This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.mft
File:                     7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.mft (raw, json)
Hash identifier:          HVJCITRG3HWoZM7OjB4OPndAV6clU+Mkb3/Jg6L1qos=
Subject key identifier:   42:B4:81:C9:59:3C:F7:8E:01:F0:78:A4:26:07:39:DF:95:DD:3E:7E
Authority key identifier: 7B:E7:B1:02:06:B5:B5:6C:0F:50:0A:1A:71:E8:2A:5C:D9:1B:CF:59
Certificate issuer:       /CN=7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59
Certificate serial:       45A4BFE51859F989BF90249EC317BDFD7D5C416D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.mft
Manifest number:          A4
Signing time:             Wed 24 Dec 2025 08:37:13 +0000
Manifest this update:     Wed 24 Dec 2025 08:32:13 +0000
Manifest next update:     Thu 25 Dec 2025 10:30:13 +0000
Files and hashes:         1: 34352e3137312e34342e302f32322d3332203d3e20323638373338.roa (hash: 1hfLLgPLndMHPA/uuDeQstzCTGkdyFHXJMoTMJfWJRo=)
                          2: 7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.crl (hash: +6EuXJdb1NNTrTmDdLLqSEDeEmItk9+29YgZSyUPBE0=)
                          3: 323830343a353966633a3a2f33322d313238203d3e20323638373338.roa (hash: YWtnKwx3klbu9MAu6MOtd9+cJMXR/zaTU7e+i6U0BXs=)
                          4: 34352e37312e32382e302f32322d3332203d3e20323638373338.roa (hash: Hx7VZ6sTDCFaalE2SLScBc+sSPjVZs+H5AlI3gGKGWc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.crl
                          rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 10:30:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:a4:bf:e5:18:59:f9:89:bf:90:24:9e:c3:17:bd:fd:7d:5c:41:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59
        Validity
            Not Before: Dec 24 08:32:13 2025 GMT
            Not After : Dec 25 10:30:13 2025 GMT
        Subject: CN=42B481C9593CF78E01F078A4260739DF95DD3E7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f1:9f:d3:5f:f4:f8:4e:2c:b2:61:3d:5f:a8:
                    50:c3:05:fc:25:c8:57:fd:b8:50:c1:d1:6c:29:b7:
                    cb:15:9c:84:26:a7:52:67:df:c9:25:8c:19:88:d4:
                    47:d1:c3:42:b4:91:be:61:54:f1:63:af:45:ee:3a:
                    f6:03:c7:f0:a7:87:5d:92:e9:4f:9a:3d:d3:59:22:
                    67:56:ce:38:c9:ad:70:ae:d7:63:7e:cd:c8:88:85:
                    61:80:7e:e2:2c:d8:e5:65:17:b0:81:04:1a:fc:2f:
                    54:2b:43:33:7f:dd:a0:c9:e3:f7:25:92:08:55:81:
                    1d:dc:78:2f:66:d5:00:32:43:e1:1f:f9:8d:57:b4:
                    4c:e4:4c:71:e0:2e:06:a9:e2:27:7a:bc:e5:4e:32:
                    b7:27:11:ad:61:76:1d:ae:a2:91:93:03:48:05:a2:
                    c9:ac:88:5e:d2:35:41:3a:99:7e:87:ac:5d:94:ba:
                    27:8c:a5:75:7a:d4:17:70:10:03:3d:83:73:7f:1d:
                    ec:a9:a1:22:5c:e5:b3:34:d3:72:70:b5:d6:cb:7b:
                    7f:ce:d0:91:52:6e:f4:81:44:d1:72:9b:7e:f7:8e:
                    e4:23:31:1a:fa:a8:ed:dd:05:85:b3:91:28:7c:7f:
                    f1:68:e2:6d:28:a1:56:40:c7:1a:ce:95:1d:7d:54:
                    03:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B4:81:C9:59:3C:F7:8E:01:F0:78:A4:26:07:39:DF:95:DD:3E:7E
            X509v3 Authority Key Identifier:
                keyid:7B:E7:B1:02:06:B5:B5:6C:0F:50:0A:1A:71:E8:2A:5C:D9:1B:CF:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:7e:b4:21:e9:e3:ed:55:01:bc:fc:66:f4:f1:7c:90:37:c9:
         4f:aa:3f:e2:ea:0e:29:67:0f:39:9e:41:07:c7:1b:0a:44:4a:
         5b:80:7c:44:fd:39:6f:0b:78:92:cf:e8:2e:7b:5e:35:e8:65:
         82:4e:ac:cf:f7:f6:c9:be:f8:90:59:b9:cc:27:fc:78:31:d5:
         f6:52:23:a3:ba:af:88:d0:c7:b3:c2:e6:ae:d5:86:44:0c:09:
         4a:e0:f0:f1:06:cb:a7:f5:20:6e:f6:a5:8f:9a:22:69:3c:e5:
         15:d8:79:0a:77:9a:ab:2b:b7:3e:5f:ef:c9:92:f5:4e:e0:e7:
         58:65:cd:a3:d0:9a:6f:15:1b:2e:9e:81:b0:86:60:a9:e1:14:
         05:62:07:34:60:d8:d4:14:b1:25:de:0a:1f:11:2e:d7:7c:09:
         3b:38:c7:9f:cc:b9:d6:95:07:e6:59:64:a6:6f:0b:5b:08:e3:
         e1:54:83:62:ab:39:c6:84:43:f9:ce:10:b5:45:c9:60:88:e5:
         b4:9c:60:ce:d0:5e:1c:d3:bf:e0:a5:f0:1b:70:9a:1c:9a:e0:
         08:fd:7a:d3:0f:07:e1:f6:a2:8e:59:19:5e:f0:98:fb:b9:d8:
         16:9b:93:14:04:d0:09:c3:76:ad:6f:39:56:b2:3d:b7:9b:24:
         1a:b4:25:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:27:37 2025 by rpki-client