This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.mft
File:                     2A2D171F50E53E6487FE9AC612997F616E111F59.mft (raw, json)
Hash identifier:          c6mOHT/nRUE+5ple3fujZcEDG0C6Wk/hq738lpKkI0g=
Subject key identifier:   22:18:10:23:1D:BD:A7:32:0A:E2:9A:02:8E:E6:DC:1D:77:B6:DB:00
Authority key identifier: 2A:2D:17:1F:50:E5:3E:64:87:FE:9A:C6:12:99:7F:61:6E:11:1F:59
Certificate issuer:       /CN=2A2D171F50E53E6487FE9AC612997F616E111F59
Certificate serial:       49BEE70A2A69FB7FF733EBB4F16A287FC8FC8354
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A2D171F50E53E6487FE9AC612997F616E111F59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.mft
Manifest number:          30
Signing time:             Sat 06 Dec 2025 11:00:22 +0000
Manifest this update:     Sat 06 Dec 2025 10:55:22 +0000
Manifest next update:     Sun 07 Dec 2025 14:07:22 +0000
Files and hashes:         1: 3138312e3233332e31372e302f32342d3234203d3e20323731343834.roa (hash: +lsjrk2UIScYi8SDIHluwvVTWNsZRS6AIaGL7QvTJZc=)
                          2: 3138312e3233332e31362e302f32332d3233203d3e20323731343834.roa (hash: gKMoHy+rODKPUAf8QM5/Ap55BaDN4Q3v0d6D/qgH98o=)
                          3: 2A2D171F50E53E6487FE9AC612997F616E111F59.crl (hash: KSJd6wuuFB6NEZyvgkZwOL3tQWOlGbOLRi1iFluxgSQ=)
                          4: 3138312e3233332e31382e302f32342d3234203d3e20323731343834.roa (hash: 8HFNj0UvH/mT6+am50eZsPlT2RkGuhVCAxpux8S88Tk=)
                          5: 3138312e3233332e31362e302f32322d3232203d3e20323731343834.roa (hash: sZ7mauTccR6Vr33eBysyROpFZqy4NIdemkOk7+qk1mc=)
                          6: 323830343a376334303a3330303a3a2f34302d3430203d3e20323731343834.roa (hash: VYPJmR+bSgKh4ZSmIyNc+43+bncYaleMRi0FjrTAjQc=)
                          7: 323830343a376334303a3530303a3a2f34302d3430203d3e20323731343834.roa (hash: qOcpib71FCIgJuWP11hIWR0xsdWC5aYwUouS6GK4PHM=)
                          8: 3138312e3233332e31392e302f32342d3234203d3e20323731343834.roa (hash: rfuOi95nQx4MtMO9tjUGqSZ/3TsvDGgZk+ZmNoXGy5A=)
                          9: 323830343a376334303a3430303a3a2f34302d3430203d3e20323731343834.roa (hash: TFcDjtx6//UfjHrYWfUHw80DG3xe7v+eWyGykRUS6AM=)
                          10: 323830343a376334303a3230303a3a2f34302d3430203d3e20323731343834.roa (hash: vcrlJvntgLlMme52fDMwOsL8kYlF7Ez8P7dfDopf8bk=)
                          11: 323830343a376334303a3a2f33322d3332203d3e20323731343834.roa (hash: qs+i4/FHT6E8OpWubLPRLNoqjZKQ0j2e6KGbpWPi0hA=)
                          12: 323830343a376334303a383030303a3a2f34302d3430203d3e20323731343834.roa (hash: WPAvjwj5Ob5x5Y4/XHcKHyOhP8jUseedMfyHODlE7zQ=)
                          13: 323830343a376334303a3130303a3a2f34302d3430203d3e20323731343834.roa (hash: da714LbJ/u7Te0j7UsVMjQoOsI/HKoynpRSszQ55V+c=)
                          14: 3138312e3233332e31362e302f32342d3234203d3e20323731343834.roa (hash: H3Ta+a74iESvXKsBavQB8MADzD0plamDdxORJTG+4Bo=)
                          15: 3138312e3233332e31382e302f32332d3233203d3e20323731343834.roa (hash: j6SbIxVSu1bsT170jIGIovQddlhPv/2q+jfCF1LtDeI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.crl
