This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft
File:                     2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft (raw, json)
Hash identifier:          gg50YQQIaKcGRGggfqgnWy+8J2mjeP2ukzFJL55jafU=
Subject key identifier:   BE:F8:2D:82:B9:57:F5:49:63:B9:D0:A3:3B:D0:22:38:C6:84:4E:F5
Authority key identifier: 2B:47:0E:5C:23:88:FD:4E:E2:7F:D0:93:A1:88:DB:51:D5:7C:AD:3B
Certificate issuer:       /CN=2B470E5C2388FD4EE27FD093A188DB51D57CAD3B
Certificate serial:       75584E984BA86BBE1FC96B248B57D8436909DB0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft
Manifest number:          032F
Signing time:             Fri 05 Dec 2025 23:03:35 +0000
Manifest this update:     Fri 05 Dec 2025 22:58:35 +0000
Manifest next update:     Sun 07 Dec 2025 01:32:35 +0000
Files and hashes:         1: 323830343a316164383a3a2f33322d3438203d3e203532353839.roa (hash: nM9/FgUa0C68sG38T5nV/uNQ86svUq5vsVkQhqR+lIs=)
                          2: 3137372e38372e34342e302f32322d3234203d3e203532353839.roa (hash: U1bU2vymA1trGo0kqdj5LljKi5zORYlms1D3T/ome8k=)
                          3: 2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.crl (hash: Y75nuA/fKRYQfhcCRswULjDNnjbPKW9vpFTiaWiKjzA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.crl
                          rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 01:32:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:58:4e:98:4b:a8:6b:be:1f:c9:6b:24:8b:57:d8:43:69:09:db:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B470E5C2388FD4EE27FD093A188DB51D57CAD3B
        Validity
            Not Before: Dec  5 22:58:35 2025 GMT
            Not After : Dec  7 01:32:35 2025 GMT
        Subject: CN=BEF82D82B957F54963B9D0A33BD02238C6844EF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f9:86:ed:b3:c9:b6:a2:2b:a8:2b:8a:5d:fc:
                    4c:43:02:a2:57:c7:f9:f2:0a:f5:56:82:a4:35:e1:
                    42:ec:00:6f:14:b1:88:a1:6f:44:f1:9a:70:a0:c6:
                    a7:b2:7e:6c:b3:6a:37:26:0f:3b:1d:06:9f:a7:86:
                    a2:b0:33:5a:fc:b7:8a:a0:42:f8:8e:94:39:49:e5:
                    1e:57:72:48:ba:e3:50:51:3d:f6:65:ec:0c:ea:c0:
                    0b:04:0e:ca:47:76:ae:9c:1d:de:f9:7b:ba:1f:e3:
                    59:b7:f4:16:98:4b:dd:5c:2d:29:2d:f0:10:c7:84:
                    be:1c:c8:c0:f4:9b:33:de:15:eb:d5:9f:bb:3e:87:
                    c0:c5:e2:b6:1d:71:65:1c:2b:c8:d8:4b:0b:93:8a:
                    96:ea:f5:c7:e0:be:04:ca:6a:6c:78:c2:10:e5:3a:
                    d6:59:39:b7:49:83:bb:49:5d:34:57:49:14:52:43:
                    b2:58:70:bc:be:f7:62:d6:e5:e0:b6:14:38:79:73:
                    37:88:45:61:5d:b3:f1:79:ba:e3:0f:09:cf:35:a4:
                    8f:ab:03:73:08:87:40:39:f2:75:fd:98:44:9f:e3:
                    b3:62:00:34:e6:e2:e8:45:2f:d6:c1:a2:aa:7d:df:
                    19:af:7d:79:93:d9:db:35:f3:e3:a0:3e:f0:08:8a:
                    b9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F8:2D:82:B9:57:F5:49:63:B9:D0:A3:3B:D0:22:38:C6:84:4E:F5
            X509v3 Authority Key Identifier:
                keyid:2B:47:0E:5C:23:88:FD:4E:E2:7F:D0:93:A1:88:DB:51:D5:7C:AD:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:bc:d1:04:a6:34:07:3f:ed:9a:40:f2:88:c5:c8:ae:c4:ec:
         09:5f:bf:d2:22:34:30:67:30:36:f8:eb:34:bd:de:ab:92:6a:
         ec:75:ea:d1:20:ec:b1:3a:ef:49:b5:f9:ba:ec:9b:06:fa:ce:
         fe:37:56:b6:10:7f:01:07:32:6a:da:c3:2b:78:38:ea:6e:fd:
         d8:90:2f:75:a5:87:56:03:28:47:47:f1:a4:94:e9:42:30:02:
         35:76:9a:50:bd:b9:d1:18:4d:01:50:2e:f1:ee:c5:b9:f6:3e:
         c5:0a:b7:81:44:2a:2d:d3:23:16:f1:d1:3d:02:a4:55:aa:a9:
         8d:03:43:77:e1:4c:a2:eb:6f:2c:02:20:27:88:00:40:b0:0a:
         39:78:b5:b4:3e:4e:86:55:f7:9a:f7:23:d5:12:22:b6:7b:22:
         bf:a6:e0:8a:73:f2:62:8b:ab:9a:0b:b4:20:7c:cc:cc:0e:48:
         b8:cf:06:0d:5c:a5:ec:2c:5b:95:99:cf:a1:4c:71:e4:5f:16:
         91:18:50:27:3a:0b:24:a0:62:ac:b4:fd:88:04:8b:3b:e6:b7:
         7f:b1:af:51:21:35:79:4c:80:fd:3b:8f:c8:3a:c4:d3:22:e9:
         dc:86:12:54:32:10:93:64:0d:8f:18:48:80:8e:73:94:b8:66:
         14:0d:1b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:45:36 2025 by rpki-client