This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/1/EAC246C40D838133D032D3CB6AD738DDBFC47537.mft
File:                     EAC246C40D838133D032D3CB6AD738DDBFC47537.mft (raw, json)
Hash identifier:          6hQlf7R3gB41RBfZydPi0bJvJ4XXYkTHJ5LbXjtNX4M=
Subject key identifier:   A2:71:0D:B8:1D:47:12:8E:E1:B0:AD:D8:01:4D:B3:74:C4:3E:7F:69
Authority key identifier: EA:C2:46:C4:0D:83:81:33:D0:32:D3:CB:6A:D7:38:DD:BF:C4:75:37
Certificate issuer:       /CN=EAC246C40D838133D032D3CB6AD738DDBFC47537
Certificate serial:       1DCAC8AE54CA52909017D5186765AEAA2A8487B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC246C40D838133D032D3CB6AD738DDBFC47537.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/1/EAC246C40D838133D032D3CB6AD738DDBFC47537.mft
Manifest number:          033D
Signing time:             Mon 22 Dec 2025 07:13:47 +0000
Manifest this update:     Mon 22 Dec 2025 07:08:47 +0000
Manifest next update:     Tue 23 Dec 2025 07:48:47 +0000
Files and hashes:         1: EAC246C40D838133D032D3CB6AD738DDBFC47537.crl (hash: KWEv1b7dnu4pfWE6mLi1cqy5I/qM7aBpjtechs8kzaU=)
                          2: 3137372e31302e38302e302f32312d3232203d3e20323632383436.roa (hash: /vkHE3xX/dzQJlUfxIXsK9xzIKJCyYffOk6cJ/IIVpk=)
                          3: 323830343a333936633a3a2f33322d3438203d3e20323632383436.roa (hash: WN+KDOzNQHOLxF/Jo4YTeg2G+RwKIF2UdlQC1Crn05M=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/1/EAC246C40D838133D032D3CB6AD738DDBFC47537.crl
                          rsync://rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/1/EAC246C40D838133D032D3CB6AD738DDBFC47537.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC246C40D838133D032D3CB6AD738DDBFC47537.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 07:48:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ca:c8:ae:54:ca:52:90:90:17:d5:18:67:65:ae:aa:2a:84:87:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC246C40D838133D032D3CB6AD738DDBFC47537
        Validity
            Not Before: Dec 22 07:08:47 2025 GMT
            Not After : Dec 23 07:48:47 2025 GMT
        Subject: CN=A2710DB81D47128EE1B0ADD8014DB374C43E7F69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:13:17:10:19:db:67:2a:cb:43:0b:8a:8e:0e:
                    61:c9:f9:bb:25:f9:49:d0:5f:09:ef:a5:5e:8c:ee:
                    da:48:63:99:ba:cf:cd:3b:b6:d3:85:fb:1c:23:10:
                    d3:5d:12:30:e0:ae:c0:04:d4:9c:c1:24:12:f1:9e:
                    78:0a:d1:60:32:8b:33:6f:a0:60:4a:ae:e9:6d:e0:
                    85:cc:b2:58:ea:b0:57:09:9f:b7:26:07:58:ff:7f:
                    62:bd:28:a5:39:79:d0:ac:60:ca:35:ba:65:cd:aa:
                    df:95:a7:4b:ee:d9:fc:1a:02:50:1b:e7:ef:3d:b4:
                    ad:40:cf:67:6c:28:7e:5b:ba:bc:c3:e9:e2:8e:dc:
                    52:96:b0:e8:0d:54:e0:a5:34:84:00:a5:55:a6:88:
                    6e:57:00:4d:c0:d3:64:30:0b:5d:93:fa:e8:28:c3:
                    98:bc:3f:c3:d8:40:9b:2e:b4:5e:32:81:2f:b9:c8:
                    29:57:39:56:bc:c2:19:dd:d8:18:53:67:f1:c0:ad:
                    57:cd:16:91:3a:a9:b1:c0:23:ee:f4:3c:b5:cf:d3:
                    02:8e:51:f9:68:d4:06:08:6e:21:1d:10:07:b6:9a:
                    a7:3d:e6:d7:fd:ef:f0:cd:3e:d2:8a:5b:7e:31:45:
                    95:0d:c0:66:5e:42:58:c7:e3:76:3c:09:dd:be:0b:
                    e9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:71:0D:B8:1D:47:12:8E:E1:B0:AD:D8:01:4D:B3:74:C4:3E:7F:69
            X509v3 Authority Key Identifier:
                keyid:EA:C2:46:C4:0D:83:81:33:D0:32:D3:CB:6A:D7:38:DD:BF:C4:75:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/1/EAC246C40D838133D032D3CB6AD738DDBFC47537.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC246C40D838133D032D3CB6AD738DDBFC47537.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/1/EAC246C40D838133D032D3CB6AD738DDBFC47537.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:67:e4:e7:f7:e3:4e:73:72:af:02:f8:7f:32:64:87:a7:b1:
         d5:95:df:43:1d:91:1c:f3:eb:d7:55:29:c2:74:fa:1a:1f:0c:
         3c:3c:f8:c6:cb:70:bc:fc:27:81:26:ea:c2:40:3d:3c:5b:c1:
         81:78:6a:82:1f:47:74:c1:bb:55:14:ee:2e:30:24:5c:0a:30:
         d0:5a:32:e1:80:4e:cf:70:a6:91:25:89:78:0f:94:6f:c3:7b:
         41:7d:bc:9e:24:7e:e7:7a:77:1b:a3:b9:0c:5c:bf:b4:6f:81:
         64:b0:69:97:e1:99:5c:c9:ec:db:85:a8:f2:bc:c9:86:57:cf:
         42:26:8a:79:dc:da:19:75:18:3c:69:7e:9f:45:59:81:bc:ba:
         02:6e:e6:37:5f:24:a6:5a:8e:55:97:05:a1:29:f5:e7:87:66:
         ec:19:e2:f9:f9:94:40:16:41:7f:d7:d8:01:73:32:cf:b7:c0:
         4d:46:42:cd:c8:d2:99:08:f0:df:78:f2:a9:3f:5d:84:5e:44:
         13:33:4e:32:31:70:38:e9:45:af:37:20:5f:99:03:42:2a:02:
         ba:fc:9b:f4:5f:e9:a4:36:c1:38:8f:b1:e7:10:9a:29:c4:f7:
         06:59:de:9c:6c:ac:28:60:c2:67:6f:2d:0f:5a:71:90:8f:43:
         35:54:e3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 20:30:21 2025 by rpki-client