This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.mft
File:                     C70EC4383B792424E71BC6853AD1C792781070B3.mft (raw, json)
Hash identifier:          Qi6wal2EeAGnxAszJlgP4khg6rH9nsqzkkj019Wotc4=
Subject key identifier:   2B:C9:1C:5F:32:F4:56:2C:B3:BA:9B:21:BE:F4:E5:F1:F6:51:EB:F0
Authority key identifier: C7:0E:C4:38:3B:79:24:24:E7:1B:C6:85:3A:D1:C7:92:78:10:70:B3
Certificate issuer:       /CN=C70EC4383B792424E71BC6853AD1C792781070B3
Certificate serial:       620FD2D25DD95B5C95D3B2CBC3EB28CA2DCB6490
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.mft
Manifest number:          0330
Signing time:             Fri 05 Dec 2025 16:59:00 +0000
Manifest this update:     Fri 05 Dec 2025 16:54:00 +0000
Manifest next update:     Sat 06 Dec 2025 20:41:00 +0000
Files and hashes:         1: 323830343a336561343a343030303a3a2f33342d3334203d3e20323636363131.roa (hash: 97Zd8OQVb1KC1jXwf6TZHKceDVWMdzf/FBvh7uj5ffw=)
                          2: 323830343a336561343a3a2f33332d3333203d3e20323636363131.roa (hash: Iw5BJvI5wkkmZQPS6ouaJzXvn+I2RwE6UU7tFi04PEA=)
                          3: 323830343a336561343a383030303a3a2f33332d3333203d3e20323636363131.roa (hash: G9wM4x2AsrTlYpk7s92yZ/KXLukxEqEZwH1SyKsUnF0=)
                          4: 323830343a336561343a383030303a3a2f33342d3334203d3e20323636363131.roa (hash: THjG6RRAYB23j35dg1WjbHNSBxX6/ExB/ajsqUNqBKY=)
                          5: C70EC4383B792424E71BC6853AD1C792781070B3.crl (hash: Dz1B/tfU1ocNYMwN5PL1fVW224Zp4/WFEoGhu2DMUWw=)
                          6: 3132382e3230312e33302e302f32342d3234203d3e20323636363131.roa (hash: K1oiXbQpXPHBAe5+2RhhZgphYXVlvO4R8VR+lfH9/4o=)
                          7: 323830343a336561343a3a2f33342d3334203d3e20323636363131.roa (hash: Iy8Z281PiWGudVVi+6Xuz1EOjtequC/hoAtZP2al7qo=)
                          8: 3132382e3230312e33312e302f32342d3234203d3e20323636363131.roa (hash: Jk/dUTsEyRS4eaUNQyg2faTffP9Q2z1Onu74obZI4Kc=)
                          9: 323830343a336561343a633030303a3a2f33342d3334203d3e20323636363131.roa (hash: agfhXhJ2cVSH8LrotUt8pMCeealTD4XI3Pqctp9cA/I=)
                          10: 323830343a336561343a3a2f33322d3332203d3e20323636363131.roa (hash: 6S1peyvpcCuYUnFExsyCrXz9X05SBpVQXpX305/PwaI=)
                          11: 3132382e3230312e33302e302f32332d3233203d3e20323636363131.roa (hash: CByv+eSjmt8rgYOIIMsMjIiUDwttsg5AOZGDH8wIYJ0=)
                          12: 3132382e3230312e32392e302f32342d3234203d3e20323636363131.roa (hash: 7sS17+pNRgMetdaFP2swVkW+EEIJuVnLvV4ZF9/s18k=)
                          13: 3132382e3230312e32382e302f32322d3232203d3e20323636363131.roa (hash: lfW00KYxnDkCoH5gPCApuFGjk28s7y3HPU5nWiRF56M=)
                          14: 3132382e3230312e32382e302f32342d3234203d3e20323636363131.roa (hash: f9bMLpRWYn0Ou/KbYDsaBwDsTrPEOa0dTyoqvoKIcUM=)
                          15: 323830343a336561343a663430303a3a2f34322d3432203d3e20323636363131.roa (hash: nkBZTea3RUrDOB9NvGQkQorBu4LwPoSYzmrmu/urVB8=)
