This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft
File:                     CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft (raw, json)
Hash identifier:          FNhhGkUUl8tuABqrw5rjzACBVR4R5YaWeh0ryslhaTE=
Subject key identifier:   58:38:42:91:03:62:E5:10:CD:B9:65:0C:8A:BB:53:F0:C3:18:65:5F
Authority key identifier: CC:DF:B2:52:84:D1:41:1A:05:C2:D5:A9:81:69:BA:A0:90:EE:F4:E1
Certificate issuer:       /CN=CCDFB25284D1411A05C2D5A98169BAA090EEF4E1
Certificate serial:       73F84D5B33FC6CF6B625E38E1C4117FCDFFD7DC6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft
Manifest number:          032D
Signing time:             Sat 06 Dec 2025 06:20:17 +0000
Manifest this update:     Sat 06 Dec 2025 06:15:17 +0000
Manifest next update:     Sun 07 Dec 2025 06:25:17 +0000
Files and hashes:         1: 323830343a323832633a3a2f33322d313238203d3e20323633393435.roa (hash: nlVhDanKVg64ya0hokzfUPThna0mKMIOPZJ9pKVwclg=)
                          2: 3133382e3231392e3138302e302f32322d3332203d3e20323633393435.roa (hash: MszwjcuIe9rjs+cHuQWMig87jp5DXLRmq5gNTuVD1fY=)
                          3: 3137302e38342e37322e302f32322d3332203d3e20323633393435.roa (hash: t8HVSafrX1OjhJjFHS8Bmtbbsk9VCeE3SLniXiYbwmM=)
                          4: 34352e3138382e32342e302f32322d3332203d3e20323633393435.roa (hash: lfLBExi7aLPt672tmYUHeQIJlNv5s8Hx5DVc0Wer/Iw=)
                          5: CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl (hash: SiJ+f9sJg6nE5kz2ItXOR7e1NtrjCo8OQjoBLI5kIig=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl
                          rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 06:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f8:4d:5b:33:fc:6c:f6:b6:25:e3:8e:1c:41:17:fc:df:fd:7d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCDFB25284D1411A05C2D5A98169BAA090EEF4E1
        Validity
            Not Before: Dec  6 06:15:17 2025 GMT
            Not After : Dec  7 06:25:17 2025 GMT
        Subject: CN=583842910362E510CDB9650C8ABB53F0C318655F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:04:8a:d8:a9:1e:05:74:48:1c:30:23:a3:ef:
                    ec:c9:8b:5b:f8:87:b6:f0:6b:66:8f:a4:7c:81:55:
                    be:e7:1c:bf:53:42:bc:2d:41:cc:0c:23:d8:05:c4:
                    56:33:7f:e0:22:34:28:4c:dc:4c:94:20:5d:7a:8f:
                    73:6c:28:9a:42:7b:b6:14:09:c3:13:11:b7:3e:47:
                    a0:45:4d:ab:18:7e:6a:46:04:34:0b:26:48:11:5b:
                    3c:d2:b6:5f:b4:c5:d7:63:e6:95:b1:f0:04:67:74:
                    70:ae:94:92:81:86:71:5a:9a:cf:f5:06:0a:e8:1e:
                    93:ea:0c:15:81:08:9b:fb:4a:fa:2f:cc:e0:37:24:
                    81:3a:ce:74:9f:ee:be:b2:2e:c1:03:5e:1f:8b:6d:
                    8b:7b:ac:61:f2:52:c7:40:4b:2e:c4:23:58:ac:a8:
                    d7:f8:80:27:b0:76:60:a0:2d:55:a6:53:e9:ec:f5:
                    e4:ad:0f:cc:9c:cf:4f:fb:94:8e:e3:f9:8e:83:6f:
                    db:6f:88:ee:84:0a:8c:02:70:c1:f2:43:fe:03:3c:
                    7b:1d:33:05:99:a1:d3:43:04:f9:e6:a2:85:5d:d9:
                    aa:3f:50:e6:2c:8c:ff:4b:fb:f4:18:06:c3:75:64:
                    bf:f2:1e:9a:75:9b:51:e0:19:8e:71:49:6a:37:c4:
                    7e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:38:42:91:03:62:E5:10:CD:B9:65:0C:8A:BB:53:F0:C3:18:65:5F
            X509v3 Authority Key Identifier:
                keyid:CC:DF:B2:52:84:D1:41:1A:05:C2:D5:A9:81:69:BA:A0:90:EE:F4:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:8f:e6:95:97:cf:1a:b1:63:04:e9:0d:29:37:12:95:12:2d:
         94:ec:8b:44:42:d3:5b:75:5a:4d:95:2d:b6:d4:a0:16:fe:75:
         8f:81:f2:90:e0:4c:ae:9e:dd:24:a7:99:74:76:c7:a6:ca:0f:
         78:45:89:e6:99:b9:e8:6f:7d:3a:5a:e1:01:41:c5:5d:f6:22:
         b1:9e:ca:69:1c:17:c8:16:13:f0:b2:48:0c:ad:12:5f:9c:eb:
         96:07:7e:9f:4f:a8:28:64:d6:54:e3:c9:a5:55:06:22:58:aa:
         63:0b:b2:f2:9b:b0:67:02:a4:3c:81:7f:34:ca:95:da:9a:a8:
         97:59:b0:70:5c:36:8e:3a:c9:1c:6a:f7:78:38:b0:e3:50:3d:
         4e:6f:8d:69:76:09:a0:de:7e:e7:04:34:52:3e:82:7a:38:66:
         2e:c9:7f:de:dd:13:50:04:6e:00:6f:cf:33:0f:21:49:51:c4:
         90:ec:c3:ca:04:65:b7:f5:14:80:91:7c:f9:f7:f7:d6:6d:1f:
         2b:54:fa:1c:bd:e5:70:1c:c6:ce:bc:f8:f3:dd:95:36:8f:9c:
         a5:38:87:dd:47:21:89:17:ed:e7:a1:7e:6d:ff:40:2f:6e:cf:
         d0:91:5d:de:e5:0e:b4:bc:d2:c1:c1:d3:1d:cf:36:62:62:7f:
         13:21:6b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:38:15 2025 by rpki-client