This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Wd34HbksAsn1vxVWCDeNf7j7wwjAfcN1VhZ3jbVccfs/0/E430D54D161618B6A198E8A4E53FBF6D3C7CF0F0.mft
File:                     E430D54D161618B6A198E8A4E53FBF6D3C7CF0F0.mft (raw, json)
Hash identifier:          9ewrkS/Z4IsCOJ0vdCetL0mTYnoiQxXfXkZH6CsoNoY=
Subject key identifier:   36:C6:FF:1C:F2:21:E9:95:F3:C4:01:EA:64:B3:A4:33:0B:65:DB:0C
Authority key identifier: E4:30:D5:4D:16:16:18:B6:A1:98:E8:A4:E5:3F:BF:6D:3C:7C:F0:F0
Certificate issuer:       /CN=E430D54D161618B6A198E8A4E53FBF6D3C7CF0F0
Certificate serial:       4425D4D1027C4D3F89337A0402FC9079BC2BB32E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E430D54D161618B6A198E8A4E53FBF6D3C7CF0F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Wd34HbksAsn1vxVWCDeNf7j7wwjAfcN1VhZ3jbVccfs/0/E430D54D161618B6A198E8A4E53FBF6D3C7CF0F0.mft
Manifest number:          01AE
Signing time:             Fri 19 Dec 2025 00:31:36 +0000
Manifest this update:     Fri 19 Dec 2025 00:26:36 +0000
Manifest next update:     Sat 20 Dec 2025 04:05:36 +0000
Files and hashes:         1: 3137372e33372e3132382e302f31372d3234203d3e203238313236.roa (hash: 9mjDh9RXLjzZSNqkvKEWyHEhs5CLabFwmT7fsK31W5U=)
                          2: 3137372e3135342e34382e302f32312d3234203d3e203238313236.roa (hash: AMotpF11qndoeOzDSJnLllQUwI7Wu8CbksqtPog3HKY=)
                          3: E430D54D161618B6A198E8A4E53FBF6D3C7CF0F0.crl (hash: ll6y5I6ccRwXLdkUT2gYUqQwbdQZwON0bFEgHaePPzQ=)
                          4: 3138372e31392e3132382e302f31372d3234203d3e203238313236.roa (hash: PLpB0xYjgHeDsp+iZSpujm7aIXU8v8E1FvgVoiS0Bas=)
                          5: 323830343a323962383a3a2f33322d3438203d3e203238313236.roa (hash: fCHGUZrnFx+bThcQNenwgEVHmHloXrxd+Wm1ItH8eWg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Wd34HbksAsn1vxVWCDeNf7j7wwjAfcN1VhZ3jbVccfs/0/E430D54D161618B6A198E8A4E53FBF6D3C7CF0F0.crl
                          rsync://rpki-repo.registro.br/repo/Wd34HbksAsn1vxVWCDeNf7j7wwjAfcN1VhZ3jbVccfs/0/E430D54D161618B6A198E8A4E53FBF6D3C7CF0F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E430D54D161618B6A198E8A4E53FBF6D3C7CF0F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 04:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:25:d4:d1:02:7c:4d:3f:89:33:7a:04:02:fc:90:79:bc:2b:b3:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E430D54D161618B6A198E8A4E53FBF6D3C7CF0F0
        Validity
            Not Before: Dec 19 00:26:36 2025 GMT
            Not After : Dec 20 04:05:36 2025 GMT
        Subject: CN=36C6FF1CF221E995F3C401EA64B3A4330B65DB0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9b:17:4d:b5:c7:6e:32:ab:b7:7e:42:d0:75:
                    cb:b6:93:65:34:85:1c:d5:50:b5:bc:03:33:42:2d:
