This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.mft
File:                     2601DE669734AEE0385101964D2ED4C0B8A927D4.mft (raw, json)
Hash identifier:          U7IxhTYOcfz70XOcK7VcuFBSZo7HZBdgICtF8YrqzZU=
Subject key identifier:   51:24:04:3D:6D:7E:08:66:87:53:2F:2E:CE:AC:83:5D:ED:58:F7:AB
Authority key identifier: 26:01:DE:66:97:34:AE:E0:38:51:01:96:4D:2E:D4:C0:B8:A9:27:D4
Certificate issuer:       /CN=2601DE669734AEE0385101964D2ED4C0B8A927D4
Certificate serial:       36E8280ECDA305D00A4B2D021976717D30875846
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2601DE669734AEE0385101964D2ED4C0B8A927D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.mft
Manifest number:          01A4
Signing time:             Sun 21 Dec 2025 19:28:58 +0000
Manifest this update:     Sun 21 Dec 2025 19:23:58 +0000
Manifest next update:     Mon 22 Dec 2025 20:23:58 +0000
Files and hashes:         1: 2601DE669734AEE0385101964D2ED4C0B8A927D4.crl (hash: fHM4RPnBs0NDGYaJRaSWcBvGbGw6USff4dMM1Ps3CKo=)
                          2: 323830343a383631343a3a2f33322d3434203d3e20323732363139.roa (hash: pQviQjOONbuzn6pqxVPP7SoctO2grbtBArJUd8XQvF4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.crl
                          rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2601DE669734AEE0385101964D2ED4C0B8A927D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 20:23:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:e8:28:0e:cd:a3:05:d0:0a:4b:2d:02:19:76:71:7d:30:87:58:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2601DE669734AEE0385101964D2ED4C0B8A927D4
        Validity
            Not Before: Dec 21 19:23:58 2025 GMT
            Not After : Dec 22 20:23:58 2025 GMT
        Subject: CN=5124043D6D7E086687532F2ECEAC835DED58F7AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bc:e9:dd:d8:43:0d:6f:de:88:2a:71:a9:a1:
                    eb:c5:f4:3b:06:7d:fa:ff:99:c7:16:ac:16:c8:4d:
                    61:12:83:7e:fc:be:40:de:89:db:3c:47:fb:05:2a:
                    d7:7c:c1:5a:9f:75:95:53:8c:2b:9c:a2:da:81:40:
                    be:eb:be:8f:8f:3c:d0:0a:bd:bf:fa:b7:b1:dc:9d:
                    9a:b3:3a:dc:81:4a:9e:bb:7b:e7:25:9e:68:80:93:
                    44:56:7a:c6:f2:47:78:01:0b:e6:1e:b8:c4:c1:b0:
                    7e:4d:c9:de:c1:49:f2:97:24:cd:09:c2:36:54:6a:
                    fa:bd:8f:bc:34:7b:86:d3:a2:ca:31:e7:5e:b1:17:
                    c0:71:1b:9a:0b:f5:27:15:11:84:ae:89:8c:f2:54:
                    c5:ae:0c:1f:23:35:00:2d:e7:83:4b:2a:ee:2d:61:
                    cc:b1:51:d9:76:fd:16:49:28:03:ee:d2:00:ed:53:
                    f0:c7:e0:ad:6a:b6:50:b1:8a:8e:04:a2:27:7d:3e:
                    89:12:bf:ec:28:4d:c1:71:3b:52:13:b5:fb:51:da:
                    1e:fa:81:22:a2:d6:5d:9c:e2:c4:b9:53:10:a7:a3:
                    35:ad:3f:01:96:b0:3b:1b:97:30:b7:86:f5:c8:17:
                    6a:a3:01:ce:73:b2:2b:29:df:43:5e:2b:b3:cb:70:
                    e5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:24:04:3D:6D:7E:08:66:87:53:2F:2E:CE:AC:83:5D:ED:58:F7:AB
            X509v3 Authority Key Identifier:
                keyid:26:01:DE:66:97:34:AE:E0:38:51:01:96:4D:2E:D4:C0:B8:A9:27:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2601DE669734AEE0385101964D2ED4C0B8A927D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:58:04:0f:06:de:ce:62:f5:f1:db:44:b7:59:d7:82:83:11:
         af:5c:68:ad:ae:92:f5:74:df:86:65:61:ff:e7:e3:f4:b4:2c:
         b6:47:b3:7f:3d:b5:61:5b:3c:cc:85:d5:8a:3c:8b:72:04:52:
         92:ff:6a:7c:ce:29:4f:f7:ea:2a:14:8e:52:c9:3e:4a:f5:32:
         cc:ec:a5:43:af:7c:e3:82:d5:9f:be:1f:f0:aa:38:69:d7:28:
         9d:2c:fe:03:7a:ae:21:0a:97:2c:b0:3f:62:e3:d0:9c:51:2c:
         34:22:62:f2:ff:bf:db:bd:6a:ed:74:d2:82:00:54:a6:27:e8:
         96:aa:4c:57:98:ea:68:d2:bd:9a:fc:46:6c:8d:d3:68:88:f7:
         7d:70:1f:79:8c:64:e9:41:94:d7:9a:ea:8a:3d:9f:4a:8a:2d:
         af:47:07:af:67:4a:8e:85:4b:da:8e:e1:bf:73:c5:2b:69:9e:
         58:46:25:b9:5c:49:60:02:70:4d:83:6d:9a:59:fb:c0:7c:5b:
         82:53:23:30:33:04:18:7c:97:61:f1:de:6e:00:d2:70:20:ae:
         24:26:1e:f8:3d:65:62:09:a2:75:6b:39:09:84:2f:28:54:e2:
         a8:a9:52:f9:7e:cb:90:39:a5:2f:e7:3a:ef:8b:59:18:b8:5e:
         63:49:9a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:29:56 2025 by rpki-client