This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.mft
File:                     C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.mft (raw, json)
Hash identifier:          8FDls0wQhTHmQgh+oraiAfV4XeDyKCk5YQEx6AXEf4w=
Subject key identifier:   A2:4B:C3:37:21:8A:B6:EF:71:D5:4A:92:0D:A3:1C:AA:D0:35:F6:B0
Authority key identifier: C2:CB:7C:1A:52:E7:5C:0D:4B:39:4E:09:FC:63:EA:CF:FD:69:2D:88
Certificate issuer:       /CN=C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88
Certificate serial:       327E39BD1C16795B23E463EA726902B04C9969DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.mft
Manifest number:          02ED
Signing time:             Fri 19 Dec 2025 14:54:21 +0000
Manifest this update:     Fri 19 Dec 2025 14:49:21 +0000
Manifest next update:     Sat 20 Dec 2025 15:36:21 +0000
Files and hashes:         1: C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.crl (hash: bJTve43cxegt3CpEN0PRI+NOCEl7I9XCS6BEQFiqekI=)
                          2: 34352e3136312e3133362e302f32322d3234203d3e20323638353433.roa (hash: +UWLRPcrCNkkl3d7+jayjTCSeAxunhCr55Vu+UR33iY=)
                          3: 323830343a353264303a3a2f33322d3438203d3e20323638353433.roa (hash: Qrd0JpxRdK63UXPHTnI5YXQzpZ6Yil2JDfrC15kjcbA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.crl
                          rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 15:36:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:7e:39:bd:1c:16:79:5b:23:e4:63:ea:72:69:02:b0:4c:99:69:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88
        Validity
            Not Before: Dec 19 14:49:21 2025 GMT
            Not After : Dec 20 15:36:21 2025 GMT
        Subject: CN=A24BC337218AB6EF71D54A920DA31CAAD035F6B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:14:35:8b:04:a6:25:6e:7c:30:90:10:05:23:
                    75:01:f1:d0:b2:1a:3c:b4:19:bd:19:33:8b:7f:d0:
                    78:5f:b7:71:6d:dd:df:01:6f:fa:25:89:9f:21:2b:
                    b1:b2:cb:84:2d:df:66:c6:0d:52:7e:0b:1c:56:03:
                    8b:9f:5e:78:de:e5:81:e1:e4:37:92:53:e8:d9:16:
                    07:e7:9d:8f:5a:f9:bb:70:7c:59:a9:c4:ea:9d:e3:
                    78:00:bb:18:64:40:c7:32:91:c3:08:51:83:9a:4d:
                    36:61:25:fa:25:d5:04:6d:8e:9d:98:d9:84:d3:18:
                    32:b2:33:9e:6b:da:55:72:1a:74:72:67:38:1a:bc:
                    f8:43:58:99:07:ca:34:95:4d:cc:18:b3:b0:28:86:
                    4e:ca:e1:99:72:29:0c:96:08:1b:3d:a2:c5:79:6e:
                    32:66:60:4b:de:9a:d5:da:27:20:cf:2c:3a:b5:62:
                    0a:b9:73:26:c3:da:d1:ed:15:a5:24:b5:96:89:08:
                    35:c7:43:94:c7:94:92:e6:cf:34:e0:51:e8:35:df:
                    30:4c:f3:34:ca:36:67:5e:13:65:42:da:7a:66:ac:
                    8e:a3:09:ce:f4:0c:37:4d:5a:41:4a:ae:51:2d:f6:
                    90:08:78:e8:e8:c7:1e:01:a4:b3:9a:d8:48:52:4a:
