This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ZVAXha5bmZQJf5sRjcBLrD2PR3whNjBUahnBpoqYCCc/0/45EEBB524CBBA5D22EE7BF9A51D7D950D3DF6A7C.mft
File:                     45EEBB524CBBA5D22EE7BF9A51D7D950D3DF6A7C.mft (raw, json)
Hash identifier:          VfzDev7LvyoiUgMQbVp2zBdU0/1xgnH6e8muuzCCLvw=
Subject key identifier:   37:DD:F7:90:BA:76:B6:0E:F0:0D:90:95:3D:A2:56:4E:29:6E:49:2C
Authority key identifier: 45:EE:BB:52:4C:BB:A5:D2:2E:E7:BF:9A:51:D7:D9:50:D3:DF:6A:7C
Certificate issuer:       /CN=45EEBB524CBBA5D22EE7BF9A51D7D950D3DF6A7C
Certificate serial:       3122E107685E8FE5A87EAAE1B45758402F7F6DEB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EEBB524CBBA5D22EE7BF9A51D7D950D3DF6A7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ZVAXha5bmZQJf5sRjcBLrD2PR3whNjBUahnBpoqYCCc/0/45EEBB524CBBA5D22EE7BF9A51D7D950D3DF6A7C.mft
Manifest number:          012A
Signing time:             Fri 19 Dec 2025 22:23:45 +0000
Manifest this update:     Fri 19 Dec 2025 22:18:45 +0000
Manifest next update:     Sun 21 Dec 2025 01:45:45 +0000
Files and hashes:         1: 323830343a393161383a3a2f33322d3332203d3e20323734363536.roa (hash: A/23x1riGUxCfrfNwho0GslGtDab8ivZ4KITvFtFGes=)
                          2: 45EEBB524CBBA5D22EE7BF9A51D7D950D3DF6A7C.crl (hash: uA8NP9SJcyf+N4QduX6Ei4vpoDDw6AjckvVxHME94I0=)
                          3: 3136382e3139342e3137362e302f32342d3234203d3e20323734363536.roa (hash: p9lMMOycBUomn5PpXNWW6Z9pZil4EClbHR50XmQQV/A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ZVAXha5bmZQJf5sRjcBLrD2PR3whNjBUahnBpoqYCCc/0/45EEBB524CBBA5D22EE7BF9A51D7D950D3DF6A7C.crl
                          rsync://rpki-repo.registro.br/repo/ZVAXha5bmZQJf5sRjcBLrD2PR3whNjBUahnBpoqYCCc/0/45EEBB524CBBA5D22EE7BF9A51D7D950D3DF6A7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EEBB524CBBA5D22EE7BF9A51D7D950D3DF6A7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 01:45:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:22:e1:07:68:5e:8f:e5:a8:7e:aa:e1:b4:57:58:40:2f:7f:6d:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45EEBB524CBBA5D22EE7BF9A51D7D950D3DF6A7C
        Validity
            Not Before: Dec 19 22:18:45 2025 GMT
            Not After : Dec 21 01:45:45 2025 GMT
        Subject: CN=37DDF790BA76B60EF00D90953DA2564E296E492C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:10:01:9b:e5:5e:3c:fa:fb:9e:56:7e:1a:51:
                    50:66:1f:86:46:36:f8:0b:ee:26:88:4b:e6:2c:c2:
                    1f:b6:87:2e:7c:ca:07:a8:7b:39:dc:31:f4:9b:c8:
                    56:8d:50:80:84:85:11:86:99:e0:9e:44:79:b9:37:
                    75:15:ee:80:bf:01:85:ee:a5:05:c3:a2:62:27:6f:
                    c3:c0:a8:f8:68:86:2b:5a:59:87:da:9f:82:88:c0:
                    e7:b0:e4:d8:ec:26:71:5e:d5:4a:5b:30:ae:c2:99:
                    b9:dc:92:01:1f:04:4b:f2:d6:84:3a:c4:99:33:75:
                    d7:51:15:f6:db:95:e9:88:a6:c8:20:28:11:ad:5a:
                    9d:20:c1:5d:83:0e:59:7d:44:2e:92:c9:e7:ae:b5:
                    17:79:c9:39:2f:a0:ec:e1:ff:d6:37:e0:4a:56:36:
                    28:c7:32:bf:5f:19:b9:56:5e:b0:77:56:2a:16:7d:
                    ec:23:45:a1:67:23:3a:06:40:d2:19:18:f2:e9:e4:
                    90:f4:6b:77:e1:e6:94:95:62:b0:81:80:ed:74:34:
                    46:b1:39:7d:a4:c1:ec:7c:ff:f8:08:48:c8:ab:82:
                    63:59:28:d0:05:d3:de:cb:eb:03:fd:25:3f:7d:5e:
                    14:3c:e3:72:0c:44:70:ea:f6:63:af:d7:15:ab:f0:
                    bb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:DD:F7:90:BA:76:B6:0E:F0:0D:90:95:3D:A2:56:4E:29:6E:49:2C
            X509v3 Authority Key Identifier:
                keyid:45:EE:BB:52:4C:BB:A5:D2:2E:E7:BF:9A:51:D7:D9:50:D3:DF:6A:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ZVAXha5bmZQJf5sRjcBLrD2PR3whNjBUahnBpoqYCCc/0/45EEBB524CBBA5D22EE7BF9A51D7D950D3DF6A7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EEBB524CBBA5D22EE7BF9A51D7D950D3DF6A7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ZVAXha5bmZQJf5sRjcBLrD2PR3whNjBUahnBpoqYCCc/0/45EEBB524CBBA5D22EE7BF9A51D7D950D3DF6A7C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:aa:7c:6f:6d:56:3f:58:e0:03:b6:d4:56:27:d5:3f:35:cb:
         54:92:07:fc:1e:be:64:96:f8:10:7b:95:9c:e4:df:c4:5d:bf:
         12:a3:e8:a0:88:94:94:83:76:f2:70:be:cf:b8:a9:c5:20:a6:
         ff:a9:23:20:7c:62:f6:50:2a:5f:94:ad:8c:c8:21:67:c1:59:
         36:5f:a9:38:fb:e3:b9:e8:78:3e:e7:45:40:df:72:54:1b:02:
         04:79:2d:f3:03:ee:6d:49:40:ab:cf:e7:3a:1c:d3:d4:48:8e:
         6b:41:5c:17:55:4d:d7:61:c6:0f:b7:db:65:06:66:84:96:c7:
         85:91:63:af:42:41:0b:0b:d2:3d:bb:d9:8b:61:0b:69:89:b8:
         51:b1:0c:0e:82:a0:9b:c8:26:7b:3f:3c:4c:26:7a:63:29:78:
         a0:ce:4b:d4:8f:89:e3:12:33:d2:6c:2d:80:fb:00:e9:8c:0b:
         f5:89:5f:f6:39:f1:a0:de:6b:b5:a9:d9:ee:b2:97:27:51:29:
         b2:10:42:31:41:ca:7a:de:13:bb:fd:c9:a0:76:3c:8f:a9:46:
         eb:df:33:0d:6a:7e:2d:c3:ae:2e:0c:b0:7e:21:c0:5b:59:d7:
         ec:39:3e:a3:54:8c:0e:8b:f5:7f:51:34:66:5b:9d:d8:bc:bc:
         fb:fc:57:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 15:22:17 2025 by rpki-client