This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/WjC2kN2a2kKoSjPCG2YFmwVmaXFEoVPfpEqoAWUnxit/1/02741E68C58D644A904E506F841B4EE63616349B.mft
File:                     02741E68C58D644A904E506F841B4EE63616349B.mft (raw, json)
Hash identifier:          p+rpNdhYsk3XtDINWLVJ22HLtbcSAWhngIc8VypseGs=
Subject key identifier:   9F:5A:F6:85:55:B1:D5:CD:A8:0B:35:2D:24:5A:AD:46:32:61:F6:06
Authority key identifier: 02:74:1E:68:C5:8D:64:4A:90:4E:50:6F:84:1B:4E:E6:36:16:34:9B
Certificate issuer:       /CN=02741E68C58D644A904E506F841B4EE63616349B
Certificate serial:       309C5C883A33E6ED3D22DAECF2BAB8352E814FA9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02741E68C58D644A904E506F841B4EE63616349B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WjC2kN2a2kKoSjPCG2YFmwVmaXFEoVPfpEqoAWUnxit/1/02741E68C58D644A904E506F841B4EE63616349B.mft
Manifest number:          0288
Signing time:             Fri 05 Dec 2025 19:48:12 +0000
Manifest this update:     Fri 05 Dec 2025 19:43:12 +0000
Manifest next update:     Sat 06 Dec 2025 22:55:12 +0000
Files and hashes:         1: 3137302e302e37322e302f32322d3234203d3e20323634393736.roa (hash: ay+FGyDBrPMJdc2K5bWelKM6rO0qmZJNnxcmxMAs948=)
                          2: 323830343a333064383a3a2f33322d3334203d3e20323634393736.roa (hash: nv8LLMX+vyCbc20U77xhD0JHSAD3/Oumdjk0SatFuBU=)
                          3: 02741E68C58D644A904E506F841B4EE63616349B.crl (hash: 80+pwk0wzRknL0PCXN+cefKd7xtFEhxwcO7Zgn036cs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/WjC2kN2a2kKoSjPCG2YFmwVmaXFEoVPfpEqoAWUnxit/1/02741E68C58D644A904E506F841B4EE63616349B.crl
                          rsync://rpki-repo.registro.br/repo/WjC2kN2a2kKoSjPCG2YFmwVmaXFEoVPfpEqoAWUnxit/1/02741E68C58D644A904E506F841B4EE63616349B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02741E68C58D644A904E506F841B4EE63616349B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 22:55:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:9c:5c:88:3a:33:e6:ed:3d:22:da:ec:f2:ba:b8:35:2e:81:4f:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02741E68C58D644A904E506F841B4EE63616349B
        Validity
            Not Before: Dec  5 19:43:12 2025 GMT
            Not After : Dec  6 22:55:12 2025 GMT
        Subject: CN=9F5AF68555B1D5CDA80B352D245AAD463261F606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a3:58:f7:14:3e:40:8d:eb:8d:3f:fb:5b:a2:
                    39:12:2d:73:11:93:56:d9:6e:2c:61:93:5d:3a:7d:
                    36:5d:84:d4:e6:76:29:a0:b8:97:a8:70:ae:fc:ad:
                    7e:d5:9c:b0:a7:95:c1:34:c7:4d:fa:0c:39:4e:f4:
                    16:e4:bc:64:bf:7c:4e:6e:72:7d:59:38:a5:1b:69:
                    e1:7e:d8:5e:c7:91:d3:51:4f:2d:af:6c:43:68:b4:
                    4a:93:42:cf:3b:0a:25:50:a2:d9:ce:d2:c2:f8:b7:
                    da:ad:5c:0c:07:83:6c:f8:de:c7:91:2b:e9:69:60:
                    a3:fe:49:57:8b:f4:1e:63:fb:89:fd:eb:a5:fc:f1:
                    65:d8:ae:2a:09:20:f4:77:fe:ab:6d:be:63:c7:af:
                    34:ac:73:cb:1d:f3:28:61:9e:15:7e:97:d1:4f:2a:
                    cf:2d:bd:fe:da:5e:a6:ad:cb:83:8c:45:9d:01:99:
                    95:12:a5:5d:e3:54:11:06:a5:af:2f:63:02:4f:dc:
                    34:66:72:30:35:e8:ad:6c:9c:51:e9:a0:53:00:77:
                    42:72:fb:79:60:8e:29:79:08:2a:5f:f7:df:7f:8b:
                    b5:5d:f3:71:52:8f:9f:fb:38:9b:98:17:ff:a8:e0:
                    03:a7:9a:f0:b7:c2:ad:25:df:26:86:51:d5:b5:6d:
                    01:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5A:F6:85:55:B1:D5:CD:A8:0B:35:2D:24:5A:AD:46:32:61:F6:06
            X509v3 Authority Key Identifier:
                keyid:02:74:1E:68:C5:8D:64:4A:90:4E:50:6F:84:1B:4E:E6:36:16:34:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WjC2kN2a2kKoSjPCG2YFmwVmaXFEoVPfpEqoAWUnxit/1/02741E68C58D644A904E506F841B4EE63616349B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02741E68C58D644A904E506F841B4EE63616349B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WjC2kN2a2kKoSjPCG2YFmwVmaXFEoVPfpEqoAWUnxit/1/02741E68C58D644A904E506F841B4EE63616349B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:a2:97:65:32:c1:3a:41:d2:7e:04:f4:c8:94:a5:88:1d:2f:
         98:f8:87:7f:d3:b8:5f:af:ab:2c:ee:3d:3e:dc:f9:a8:ae:42:
         30:ce:67:d8:d0:34:b2:bd:ce:27:36:94:89:37:7a:71:ff:3a:
         87:87:54:f1:a1:f2:23:aa:57:c4:a1:42:bc:ea:94:37:f1:68:
         d0:bf:1e:4e:7f:6f:2b:73:3d:e8:5d:b9:24:4f:69:1e:fa:d2:
         e8:9d:91:c5:b1:8d:16:70:60:92:d1:68:e4:2a:4c:64:d4:b5:
         51:83:56:35:4b:8f:b8:54:ee:48:fe:e3:62:22:3a:ce:09:8d:
         26:0e:ff:9a:9c:68:3c:c1:b2:85:2e:97:8e:33:d1:0e:f0:81:
         0a:c5:88:82:c7:52:0a:eb:a2:1c:a0:05:75:b0:85:9c:38:d4:
         4b:c3:42:8e:9d:3a:e7:be:b6:c1:8c:42:63:89:22:3f:77:e1:
         21:8b:4e:73:5c:fd:d5:4c:9a:00:33:27:fa:32:fe:1f:0f:3e:
         3c:2c:35:73:fb:b1:35:e1:fb:51:7c:cd:8e:3a:26:0c:25:94:
         49:eb:61:1b:dc:2d:06:1f:5f:a3:84:11:3b:17:74:18:ee:90:
         32:b3:47:50:9c:81:8f:de:1c:4b:3b:da:ed:fb:93:c1:c6:42:
         e8:36:11:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:37:43 2025 by rpki-client