This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.mft
File:                     25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.mft (raw, json)
Hash identifier:          3vhXRQhH2AbeULG9s8vC/FLSDO+y20+XaOA+0mNkL9o=
Subject key identifier:   7C:35:E9:AD:2D:90:8D:FE:7A:E1:FC:B0:9B:1E:76:17:D9:E8:4D:29
Authority key identifier: 25:C5:4A:79:FB:81:17:C3:BC:74:B6:44:4C:04:A7:DE:AA:5D:49:BB
Certificate issuer:       /CN=25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB
Certificate serial:       71C0862E0D8AE5C9186AD162D6C145282AE1C5F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.mft
Manifest number:          A1
Signing time:             Wed 24 Dec 2025 06:45:01 +0000
Manifest this update:     Wed 24 Dec 2025 06:40:01 +0000
Manifest next update:     Thu 25 Dec 2025 10:44:01 +0000
Files and hashes:         1: 323830343a3762303a3a2f33322d313238203d3e20323632343533.roa (hash: gr2u/oI9boQwwcAjZcUOU8d5yrSlwex50xc/uUnWyPQ=)
                          2: 25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.crl (hash: in0z4dpYyQrtNeaJepgwJMOJ3WKTe0lNa6g/hrbP5TQ=)
                          3: 3137372e35322e3234302e302f32322d3332203d3e20323632343533.roa (hash: kT4yj8yFSiH6EDqd+WdC583lgIULpCZHsmLGa7cAUtY=)
                          4: 3137302e3234372e3130302e302f32322d3332203d3e20323632343533.roa (hash: 7BphB1JD9jH3YeTz7XYC6e12+BivDF1/qm1W0CYiPpI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.crl
                          rsync://rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 10:44:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c0:86:2e:0d:8a:e5:c9:18:6a:d1:62:d6:c1:45:28:2a:e1:c5:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB
        Validity
            Not Before: Dec 24 06:40:01 2025 GMT
            Not After : Dec 25 10:44:01 2025 GMT
        Subject: CN=7C35E9AD2D908DFE7AE1FCB09B1E7617D9E84D29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:99:c3:65:47:6e:4b:a7:a9:3c:b0:e3:08:c9:
                    cd:13:e0:fa:50:49:49:ac:4a:7c:53:c9:19:dc:a6:
                    df:3a:ab:2f:42:a6:aa:ac:c3:b6:4f:04:24:34:cb:
                    5e:b4:9c:12:b3:b8:ea:0b:ff:8b:9d:07:fc:91:90:
                    fd:84:a2:3a:8b:12:95:73:48:5a:f7:23:c1:81:59:
                    ef:52:0a:5b:4f:df:37:bc:1f:04:7e:e5:e8:9a:e8:
                    4d:eb:e9:74:24:08:90:5b:2a:03:3c:bd:61:94:3e:
                    3b:d3:c1:b1:9d:02:6d:d3:c0:52:32:34:b5:dc:00:
                    ed:f0:03:eb:f5:4b:a0:47:d1:3b:00:3c:fc:3e:9b:
                    7b:d1:bc:2f:37:d1:36:8d:da:bd:6f:11:dd:4b:6e:
                    ca:2d:e5:dd:92:39:b1:cf:39:28:78:c1:d5:f3:f5:
                    22:79:06:36:68:1c:fa:81:ea:86:73:42:39:3d:54:
                    5e:7f:a2:48:4e:69:3a:02:33:ee:ad:f2:93:e0:e7:
                    a7:a4:15:e1:4b:80:12:17:44:05:ef:30:87:4a:d5:
                    2c:48:51:3c:2f:1e:47:b3:58:6a:5f:81:d0:2a:d1:
                    49:53:c5:e2:4f:8d:87:65:ba:ab:07:a4:78:c2:b1:
                    32:e3:0a:2e:ed:66:6f:79:49:99:cf:47:67:40:06:
                    70:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:35:E9:AD:2D:90:8D:FE:7A:E1:FC:B0:9B:1E:76:17:D9:E8:4D:29
            X509v3 Authority Key Identifier:
                keyid:25:C5:4A:79:FB:81:17:C3:BC:74:B6:44:4C:04:A7:DE:AA:5D:49:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:39:28:23:a5:8d:40:2f:cd:77:c9:29:3e:62:14:f0:5c:29:
         4f:d8:4e:48:ab:4d:ba:cb:0d:bf:7d:a1:37:d3:13:3b:d9:43:
         2f:66:bd:72:6c:0e:cd:2b:42:3e:08:16:33:04:47:b3:6a:07:
         0c:ae:dc:8e:64:9a:a4:9b:bf:af:f2:33:d2:24:cb:31:51:5d:
         22:90:6b:b7:b6:e7:cb:5f:b2:21:ee:89:81:d3:d8:50:db:c6:
         cd:3d:23:d9:d0:e9:6d:10:de:cd:7c:2f:33:d0:e9:36:2e:79:
         f1:76:0f:4f:26:df:e7:de:ab:bc:ef:5e:a1:ca:d1:c4:71:74:
         d1:ed:58:c3:c5:5d:4e:cd:01:bc:16:92:00:5e:55:2c:ba:cc:
         78:fc:b7:93:89:7c:93:c9:58:5c:f8:6a:42:31:87:0e:94:2e:
         26:c4:a7:26:ed:69:38:0d:8a:d7:ed:36:f5:06:55:12:a6:97:
         b9:ba:8f:64:cf:47:cd:23:27:5a:9a:4b:54:bb:41:a7:a1:f8:
         ca:11:3a:10:c7:0a:f4:e6:f2:96:a4:43:aa:9a:d8:b0:4e:4d:
         80:47:13:06:de:4d:63:37:a5:8d:e1:74:49:d4:52:20:68:0f:
         09:51:d3:94:5d:d1:0a:8c:4b:6a:60:ba:9d:7a:cd:c3:66:af:
         71:77:96:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:29:35 2025 by rpki-client