This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft
File:                     942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft (raw, json)
Hash identifier:          wip5x4+FJAijGJ1jGerRw5rq2HYsDmKd8T/zzZ32kBA=
Subject key identifier:   D3:83:12:D5:DD:63:E8:BB:60:E0:24:4B:7D:36:E7:0A:2D:49:7B:1E
Authority key identifier: 94:2F:2D:5A:E5:5B:72:15:DF:CC:A7:9C:55:2D:22:3D:29:B7:1D:FF
Certificate issuer:       /CN=942F2D5AE55B7215DFCCA79C552D223D29B71DFF
Certificate serial:       6EB7CB4FD8FB09FC85797667003661E37B5A1BA6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft
Manifest number:          033F
Signing time:             Wed 17 Dec 2025 06:44:16 +0000
Manifest this update:     Wed 17 Dec 2025 06:39:16 +0000
Manifest next update:     Thu 18 Dec 2025 10:26:16 +0000
Files and hashes:         1: 942F2D5AE55B7215DFCCA79C552D223D29B71DFF.crl (hash: QOJzZmz+Bm9ur3f4UjT4UZbOMmY75Br+baCWrvCc7YY=)
                          2: 3230312e3138322e3233362e302f32322d3332203d3e20323637353439.roa (hash: rsttPPyFpbKLJ/HEcFMY7LdhPPdzjhskDdtJkGJQnVk=)
                          3: 323830343a343331633a3a2f33322d313238203d3e20323637353439.roa (hash: 1qApqT8c98HJfSZVdIpkogEpxPHVsWJrpgIqGByb4/4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.crl
                          rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Dec 2025 10:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b7:cb:4f:d8:fb:09:fc:85:79:76:67:00:36:61:e3:7b:5a:1b:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=942F2D5AE55B7215DFCCA79C552D223D29B71DFF
        Validity
            Not Before: Dec 17 06:39:16 2025 GMT
            Not After : Dec 18 10:26:16 2025 GMT
        Subject: CN=D38312D5DD63E8BB60E0244B7D36E70A2D497B1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:eb:19:18:d9:87:81:35:f4:87:65:96:62:4a:
                    27:eb:dc:3f:f7:ee:ab:ee:26:49:5c:22:fb:70:45:
                    ae:ea:67:13:e7:3d:df:f6:bb:f6:75:d7:73:7d:b0:
                    ea:dc:a1:79:67:b1:37:9c:84:53:c2:00:a6:e7:10:
                    6c:0c:90:4c:88:18:fe:a6:96:7b:19:81:1a:d9:df:
                    52:96:0a:19:2c:3b:e6:19:57:18:9d:fb:55:a7:5c:
                    a3:1a:84:56:a2:c0:51:eb:ec:a5:be:94:80:32:da:
                    17:a8:3b:0e:56:20:ba:d5:c2:9b:d8:20:3a:e3:53:
                    6a:08:1c:61:92:ba:b3:91:1d:47:31:03:32:1c:fc:
                    07:98:55:c2:f8:c6:03:72:58:49:bb:6d:a4:a1:aa:
                    dd:b7:45:4f:db:1e:4f:01:d5:e6:28:23:22:12:85:
                    58:9d:b0:b7:51:09:b0:60:5f:91:d2:42:8c:a3:9a:
                    f3:97:70:01:5d:11:0f:69:f1:3d:ee:ec:1b:96:ec:
                    df:0b:29:a7:3b:eb:02:12:2a:88:22:33:32:b6:54:
                    ab:91:04:78:a0:29:19:49:e2:46:8f:69:1a:7e:50:
                    64:c2:a0:be:5d:7f:52:39:c7:6e:02:c6:d6:2b:62:
                    1c:65:13:e0:f6:64:dc:36:43:dc:6e:a4:e9:6b:a1:
                    b6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:83:12:D5:DD:63:E8:BB:60:E0:24:4B:7D:36:E7:0A:2D:49:7B:1E
            X509v3 Authority Key Identifier:
                keyid:94:2F:2D:5A:E5:5B:72:15:DF:CC:A7:9C:55:2D:22:3D:29:B7:1D:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:bd:f8:2e:72:57:c7:08:54:ab:73:38:ca:fc:51:52:72:99:
         0a:9c:de:62:86:1d:fb:d2:0c:5e:6b:38:77:e9:76:5c:f2:8d:
         2c:92:da:bd:12:5f:f7:fa:a5:9a:52:a1:09:d7:7c:12:2b:27:
         2a:52:62:8d:8e:2d:40:87:7d:bd:51:90:51:1c:7b:12:e2:be:
         2a:21:86:33:9f:b4:87:ae:a9:ed:27:98:33:96:12:1b:f2:f2:
         e5:e7:2f:82:c0:71:f1:6d:c7:46:83:9b:ab:70:b1:2c:f5:b7:
         32:81:a6:ba:5a:fe:d8:1b:81:0e:2c:37:b1:ec:c6:d8:ee:f7:
         00:95:a9:7d:8e:ee:2e:43:98:b4:b8:35:18:1c:80:3a:73:b8:
         7d:61:40:3a:28:8d:9d:55:00:18:ff:d9:aa:18:97:5f:d6:7b:
         ed:b4:2d:80:66:2f:f3:98:12:f7:e3:33:33:a2:43:32:4d:69:
         e6:ff:fb:56:fa:70:c9:a9:5f:aa:27:22:8e:1d:17:34:5c:61:
         99:db:c8:71:07:c4:fe:0f:15:21:bb:38:08:ba:6b:13:38:35:
         94:9c:ae:35:6e:7d:69:ad:33:37:8a:43:b0:b1:45:72:3f:57:
         d4:e4:a7:d9:03:dc:2f:90:89:44:0f:a6:63:9b:88:05:50:8e:
         55:a9:46:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 22:39:45 2025 by rpki-client