This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7rWaW1VagjRnQZYJ31bKQXfhHRfLgVSHRT6v5xhkNj62/1/7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.mft
File:                     7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.mft (raw, json)
Hash identifier:          nXVtvCinpGoIocOGfwP0ik+yA+XNWf8k9ckQRVXYYpQ=
Subject key identifier:   4B:35:1E:C2:DC:DC:03:F3:A5:D8:C4:02:5A:09:BB:E7:83:C6:66:EA
Authority key identifier: 7D:2F:EE:C4:D4:AC:78:B8:E6:A6:B0:C0:C6:A3:A0:2C:48:A9:F2:0D
Certificate issuer:       /CN=7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D
Certificate serial:       33C7CE5FA555294D8FBC708D566F8F3E3EF4F542
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7rWaW1VagjRnQZYJ31bKQXfhHRfLgVSHRT6v5xhkNj62/1/7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.mft
Manifest number:          032E
Signing time:             Sat 06 Dec 2025 06:51:04 +0000
Manifest this update:     Sat 06 Dec 2025 06:46:04 +0000
Manifest next update:     Sun 07 Dec 2025 10:03:04 +0000
Files and hashes:         1: 7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.crl (hash: o3avfz45E4PZ5haWUyRdIZ8wxeqmw4nPYBulVWhQeYI=)
                          2: 323830343a353764343a3a2f33322d3438203d3e20323638303839.roa (hash: U6egeYeFYsR6dbvMtpyDJyz1Ypey0XnQvbDPgnkbwTg=)
                          3: 34352e3136382e3138382e302f32322d3234203d3e20323638303839.roa (hash: 0hBMG5jz0Qc2i2kqjeRr3rCIwiJ1x6hHbJ3ZzlEXxJw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7rWaW1VagjRnQZYJ31bKQXfhHRfLgVSHRT6v5xhkNj62/1/7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.crl
                          rsync://rpki-repo.registro.br/repo/7rWaW1VagjRnQZYJ31bKQXfhHRfLgVSHRT6v5xhkNj62/1/7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 10:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c7:ce:5f:a5:55:29:4d:8f:bc:70:8d:56:6f:8f:3e:3e:f4:f5:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D
        Validity
            Not Before: Dec  6 06:46:04 2025 GMT
            Not After : Dec  7 10:03:04 2025 GMT
        Subject: CN=4B351EC2DCDC03F3A5D8C4025A09BBE783C666EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:72:66:b5:10:a3:35:ce:11:91:62:81:b3:37:
                    87:d0:84:c4:6f:9b:57:3f:9a:4c:d2:3d:33:e9:1c:
                    e9:0e:a1:70:bc:2a:07:b1:0b:fb:ff:43:dd:71:b2:
                    6e:fd:88:95:7a:40:d6:66:8c:45:43:91:cc:75:b6:
                    8b:bb:af:6c:bc:ef:8d:d4:00:2f:76:64:3f:ff:6b:
                    33:03:18:ee:d6:46:1f:48:1c:0a:f3:ec:43:ba:03:
                    45:17:37:62:7f:d8:e8:bd:51:1c:70:86:f9:11:4f:
                    c5:7d:4c:98:cd:8c:e5:77:6b:ab:b9:a0:11:25:ba:
                    51:6e:bd:78:a3:bd:14:00:1e:e8:9c:cf:82:80:0a:
                    4b:9c:52:74:b3:c1:76:24:aa:2d:49:10:19:8e:e5:
                    0f:44:00:1f:6b:b6:64:0b:1c:28:54:ea:9d:9a:09:
                    cb:c1:c7:2b:91:6d:cc:da:f6:49:f0:e4:a1:a4:dc:
                    ec:ab:f9:b8:d0:c3:28:30:12:51:e3:ff:25:44:ad:
                    4a:70:cf:bd:30:e5:fb:52:1b:f9:0e:9d:46:f0:d5:
                    5a:80:33:e9:30:36:75:80:5e:cc:72:bc:31:6a:a4:
                    ba:1e:59:93:d2:1f:14:52:ad:b0:e7:f1:d8:88:83:
                    b3:0b:2d:1d:21:c6:fa:b9:32:bc:f4:71:39:53:37:
                    28:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:35:1E:C2:DC:DC:03:F3:A5:D8:C4:02:5A:09:BB:E7:83:C6:66:EA
            X509v3 Authority Key Identifier:
                keyid:7D:2F:EE:C4:D4:AC:78:B8:E6:A6:B0:C0:C6:A3:A0:2C:48:A9:F2:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7rWaW1VagjRnQZYJ31bKQXfhHRfLgVSHRT6v5xhkNj62/1/7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rWaW1VagjRnQZYJ31bKQXfhHRfLgVSHRT6v5xhkNj62/1/7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:06:c7:67:0c:d9:85:d9:30:2b:60:e3:b3:24:cd:98:57:2a:
         66:c5:16:6d:74:bd:06:dd:86:bc:00:7e:8f:72:59:ff:b0:ea:
         a4:4e:b7:bf:a1:60:b1:1b:dd:71:fd:2d:fc:1f:00:45:14:7d:
         94:dd:28:3f:bb:c2:aa:51:e8:24:79:b6:56:26:4d:3d:69:d7:
         96:6a:bb:f2:3a:88:20:19:b9:fd:b4:75:3b:8a:55:3b:f0:f8:
         64:d6:72:a8:2c:f0:14:44:42:2c:29:a5:7e:a0:87:76:2f:d4:
         f5:f2:96:0d:f7:74:d8:2c:6b:47:4e:ca:a8:1f:4b:73:d9:27:
         78:b2:30:38:94:5d:67:ce:f3:8d:24:1c:24:a0:15:12:c9:8e:
         73:34:c3:95:4d:f4:a4:f9:fe:ac:28:4d:1c:70:20:f5:aa:32:
         62:9f:0b:c2:cb:e9:4c:a7:b1:4e:5b:42:3f:42:4f:49:4d:10:
         82:6f:35:27:10:79:28:a5:0c:d8:92:a3:cb:03:ec:8c:0f:df:
         be:a3:83:35:3a:71:ba:b0:00:01:e2:3f:d8:60:28:9d:fd:62:
         70:f0:9e:0a:eb:4b:aa:2e:03:46:e3:19:24:ea:9b:34:5a:d0:
         23:d9:ae:91:5f:d3:a9:4b:5e:36:94:1a:7e:a7:7a:98:bf:93:
         1b:cd:44:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:58:40 2025 by rpki-client