This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.mft
File:                     CE7543393C83D76FB6BDDC93859BE96B518CDEAC.mft (raw, json)
Hash identifier:          wq+FKz2CKcwu4dijWVUMYlqAo+/s6s1vT/31F2wcsRE=
Subject key identifier:   30:3A:3E:8B:24:D7:D8:11:02:08:78:6C:4E:18:6B:2D:03:E6:26:4A
Authority key identifier: CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC
Certificate issuer:       /CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
Certificate serial:       2CB13C1343CABE67F1D285FD17524B1AB79E11A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.mft
Manifest number:          0207
Signing time:             Sat 06 Dec 2025 11:57:07 +0000
Manifest this update:     Sat 06 Dec 2025 11:52:07 +0000
Manifest next update:     Sun 07 Dec 2025 14:44:07 +0000
Files and hashes:         1: 3139312e33362e3134302e302f32342d3234203d3e20323633333335.roa (hash: mtep9gkj1duLK74evjK1U4+i2ZWafI8SFaBniqh4muc=)
                          2: 3139312e33362e3134312e302f32342d3234203d3e20323633333335.roa (hash: qy2FCKK1dRlxUSCQdbTOQsW8DqpfDNSdMBa1svVJArU=)
                          3: 323830343a313438343a383030303a3a2f34312d3431203d3e20323633333335.roa (hash: o+OB2Cok1CvGeg8hjmONxawfPUgbvFAB/+oZtudH4cM=)
                          4: 3139312e33362e3134332e302f32342d3234203d3e20323633333335.roa (hash: B5D4et59LooBpYWmBAcUZN0Ymk+XsqyehVUPCoP2OZ4=)
                          5: 3139312e33362e3134302e302f32322d3232203d3e20323633333335.roa (hash: ZRkRyC+tD8boEsT0ksuBvkfRmytkugc9W7pxQBdP0sg=)
                          6: 323830343a313438343a3a2f33322d3332203d3e20323633333335.roa (hash: lijPS3v1qjgHkdzx0p4DWCQMy0dmxwB9f4GA6CTxIlA=)
                          7: CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl (hash: n7QIAOFFJACPMnT/zEYgesIKYDR5VeXVlNXC+bW0Ud8=)
                          8: 3139312e33362e3133362e302f32342d3234203d3e20323633333335.roa (hash: LDeH83IM5CEBzY7qrr77lGpvdiXbB/U13ZkX2ORmgZ4=)
                          9: 3139312e33362e3134302e302f32332d3233203d3e20323633333335.roa (hash: zc+CWIY15Ysi4AXpk9YT01amUL2fXye2T40Aplszpas=)
                          10: 3139312e33362e3133382e302f32332d3233203d3e20323633333335.roa (hash: TPw+t9YNT4pcuqeqpc+KAU6YH9qgOs5qDvutuMRmVqM=)
                          11: 3139312e33362e3133392e302f32342d3234203d3e20323633333335.roa (hash: uhlJgi/Zo1Dp3Y6CpFhMmJKZZpf/pvZY89hZLbs4cbE=)
                          12: 3139312e33362e3134322e302f32332d3233203d3e20323633333335.roa (hash: efX/awAepeLQmHLZSela/JjfId1ZqBkjWMbspnws6io=)
                          13: 3139312e33362e3133362e302f32312d3231203d3e20323633333335.roa (hash: AAp3QhCHkOfCrlikVmnBOvMiFywGGzs6gnEQVP+umYE=)
                          14: 3139312e33362e3133362e302f32332d3233203d3e20323633333335.roa (hash: Y3Z4PG16cJFF7IsZgSTVkmjNkhhPlwmte41BVEYAkXk=)
                          15: 323830343a313438343a383038303a3a2f34312d3431203d3e20323633333335.roa (hash: n5AaaCyMWwgQQAMsOt/DUgS493zN1o93745LE1U5Km0=)
                          16: 3139312e33362e3133362e302f32322d3232203d3e20323633333335.roa (hash: YDLvAbidB/tTw4FAqbGhVXNFQ8TVJNECFqjeYU9VHRc=)
                          17: 3139312e33362e3133382e302f32342d3234203d3e20323633333335.roa (hash: VB2xtdzVzejLHx8RFe2HG+kJka4wql0i6rqepbwwXB4=)