                    31:44:32:7f:13:e1:05:df:a9:29:de:55:ad:cd:9d:
                    1e:fd:97:00:17:ed:85:de:03:05:56:09:d9:ea:3a:
                    5c:e8:40:cb:80:c2:76:5a:85:5b:34:42:5c:25:f5:
                    a1:f2:9a:7f:af:a4:9b:e5:d5:a6:19:7e:92:c2:cb:
                    42:ac:f7:cd:09:f9:66:30:a1:f8:6b:77:0e:62:96:
                    47:a0:9f:0f:92:28:51:3f:c9:98:a4:82:63:c2:c9:
                    b9:23:be:7e:9b:43:26:63:22:a3:59:89:45:ce:07:
                    b0:26:6a:ed:ba:b4:f1:1c:34:6b:01:cd:c3:a6:94:
                    5d:e7:8f:f3:de:cd:93:48:7a:5b:6b:c7:bf:69:d1:
                    ff:e0:02:90:97:66:62:c2:a7:b9:39:d5:d1:fc:34:
                    bc:a4:42:30:bc:0a:29:e0:e0:72:be:a2:4a:90:3b:
                    84:48:e5:9a:29:9f:a1:13:bd:a0:5c:3c:55:63:13:
                    19:39:72:36:f7:f7:54:c8:3e:82:ac:99:37:2c:3b:
                    36:e5:93:73:90:cb:da:b9:e5:a0:65:e0:9d:22:5a:
                    fd:12:1a:35:d5:85:71:12:d3:b8:47:8e:29:cd:ed:
                    d1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C6:FF:1C:F2:21:E9:95:F3:C4:01:EA:64:B3:A4:33:0B:65:DB:0C
            X509v3 Authority Key Identifier:
                keyid:E4:30:D5:4D:16:16:18:B6:A1:98:E8:A4:E5:3F:BF:6D:3C:7C:F0:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Wd34HbksAsn1vxVWCDeNf7j7wwjAfcN1VhZ3jbVccfs/0/E430D54D161618B6A198E8A4E53FBF6D3C7CF0F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E430D54D161618B6A198E8A4E53FBF6D3C7CF0F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Wd34HbksAsn1vxVWCDeNf7j7wwjAfcN1VhZ3jbVccfs/0/E430D54D161618B6A198E8A4E53FBF6D3C7CF0F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:15:a3:08:a8:8e:18:5a:59:8f:a3:37:f6:33:00:c6:20:15:
         b4:6f:5c:44:ef:02:ea:d2:a6:4c:b0:46:dd:ec:e2:87:5f:b4:
         6a:00:6e:23:40:a3:9d:db:c6:fd:1c:18:db:70:9f:65:47:a4:
         85:5c:f5:c3:dd:94:43:1e:60:63:be:e9:e5:d3:72:ed:d1:75:
         c4:8a:50:71:2b:5c:aa:8d:02:d9:26:50:d9:32:bc:fe:0f:e6:
         be:4b:d5:55:62:d0:96:a9:99:8d:53:ab:1b:e1:9b:79:04:e7:
         a1:4c:01:c7:8b:a0:43:dc:aa:1e:a9:c5:2f:32:0d:02:04:3e:
         52:53:b2:08:ce:96:e3:6f:04:70:0b:f7:9e:51:94:35:93:a2:
         65:d4:64:22:04:a2:37:64:4d:43:62:3d:1a:38:0c:fb:1b:ee:
         d5:61:34:c4:b6:a2:3b:29:34:e2:cb:3d:b6:e5:ef:4b:b5:87:
         1c:f4:e3:5c:a1:f0:bc:4c:53:85:48:c1:f8:25:62:04:e5:79:
         b4:68:f1:88:37:46:95:04:e0:f4:3a:9a:69:ff:35:31:94:45:
         3e:19:e1:b8:3e:81:4d:9d:34:61:35:87:0a:8b:9c:b1:d4:cd:
         a6:0f:dc:70:a0:e9:a4:a0:b8:29:32:05:f0:b8:a2:a9:21:63:
         46:38:b5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:14:34 2025 by rpki-client