This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/ECADEA938914F9A8499264BBC9B579A4EDF92D27.mft
File:                     ECADEA938914F9A8499264BBC9B579A4EDF92D27.mft (raw, json)
Hash identifier:          JLpLpb2GrawrA51mf7zyxEduU/vHTeejR2iO+9Psm5A=
Subject key identifier:   F0:4A:35:49:FE:DB:D9:F6:A6:C6:D7:BA:FC:D2:63:6C:F5:1E:19:39
Authority key identifier: EC:AD:EA:93:89:14:F9:A8:49:92:64:BB:C9:B5:79:A4:ED:F9:2D:27
Certificate issuer:       /CN=ECADEA938914F9A8499264BBC9B579A4EDF92D27
Certificate serial:       37B511E273DBEF1C3338C9D429665131525DBD1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECADEA938914F9A8499264BBC9B579A4EDF92D27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/ECADEA938914F9A8499264BBC9B579A4EDF92D27.mft
Manifest number:          27
Signing time:             Sat 06 Dec 2025 02:07:32 +0000
Manifest this update:     Sat 06 Dec 2025 02:02:32 +0000
Manifest next update:     Sun 07 Dec 2025 03:11:32 +0000
Files and hashes:         1: ECADEA938914F9A8499264BBC9B579A4EDF92D27.crl (hash: xgrB0EWghhV0Um/BKvziHgADmdyrS2U4tqO2aubeWx4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/ECADEA938914F9A8499264BBC9B579A4EDF92D27.crl
                          rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/ECADEA938914F9A8499264BBC9B579A4EDF92D27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECADEA938914F9A8499264BBC9B579A4EDF92D27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 03:11:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b5:11:e2:73:db:ef:1c:33:38:c9:d4:29:66:51:31:52:5d:bd:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECADEA938914F9A8499264BBC9B579A4EDF92D27
        Validity
            Not Before: Dec  6 02:02:32 2025 GMT
            Not After : Dec  7 03:11:32 2025 GMT
        Subject: CN=F04A3549FEDBD9F6A6C6D7BAFCD2636CF51E1939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:92:52:85:3e:52:c4:64:43:f3:51:fd:89:03:
                    7e:f7:de:11:c9:02:0f:00:77:8c:6c:e0:7d:ea:69:
                    ea:86:5a:f3:81:c2:64:c3:b8:88:ec:9c:77:3a:e8:
                    06:5f:09:9d:3f:03:c6:96:90:e9:83:17:1f:5c:78:
                    c0:f4:1d:2e:2a:1c:68:a8:59:4a:90:dc:73:79:74:
                    18:a0:16:79:3c:5a:f5:36:3f:a3:5e:8e:44:7c:5b:
                    91:99:18:a6:98:62:d9:14:5e:30:45:ff:08:80:32:
                    cd:00:22:33:80:7d:dc:a0:3d:b4:21:01:11:e9:2d:
                    ed:3b:6a:26:d6:b1:5d:bc:ae:dc:a5:d8:e2:13:d2:
                    74:87:5d:14:fd:9e:e2:e0:12:8a:cb:3c:70:ba:50:
                    27:5e:2f:95:da:36:ae:8d:a3:d4:9b:2f:42:62:df:
                    bc:cb:47:ea:f7:98:db:d5:30:ab:e0:da:0c:9d:a9:
                    de:58:8a:bf:21:8f:d8:5b:21:94:2f:16:d4:40:6e:
                    3d:f3:67:7b:f1:80:d7:08:c0:20:da:00:06:e3:3d:
                    64:54:d0:5a:71:9c:7d:7b:46:09:b2:46:d1:06:ae:
                    69:03:8c:c4:6a:85:d6:5d:3e:65:16:46:ce:ea:46:
                    26:c6:45:94:9c:a9:01:a5:09:1a:60:b7:9d:c5:6f:
                    f2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:4A:35:49:FE:DB:D9:F6:A6:C6:D7:BA:FC:D2:63:6C:F5:1E:19:39
            X509v3 Authority Key Identifier:
                keyid:EC:AD:EA:93:89:14:F9:A8:49:92:64:BB:C9:B5:79:A4:ED:F9:2D:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/ECADEA938914F9A8499264BBC9B579A4EDF92D27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECADEA938914F9A8499264BBC9B579A4EDF92D27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/ECADEA938914F9A8499264BBC9B579A4EDF92D27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:d8:03:72:b9:e2:b7:92:79:03:a7:6e:f6:52:d1:63:15:03:
         e4:37:a5:56:6c:5d:03:41:46:bb:c0:e1:11:51:90:eb:60:f9:
         68:5a:4b:10:27:6a:4e:63:2a:1b:cd:4b:65:03:23:2e:6b:6f:
         a4:1f:69:ca:df:11:e7:69:45:e8:30:fc:80:59:58:41:92:a7:
         12:ed:3f:98:5e:72:1b:f9:b3:9f:4d:bf:e9:a3:88:7c:e4:45:
         d8:63:d6:21:24:2c:cf:13:76:39:ec:a2:02:1f:1e:e0:62:8c:
         87:40:dc:7e:b5:69:f1:4f:b8:b6:06:70:67:b3:42:2e:cc:ec:
         46:d1:03:35:31:96:5d:ee:82:98:9b:48:39:aa:7b:91:3e:95:
         a1:16:7e:27:8c:23:a0:2a:88:f0:32:f4:1f:0b:00:2d:28:ad:
         23:48:ac:5d:54:63:01:d7:b4:25:bc:cf:be:a5:13:fb:9f:40:
         32:53:ab:1a:9c:62:a3:ae:c0:7d:69:1f:e4:ff:cf:da:cf:cb:
         e7:81:2d:51:c1:ed:9f:5b:02:e0:ff:7b:4e:32:8a:fc:6b:b0:
         f6:f5:6b:bb:c6:64:35:fe:73:a5:c0:e1:c7:c2:cf:49:da:74:
         8b:0c:7e:6d:b0:57:2b:5a:4e:10:0f:5e:76:6f:da:aa:ee:92:
         44:84:93:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:13:23 2025 by rpki-client