This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HdHtMynN32vK2FEC5jmWQ7AyhD4477vmhNP3QTUCFkqn/0/2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.mft
File:                     2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.mft (raw, json)
Hash identifier:          ss0xadZtpIjbnEGuj/L3yhkNwodfqcavXpgknzwZlq8=
Subject key identifier:   A5:16:11:B5:F6:AE:6F:A4:A4:4B:43:2B:CF:D4:F4:EF:CE:43:6B:17
Authority key identifier: 2B:E9:E1:3D:9A:7C:5A:A3:F1:7D:C9:9A:74:E8:D5:C7:D8:4B:D4:D8
Certificate issuer:       /CN=2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8
Certificate serial:       3E0EE4DB2A3D9A9DA22DA7DDF6AE8EF1D606063F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdHtMynN32vK2FEC5jmWQ7AyhD4477vmhNP3QTUCFkqn/0/2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.mft
Manifest number:          A8
Signing time:             Fri 05 Dec 2025 19:40:56 +0000
Manifest this update:     Fri 05 Dec 2025 19:35:56 +0000
Manifest next update:     Sat 06 Dec 2025 23:24:56 +0000
Files and hashes:         1: 3230302e3130362e3139322e302f32322d3234203d3e20323635343735.roa (hash: BdI8udBx2K3aAdKmpdNnH4EbR16ZpLBs2fHxLiSj25M=)
                          2: 323830343a333462383a3a2f33322d3438203d3e20323635343735.roa (hash: 7IoalipyU9bCWrcvBhgDRcJlcy9X1NBtovpjl/NZOjk=)
                          3: 3137372e37332e34322e302f32332d3234203d3e20323635343735.roa (hash: 3POfxo24R8wIDYJx9wMK6V1VAltXPldj6Y6kfY9O6sI=)
                          4: 2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.crl (hash: JojjYue34K8M3VyWULcXy0E7paFJii5EdYWkMBmbMag=)
                          5: 3136382e3139372e32342e302f32322d3234203d3e20323635343735.roa (hash: DvmYlOm8OmuaRVXtvUloK3/qsa5opULT8IXI38cQ6dg=)
                          6: 34352e3137322e3138302e302f32322d3234203d3e20323635343735.roa (hash: iUrPPNnxc5GaUiN1Dq3cxhV0gEpO+PhiJQP1qMpDyAE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HdHtMynN32vK2FEC5jmWQ7AyhD4477vmhNP3QTUCFkqn/0/2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.crl
                          rsync://rpki-repo.registro.br/repo/HdHtMynN32vK2FEC5jmWQ7AyhD4477vmhNP3QTUCFkqn/0/2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 23:24:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:0e:e4:db:2a:3d:9a:9d:a2:2d:a7:dd:f6:ae:8e:f1:d6:06:06:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8
        Validity
            Not Before: Dec  5 19:35:56 2025 GMT
            Not After : Dec  6 23:24:56 2025 GMT
        Subject: CN=A51611B5F6AE6FA4A44B432BCFD4F4EFCE436B17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b8:8b:e0:dc:db:a2:be:cc:db:9e:85:10:a6:
                    35:39:b9:7f:6f:52:ac:ca:d7:18:ce:99:6f:61:e1:
                    9c:6e:2f:be:21:ac:2b:44:fe:21:83:f5:53:44:89:
                    5a:04:18:b2:75:cf:79:04:cd:74:8c:dc:fe:7c:1e:
                    ae:98:80:36:65:ce:40:e0:33:83:e7:fc:12:49:c7:
                    24:b3:8f:98:b3:79:46:b5:e8:fa:af:d9:e9:16:e6:
                    97:d0:19:21:9e:ee:97:2f:9e:3f:57:92:fd:b6:f2:
                    6f:b7:5a:24:f0:ba:4e:58:bf:65:2e:55:11:3c:00:
                    ba:25:59:39:f2:f4:d0:2f:06:29:71:29:ca:53:a6:
                    8b:e4:1d:15:5d:cc:57:62:f7:e8:54:a9:48:67:58:
                    9b:a9:4a:15:2e:5e:f6:b4:c5:c8:53:46:c3:a2:0d:
                    75:34:05:43:07:43:fa:83:4a:f2:ea:2f:08:48:bd:
                    61:df:b3:1e:d6:23:b7:cc:14:75:1e:f7:f8:29:01:
                    8d:93:f6:db:98:37:b4:76:7a:1c:76:a2:a9:a8:33:
                    90:e0:2b:59:0f:b3:90:17:25:0a:cb:5b:7d:c6:d5:
                    61:cc:25:a8:e1:0c:ea:9b:eb:7c:24:f4:28:dd:b5:
                    1d:06:01:51:05:5c:c6:00:08:fc:fb:1b:f8:d6:8d:
                    14:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:16:11:B5:F6:AE:6F:A4:A4:4B:43:2B:CF:D4:F4:EF:CE:43:6B:17
            X509v3 Authority Key Identifier:
                keyid:2B:E9:E1:3D:9A:7C:5A:A3:F1:7D:C9:9A:74:E8:D5:C7:D8:4B:D4:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdHtMynN32vK2FEC5jmWQ7AyhD4477vmhNP3QTUCFkqn/0/2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdHtMynN32vK2FEC5jmWQ7AyhD4477vmhNP3QTUCFkqn/0/2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:54:ca:a3:4a:bf:32:98:ed:eb:c4:c6:e9:0c:e6:38:0b:f0:
         5c:ce:c9:5c:3c:36:a3:19:07:ed:cf:f4:eb:57:b5:f8:1e:35:
         52:e8:70:62:2f:98:bd:cf:5b:ac:0d:f1:d0:78:b8:5f:5f:1d:
         db:de:94:1d:0e:10:dc:2f:fc:93:12:00:61:ec:6a:f7:ff:7d:
         69:31:a3:54:dd:d2:0f:71:08:2a:56:06:95:da:73:ae:52:1e:
         82:00:f9:08:3e:94:39:f4:50:9a:d9:65:1f:21:8e:d6:32:4f:
         7a:a0:53:e7:ed:1b:83:03:8f:61:ff:d4:44:f2:cf:b7:62:51:
         46:5d:16:05:f1:13:de:92:f1:cc:60:4f:5a:42:b7:39:f0:09:
         11:f2:71:c0:9d:a4:bc:a7:62:e2:49:8f:3e:d8:76:d6:1e:e1:
         a3:ca:8f:23:e4:7b:6c:7d:3e:2a:ac:cc:19:3f:c1:f4:56:65:
         94:61:56:40:73:c3:65:4a:13:57:7e:b6:6a:27:6b:2d:d1:e5:
         02:09:64:33:fa:44:b1:69:40:39:ac:9a:7c:8c:9f:db:51:21:
         73:7f:a8:18:bd:90:12:55:fc:57:83:90:d2:53:d7:03:3b:d7:
         d8:5d:5c:1c:bf:da:23:35:4e:17:48:66:d5:d2:53:7f:43:5e:
         c0:92:10:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:42:30 2025 by rpki-client