This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/eBfqdDt8nN2cgpqnbtmUP3W5KwGESoXhurN6Xiy8WKg/2/2D705BCC553145DBCFA9975A12AA67D82D6813A8.mft
File:                     2D705BCC553145DBCFA9975A12AA67D82D6813A8.mft (raw, json)
Hash identifier:          P6YU/pgIeBok+EhdK+NT681sMMtZZ0GpIdj9VOUrDrw=
Subject key identifier:   BD:E5:47:41:16:B9:1A:43:41:B8:BC:D0:BC:EF:FB:01:B5:EC:E5:35
Authority key identifier: 2D:70:5B:CC:55:31:45:DB:CF:A9:97:5A:12:AA:67:D8:2D:68:13:A8
Certificate issuer:       /CN=2D705BCC553145DBCFA9975A12AA67D82D6813A8
Certificate serial:       27BFAC148D8FC6BDDB9C5AFF324C946ED36F74C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D705BCC553145DBCFA9975A12AA67D82D6813A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/eBfqdDt8nN2cgpqnbtmUP3W5KwGESoXhurN6Xiy8WKg/2/2D705BCC553145DBCFA9975A12AA67D82D6813A8.mft
Manifest number:          031D
Signing time:             Fri 05 Dec 2025 11:13:36 +0000
Manifest this update:     Fri 05 Dec 2025 11:08:36 +0000
Manifest next update:     Sat 06 Dec 2025 14:56:36 +0000
Files and hashes:         1: 3137372e38342e31362e302f32322d3234203d3e20323632353736.roa (hash: 2333VR/HI8Np7gKakHahZItGClhCkRUty2idY1BP3JA=)
                          2: 2D705BCC553145DBCFA9975A12AA67D82D6813A8.crl (hash: ZWFxZhhnkLwu6VfgOVwSB8gD84q0gqQ33pWIYnf5oBY=)
                          3: 323830343a336263303a3a2f33322d3634203d3e20323632353736.roa (hash: 8zlqQJF2WW+OLlJCVncpmlM/Yi5GZFPTS9a02POmWjE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/eBfqdDt8nN2cgpqnbtmUP3W5KwGESoXhurN6Xiy8WKg/2/2D705BCC553145DBCFA9975A12AA67D82D6813A8.crl
                          rsync://rpki-repo.registro.br/repo/eBfqdDt8nN2cgpqnbtmUP3W5KwGESoXhurN6Xiy8WKg/2/2D705BCC553145DBCFA9975A12AA67D82D6813A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D705BCC553145DBCFA9975A12AA67D82D6813A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 14:56:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:bf:ac:14:8d:8f:c6:bd:db:9c:5a:ff:32:4c:94:6e:d3:6f:74:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D705BCC553145DBCFA9975A12AA67D82D6813A8
        Validity
            Not Before: Dec  5 11:08:36 2025 GMT
            Not After : Dec  6 14:56:36 2025 GMT
        Subject: CN=BDE5474116B91A4341B8BCD0BCEFFB01B5ECE535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7a:51:26:91:d3:e6:c4:f9:94:02:78:fe:4d:
                    0d:28:ef:77:34:41:d8:2b:d9:a6:65:51:19:50:8b:
                    8b:72:e5:8c:08:1a:51:44:4a:bf:fa:93:4e:bb:2e:
                    c8:60:bd:69:ff:10:ef:67:10:87:7a:91:04:4a:1f:
                    2c:c5:50:a5:65:f1:06:c4:55:9a:13:ad:18:56:5b:
                    ee:e8:e7:b4:d2:33:65:33:14:fe:88:0c:2f:86:87:
                    68:58:cc:8e:30:90:04:8d:82:f1:90:00:98:2b:1a:
                    91:fb:9b:2f:5c:e6:e9:3e:fa:00:90:37:87:53:ae:
                    0e:98:3e:45:3f:3b:ac:bc:82:fa:ca:fa:dd:97:e7:
                    9e:33:b8:e6:34:49:44:7f:e9:de:49:01:b5:6b:db:
                    d8:2a:f9:df:ee:94:4b:98:2b:04:43:b4:5f:f8:57:
                    5c:7e:3c:7d:34:d2:0b:ad:2a:5c:cf:45:7b:7b:a4:
                    46:51:dd:b4:85:94:e5:c0:a6:96:b0:5e:e2:37:fd:
                    ee:eb:54:53:15:a0:21:a2:bb:60:f2:ec:94:12:4c:
                    b5:b7:2e:a4:1f:24:fe:ac:ee:e2:3f:5c:d1:df:5f:
                    9a:ac:89:87:41:7b:23:4d:7f:ef:49:58:aa:56:48:
                    be:e0:85:e4:17:0f:de:67:c9:76:e0:9e:b6:28:8e:
                    4f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E5:47:41:16:B9:1A:43:41:B8:BC:D0:BC:EF:FB:01:B5:EC:E5:35
            X509v3 Authority Key Identifier:
                keyid:2D:70:5B:CC:55:31:45:DB:CF:A9:97:5A:12:AA:67:D8:2D:68:13:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/eBfqdDt8nN2cgpqnbtmUP3W5KwGESoXhurN6Xiy8WKg/2/2D705BCC553145DBCFA9975A12AA67D82D6813A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D705BCC553145DBCFA9975A12AA67D82D6813A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/eBfqdDt8nN2cgpqnbtmUP3W5KwGESoXhurN6Xiy8WKg/2/2D705BCC553145DBCFA9975A12AA67D82D6813A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:81:0b:a9:7b:ac:68:56:86:fb:99:36:2b:bf:18:67:fe:da:
         5c:8c:bc:32:1e:5c:2a:55:74:4f:c6:50:9e:3b:af:19:dd:c2:
         5a:50:6e:36:46:b4:70:e4:f8:52:a3:5f:cd:49:b4:a9:58:1a:
         8d:e1:03:4f:db:c0:ca:e3:05:0c:3b:bc:04:5e:07:b4:ab:a3:
         14:5e:75:a9:53:34:36:d0:79:a0:cd:32:c8:66:5a:33:0f:09:
         5d:49:8b:59:e2:48:26:86:38:d7:3a:dc:c6:69:0e:b1:83:0b:
         bf:1f:b8:0b:12:6e:32:98:e6:6a:b6:8f:28:ef:33:4d:a7:16:
         93:12:e4:28:56:47:1e:5d:a3:81:a6:08:72:5d:a4:61:75:25:
         60:7c:14:45:5a:cb:04:87:4a:d0:96:c8:e9:94:67:7e:b2:eb:
         49:0a:c2:f2:4f:9e:b3:5e:5d:1e:b6:2a:e7:9e:9b:45:7a:58:
         2e:dc:3e:f0:b1:58:0a:ff:f9:67:70:a8:d1:a8:d8:d6:12:0d:
         88:1c:ca:2b:f3:65:5c:77:57:a2:d1:41:0b:8f:99:30:5a:64:
         04:63:b1:01:3d:fa:5a:f8:b1:2a:c3:c8:7f:fe:d3:5b:c0:a4:
         0a:e9:ee:f5:24:b9:f5:f1:bf:d8:41:e1:88:42:f2:c7:33:ca:
         91:a3:fa:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:01:30 2025 by rpki-client