This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.mft
File:                     2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.mft (raw, json)
Hash identifier:          yXxAZOxY+S2qMY3Ypn0DecrHUKHr5Yy10MB/9rHhEQI=
Subject key identifier:   2F:C0:60:B3:AA:EA:D5:89:84:DF:91:30:85:BF:8F:49:94:0F:3A:16
Authority key identifier: 2C:D1:1F:1C:63:9F:B5:D4:95:F1:A5:BA:66:FC:73:3D:44:CB:97:E1
Certificate issuer:       /CN=2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1
Certificate serial:       0CFA4B1115CA6D3C073B8B319DB6FCCD58811672
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.mft
Manifest number:          49
Signing time:             Sat 06 Dec 2025 10:37:16 +0000
Manifest this update:     Sat 06 Dec 2025 10:32:16 +0000
Manifest next update:     Sun 07 Dec 2025 13:30:16 +0000
Files and hashes:         1: 2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.crl (hash: tcrTsopemxByJPHV3evnCwsp7qmVCcyquyD9zJp+HKk=)
                          2: 3133382e3132322e3130342e302f32322d3234203d3e20323634333331.roa (hash: T6lqxG23zqgyPL2if/j7s2HWnDsq4jvKhw7q36ghifQ=)
                          3: 323830343a343062303a3a2f33322d3438203d3e20323635393735.roa (hash: QPCBGPU47AVonH4huoGuffUnE8w2lE5zGEuxp9RKNN4=)
                          4: 323830343a323633303a3a2f33322d3438203d3e20323634333331.roa (hash: rWjFdDj+zQgG9ZVol5gzNc9ePvsbgg25tHkNphFSjzE=)
                          5: 3136342e3136332e36382e302f32322d3234203d3e20323635393735.roa (hash: +Zi5Yb2FOUfzGhsSKkLf4yHzuLsVH8VQT638fdwCkrU=)
                          6: 323830343a343062303a31303a3a2f34382d3438203d3e20323635393735.roa (hash: oRmzbCMwUgK8Z+rXRzeDiggWF0dPyaKVt5wi91VXECc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.crl
                          rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 13:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:fa:4b:11:15:ca:6d:3c:07:3b:8b:31:9d:b6:fc:cd:58:81:16:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1
        Validity
            Not Before: Dec  6 10:32:16 2025 GMT
            Not After : Dec  7 13:30:16 2025 GMT
        Subject: CN=2FC060B3AAEAD58984DF913085BF8F49940F3A16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a8:22:6e:d5:6a:03:6b:c4:1d:fd:0d:2e:25:
                    ec:a3:04:1b:3e:38:f2:9e:63:66:01:6c:41:53:ed:
                    97:3b:14:29:5d:60:78:fb:f4:b0:cc:f0:3d:bf:ae:
                    5d:4d:77:ab:fb:6e:49:37:fd:41:28:a1:6e:4c:87:
                    c3:34:e7:a6:44:75:2f:1c:2a:6a:78:a9:cd:64:e2:
                    fd:ae:4e:d1:78:33:0b:dc:31:ef:73:be:2c:7e:23:
                    df:51:2b:78:ab:44:71:e4:52:2f:28:cf:cc:be:79:
                    58:39:04:06:77:68:02:9f:76:2b:1b:cd:7a:52:21:
                    f9:6f:b0:9f:e7:f0:ee:f8:c1:92:34:f4:14:73:e3:
                    77:8e:3c:d6:0b:6d:df:f0:8b:f2:83:ad:10:dc:74:
                    a3:12:c5:16:e0:1b:09:44:1e:45:19:96:f1:66:e9:
                    ef:5c:f0:68:75:d8:83:e2:81:c4:31:71:2f:29:a7:
                    b7:ff:df:20:65:91:a4:0e:ca:f8:ec:5b:4b:39:aa:
                    0b:2c:20:90:2d:05:13:9b:d9:b5:02:96:9e:62:8d:
                    4d:37:9f:a9:d6:13:65:ad:13:34:f4:9a:44:06:58:
                    ca:c9:36:8b:51:7e:47:68:74:f6:f8:1c:de:31:91:
                    25:1d:06:32:0b:d9:49:d0:29:95:cc:ad:1c:7d:1f:
                    e5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C0:60:B3:AA:EA:D5:89:84:DF:91:30:85:BF:8F:49:94:0F:3A:16
            X509v3 Authority Key Identifier:
                keyid:2C:D1:1F:1C:63:9F:B5:D4:95:F1:A5:BA:66:FC:73:3D:44:CB:97:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:af:7b:dc:15:77:04:bf:5e:fb:3c:e6:62:24:de:a5:cd:3c:
         ef:54:ef:b4:4c:56:fc:a0:e3:72:aa:bc:99:d6:55:25:7c:5b:
         d8:bf:d8:00:0e:08:28:ff:fe:4a:e3:76:84:03:91:92:31:32:
         a2:7f:77:6e:8f:28:53:b1:4d:c0:e2:8e:aa:40:e6:21:d5:7a:
         e7:62:24:c6:bd:60:68:49:72:90:aa:62:23:d4:de:5d:47:0b:
         c6:a1:81:c8:7c:cf:02:7a:17:76:2c:f9:4e:89:d6:1a:9f:d4:
         8a:ec:d6:99:ce:82:08:89:d5:e2:f7:4c:a4:ff:5c:c2:97:83:
         49:dd:b6:03:28:8a:a1:a6:7b:46:60:c3:cf:92:20:32:1d:3b:
         86:a2:b6:fc:30:f4:55:c3:c2:53:2d:4b:cb:a5:4c:5b:b7:95:
         2c:bc:3f:fd:44:cb:1e:7b:3c:19:18:0d:d0:4b:50:04:f7:3d:
         cb:a1:fe:31:bd:dd:4b:a3:fa:31:89:cb:d9:f0:e4:1c:8f:a4:
         f5:bc:44:07:97:d9:51:c7:e9:c1:99:36:75:53:1f:9c:8b:09:
         5d:5a:0c:c0:07:54:af:93:bc:c6:0f:cc:22:f8:22:28:69:f6:
         0e:7e:97:d3:31:75:81:3e:6d:5a:c1:58:be:95:21:24:16:9c:
         f1:0f:ac:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:04:41 2025 by rpki-client