This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/1/EAC246C40D838133D032D3CB6AD738DDBFC47537.mft
File:                     EAC246C40D838133D032D3CB6AD738DDBFC47537.mft (raw, json)
Hash identifier:          4G9jzedVXMw5mHg+bsfQqoX9+tT5tJ/0x8YS8EoAvB0=
Subject key identifier:   02:7C:EA:A1:73:69:61:10:47:EE:0B:58:80:F5:89:4B:8B:D3:3F:90
Authority key identifier: EA:C2:46:C4:0D:83:81:33:D0:32:D3:CB:6A:D7:38:DD:BF:C4:75:37
Certificate issuer:       /CN=EAC246C40D838133D032D3CB6AD738DDBFC47537
Certificate serial:       2528CADCD68868EB71977D45E055A4870B84F5F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC246C40D838133D032D3CB6AD738DDBFC47537.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/1/EAC246C40D838133D032D3CB6AD738DDBFC47537.mft
Manifest number:          0340
Signing time:             Wed 24 Dec 2025 14:23:47 +0000
Manifest this update:     Wed 24 Dec 2025 14:18:47 +0000
Manifest next update:     Thu 25 Dec 2025 17:01:47 +0000
Files and hashes:         1: 3137372e31302e38302e302f32312d3232203d3e20323632383436.roa (hash: /vkHE3xX/dzQJlUfxIXsK9xzIKJCyYffOk6cJ/IIVpk=)
                          2: 323830343a333936633a3a2f33322d3438203d3e20323632383436.roa (hash: WN+KDOzNQHOLxF/Jo4YTeg2G+RwKIF2UdlQC1Crn05M=)
                          3: EAC246C40D838133D032D3CB6AD738DDBFC47537.crl (hash: vl2XZbq44LNsmeKiNtUJ5VmKtVjzk02Sp1lELS4deWI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/1/EAC246C40D838133D032D3CB6AD738DDBFC47537.crl
                          rsync://rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/1/EAC246C40D838133D032D3CB6AD738DDBFC47537.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC246C40D838133D032D3CB6AD738DDBFC47537.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 17:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:28:ca:dc:d6:88:68:eb:71:97:7d:45:e0:55:a4:87:0b:84:f5:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC246C40D838133D032D3CB6AD738DDBFC47537
        Validity
            Not Before: Dec 24 14:18:47 2025 GMT
            Not After : Dec 25 17:01:47 2025 GMT
        Subject: CN=027CEAA17369611047EE0B5880F5894B8BD33F90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:60:4a:66:ab:ba:40:19:d5:04:6a:27:60:76:
                    f8:56:4c:2f:98:70:d9:0e:a1:75:46:16:89:8b:33:
                    2c:db:39:84:c6:11:5e:14:ad:84:33:56:b8:51:77:
                    2c:e0:89:f8:cd:21:db:75:92:96:a5:d7:c3:8e:ee:
                    36:19:a4:89:81:05:f2:5e:71:6c:31:e3:a9:02:a0:
                    32:b3:8a:92:0d:97:9e:04:f8:b9:81:32:db:77:f0:
                    08:67:af:b3:67:b7:9b:70:80:f0:f0:0c:75:40:46:
                    b9:16:36:1e:de:3c:13:af:35:58:ad:1c:9e:05:6a:
                    6b:05:16:57:05:3f:eb:5d:ae:31:b0:73:e1:10:2e:
                    96:f0:be:fb:71:aa:48:ad:77:61:30:ba:6b:39:d9:
                    39:a6:b4:0b:ea:69:8b:9f:27:17:e7:dd:e1:3b:23:
                    4f:25:75:75:70:97:6d:05:ea:80:29:35:eb:be:6c:
                    77:07:6f:24:62:17:1e:52:fc:23:bb:e8:2f:2b:b1:
                    a0:b0:28:0e:01:18:49:4c:66:bb:dc:ac:69:68:37:
                    19:04:76:d5:a1:1d:db:86:33:4c:38:9f:22:4d:1e:
                    c9:9e:9b:0e:4a:f2:90:62:89:e9:8f:ec:1f:9f:46:
                    5f:b9:4e:e7:e2:7c:da:62:48:e9:3c:40:fb:92:f6:
                    94:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7C:EA:A1:73:69:61:10:47:EE:0B:58:80:F5:89:4B:8B:D3:3F:90
            X509v3 Authority Key Identifier:
                keyid:EA:C2:46:C4:0D:83:81:33:D0:32:D3:CB:6A:D7:38:DD:BF:C4:75:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/1/EAC246C40D838133D032D3CB6AD738DDBFC47537.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC246C40D838133D032D3CB6AD738DDBFC47537.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/1/EAC246C40D838133D032D3CB6AD738DDBFC47537.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:d6:a6:06:ae:46:f6:49:af:00:4e:52:f4:3f:ed:e5:1c:2d:
         82:82:72:84:c8:ca:9c:c9:03:e5:bf:09:25:5e:b6:ec:a5:2a:
         6c:22:8d:db:3e:a1:1b:a8:4f:73:97:71:78:de:29:9a:ad:a5:
         1f:55:a7:32:c5:11:16:69:59:3d:a2:a1:6f:bc:dd:ec:5a:bb:
         32:ee:3e:c8:32:22:85:1a:0a:d1:82:8c:24:3b:df:9a:dd:5a:
         5c:0b:fe:90:3f:17:f4:a2:cf:57:6f:2a:1a:65:5c:9a:b8:95:
         bc:11:34:81:4d:2e:a9:4a:4b:05:de:97:73:54:62:4e:ba:5f:
         7e:36:b2:63:d0:28:89:84:c8:1f:92:5c:d5:88:08:cb:85:96:
         f3:5d:e7:d9:3a:66:14:9e:bd:e6:45:96:fe:18:c6:ec:22:af:
         21:03:cb:fa:07:9b:c4:33:30:c6:f2:61:7f:c3:42:46:26:ce:
         2b:bd:63:ae:ef:b0:9c:d4:f7:ee:d8:cb:6f:92:5d:4e:1c:5d:
         9f:48:b2:3f:3d:a2:2e:3f:29:76:96:c0:95:ad:04:5e:7a:62:
         41:0a:e0:82:fb:73:e5:69:83:dc:56:b6:bf:7f:cf:0d:91:de:
         9e:dc:5e:ab:d3:08:35:c5:72:ea:d2:b3:ce:03:12:61:c2:77:
         9d:35:af:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 05:54:38 2025 by rpki-client