                          16: 3132382e3230312e32382e302f32332d3233203d3e20323636363131.roa (hash: 8ovb1S/m7YA8y4SK6Bxxap8msScCa6ih5FjhTooaW0E=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.crl
                          rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 20:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:0f:d2:d2:5d:d9:5b:5c:95:d3:b2:cb:c3:eb:28:ca:2d:cb:64:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C70EC4383B792424E71BC6853AD1C792781070B3
        Validity
            Not Before: Dec  5 16:54:00 2025 GMT
            Not After : Dec  6 20:41:00 2025 GMT
        Subject: CN=2BC91C5F32F4562CB3BA9B21BEF4E5F1F651EBF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:21:aa:8e:43:81:b3:55:2d:0a:3f:e1:47:8b:
                    f8:6d:c9:1e:0c:5b:c4:6d:88:6a:0f:1c:72:19:3e:
                    53:50:5e:fb:20:ad:e5:e5:b7:47:c8:b3:0d:8e:fd:
                    d5:a0:63:c8:9e:af:d4:f9:e5:d1:84:70:4a:3b:24:
                    70:b2:de:cc:0f:5c:f4:0c:fe:2b:2d:09:bd:6c:42:
                    22:7c:4e:65:e5:ad:0e:f1:2d:96:85:de:a3:d6:a2:
                    2f:d5:65:55:f2:7d:81:04:c8:89:db:c1:f8:b4:e0:
                    6a:b8:61:4b:0b:4d:f6:ee:8a:76:60:03:f9:f4:b9:
                    27:e2:fa:b6:12:c1:d7:e1:48:c7:a9:10:31:01:0c:
                    dc:53:f5:38:73:b0:8f:57:0e:ac:a1:e5:31:c5:96:
                    5d:d5:0f:95:2c:50:cc:db:a7:65:f8:fc:78:36:9c:
                    27:d6:f0:f3:61:f8:ba:97:72:67:30:7b:a4:3c:73:
                    f3:58:bf:f1:eb:57:9a:5a:c1:d0:eb:3b:f0:19:ed:
                    ac:d1:2e:29:10:8a:92:4d:dc:fd:96:2c:11:77:50:
                    a7:e6:5e:14:c5:14:fa:25:f9:a9:4b:54:63:08:67:
                    11:54:5d:9d:3a:68:80:9d:5e:ef:89:1e:2a:14:f8:
                    e4:fc:37:0f:ff:e0:52:7b:30:3d:f8:69:db:f0:05:
                    83:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C9:1C:5F:32:F4:56:2C:B3:BA:9B:21:BE:F4:E5:F1:F6:51:EB:F0
            X509v3 Authority Key Identifier:
                keyid:C7:0E:C4:38:3B:79:24:24:E7:1B:C6:85:3A:D1:C7:92:78:10:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:35:a5:80:57:34:64:6f:9c:ed:8f:8f:bf:f2:f0:cf:ac:a7:
         a4:1f:68:9f:24:f8:2e:14:0d:b0:f3:a4:aa:67:2a:61:66:00:
         98:e5:74:d0:b1:82:07:07:11:c9:f4:93:b3:51:8d:d7:10:0d:
         cf:31:3d:9a:fa:17:a5:80:5f:b7:94:59:e9:02:17:a0:c9:7f:
         60:6f:41:18:5f:ac:e8:97:4b:2d:31:6a:19:16:f5:08:81:fc:
         a7:47:88:e6:51:c2:d0:d3:81:95:90:01:2b:6c:01:36:e6:e6:
         94:15:d0:97:54:b4:0f:3b:45:f8:b3:78:87:1c:cc:8f:fc:3f:
         d0:3a:08:ea:26:90:c9:45:17:cb:a2:d0:a1:e5:e1:9c:f2:3a:
         a9:29:85:f1:b4:84:64:de:00:6a:e0:de:71:73:27:bd:60:64:
         f3:b5:6f:fa:a3:b0:ff:f7:2e:41:0b:55:66:08:ee:0f:42:5d:
         c5:13:f8:8f:1b:4c:c3:03:e9:d9:22:97:bc:eb:13:c7:82:a8:
         d7:04:32:22:35:d7:e7:70:b9:cf:fc:41:ed:8f:a9:f9:d2:a6:
         14:a9:d5:68:7a:f7:25:8d:f1:30:36:62:75:07:27:5c:f4:49:
         0f:a5:2c:dc:30:9c:fa:8e:98:b2:f2:41:39:fd:16:43:bd:92:
         56:4d:11:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:36:41 2025 by rpki-client