This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/D264983A092FF22610C9F436FE4BFC265EF4DF1B.mft
File:                     D264983A092FF22610C9F436FE4BFC265EF4DF1B.mft (raw, json)
Hash identifier:          dyaOrtzcMQEzleEfOPRwW+H7eK1wB7MyekcGXrcUVfc=
Subject key identifier:   CA:BC:6C:2E:EB:47:5F:9D:37:80:E0:E6:B6:0F:01:10:5E:A5:81:6A
Authority key identifier: D2:64:98:3A:09:2F:F2:26:10:C9:F4:36:FE:4B:FC:26:5E:F4:DF:1B
Certificate issuer:       /CN=D264983A092FF22610C9F436FE4BFC265EF4DF1B
Certificate serial:       30E173DF1F738C39B35A57014AD476F38201E566
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D264983A092FF22610C9F436FE4BFC265EF4DF1B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/D264983A092FF22610C9F436FE4BFC265EF4DF1B.mft
Manifest number:          CD
Signing time:             Sat 06 Dec 2025 02:28:23 +0000
Manifest this update:     Sat 06 Dec 2025 02:23:23 +0000
Manifest next update:     Sun 07 Dec 2025 03:31:23 +0000
Files and hashes:         1: 323830343a333563303a3a2f33322d313238203d3e20323636333034.roa (hash: L6tT+CLCIOq/ZH0M4XlV1mxoG/xMgBOBpAozBQe0PjM=)
                          2: D264983A092FF22610C9F436FE4BFC265EF4DF1B.crl (hash: sQuL4/yQc7x2xPPDQUGHT6GAhFt3Z9RP4Rpl2FtfsGw=)
                          3: 3137302e37392e3230302e302f32322d3332203d3e20323636333034.roa (hash: LGeUXiaM2/c1vLGUKu+hgacL8LtOYT3QJEpd2sZiP9s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/D264983A092FF22610C9F436FE4BFC265EF4DF1B.crl
                          rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/D264983A092FF22610C9F436FE4BFC265EF4DF1B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D264983A092FF22610C9F436FE4BFC265EF4DF1B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 03:31:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e1:73:df:1f:73:8c:39:b3:5a:57:01:4a:d4:76:f3:82:01:e5:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D264983A092FF22610C9F436FE4BFC265EF4DF1B
        Validity
            Not Before: Dec  6 02:23:23 2025 GMT
            Not After : Dec  7 03:31:23 2025 GMT
        Subject: CN=CABC6C2EEB475F9D3780E0E6B60F01105EA5816A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b5:24:17:be:9e:13:d4:fe:71:db:ba:b3:dc:
                    7c:a2:e3:76:c7:6d:7f:2c:7f:f6:2d:ac:94:c1:db:
                    54:eb:9e:c5:79:ed:36:c4:b0:c7:29:ab:99:24:34:
                    2a:ac:cd:2a:46:39:d9:fd:87:2b:6b:c3:48:66:c7:
                    94:f7:41:dc:42:93:e4:e5:e4:ee:19:9f:b2:2f:a5:
                    1c:04:82:91:78:e8:ca:8a:dc:fd:61:07:0f:70:af:
                    59:f7:0e:5f:7a:96:11:cc:3d:a0:6a:d8:fb:6a:07:
                    da:a0:a8:4b:64:ac:f9:ae:09:e7:73:75:47:20:7c:
                    2f:f8:9a:10:04:67:9c:69:44:4f:d7:55:90:27:09:
                    34:84:fc:82:9d:a7:a3:77:76:eb:48:2d:b7:f5:e9:
                    83:55:76:3f:0b:54:c5:29:fa:d1:99:fc:23:18:31:
                    fd:0c:83:0d:19:d5:99:6c:b4:a7:f5:be:8a:fa:bf:
                    d5:dc:2c:5f:3d:1a:1b:c9:e3:ed:8d:14:46:8c:bc:
                    b0:31:a3:70:c7:56:6d:8c:ac:20:40:93:a3:25:45:
                    c9:9a:b1:d1:51:1f:73:26:ca:c5:d2:69:56:f9:63:
                    20:46:c9:70:7d:86:25:21:71:6a:3b:fd:e9:e7:27:
                    a6:47:7c:99:e6:0f:a4:76:f4:d5:51:30:0f:fc:b8:
                    a4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:BC:6C:2E:EB:47:5F:9D:37:80:E0:E6:B6:0F:01:10:5E:A5:81:6A
            X509v3 Authority Key Identifier:
                keyid:D2:64:98:3A:09:2F:F2:26:10:C9:F4:36:FE:4B:FC:26:5E:F4:DF:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/D264983A092FF22610C9F436FE4BFC265EF4DF1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D264983A092FF22610C9F436FE4BFC265EF4DF1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/D264983A092FF22610C9F436FE4BFC265EF4DF1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:5e:2e:7e:27:8a:18:c4:b6:3b:07:7d:57:d5:2b:95:2f:14:
         23:73:13:c6:8d:ad:b8:3f:0c:c3:db:3d:70:37:e2:4b:84:6a:
         23:0f:96:e5:32:29:e4:8f:ee:86:db:d6:27:0c:6e:35:da:42:
         0d:43:e3:f4:b1:3e:00:c8:ec:e3:3f:89:53:c7:d7:62:04:9a:
         7f:42:04:94:e3:c0:7b:0f:2e:ef:8b:0e:a6:26:75:f3:99:2c:
         aa:85:28:7a:74:fd:21:ac:27:1a:54:01:e2:0d:87:11:61:ed:
         18:eb:5d:95:5b:a6:c9:dd:e0:cf:7a:4e:06:5a:e0:0f:1c:14:
         72:21:5f:00:db:93:4f:79:8e:5e:81:3e:1b:26:a5:c1:5e:da:
         21:1e:c1:76:a8:ed:b6:46:a2:f5:47:96:4a:8c:09:78:ee:89:
         35:b8:cb:5d:5f:3e:1e:94:1e:18:67:36:30:5b:ba:96:5a:9e:
         0a:9c:4f:f3:c0:c8:78:d2:aa:22:da:e1:6e:64:39:91:73:88:
         09:71:ff:7f:56:c9:51:81:ff:c8:dc:bc:af:e0:8e:57:47:00:
         20:5e:ec:ac:2e:80:b5:4a:c2:3e:cc:c4:0c:0a:0c:5d:42:29:
         b2:f2:7b:e5:f0:8f:7b:b8:a7:b0:65:88:62:7c:f8:c3:74:09:
         5d:e1:da:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:30:59 2025 by rpki-client