This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.mft
File:                     2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.mft (raw, json)
Hash identifier:          C2Jcd9+Iq8wWst9HIGqkvjosRLgFAj94+jbWNrc2GSU=
Subject key identifier:   FD:2B:27:3F:B9:EA:A4:DC:CA:38:0B:B4:A4:DA:E3:F9:2A:B1:B8:E8
Authority key identifier: 2D:9C:53:D6:4D:9C:12:AB:17:AC:A8:6E:DB:3E:8D:34:8B:07:27:50
Certificate issuer:       /CN=2D9C53D64D9C12AB17ACA86EDB3E8D348B072750
Certificate serial:       3D3245E78347185051EDE8BAF24FBCDB5936F66D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.mft
Manifest number:          0129
Signing time:             Sat 06 Dec 2025 10:23:48 +0000
Manifest this update:     Sat 06 Dec 2025 10:18:48 +0000
Manifest next update:     Sun 07 Dec 2025 12:28:48 +0000
Files and hashes:         1: 2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.crl (hash: 7gk5RLTrK5qcEg5RJ5I3Lge0OqVfzNog5Eev5YNfqYs=)
                          2: 3137392e34322e3132302e302f32322d3232203d3e20323731313930.roa (hash: TfAMHSXwbY24vrtPxRXAwD74fc6KDbIbnLsDTfBZHJM=)
                          3: 323830343a373761343a3a2f33322d3332203d3e20323731313930.roa (hash: qsRafcjJj+s2kDsDgJnWZ0Q5nBOrLVcx6L+RmAUGULI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.crl
                          rsync://rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 12:28:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:32:45:e7:83:47:18:50:51:ed:e8:ba:f2:4f:bc:db:59:36:f6:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D9C53D64D9C12AB17ACA86EDB3E8D348B072750
        Validity
            Not Before: Dec  6 10:18:48 2025 GMT
            Not After : Dec  7 12:28:48 2025 GMT
        Subject: CN=FD2B273FB9EAA4DCCA380BB4A4DAE3F92AB1B8E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f6:56:11:a4:eb:3c:61:da:99:86:a9:65:b4:
                    6b:74:df:20:c3:7a:77:9c:db:49:2a:e9:62:8a:47:
                    f9:02:43:db:b0:73:a1:7a:11:9a:5d:e0:83:08:2a:
                    fa:3a:df:26:57:2c:21:25:00:a9:3d:a9:c2:16:d6:
                    49:ba:8f:1e:e8:c4:54:09:1a:7e:31:b5:07:c3:07:
                    3a:a8:24:d2:8b:a0:a9:2a:f5:9b:0c:1c:0f:72:99:
                    53:af:3c:05:4f:b4:d6:cd:4e:e8:fc:9d:92:e8:88:
                    4b:1a:c1:be:d1:30:9e:7e:19:59:6c:3d:8c:af:2d:
                    23:a4:dc:35:56:c2:bb:9b:d9:ae:4b:99:69:c9:d9:
                    f7:8b:b6:0c:6a:a7:8a:42:e7:a1:21:b2:71:dc:c9:
                    75:52:17:f4:ca:b9:d6:29:e5:ce:b8:c8:b5:13:cc:
                    72:5c:ee:d2:b8:aa:4b:9a:b4:84:b2:a0:d5:5d:ea:
                    81:48:e2:bd:9b:43:df:a1:8d:24:e7:e9:8d:f5:bf:
                    e1:bf:3a:d9:8b:9b:1c:aa:48:83:8d:78:ab:5b:39:
                    47:86:20:9e:c4:b7:26:cb:a1:c0:dd:e9:aa:e1:bb:
                    15:0e:01:a2:4b:77:73:88:1d:91:6d:6b:1b:38:e4:
                    39:8b:bf:08:bf:a1:8f:6e:f3:6c:ed:99:b1:d1:fe:
                    01:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:2B:27:3F:B9:EA:A4:DC:CA:38:0B:B4:A4:DA:E3:F9:2A:B1:B8:E8
            X509v3 Authority Key Identifier:
                keyid:2D:9C:53:D6:4D:9C:12:AB:17:AC:A8:6E:DB:3E:8D:34:8B:07:27:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:fb:cb:8a:15:9a:3f:1b:1e:79:65:17:63:ee:65:e6:b9:65:
         23:b4:3a:23:ce:7d:50:30:90:70:21:67:0b:e4:28:82:06:0e:
         22:36:32:ce:eb:90:70:2c:45:aa:d0:4f:8d:c6:a6:1e:1a:1d:
         df:d4:07:14:2a:68:b2:ad:4e:97:79:7a:1c:02:98:49:e0:6d:
         ed:e5:89:aa:6b:34:36:f0:16:d9:15:82:a5:1b:c8:54:1b:73:
         9d:da:22:03:8b:0a:6f:de:a1:78:82:30:60:a4:ab:95:d7:5f:
         96:30:9a:04:a7:c6:f7:b7:de:99:80:47:da:f6:7a:83:f4:c2:
         fc:da:69:02:44:ba:ab:c0:70:9c:06:89:fe:57:35:bb:8f:b2:
         e1:9d:58:93:b1:77:c5:12:e0:5d:10:a8:9a:96:80:a2:13:7b:
         a4:ab:f0:91:7f:5b:93:83:5e:9f:c4:e6:a1:f6:2c:f5:e3:ec:
         9a:75:d6:0f:11:f1:32:b5:80:0e:63:5c:b4:b7:86:70:04:b3:
         6c:9a:79:92:16:8b:a7:9e:24:58:54:2f:28:d6:19:74:a5:c7:
         a9:33:72:20:d7:73:43:14:2d:33:9b:aa:65:13:5f:6d:eb:9b:
         8f:64:d7:2a:f7:da:0b:6f:fd:59:40:06:eb:a7:7a:ad:76:eb:
         49:4d:82:df
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPTJF54NHGFBR7ei68k+821k29m0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ5QzUzRDY0RDlDMTJBQjE3QUNBODZFREIzRThEMzQ4
QjA3Mjc1MDAeFw0yNTEyMDYxMDE4NDhaFw0yNTEyMDcxMjI4NDhaMDMxMTAvBgNV
BAMTKEZEMkIyNzNGQjlFQUE0RENDQTM4MEJCNEE0REFFM0Y5MkFCMUI4RTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR9lYRpOs8YdqZhqlltGt03yDD
enec20kq6WKKR/kCQ9uwc6F6EZpd4IMIKvo63yZXLCElAKk9qcIW1km6jx7oxFQJ
Gn4xtQfDBzqoJNKLoKkq9ZsMHA9ymVOvPAVPtNbNTuj8nZLoiEsawb7RMJ5+GVls
PYyvLSOk3DVWwrub2a5LmWnJ2feLtgxqp4pC56EhsnHcyXVSF/TKudYp5c64yLUT
zHJc7tK4qkuatISyoNVd6oFI4r2bQ9+hjSTn6Y31v+G/OtmLmxyqSIONeKtbOUeG
IJ7EtybLocDd6arhuxUOAaJLd3OIHZFtaxs45DmLvwi/oY9u82ztmbHR/gEJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU/SsnP7nqpNzKOAu0pNrj+SqxuOgwHwYDVR0j
BBgwFoAULZxT1k2cEqsXrKhu2z6NNIsHJ1AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHF6Qjc2UkFHcGNRZnZwTDhKYlRKSlBZc3lBZTZVcHhSbWhTYzRFSlVa
bncvMC8yRDlDNTNENjREOUMxMkFCMTdBQ0E4NkVEQjNFOEQzNDhCMDcyNzUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJEOUM1M0Q2NEQ5QzEyQUIx
N0FDQTg2RURCM0U4RDM0OEIwNzI3NTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RHF6Qjc2UkFHcGNRZnZwTDhKYlRKSlBZc3lBZTZVcHhSbWhTYzRFSlVabncvMC8y
RDlDNTNENjREOUMxMkFCMTdBQ0E4NkVEQjNFOEQzNDhCMDcyNzUwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxPvLihWaPxseeWUXY+5l5rllI7Q6I859UDCQcCFnC+QoggYOIjYyzuuQcCxF
qtBPjcamHhod39QHFCposq1Ol3l6HAKYSeBt7eWJqms0NvAW2RWCpRvIVBtzndoi
A4sKb96heIIwYKSrlddfljCaBKfG97femYBH2vZ6g/TC/NppAkS6q8BwnAaJ/lc1
u4+y4Z1Yk7F3xRLgXRCompaAohN7pKvwkX9bk4Nen8TmofYs9ePsmnXWDxHxMrWA
DmNctLeGcASzbJp5khaLp54kWFQvKNYZdKXHqTNyINdzQxQtM5uqZRNfbeubj2TX
KvfaC2/9WUAG66d6rXbrSU2C3w==
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:46:33 2025 by rpki-client