                          rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A2D171F50E53E6487FE9AC612997F616E111F59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 14:07:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:be:e7:0a:2a:69:fb:7f:f7:33:eb:b4:f1:6a:28:7f:c8:fc:83:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2D171F50E53E6487FE9AC612997F616E111F59
        Validity
            Not Before: Dec  6 10:55:22 2025 GMT
            Not After : Dec  7 14:07:22 2025 GMT
        Subject: CN=221810231DBDA7320AE29A028EE6DC1D77B6DB00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:92:10:6f:73:5d:6d:20:7b:38:e8:7a:88:f3:
                    5e:1e:87:23:f3:df:3e:6d:d8:8d:17:17:f5:f8:cf:
                    fa:0d:c8:ec:d5:77:cd:0e:97:7b:3d:3f:94:bf:05:
                    91:50:66:22:01:8b:a1:79:3b:1f:8e:28:63:05:8b:
                    85:9c:4c:d6:50:c2:45:93:45:da:0d:ce:d7:d8:14:
                    22:da:52:09:e3:56:ae:32:2a:35:d3:ac:fb:4e:26:
                    0a:26:ac:aa:24:3b:9f:eb:0e:4e:78:b6:12:7d:12:
                    a1:4f:e7:1c:2c:7b:55:06:85:cb:40:73:2d:e5:97:
                    30:12:6a:32:bd:52:7c:2a:03:34:2d:25:ff:70:d1:
                    64:51:93:9a:a5:84:a0:30:89:b6:b8:bc:35:e9:0b:
                    87:02:79:5e:a7:2e:e5:65:44:13:cb:2f:aa:47:3d:
                    0d:94:a2:ea:dd:59:59:f6:2f:88:8a:b6:5f:d9:84:
                    b7:78:31:9d:44:d2:cf:6f:11:7d:3c:73:e0:ed:16:
                    36:49:b4:95:66:7e:b4:9e:c7:4d:ac:74:27:f6:31:
                    b0:03:47:cc:d5:5e:07:76:a0:1a:00:e7:58:be:a6:
                    da:68:f1:6e:9a:3c:89:f7:b2:78:e1:ad:0c:e1:43:
                    5a:d7:30:0f:c8:02:90:5b:ab:b9:07:a6:40:db:93:
                    55:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:18:10:23:1D:BD:A7:32:0A:E2:9A:02:8E:E6:DC:1D:77:B6:DB:00
            X509v3 Authority Key Identifier:
                keyid:2A:2D:17:1F:50:E5:3E:64:87:FE:9A:C6:12:99:7F:61:6E:11:1F:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A2D171F50E53E6487FE9AC612997F616E111F59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:33:c0:60:56:cf:2b:2d:37:b5:0a:86:ec:ca:7c:2d:6a:01:
         e1:ee:b9:c5:74:37:9b:06:78:75:1a:9a:19:2a:f7:6b:8c:bd:
         59:43:c1:24:9d:ad:f5:9c:e4:22:b8:06:40:90:a7:7d:68:19:
         6c:84:b1:b9:f5:04:a9:2f:df:33:b9:c4:0c:b9:d2:6c:7f:71:
         46:fc:61:50:3b:0b:74:2f:f3:d2:72:e2:89:00:a1:90:53:58:
         00:fc:c9:16:41:b6:32:b2:f3:fa:46:98:3d:0c:e2:2c:d5:71:
         7a:a6:1e:64:36:87:65:1e:aa:07:87:7f:f4:99:9e:2e:ba:ad:
         d9:a8:b1:11:75:0f:7d:4e:f3:ea:54:d9:22:27:43:0f:b9:90:
         a1:de:ef:17:4f:e4:1d:99:e7:d9:21:60:29:c4:0b:f2:68:b1:
         90:cf:9d:31:75:a3:7b:ed:92:a7:0b:e2:eb:99:98:89:8a:ce:
         12:57:c5:d1:77:84:4c:03:0d:33:53:97:27:4b:62:cc:98:a6:
         97:1e:dd:34:50:4a:8b:94:de:61:d8:57:9c:68:e4:3b:76:df:
         20:79:83:e9:6f:46:92:57:b7:c8:de:5d:3d:39:e6:92:ff:40:
         4d:c0:9c:1f:ed:17:96:78:07:07:f3:cf:77:85:6f:31:07:e5:
         d0:43:5d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:35:49 2025 by rpki-client