This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5kXRrsUjZS4Leci74cK38ip4XnivqUKcfwR62jtALmMb/0/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.mft
File:                     2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.mft (raw, json)
Hash identifier:          GCRlvK7bUdij1BzKz7bpaTHFSPR+fYPjQAEmPC/VtdQ=
Subject key identifier:   D2:27:4E:15:DB:93:8A:EA:B8:A2:1C:C8:2C:D4:59:26:0A:C2:65:F2
Authority key identifier: 2B:0D:55:6B:D1:6D:C2:30:4B:92:D8:8D:4D:E8:A7:49:E2:2D:FA:1D
Certificate issuer:       /CN=2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D
Certificate serial:       5E3E09BE47670505A7364A5418DFBD05A4D022F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kXRrsUjZS4Leci74cK38ip4XnivqUKcfwR62jtALmMb/0/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.mft
Manifest number:          EB
Signing time:             Tue 30 Dec 2025 21:03:49 +0000
Manifest this update:     Tue 30 Dec 2025 20:58:49 +0000
Manifest next update:     Wed 31 Dec 2025 23:47:49 +0000
Files and hashes:         1: 3138392e33362e3133362e302f32322d3234203d3e20323730363437.roa (hash: T3KgvBQtkMn3/bW19ncfX5h/srF6Jaox8KLTXT0VPkE=)
                          2: 2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.crl (hash: 0Chr3lmDzpYu4fv0OTCoUBUuSD7CXgzseoEUHSYev04=)
                          3: 323830343a366633633a3a2f33322d3438203d3e20323730363437.roa (hash: Yy9a80hxuGkv47p1WxAV8/8jNtLNtfdf0ZtuB0b65RU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5kXRrsUjZS4Leci74cK38ip4XnivqUKcfwR62jtALmMb/0/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.crl
                          rsync://rpki-repo.registro.br/repo/5kXRrsUjZS4Leci74cK38ip4XnivqUKcfwR62jtALmMb/0/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 31 Dec 2025 23:47:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:3e:09:be:47:67:05:05:a7:36:4a:54:18:df:bd:05:a4:d0:22:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D
        Validity
            Not Before: Dec 30 20:58:49 2025 GMT
            Not After : Dec 31 23:47:49 2025 GMT
        Subject: CN=D2274E15DB938AEAB8A21CC82CD459260AC265F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4f:4b:50:39:01:10:8f:f6:ff:3f:f6:aa:01:
                    47:13:ea:05:95:26:c1:6e:16:8f:84:52:dd:9c:00:
                    1d:17:00:b9:dd:44:ee:a3:ea:ad:27:bd:4b:c2:0c:
                    fb:54:9d:14:9b:27:28:17:c0:57:46:6a:21:28:8f:
                    57:a1:7f:79:4a:8d:20:94:54:a5:b6:61:c0:db:4e:
                    6f:92:a4:f6:fa:66:74:2e:25:d3:7e:71:7d:4d:96:
                    f9:b2:7f:eb:6f:93:44:f9:91:58:bf:a3:8c:89:c8:
                    02:f3:db:32:1b:f2:b1:5f:64:ca:09:45:94:60:ee:
                    d7:a8:53:2b:87:41:13:e8:de:fa:cb:07:66:a1:01:
                    5d:f2:9b:c0:8b:c9:06:17:53:f2:23:ff:92:ec:a8:
                    7a:7c:bd:b1:8c:31:75:8c:d2:7e:23:b6:78:28:14:
                    d5:71:2f:b6:8f:c8:87:b3:84:a4:db:fd:3f:85:54:
                    b3:e9:cb:9d:cc:ec:57:46:9f:96:dc:0a:d4:40:28:
                    13:f8:da:6e:6f:54:55:38:f9:1e:f3:47:90:88:51:
                    07:9e:d8:32:74:28:aa:97:0a:59:70:e3:81:79:49:
                    6b:10:09:82:d3:25:5b:af:30:f1:b6:c0:00:28:eb:
                    7d:b9:7a:0d:7b:cd:9f:54:9f:22:4c:4b:e4:76:7d:
                    24:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:27:4E:15:DB:93:8A:EA:B8:A2:1C:C8:2C:D4:59:26:0A:C2:65:F2
            X509v3 Authority Key Identifier:
                keyid:2B:0D:55:6B:D1:6D:C2:30:4B:92:D8:8D:4D:E8:A7:49:E2:2D:FA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kXRrsUjZS4Leci74cK38ip4XnivqUKcfwR62jtALmMb/0/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kXRrsUjZS4Leci74cK38ip4XnivqUKcfwR62jtALmMb/0/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:49:84:58:3d:d8:bc:17:a0:9b:95:06:d8:83:f1:2f:26:cd:
         93:a2:9d:f7:ee:81:08:b8:9c:49:8c:75:c0:24:f8:b8:e2:fd:
         a0:c2:ef:22:fb:5c:e9:d2:2b:44:b6:b3:9d:0c:ee:42:43:e4:
         53:da:09:93:52:f8:4b:5c:97:51:47:2e:66:84:d9:ae:9c:8e:
         a4:30:21:dc:b7:48:af:e5:e6:6d:4a:64:82:6e:c8:7c:06:53:
         25:ff:2f:8c:06:4c:24:3f:ec:1d:47:4b:28:64:1e:da:5b:70:
         a4:5c:65:f2:32:2c:c9:78:37:0e:62:5d:8f:94:fd:c9:53:09:
         34:21:b6:d1:d8:57:c8:48:6b:62:f7:fd:a0:db:da:fc:2a:f7:
         f7:22:b7:91:84:32:46:12:a6:8a:c6:9e:94:d3:3b:a7:9c:4c:
         dd:65:a5:a2:65:56:7d:7f:b0:32:30:89:6d:1b:97:ff:74:c2:
         e2:21:c4:cc:3f:6b:58:18:b0:4d:d1:0d:c8:af:8a:e3:82:a6:
         a1:ef:9d:36:64:bd:dd:09:4a:5f:0f:70:76:73:b9:50:df:43:
         65:ca:a1:09:3e:a9:ff:bc:35:50:d1:0d:8d:01:84:e0:36:78:
         9e:97:5c:2e:8c:83:7e:8a:9f:7e:b0:10:9d:04:a2:ad:0d:15:
         c7:01:48:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 12:18:08 2025 by rpki-client