This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/305A3A74989C2BDDE0AA26B2A4EF92F6213A034C.mft
File:                     305A3A74989C2BDDE0AA26B2A4EF92F6213A034C.mft (raw, json)
Hash identifier:          Myt1lsKQ8oxgi/OZ8yZZuYRVWzF4hc+okC2sUbqik5I=
Subject key identifier:   E1:AA:7C:83:6E:A7:F1:5D:22:2E:23:65:98:FB:02:03:33:D0:47:5B
Authority key identifier: 30:5A:3A:74:98:9C:2B:DD:E0:AA:26:B2:A4:EF:92:F6:21:3A:03:4C
Certificate issuer:       /CN=305A3A74989C2BDDE0AA26B2A4EF92F6213A034C
Certificate serial:       164BB1E3A57401AC57383444A461F91ADC6DF1D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/305A3A74989C2BDDE0AA26B2A4EF92F6213A034C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/305A3A74989C2BDDE0AA26B2A4EF92F6213A034C.mft
Manifest number:          017B
Signing time:             Sat 06 Dec 2025 12:38:51 +0000
Manifest this update:     Sat 06 Dec 2025 12:33:51 +0000
Manifest next update:     Sun 07 Dec 2025 12:59:51 +0000
Files and hashes:         1: 34352e3138342e3139362e302f32322d3234203d3e20323639333432.roa (hash: TEkcH+di2DqyWMwc4Z15pg3paw4sSgI5ke1q+LxliU8=)
                          2: 323830343a363332383a3a2f33322d3438203d3e20323639333432.roa (hash: HLu1IXKjueWa3zv0vz1mIike66Cq+79hjvw7eGM0Qw4=)
                          3: 305A3A74989C2BDDE0AA26B2A4EF92F6213A034C.crl (hash: CGlP9rEIBEbPVByKoeamZQamXKygOf6DQlP1kBbDPhY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/305A3A74989C2BDDE0AA26B2A4EF92F6213A034C.crl
                          rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/305A3A74989C2BDDE0AA26B2A4EF92F6213A034C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/305A3A74989C2BDDE0AA26B2A4EF92F6213A034C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 12:59:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:4b:b1:e3:a5:74:01:ac:57:38:34:44:a4:61:f9:1a:dc:6d:f1:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305A3A74989C2BDDE0AA26B2A4EF92F6213A034C
        Validity
            Not Before: Dec  6 12:33:51 2025 GMT
            Not After : Dec  7 12:59:51 2025 GMT
        Subject: CN=E1AA7C836EA7F15D222E236598FB020333D0475B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8a:bb:02:57:14:6d:2e:9f:77:44:04:88:14:
                    cf:1b:eb:3c:21:05:fe:61:4c:8d:5d:bf:63:df:ad:
                    02:09:c9:23:1f:3d:91:77:34:b8:48:50:e5:22:b2:
                    6c:bb:3d:55:82:aa:ec:13:24:2d:41:b3:fc:35:17:
                    ce:b9:c4:b8:b3:14:a0:48:c5:07:e9:bf:7c:cc:9e:
                    bc:84:22:f4:d7:8f:8e:39:b6:cd:6c:0d:6c:b5:cd:
                    ad:40:7d:24:56:f3:51:e4:5f:53:11:45:ab:f3:e1:
                    ea:9d:42:f2:b1:c4:f7:6b:b5:02:6a:6e:9f:86:c5:
                    c4:35:b1:19:b8:d5:92:69:c2:04:20:ec:4c:11:5d:
                    c2:39:92:2e:0d:1e:5c:51:66:7d:cf:c7:3f:86:d1:
                    0c:cd:7d:e5:6b:05:60:8a:02:4c:10:0a:e2:c5:d4:
                    10:50:05:e3:58:57:38:8d:16:14:29:d8:45:dc:be:
                    45:bb:ce:62:26:da:0d:4a:a1:a4:b9:8b:49:ff:cc:
                    71:41:00:69:ec:c8:c1:49:a6:2d:3d:a3:93:dc:4e:
                    9b:cd:ea:c8:65:3f:41:af:33:49:4c:ec:73:d6:03:
                    e5:13:52:38:93:28:df:ff:17:1f:63:f7:7d:51:4c:
                    b8:35:c2:45:0d:58:48:74:72:47:58:db:ff:90:44:
                    0b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:AA:7C:83:6E:A7:F1:5D:22:2E:23:65:98:FB:02:03:33:D0:47:5B
            X509v3 Authority Key Identifier:
                keyid:30:5A:3A:74:98:9C:2B:DD:E0:AA:26:B2:A4:EF:92:F6:21:3A:03:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/305A3A74989C2BDDE0AA26B2A4EF92F6213A034C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/305A3A74989C2BDDE0AA26B2A4EF92F6213A034C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/305A3A74989C2BDDE0AA26B2A4EF92F6213A034C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:ca:62:d3:53:f6:a1:05:21:c8:fa:99:86:1e:7d:79:1d:4b:
         c3:0f:30:2d:1f:6b:0f:95:fe:96:d0:8d:c7:11:37:38:e7:eb:
         ef:36:aa:90:70:e1:49:72:fd:a5:d3:2f:63:25:7f:8f:3e:5a:
         46:2b:33:ab:b4:22:0d:64:62:33:b4:8e:f1:3a:fb:1a:4a:c2:
         99:53:b4:ab:29:3c:c4:6f:e6:a2:67:4e:a4:28:a4:f7:b7:b6:
         a6:a3:60:a1:39:e6:92:61:b8:58:93:e5:b3:06:89:4b:9a:98:
         3d:9b:75:62:d4:33:7d:82:a5:7a:f6:ca:53:e7:fd:5b:73:e1:
         af:75:00:78:c9:90:34:6d:c4:3f:d2:55:d4:2f:17:b2:da:89:
         94:9e:96:77:10:9d:ec:d6:20:26:92:3d:07:f1:1a:ff:84:bf:
         d7:17:37:e8:d9:6f:af:69:fc:3b:2f:a2:bc:1f:cf:a3:a6:c9:
         ee:83:45:51:1a:f4:3a:b6:b5:72:1c:4f:8f:02:cf:4b:58:04:
         3d:96:e5:28:e5:f6:92:eb:b5:6b:99:b4:b0:fe:2c:3f:c6:6a:
         57:1c:1a:68:19:f7:00:c2:e8:6c:c6:a4:c0:76:57:c5:14:1d:
         4b:4f:d6:5c:ea:eb:81:26:fe:f4:aa:6b:b6:de:cf:37:51:61:
         26:d1:76:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:07:41 2025 by rpki-client