This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.mft
File:                     CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.mft (raw, json)
Hash identifier:          Xqehv4YOcvihrdd9YBfEYOfzNZA+FwHXkuNxc9n+HwA=
Subject key identifier:   9E:E3:15:1F:36:0F:74:1F:9C:DB:A1:0A:1A:24:D6:9E:25:1D:FA:E6
Authority key identifier: CB:0E:C6:B7:F7:40:56:65:C6:58:4B:5D:B7:F3:C8:75:5A:A6:D2:27
Certificate issuer:       /CN=CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227
Certificate serial:       10C14E8C8F6E9BF243B43C0857B7B1F0C07B8D3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.mft
Manifest number:          033D
Signing time:             Sat 20 Dec 2025 04:32:13 +0000
Manifest this update:     Sat 20 Dec 2025 04:27:13 +0000
Manifest next update:     Sun 21 Dec 2025 05:13:13 +0000
Files and hashes:         1: CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.crl (hash: VcuimyT32IXaD7XDkGp8tASx2dJ0FRDZuOJzQ3Fsen4=)
                          2: 3137302e37382e39362e302f32322d3234203d3e20323636323639.roa (hash: HnG1DMJoAuqnzDxdBRoltWz1OrOXM/EvggoTnkRAc/Q=)
                          3: 323830343a333531633a3a2f33322d3438203d3e20323636323639.roa (hash: 0RAwiE1uQZC4AnhcHcz8NAlKcFd2Q+l+WGtwVHrZPlg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.crl
                          rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 05:13:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c1:4e:8c:8f:6e:9b:f2:43:b4:3c:08:57:b7:b1:f0:c0:7b:8d:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227
        Validity
            Not Before: Dec 20 04:27:13 2025 GMT
            Not After : Dec 21 05:13:13 2025 GMT
        Subject: CN=9EE3151F360F741F9CDBA10A1A24D69E251DFAE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8e:1e:9e:17:5a:38:09:c6:d6:30:6e:b6:82:
                    05:6f:83:88:cb:a2:64:44:f9:27:28:26:01:bc:8a:
                    ab:0d:4d:6e:14:2c:17:6e:6f:cf:fa:95:a9:8b:56:
                    08:27:14:c3:45:bc:26:46:5b:7c:1c:bd:53:c5:9d:
                    0f:f0:7e:dc:9e:1f:cb:f1:04:ee:fd:d1:14:78:1b:
                    e3:27:fd:6e:98:09:35:1d:13:b4:e3:a2:16:2c:cb:
                    86:57:68:3a:83:fa:d8:89:26:16:d2:45:81:31:aa:
                    b2:4c:ff:b8:8d:6a:33:12:d7:72:52:b6:90:7c:d1:
                    76:ff:79:9c:ad:de:d6:9a:9a:f1:d7:27:fa:58:ea:
                    c3:22:a0:09:5d:a0:72:57:f2:5e:ac:b6:3d:28:a9:
                    ff:96:6f:26:8b:88:57:73:a9:32:d2:b2:5f:d8:e1:
                    27:d7:de:76:6e:b3:81:b6:c2:62:5b:19:06:0b:75:
                    f4:bc:ce:e2:b5:49:ad:7a:d7:62:b3:af:a1:7d:e6:
                    2f:ce:5d:50:52:e0:f9:71:c3:ad:95:61:b1:86:4f:
                    6b:55:81:40:92:f5:ab:e1:24:3e:c9:81:ed:bc:8d:
                    a6:32:14:fc:9f:63:d4:07:ab:b8:b8:ac:66:a1:92:
                    e7:fd:c3:e4:e8:3e:b1:3c:c6:91:46:8b:d7:48:ea:
                    0b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E3:15:1F:36:0F:74:1F:9C:DB:A1:0A:1A:24:D6:9E:25:1D:FA:E6
            X509v3 Authority Key Identifier:
                keyid:CB:0E:C6:B7:F7:40:56:65:C6:58:4B:5D:B7:F3:C8:75:5A:A6:D2:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:94:8b:9b:77:de:94:ff:60:fa:b7:b7:85:23:3d:fe:12:8f:
         3d:42:b9:a8:31:5b:a4:b1:9c:5d:11:ba:04:8f:06:7f:05:59:
         23:dd:c6:cd:9f:30:e2:9e:85:07:24:c9:83:fc:70:c8:e7:b2:
         cf:d4:ee:54:b1:f8:0d:15:c0:be:94:90:b7:a2:84:24:81:e6:
         83:0d:92:d9:fb:96:cc:8f:9b:f0:29:71:7b:3e:b2:64:3d:fd:
         12:b5:af:c4:98:c0:7c:60:6d:ff:7d:3b:3e:5a:1f:8a:dc:6e:
         e7:27:eb:7d:74:ac:c7:0e:aa:4d:5e:f9:71:58:cf:cb:97:af:
         8c:25:1d:ce:1f:95:8e:1e:4f:d5:dc:cf:07:53:e1:80:53:84:
         42:6b:ee:cc:22:04:74:1f:e4:10:3c:20:b6:bd:48:06:13:24:
         fc:db:ef:45:d3:80:c8:91:8b:89:3d:1f:94:87:ad:41:60:25:
         bb:5e:48:90:8d:3b:10:e2:1e:61:73:e1:76:86:d4:67:56:05:
         ee:29:62:5f:a9:de:0e:29:20:3c:20:6d:e9:e2:15:4c:c6:16:
         5c:3f:b0:78:2c:44:d2:68:12:b0:29:64:b3:f8:ae:ce:f3:25:
         0b:64:4e:c3:71:dd:3c:cf:35:75:6a:41:78:29:cf:7c:b4:ea:
         28:c9:a6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:48:06 2025 by rpki-client