This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft
File:                     7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft (raw, json)
Hash identifier:          wNqFfDhiegFElDWjOxzSuKaLmFCqQni6ihzkEjMRHFY=
Subject key identifier:   12:C2:40:EA:BF:C7:62:63:E8:6B:1B:6B:53:02:BA:BA:4A:6C:2F:DC
Authority key identifier: 71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1
Certificate issuer:       /CN=7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1
Certificate serial:       3638E91B8135C802FF21363054B047195BC92D54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft
Manifest number:          0334
Signing time:             Wed 10 Dec 2025 12:54:11 +0000
Manifest this update:     Wed 10 Dec 2025 12:49:11 +0000
Manifest next update:     Thu 11 Dec 2025 14:18:11 +0000
Files and hashes:         1: 7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.crl (hash: 2LwBd5QJj1elQquFGDyrwDhAKYVrMyJH/QLAciF+fNI=)
                          2: 323830343a323363383a3a2f33322d3332203d3e20323634313832.roa (hash: 3F2e2/DDYn3RX1xMVmaKyyDfXDqpy3jTInAQP0qhGc4=)
                          3: 3133382e39372e3130342e302f32322d3232203d3e203533313037.roa (hash: YxmutoTj6CF7MhqKkZWdp2PcBcnZPzoU+yCAdwcvIH8=)
                          4: 3133382e39372e3130372e302f32342d3234203d3e203533313037.roa (hash: d37RWCzmBlHMXyTEoKWy+EnzDGvUsG4ci+hJH2k1A/Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.crl
                          rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 14:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:38:e9:1b:81:35:c8:02:ff:21:36:30:54:b0:47:19:5b:c9:2d:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1
        Validity
            Not Before: Dec 10 12:49:11 2025 GMT
            Not After : Dec 11 14:18:11 2025 GMT
        Subject: CN=12C240EABFC76263E86B1B6B5302BABA4A6C2FDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:78:62:88:cf:dd:40:6d:9e:80:54:ac:35:92:
                    7d:16:b0:52:f2:99:e8:b4:40:49:a2:53:41:38:af:
                    fb:88:7b:db:8b:cb:ca:ca:44:a5:9b:b8:a6:60:f7:
                    4b:bd:12:e4:ab:ff:4a:2f:e5:f3:bd:db:a6:ef:96:
                    2f:ab:fc:44:8a:ad:e8:22:cc:b8:37:ed:5a:8a:24:
                    b1:bc:e5:6a:f6:97:28:67:20:26:d5:aa:37:48:57:
                    99:ce:f3:e6:2a:da:f2:02:d1:6c:95:8b:27:e9:83:
                    5d:bc:6b:72:56:c9:5f:a7:c8:f9:d1:eb:4a:7a:05:
                    83:23:a0:da:3c:c2:e4:30:ca:5a:72:8e:95:9a:56:
                    76:45:76:3a:a1:b7:bb:44:7d:fc:6b:9d:71:2e:cf:
                    21:1a:29:34:54:b6:3f:93:7f:0e:c0:ee:75:a1:0c:
                    39:47:08:c9:15:1d:a6:33:19:77:80:68:d2:4a:0d:
                    8d:84:dc:6a:43:b3:c1:c1:d7:03:61:3b:9a:a1:ae:
                    41:76:3d:48:05:3f:cc:6b:13:97:36:9d:44:34:2a:
                    fb:00:25:30:83:8a:21:ed:9e:06:b3:16:8d:d6:3f:
                    51:d9:81:2f:17:48:ef:e4:dd:50:28:c0:a0:c1:d7:
                    93:f4:5c:48:9c:b6:28:c7:f7:e0:c1:a1:c5:b6:cd:
                    ac:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C2:40:EA:BF:C7:62:63:E8:6B:1B:6B:53:02:BA:BA:4A:6C:2F:DC
            X509v3 Authority Key Identifier:
                keyid:71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:63:68:63:ea:4b:20:17:2e:d0:ad:7f:cb:fa:98:83:40:ef:
         a5:b5:d2:24:aa:17:2a:c7:1d:93:1f:d6:01:9d:48:55:ca:83:
         f7:ba:75:60:98:0e:42:55:c3:8e:a5:04:72:77:30:9c:af:01:
         03:d1:12:a9:43:7c:88:75:19:71:40:22:7b:55:68:bb:ce:b7:
         ba:dc:74:b5:f9:1f:58:df:d7:83:b4:d2:bf:1f:2d:12:cf:42:
         bf:db:12:c0:89:d6:e6:03:bb:23:db:12:d1:05:c0:e7:78:bb:
         a7:67:10:a8:47:f1:86:16:71:dc:90:0d:ae:39:85:aa:96:f1:
         79:dc:ac:4b:42:50:51:55:8e:0a:e7:95:a6:a7:1e:c5:ac:66:
         0d:77:c1:7a:c6:70:dc:93:f1:cf:24:96:e3:d5:ff:61:7c:60:
         55:d2:ee:d9:1f:9c:b2:50:68:e7:a6:6f:32:aa:41:0d:10:26:
         47:dc:07:9f:1b:15:5d:3a:ae:93:e0:c3:55:e2:b9:0e:bf:08:
         06:c9:70:f0:73:20:bb:38:47:59:89:c1:6a:3f:17:ec:cd:73:
         58:e1:ff:6d:a1:0b:2a:5f:c0:85:ea:d5:0a:79:8e:62:8e:ef:
         cf:63:15:55:ce:0d:0e:9f:2d:5e:fa:83:da:59:26:fb:99:e3:
         b5:cb:07:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 15:27:30 2025 by rpki-client