This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.mft
File:                     2A2D171F50E53E6487FE9AC612997F616E111F59.mft (raw, json)
Hash identifier:          XjINyIlwH50uyS0pvQlFkw9fJv1IAZUEFGYTixOeVog=
Subject key identifier:   BC:D6:49:DA:74:9F:83:1A:A9:68:BF:CC:BE:DC:A4:49:36:95:6B:FF
Authority key identifier: 2A:2D:17:1F:50:E5:3E:64:87:FE:9A:C6:12:99:7F:61:6E:11:1F:59
Certificate issuer:       /CN=2A2D171F50E53E6487FE9AC612997F616E111F59
Certificate serial:       028DF4366D192C8FD91E83EFA75098AA2384122F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A2D171F50E53E6487FE9AC612997F616E111F59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.mft
Manifest number:          42
Signing time:             Sat 20 Dec 2025 03:41:35 +0000
Manifest this update:     Sat 20 Dec 2025 03:36:35 +0000
Manifest next update:     Sun 21 Dec 2025 04:12:35 +0000
Files and hashes:         1: 2A2D171F50E53E6487FE9AC612997F616E111F59.crl (hash: z1v9TQdW2ac4K5ROddUXJorKrVH4hIxW4LR95HiSRvs=)
                          2: 3138312e3233332e31392e302f32342d3234203d3e20323731343834.roa (hash: rfuOi95nQx4MtMO9tjUGqSZ/3TsvDGgZk+ZmNoXGy5A=)
                          3: 3138312e3233332e31362e302f32322d3232203d3e20323731343834.roa (hash: sZ7mauTccR6Vr33eBysyROpFZqy4NIdemkOk7+qk1mc=)
                          4: 323830343a376334303a3330303a3a2f34302d3430203d3e20323731343834.roa (hash: VYPJmR+bSgKh4ZSmIyNc+43+bncYaleMRi0FjrTAjQc=)
                          5: 3138312e3233332e31362e302f32342d3234203d3e20323731343834.roa (hash: H3Ta+a74iESvXKsBavQB8MADzD0plamDdxORJTG+4Bo=)
                          6: 3138312e3233332e31382e302f32332d3233203d3e20323731343834.roa (hash: j6SbIxVSu1bsT170jIGIovQddlhPv/2q+jfCF1LtDeI=)
                          7: 323830343a376334303a3430303a3a2f34302d3430203d3e20323731343834.roa (hash: TFcDjtx6//UfjHrYWfUHw80DG3xe7v+eWyGykRUS6AM=)
                          8: 323830343a376334303a3530303a3a2f34302d3430203d3e20323731343834.roa (hash: qOcpib71FCIgJuWP11hIWR0xsdWC5aYwUouS6GK4PHM=)
                          9: 3138312e3233332e31372e302f32342d3234203d3e20323731343834.roa (hash: +lsjrk2UIScYi8SDIHluwvVTWNsZRS6AIaGL7QvTJZc=)
                          10: 323830343a376334303a3230303a3a2f34302d3430203d3e20323731343834.roa (hash: vcrlJvntgLlMme52fDMwOsL8kYlF7Ez8P7dfDopf8bk=)
                          11: 323830343a376334303a3a2f33322d3332203d3e20323731343834.roa (hash: qs+i4/FHT6E8OpWubLPRLNoqjZKQ0j2e6KGbpWPi0hA=)
                          12: 3138312e3233332e31382e302f32342d3234203d3e20323731343834.roa (hash: 8HFNj0UvH/mT6+am50eZsPlT2RkGuhVCAxpux8S88Tk=)
                          13: 323830343a376334303a383030303a3a2f34302d3430203d3e20323731343834.roa (hash: WPAvjwj5Ob5x5Y4/XHcKHyOhP8jUseedMfyHODlE7zQ=)
                          14: 323830343a376334303a3130303a3a2f34302d3430203d3e20323731343834.roa (hash: da714LbJ/u7Te0j7UsVMjQoOsI/HKoynpRSszQ55V+c=)
                          15: 3138312e3233332e31362e302f32332d3233203d3e20323731343834.roa (hash: gKMoHy+rODKPUAf8QM5/Ap55BaDN4Q3v0d6D/qgH98o=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.crl