                    90:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:4B:C3:37:21:8A:B6:EF:71:D5:4A:92:0D:A3:1C:AA:D0:35:F6:B0
            X509v3 Authority Key Identifier:
                keyid:C2:CB:7C:1A:52:E7:5C:0D:4B:39:4E:09:FC:63:EA:CF:FD:69:2D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:db:e5:b8:d1:1f:2f:22:5c:5f:e0:5b:e6:36:a6:94:ca:99:
         6e:3a:b5:5a:bd:db:7d:54:27:3b:b2:e1:c7:59:e7:6e:22:84:
         d9:ca:03:8a:4a:4f:5a:55:ba:74:f8:ac:b1:d0:2f:05:1b:ba:
         94:e0:b7:b2:1e:74:90:f0:5f:84:78:cc:3b:31:94:b9:08:7d:
         1a:f0:29:61:8f:48:2d:64:f4:21:b9:85:ee:2a:84:ee:a6:e8:
         1f:64:41:4c:4a:bc:02:f3:c0:70:d8:35:bf:bb:9b:db:24:a4:
         d8:3a:7e:07:ef:93:da:6d:63:c9:f6:14:08:bd:18:95:c7:86:
         16:d5:82:37:82:85:76:67:b3:fc:3b:30:f5:fe:cf:98:c2:c6:
         19:70:2f:3c:34:a4:59:8f:4b:05:1e:0a:38:ae:33:b4:bd:a4:
         3f:64:ad:a3:fd:c2:4b:aa:ee:7b:cb:89:ec:f4:e9:8f:16:4a:
         8f:e9:ac:15:ad:6c:d6:4b:6c:3b:64:85:73:da:9a:91:80:d0:
         a6:d4:d5:ca:15:de:d6:3e:ca:4a:96:72:0d:ff:cd:8a:78:fd:
         99:7e:3f:b8:8c:ff:e7:89:09:99:c3:de:7b:2c:4a:98:bb:f6:
         a5:a5:0f:fe:b8:d0:98:22:63:39:99:ff:f0:31:bc:77:df:6b:
         9c:e7:f6:9e
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUMn45vRwWeVsj5GPqcmkCsEyZadwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzJDQjdDMUE1MkU3NUMwRDRCMzk0RTA5RkM2M0VBQ0ZG
RDY5MkQ4ODAeFw0yNTEyMTkxNDQ5MjFaFw0yNTEyMjAxNTM2MjFaMDMxMTAvBgNV
BAMTKEEyNEJDMzM3MjE4QUI2RUY3MUQ1NEE5MjBEQTMxQ0FBRDAzNUY2QjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoFDWLBKYlbnwwkBAFI3UB8dCy
Gjy0Gb0ZM4t/0Hhft3Ft3d8Bb/oliZ8hK7Gyy4Qt32bGDVJ+CxxWA4ufXnje5YHh
5DeSU+jZFgfnnY9a+btwfFmpxOqd43gAuxhkQMcykcMIUYOaTTZhJfol1QRtjp2Y
2YTTGDKyM55r2lVyGnRyZzgavPhDWJkHyjSVTcwYs7Aohk7K4ZlyKQyWCBs9osV5
bjJmYEvemtXaJyDPLDq1Ygq5cybD2tHtFaUktZaJCDXHQ5THlJLmzzTgUeg13zBM
8zTKNmdeE2VC2npmrI6jCc70DDdNWkFKrlEt9pAIeOjoxx4BpLOa2EhSSpB/AgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUokvDNyGKtu9x1UqSDaMcqtA19rAwHwYDVR0j
BBgwFoAUwst8GlLnXA1LOU4J/GPqz/1pLYgwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby84V3RoTnNhcHRCc1BFRWU4YUxmeEhBeWFTeEFublQ5eXVXZWdIU2RITVZN
LzAvQzJDQjdDMUE1MkU3NUMwRDRCMzk0RTA5RkM2M0VBQ0ZGRDY5MkQ4OC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9DMkNCN0MxQTUyRTc1QzBENEIz
OTRFMDlGQzYzRUFDRkZENjkyRDg4LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhX
dGhOc2FwdEJzUEVFZThhTGZ4SEF5YVN4QW5uVDl5dVdlZ0hTZEhNVk0vMC9DMkNC
N0MxQTUyRTc1QzBENEIzOTRFMDlGQzYzRUFDRkZENjkyRDg4Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
DtvluNEfLyJcX+Bb5jamlMqZbjq1Wr3bfVQnO7Lhx1nnbiKE2coDikpPWlW6dPis
sdAvBRu6lOC3sh50kPBfhHjMOzGUuQh9GvApYY9ILWT0IbmF7iqE7qboH2RBTEq8
AvPAcNg1v7ub2ySk2Dp+B++T2m1jyfYUCL0YlceGFtWCN4KFdmez/Dsw9f7PmMLG
GXAvPDSkWY9LBR4KOK4ztL2kP2Sto/3CS6rue8uJ7PTpjxZKj+msFa1s1ktsO2SF
c9qakYDQptTVyhXe1j7KSpZyDf/Ninj9mX4/uIz/54kJmcPeeyxKmLv2paUP/rjQ
mCJjOZn/8DG8d99rnOf2ng==
-----END CERTIFICATE-----
Generated at Fri Dec 19 17:24:54 2025 by rpki-client