This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/8F945FDB7E33F09E21C0E77D30BB4D60AA405A6F.mft
File:                     8F945FDB7E33F09E21C0E77D30BB4D60AA405A6F.mft (raw, json)
Hash identifier:          u/XwTPrAvemSRbG0WC+fcqOu/pneGeR7hpXr87v2FUw=
Subject key identifier:   F7:F9:44:32:47:CF:AC:69:48:94:4D:C9:E1:29:B4:8F:13:0F:68:D0
Authority key identifier: 8F:94:5F:DB:7E:33:F0:9E:21:C0:E7:7D:30:BB:4D:60:AA:40:5A:6F
Certificate issuer:       /CN=8F945FDB7E33F09E21C0E77D30BB4D60AA405A6F
Certificate serial:       70B515DC5C9782B06BC2D047FA6DFC0B3D8695A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F945FDB7E33F09E21C0E77D30BB4D60AA405A6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/8F945FDB7E33F09E21C0E77D30BB4D60AA405A6F.mft
Manifest number:          4A
Signing time:             Sat 20 Dec 2025 03:16:41 +0000
Manifest this update:     Sat 20 Dec 2025 03:11:41 +0000
Manifest next update:     Sun 21 Dec 2025 06:37:41 +0000
Files and hashes:         1: 8F945FDB7E33F09E21C0E77D30BB4D60AA405A6F.crl (hash: v6Hta40xE7L5L3AYE5H/Ke8Bmsr7ORVm6ktlEfhdSXA=)
                          2: 3137392e39372e32342e302f32312d3332203d3e20323633343131.roa (hash: s/FISBQija6V7AjZgY9FBSFcPMzOtTNWRMQ6o5F21Jc=)
                          3: 323830343a313563633a3a2f33322d313238203d3e20323633343131.roa (hash: IXRbPb1fXYyAN+HzCu0Z+EbuJz7MhgHO5uLhMoYI31A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/8F945FDB7E33F09E21C0E77D30BB4D60AA405A6F.crl
                          rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/8F945FDB7E33F09E21C0E77D30BB4D60AA405A6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F945FDB7E33F09E21C0E77D30BB4D60AA405A6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 06:37:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:b5:15:dc:5c:97:82:b0:6b:c2:d0:47:fa:6d:fc:0b:3d:86:95:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F945FDB7E33F09E21C0E77D30BB4D60AA405A6F
        Validity
            Not Before: Dec 20 03:11:41 2025 GMT
            Not After : Dec 21 06:37:41 2025 GMT
        Subject: CN=F7F9443247CFAC6948944DC9E129B48F130F68D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ef:09:ea:53:18:7c:e9:36:93:29:ac:c3:00:
                    ed:1f:3f:ac:9d:6c:4c:9c:0a:e1:08:bd:00:56:26:
                    0c:33:66:74:ec:8a:a5:18:be:9c:47:cc:0b:28:28:
                    b7:ca:c2:3d:c5:c6:ea:a7:f2:59:cc:c2:00:77:4b:
                    7f:f7:d2:cc:b8:80:cd:2d:9f:86:65:7f:c5:b9:b7:
                    b6:c0:23:14:7f:de:eb:49:95:80:ad:18:82:fc:8d:
                    6a:69:71:8c:21:5e:9e:fb:0d:f2:fb:33:cd:e8:c7:
                    fd:6a:67:b7:b9:f3:81:95:56:f3:b1:56:93:2a:fa:
                    ff:b0:c8:cb:9f:27:87:ef:04:dd:06:c6:0e:51:1f:
                    97:50:df:41:cd:30:4b:cf:87:b7:df:2e:cb:73:c1:
                    11:2a:2d:ee:a2:ec:a7:32:18:b3:74:9e:6a:54:57:
                    b9:fb:24:09:f9:ad:32:0e:46:9f:a2:5d:b8:08:87:
                    9e:87:10:bf:b8:62:9e:fe:40:2d:b6:6d:41:7c:90:
                    1d:f7:5c:dc:76:c1:7f:c8:47:9f:73:fa:37:f6:9e:
                    dc:0f:1f:68:97:bf:3d:6d:03:1a:7b:8c:72:f7:b2:
                    de:c2:1f:eb:dc:ac:9b:cd:0f:f2:63:71:ac:ff:77:
                    e2:34:61:64:b1:72:9e:2c:e8:8d:8a:71:27:9e:91:
                    9e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F9:44:32:47:CF:AC:69:48:94:4D:C9:E1:29:B4:8F:13:0F:68:D0
            X509v3 Authority Key Identifier:
                keyid:8F:94:5F:DB:7E:33:F0:9E:21:C0:E7:7D:30:BB:4D:60:AA:40:5A:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/8F945FDB7E33F09E21C0E77D30BB4D60AA405A6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F945FDB7E33F09E21C0E77D30BB4D60AA405A6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/8F945FDB7E33F09E21C0E77D30BB4D60AA405A6F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:3f:37:63:a3:40:fe:d4:f0:4d:b0:32:d8:a4:f1:61:fd:99:
         e3:61:e2:82:40:35:ab:23:34:e8:ac:a8:ae:f0:9a:a4:c4:a9:
         c5:f0:11:d7:b4:16:e7:20:34:46:ab:61:5f:f9:dc:a4:c0:03:
         51:22:e6:24:4b:af:5b:73:85:3f:54:f1:42:34:f8:9b:27:d8:
         0b:15:b7:86:de:94:76:80:41:38:50:a6:b4:06:3e:b7:71:91:
         d7:1d:ac:4f:35:96:30:4a:e2:b5:40:8f:93:26:e7:5a:c5:38:
         d3:d2:af:7d:71:84:8f:a4:75:b6:f1:a2:64:fc:9b:f9:4b:3f:
         b1:c7:59:d4:f6:9b:35:fe:4c:7f:32:41:87:09:49:8d:f0:41:
         8b:b1:75:4f:8e:d0:05:1b:db:e6:ce:f1:77:8f:2d:41:9e:25:
         09:a2:51:a5:36:4a:26:71:98:5b:41:38:37:57:95:f8:d4:78:
         6c:62:d8:3a:84:ec:38:f8:6e:6b:10:d7:5d:fd:85:5d:99:be:
         31:c9:92:49:93:43:98:fe:fd:97:8b:ed:ae:94:4b:1a:ed:c0:
         62:50:00:e6:8d:02:7c:85:ea:dc:fa:f2:b2:b7:1a:d5:3e:57:
         74:62:c5:54:0f:3c:56:e6:31:dc:9d:d5:e5:9f:44:8e:04:f0:
         cd:8a:ee:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----