This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/1/2407042234E050BF2C96DAE987B75BCDB9E2BAC0.mft
File:                     2407042234E050BF2C96DAE987B75BCDB9E2BAC0.mft (raw, json)
Hash identifier:          s5urYBwP7w5T/OiHr8GqR9WlZEKiJtZ3gmS2sPhmjEM=
Subject key identifier:   67:88:0F:FD:6F:A2:AF:B6:52:70:0A:64:06:15:9C:91:6B:D5:29:65
Authority key identifier: 24:07:04:22:34:E0:50:BF:2C:96:DA:E9:87:B7:5B:CD:B9:E2:BA:C0
Certificate issuer:       /CN=2407042234E050BF2C96DAE987B75BCDB9E2BAC0
Certificate serial:       25912958EE27339EF5FEF063C408D53FE990DEF5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2407042234E050BF2C96DAE987B75BCDB9E2BAC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/1/2407042234E050BF2C96DAE987B75BCDB9E2BAC0.mft
Manifest number:          0331
Signing time:             Sat 06 Dec 2025 04:39:43 +0000
Manifest this update:     Sat 06 Dec 2025 04:34:43 +0000
Manifest next update:     Sun 07 Dec 2025 05:00:43 +0000
Files and hashes:         1: 323830343a356661633a3a2f33322d3438203d3e20323639313136.roa (hash: BiedKhOsMAj583O8P4UtNacK/yS6l2K/O8Dn/KpDA4Y=)
                          2: 2407042234E050BF2C96DAE987B75BCDB9E2BAC0.crl (hash: M+r6J5dYBUzeGHTBR9EhXt+eEQJaELMRhHuGT+Q6EOk=)
                          3: 34352e3137392e3230382e302f32322d3234203d3e20323639313136.roa (hash: sWQ9X+QkollNxKo6GGv+Od7KkQw/OhQs5ELFi/V1kxs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/1/2407042234E050BF2C96DAE987B75BCDB9E2BAC0.crl
                          rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/1/2407042234E050BF2C96DAE987B75BCDB9E2BAC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2407042234E050BF2C96DAE987B75BCDB9E2BAC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:91:29:58:ee:27:33:9e:f5:fe:f0:63:c4:08:d5:3f:e9:90:de:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2407042234E050BF2C96DAE987B75BCDB9E2BAC0
        Validity
            Not Before: Dec  6 04:34:43 2025 GMT
            Not After : Dec  7 05:00:43 2025 GMT
        Subject: CN=67880FFD6FA2AFB652700A6406159C916BD52965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:da:7f:59:7b:82:d5:9e:4e:3e:a6:13:ef:e4:
                    b6:73:a6:fe:1d:8e:8e:e7:13:f5:c4:6a:c9:95:91:
                    27:0e:0b:ee:6f:58:88:5c:a1:f9:c8:48:8b:d3:d1:
                    78:3e:28:17:c8:ce:5a:20:8c:f0:9b:28:11:27:2d:
                    7b:30:c1:76:d5:ff:54:12:a6:27:12:de:2e:39:d5:
                    aa:02:67:fe:4d:61:6f:d3:f2:7f:ac:6b:59:32:86:
                    53:68:30:de:68:12:27:7b:ac:9c:78:de:7e:ad:5f:
                    b5:5e:44:5a:76:97:fe:93:73:2d:0b:48:ac:4b:f9:
                    7d:16:04:9d:fc:fe:c8:7d:09:ec:d0:20:a3:d6:10:
                    5e:2d:c2:5d:c8:0c:12:26:e9:ac:3a:96:af:7e:1e:
                    f5:f4:4d:20:15:7d:a4:56:82:6f:f9:d3:e6:6e:40:
                    33:83:59:d0:cd:d9:41:f6:9c:f8:c8:a5:77:c1:8a:
                    52:41:b0:fb:e0:97:78:f8:f9:db:84:08:6d:e3:38:
                    9d:94:b9:a9:05:87:ea:46:f7:8b:a4:ad:0f:60:f7:
                    5f:e3:3b:18:fa:9e:f6:fb:1c:53:c4:c9:7b:9f:22:
                    6e:94:a3:80:6a:72:11:44:ef:12:47:79:40:07:67:
                    e4:65:8e:86:ae:b4:f8:3c:1d:46:4a:dc:96:29:32:
                    28:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:88:0F:FD:6F:A2:AF:B6:52:70:0A:64:06:15:9C:91:6B:D5:29:65
            X509v3 Authority Key Identifier:
                keyid:24:07:04:22:34:E0:50:BF:2C:96:DA:E9:87:B7:5B:CD:B9:E2:BA:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/1/2407042234E050BF2C96DAE987B75BCDB9E2BAC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2407042234E050BF2C96DAE987B75BCDB9E2BAC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/1/2407042234E050BF2C96DAE987B75BCDB9E2BAC0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:6b:e9:2e:eb:23:ad:9d:b9:eb:43:87:f6:b6:99:72:86:91:
         5e:58:c7:03:b0:68:68:9b:9a:10:97:5c:5e:84:3c:89:b9:c3:
         8f:98:2c:b8:12:10:a8:1f:72:55:59:6d:2e:ce:a4:7e:56:19:
         1b:61:3d:0b:64:98:39:87:e7:a6:a4:b8:30:e3:48:b7:75:d4:
         89:e3:66:e0:c0:07:03:5d:c4:6a:b7:de:f4:18:d1:a5:5e:4e:
         13:05:c2:45:27:a4:d0:99:04:3b:a1:ee:c0:b5:bf:b6:e3:46:
         70:c1:81:63:57:62:4d:dd:74:fd:5f:53:bc:80:0b:53:fd:c9:
         17:79:4a:df:8e:06:e1:79:b8:ea:fd:56:4d:a5:1c:cf:5a:8f:
         0b:4c:d7:0e:95:1b:ef:ad:e1:59:ba:cc:a6:f1:03:50:b2:8e:
         83:a4:cb:9d:ff:1b:9b:4b:b2:03:8d:4e:bf:a4:a6:fa:75:7e:
         42:6e:cd:aa:ce:05:c8:25:43:97:ce:20:83:9c:2e:60:56:d3:
         9e:63:c6:74:ba:47:34:77:37:44:7d:60:18:5b:2f:a9:09:2f:
         29:39:d7:e1:a9:2e:b0:38:b9:b8:86:45:4a:62:dc:58:c0:76:
         07:26:17:54:5c:86:af:c1:34:3d:69:ec:49:8d:b5:fa:8b:b2:
         a9:a3:d3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:42:15 2025 by rpki-client