                          18: 3139312e33362e3133372e302f32342d3234203d3e20323633333335.roa (hash: czzm+T4jqd4dtbwT1dacdqs0LFLkY/8Vwae9HUj3IRk=)
                          19: 3139312e33362e3134322e302f32342d3234203d3e20323633333335.roa (hash: Wxsl/oSBmGvSZNMfCj0GvbsHp6eaSQsFEUR79gc07zA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl
                          rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 14:44:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b1:3c:13:43:ca:be:67:f1:d2:85:fd:17:52:4b:1a:b7:9e:11:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
        Validity
            Not Before: Dec  6 11:52:07 2025 GMT
            Not After : Dec  7 14:44:07 2025 GMT
        Subject: CN=303A3E8B24D7D8110208786C4E186B2D03E6264A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:67:79:39:49:b6:ed:bb:bb:0c:bf:14:4f:bd:
                    ba:2c:75:c9:a9:7e:a8:3e:cf:c3:dc:31:f9:b9:d9:
                    55:3c:7e:c5:ac:6c:c2:08:dc:e4:e5:bc:47:2e:aa:
                    63:e0:fb:03:ab:6d:ec:f0:44:84:3b:60:da:8f:f8:
                    e9:c2:3d:53:99:ff:41:d7:a3:2d:f4:f2:c5:0f:ec:
                    c5:0e:f1:dc:89:7b:46:42:c3:98:34:6e:72:95:7b:
                    2a:38:80:8f:f4:1b:5b:47:e1:33:84:10:45:94:5f:
                    97:79:93:3b:a7:77:b8:8a:22:ff:be:85:60:2b:81:
                    d1:4a:f3:28:4b:11:db:4f:e8:66:3e:fe:9f:89:4c:
                    07:72:37:02:6d:46:0e:83:6c:51:16:a7:0c:b2:af:
                    12:41:41:40:b1:a5:ba:c1:33:ff:39:de:f5:09:eb:
                    0c:bd:81:cb:ea:4a:00:10:7f:d0:20:81:46:5a:dc:
                    03:b4:68:f5:67:ce:a7:2c:73:32:4b:a7:1d:7b:b0:
                    62:c0:49:a5:d0:78:d6:4e:ec:d4:a2:c7:af:4c:da:
                    f1:f7:f8:3e:eb:a4:04:9d:50:66:64:c9:50:a7:b4:
                    0a:76:97:5c:0c:23:83:b5:00:f8:ee:90:c9:c5:81:
                    4c:5f:b1:c4:6b:57:ef:97:1f:50:7f:63:fb:c9:07:
                    4b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:3A:3E:8B:24:D7:D8:11:02:08:78:6C:4E:18:6B:2D:03:E6:26:4A
            X509v3 Authority Key Identifier:
                keyid:CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ea:f5:1a:07:36:0b:1a:de:1c:41:15:f3:a9:5e:c6:ae:c5:
         83:72:f6:55:d5:1a:89:15:61:96:d8:4b:9c:15:25:04:33:5e:
         d1:7c:14:f5:ce:3a:a6:43:8d:7b:b4:d2:2b:46:2c:dd:26:52:
         ee:ca:9b:55:1c:eb:1c:21:54:e2:89:f5:3c:27:06:e7:3f:b6:
         00:ee:d0:60:ef:4a:34:cb:81:68:85:48:42:d1:b0:c7:86:6c:
         7a:35:95:8f:d6:f3:99:52:db:9f:06:b5:d8:03:26:73:b5:74:
         40:8c:35:72:d3:de:5a:00:de:cc:fb:10:d6:c7:74:66:13:10:
         31:df:48:0f:1e:e4:f0:19:62:7b:33:45:4e:dd:8b:80:8e:cc:
         c0:78:03:5d:ab:a9:0f:4c:df:91:69:36:ce:4e:0e:16:a2:f1:
         2f:80:b0:cb:40:18:f1:65:5d:02:8e:5f:91:b9:4f:6a:c0:d1:
         37:e8:3e:90:63:22:93:9f:f6:1c:c4:a7:32:69:09:98:bc:63:
         15:ce:82:1f:f6:c4:af:2e:f8:6d:f1:0a:ab:0c:7b:e1:40:33:
         bf:43:a0:00:5b:a7:3b:84:69:c2:23:f4:cc:38:43:43:71:52:
         45:1e:67:fc:f4:55:9e:af:ee:ee:9a:10:ab:b7:51:ad:d4:39:
         65:1a:be:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:19:49 2025 by rpki-client