This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft
File:                     D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft (raw, json)
Hash identifier:          2+WNF5mXdpHL405FkRuxQnyqv/lMz89vSOZqjrX5Fms=
Subject key identifier:   7E:64:4B:87:AE:2B:E6:7A:B0:D0:3E:B3:9B:9F:9F:92:07:66:CD:2B
Authority key identifier: D6:30:86:E4:2E:9B:AB:A0:28:DC:D8:D6:5C:FF:50:CE:EF:BD:78:DC
Certificate issuer:       /CN=D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC
Certificate serial:       052F64F414403A287A90FDA7548E272C1456A8E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft
Manifest number:          033E
Signing time:             Wed 17 Dec 2025 01:26:58 +0000
Manifest this update:     Wed 17 Dec 2025 01:21:58 +0000
Manifest next update:     Thu 18 Dec 2025 02:33:58 +0000
Files and hashes:         1: 323830343a3934633a3a2f33322d3438203d3e20323633303731.roa (hash: a+ZxC/aVIvRBiL+9b6UmCNXG86FPx17UdrDq464ohKI=)
                          2: 3138362e3233322e3138382e302f32322d3234203d3e20323633303731.roa (hash: QZ++cLr6ePWgalsSJXAkh2lAerAWd1JhyTtP73I1+S8=)
                          3: 3139312e362e3134342e302f32312d3234203d3e20323633303731.roa (hash: 3z/seUfwbtY8VHvQVEp/hjesW7X+hzHuxNmo8T4n9yI=)
                          4: D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.crl (hash: p8hcLXXM/mABr/l4YlEzse/mqp+TkQMc+1c0N8K+JmA=)
                          5: 3137372e37332e35362e302f32322d3234203d3e20323633303731.roa (hash: 0DCCZJbrhxGS3fKPi1a5Yh23caoQ1m2nGZ+Ls0nr36Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.crl
                          rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Dec 2025 02:33:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:2f:64:f4:14:40:3a:28:7a:90:fd:a7:54:8e:27:2c:14:56:a8:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC
        Validity
            Not Before: Dec 17 01:21:58 2025 GMT
            Not After : Dec 18 02:33:58 2025 GMT
        Subject: CN=7E644B87AE2BE67AB0D03EB39B9F9F920766CD2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1c:ed:0b:2e:22:31:e0:bd:7c:72:e4:e0:13:
                    d7:b1:29:e5:48:73:e2:df:d5:cb:5b:51:a7:47:02:
                    ac:cd:8e:19:47:f3:30:3a:f9:6c:a9:fd:e5:10:32:
                    69:04:6a:b0:b7:07:c1:e7:48:d1:27:df:7f:ab:90:
                    fc:40:5e:ac:a1:4f:0c:ae:1d:17:26:4c:74:9a:b7:
                    78:bd:8c:c3:34:f8:aa:03:db:b3:9a:ab:9e:17:f5:
                    59:3e:65:75:91:1c:d3:d1:2c:84:a6:65:f1:f8:08:
                    ef:ef:a5:72:ce:6f:47:7e:32:c7:a0:9d:a5:de:75:
                    4a:96:96:05:ac:ce:10:f4:bd:64:4e:4f:e2:ab:dc:
                    3e:11:df:d2:04:eb:b4:bc:ca:5e:58:35:75:a5:bd:
                    f6:25:71:20:80:b2:3c:81:e3:26:95:cc:d6:89:41:
                    45:0f:a1:47:cf:b4:24:7c:47:5b:32:c3:3e:34:83:
                    ff:20:f8:28:3b:26:95:18:3f:e4:1f:71:a5:d8:90:
                    05:b6:b8:41:83:9d:62:b5:86:58:28:49:73:bc:91:
                    bf:0f:87:60:f8:3d:c3:fc:62:67:50:95:ee:24:d8:
                    41:7e:b9:d9:8c:f7:be:4b:26:f5:b8:fd:90:ae:8a:
                    7b:ae:f4:bc:fc:f9:78:dc:5b:21:d8:3f:8d:20:f4:
                    23:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:64:4B:87:AE:2B:E6:7A:B0:D0:3E:B3:9B:9F:9F:92:07:66:CD:2B
            X509v3 Authority Key Identifier:
                keyid:D6:30:86:E4:2E:9B:AB:A0:28:DC:D8:D6:5C:FF:50:CE:EF:BD:78:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:eb:5e:0e:e1:59:97:d8:75:46:8f:37:e5:68:da:f0:55:b2:
         53:0e:3c:05:fb:de:88:cf:c2:0d:e6:62:99:de:50:d4:62:84:
         4a:ae:86:d2:ce:0b:70:9d:14:90:4a:07:01:2b:cd:7c:4c:53:
         22:2b:9f:5b:62:36:20:ba:f1:7c:d5:18:6d:ed:1f:f7:89:aa:
         0b:ed:3f:18:d8:46:6e:2a:68:f2:7f:75:24:98:49:22:8a:d0:
         8c:6b:7d:59:21:30:d1:15:0d:e7:56:95:25:de:0b:69:fd:88:
         f2:ba:24:bb:15:3d:42:82:b9:ac:cf:35:e0:14:b2:55:3e:f8:
         60:df:90:ed:66:c7:9b:0f:69:56:9b:4a:01:c8:72:6b:63:84:
         f1:11:a0:a6:ab:27:90:97:90:6d:c8:55:2f:4f:93:a8:70:79:
         f1:0f:57:7c:c6:e7:ac:4b:c6:ca:55:06:a8:01:59:60:50:54:
         48:de:9f:77:de:32:52:77:1a:05:e3:7a:8b:d3:07:18:cf:92:
         61:cd:62:fa:ba:3f:0d:2f:45:84:09:4e:09:a1:ec:2a:9d:41:
         db:60:d7:9b:84:30:19:4b:4d:2f:0b:39:a1:92:01:7a:98:16:
         c8:cd:97:75:00:82:35:24:21:d2:16:88:ec:d7:de:94:93:36:
         65:71:f9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 08:53:07 2025 by rpki-client