This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.mft
File:                     E968F08C3BD0A821112BDBD86914ED5964A1FF29.mft (raw, json)
Hash identifier:          2n32d3l54ipShfsMkrXzLhSQxqYMT6w1j0AewNPHzp8=
Subject key identifier:   50:48:D0:F2:42:6C:EE:7B:2B:1E:E5:AD:D4:EC:49:40:08:B9:B6:7E
Authority key identifier: E9:68:F0:8C:3B:D0:A8:21:11:2B:DB:D8:69:14:ED:59:64:A1:FF:29
Certificate issuer:       /CN=E968F08C3BD0A821112BDBD86914ED5964A1FF29
Certificate serial:       647AA71962D6B3D7B38540A0061084D66392C129
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.mft
Manifest number:          013A
Signing time:             Mon 22 Dec 2025 11:10:59 +0000
Manifest this update:     Mon 22 Dec 2025 11:05:59 +0000
Manifest next update:     Tue 23 Dec 2025 12:50:59 +0000
Files and hashes:         1: 34352e3136302e3137302e302f32342d3234203d3e20323638343235.roa (hash: YDpgH/4bezLcHcKquy0hO/2IbIOHc/EvOAlJ0sHVWu4=)
                          2: 323830343a353130343a3330303a3a2f34302d3430203d3e20323638343235.roa (hash: oTsWtwKr6AsKcKSiIACkui8/r4KI48XlfXRbN5Ph0B0=)
                          3: 34352e3136302e3136392e302f32342d3234203d3e20323638343235.roa (hash: gSnKP9WhOoPdQnm2UThEPqz/xuYFeGKfT5pMDS2CYWQ=)
                          4: 323830343a353130343a376530303a3a2f34302d3430203d3e20323638343235.roa (hash: uLu9gWUq6/BimsV43hOxu+K+0rS7t0/6Njcdq0Bi1g8=)
                          5: 34352e3136302e3137312e302f32342d3234203d3e20323638343235.roa (hash: JzBeqihAa+Mkl3GB5cphyq5G6WYEL7Ee5oQRkQFRnTE=)
                          6: 323830343a353130343a3a2f33332d3333203d3e20323638343235.roa (hash: O5lDJAGa/1XEPXAo82R4hgC3bbIo0b4QsYTQy2riaY8=)
                          7: 323830343a353130343a333930303a3a2f34302d3430203d3e20323638343235.roa (hash: MxtZ9EJPkyF+YNXZieFUaLFM1OcwrqefDjv8/f86TUY=)
                          8: 34352e3136302e3137302e302f32332d3233203d3e20323638343235.roa (hash: AJGgQgsxwIk4dVlVq0JfSI7buI/VGzoipoua+psqc2E=)
                          9: E968F08C3BD0A821112BDBD86914ED5964A1FF29.crl (hash: y+9Unwdg/76Lkfs6vpCje/BN24EdaCryid7mPCsmNCE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.crl
                          rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 12:50:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:7a:a7:19:62:d6:b3:d7:b3:85:40:a0:06:10:84:d6:63:92:c1:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E968F08C3BD0A821112BDBD86914ED5964A1FF29
        Validity
            Not Before: Dec 22 11:05:59 2025 GMT
            Not After : Dec 23 12:50:59 2025 GMT
        Subject: CN=5048D0F2426CEE7B2B1EE5ADD4EC494008B9B67E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b9:10:45:1b:4c:8e:e6:d4:05:a6:ca:77:e5:
                    c9:18:1e:16:aa:6e:30:0e:ea:3d:c1:bf:e0:fc:d7:
                    87:7e:04:20:6c:0b:0e:24:3c:2f:2d:27:8d:5e:68:
                    ad:b1:7d:05:09:07:b9:a7:42:f6:ae:20:e3:36:9c:
                    48:6c:bc:cc:e2:f0:74:32:b5:e9:9f:b7:1f:f5:2a:
                    3c:dc:c7:f1:68:8d:7f:60:1c:cf:af:29:74:fc:ab:
                    f5:41:48:2a:d4:ef:5a:89:65:4d:f4:0d:da:b5:78:
                    d0:e6:e4:0c:c8:88:b0:7c:8d:ae:15:9b:a5:86:95:
                    58:b9:6f:47:0e:d7:83:92:f9:cf:c7:35:13:2a:58:
                    9b:f1:07:f7:fa:7d:5f:27:c6:91:5d:05:13:0a:23:
                    81:b3:4b:3f:d1:d8:85:25:38:d1:0a:fc:af:48:04:
                    3c:be:f9:0e:52:80:d1:28:ba:a4:c0:2e:97:b5:68:
                    c4:40:47:36:66:b4:c3:c9:fa:61:2a:29:b4:cd:01:
                    0a:95:e4:f2:db:91:34:5d:02:40:89:ba:92:1a:49:
                    a5:17:32:21:89:e0:e4:bf:d5:f4:0b:f3:44:be:f1:
                    88:35:85:b0:d7:33:69:08:fa:c9:a7:62:92:7e:57:
                    07:1d:36:9c:cf:a7:91:ef:f4:79:aa:b0:2b:0e:19:
                    67:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:48:D0:F2:42:6C:EE:7B:2B:1E:E5:AD:D4:EC:49:40:08:B9:B6:7E
            X509v3 Authority Key Identifier:
                keyid:E9:68:F0:8C:3B:D0:A8:21:11:2B:DB:D8:69:14:ED:59:64:A1:FF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:37:1d:af:e7:69:35:86:1b:74:68:19:78:4e:f2:0c:63:8c:
         26:70:02:7f:f4:c8:e4:6d:5e:63:d1:c2:de:d9:1d:02:d2:ca:
         b9:e6:f9:6e:64:43:fb:36:14:38:52:12:5b:7e:52:aa:a1:64:
         58:f1:8a:a9:61:80:63:23:c0:ea:24:0f:e6:b7:e1:1f:ed:41:
         ee:f1:9b:0d:70:5a:49:bd:af:8d:54:d7:ed:c2:14:1d:d2:8f:
         77:e0:c4:a5:15:2e:56:45:d1:6d:03:e6:52:ba:be:16:72:b4:
         44:2c:41:e6:49:7c:c3:15:d9:28:34:1b:2a:4b:31:41:60:34:
         bf:f8:9a:f7:a1:40:76:46:46:90:62:df:65:ad:f7:ad:94:28:
         cf:82:6e:94:85:82:88:a9:14:02:e8:c8:b3:ef:9b:99:1e:b8:
         aa:d1:0e:85:65:5c:1d:3f:9c:e0:30:a3:eb:61:fc:c7:73:b1:
         20:03:34:f6:a8:21:cf:d9:2b:ae:2e:9a:0f:16:9d:c4:bd:ee:
         99:46:8d:14:a1:b6:34:76:b1:c6:1d:6d:54:63:1a:8a:de:39:
         17:8a:59:b7:2a:48:3a:8a:60:de:a5:37:1b:65:5a:c1:b6:85:
         30:e8:50:66:44:dd:01:37:9a:0b:9f:f1:fb:91:7d:3b:75:b0:
         df:73:e1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 14:30:40 2025 by rpki-client