                          rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A2D171F50E53E6487FE9AC612997F616E111F59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 04:12:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:8d:f4:36:6d:19:2c:8f:d9:1e:83:ef:a7:50:98:aa:23:84:12:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2D171F50E53E6487FE9AC612997F616E111F59
        Validity
            Not Before: Dec 20 03:36:35 2025 GMT
            Not After : Dec 21 04:12:35 2025 GMT
        Subject: CN=BCD649DA749F831AA968BFCCBEDCA44936956BFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d7:de:24:7e:d5:10:a8:a9:a2:7e:ca:75:cc:
                    06:79:c6:5f:87:b9:14:46:c3:78:3f:ba:69:cc:49:
                    43:3e:b8:21:b7:30:7c:7a:bd:4a:34:36:46:31:ff:
                    e7:dd:bb:f5:0c:7e:70:c9:03:e8:fb:71:ca:73:cc:
                    55:05:41:cf:b5:33:b1:04:1a:54:eb:71:6c:59:50:
                    5e:22:dc:5a:d1:c6:b6:31:96:12:b5:9d:4e:b7:14:
                    c6:4d:fd:f8:10:89:e9:4e:eb:8f:e9:6c:8a:64:57:
                    22:08:fe:76:45:b0:d0:05:b3:5e:0a:6f:a6:b5:27:
                    68:e1:45:bd:1b:8e:57:c7:51:7e:39:9e:57:a0:e4:
                    83:a6:0f:c5:6f:45:4f:6b:63:98:a9:0b:78:e3:d1:
                    20:c7:1a:e2:30:84:00:6e:2a:a3:da:3d:af:41:12:
                    19:ba:8c:cc:3e:ac:a6:cd:13:c9:38:95:6d:d7:4b:
                    3d:8f:6d:c3:c7:72:08:db:43:af:07:e6:a5:c9:f7:
                    2c:9c:32:e6:de:35:ca:63:b1:a7:f5:fd:3c:2e:dc:
                    b4:6f:d8:03:1f:3f:ef:12:d4:b2:ea:66:ce:06:91:
                    52:0a:2e:bd:9e:88:81:bd:b6:98:b5:f0:62:10:4a:
                    ee:30:fd:e1:d2:de:52:4a:c8:ba:c0:1e:39:4c:8b:
                    21:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D6:49:DA:74:9F:83:1A:A9:68:BF:CC:BE:DC:A4:49:36:95:6B:FF
            X509v3 Authority Key Identifier:
                keyid:2A:2D:17:1F:50:E5:3E:64:87:FE:9A:C6:12:99:7F:61:6E:11:1F:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A2D171F50E53E6487FE9AC612997F616E111F59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:1c:76:00:25:f3:97:f2:24:ee:c0:14:00:17:19:ee:48:a9:
         e3:05:e7:2f:ec:e7:50:02:27:f9:50:34:3f:89:dc:e1:39:44:
         30:83:71:7c:b5:19:20:0c:1c:2f:fc:70:f0:a3:84:57:a9:ff:
         af:37:f7:d3:74:53:c6:ee:3e:1a:8f:e6:71:d1:9d:f6:71:58:
         2d:a8:73:a0:ee:7c:32:0e:be:3d:37:22:3d:02:f8:97:ab:6c:
         dc:17:90:2e:38:1f:99:d8:8b:34:3d:6f:fa:f7:6f:df:26:9b:
         27:af:43:5d:30:5d:18:0f:65:9d:1f:40:0a:75:1b:8a:63:8a:
         48:54:66:4e:5c:9f:30:bc:49:a5:1a:89:36:58:15:c1:7c:ed:
         a3:7c:ed:cf:21:ec:30:11:bb:f5:4b:03:a0:f0:4c:45:a7:da:
         d2:0b:12:34:d6:42:8a:e3:ff:be:0b:35:a1:fd:85:b7:55:4f:
         68:e1:a8:53:90:a2:ab:2d:58:33:9e:fe:3a:59:b3:b9:ae:52:
         87:d0:f3:9f:90:99:d2:a4:43:e4:1c:c6:d6:0a:f2:58:58:93:
         f5:53:d8:48:9c:03:5f:40:3d:e6:39:93:f2:59:76:a4:ae:d3:
         39:9e:80:df:b0:a0:07:f9:e8:e0:7c:26:46:8d:ab:50:24:cf:
         ed:e6:c6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:09:56 2025 by rpki-client