4:91:42:3c:8e:
         64:e3:ee:77:ba:ba:77:17:d6:15:72:17:09:1a:ae:b1:1e:d7:
         32:c9:2e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:15:33 2025 by rpki-client