This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft
File:                     C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft (raw, json)
Hash identifier:          NaW/aNY4UWDHS9FENTFvkviUyyL5HudM8yZKuP0BCJw=
Subject key identifier:   BB:27:91:92:BE:85:A5:7F:49:75:35:0D:2D:D4:6D:9D:3D:B0:9C:2D
Authority key identifier: C2:F8:4B:29:34:A2:4F:6C:FD:BE:C3:12:44:B3:FA:0C:7A:85:2B:FB
Certificate issuer:       /CN=C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB
Certificate serial:       4D6386F63EDC131E6CE8E5F4646786D4B7D86EAB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft
Manifest number:          0340
Signing time:             Sat 20 Dec 2025 04:29:08 +0000
Manifest this update:     Sat 20 Dec 2025 04:24:08 +0000
Manifest next update:     Sun 21 Dec 2025 05:24:08 +0000
Files and hashes:         1: C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.crl (hash: aQQnIjX/t3nf+XLBP80EDbAq8EP/OMRFeEwcchCc2Yg=)
                          2: 323830343a386439343a3a2f33322d313238203d3e20323733333636.roa (hash: 1k00bMaA5+dsPTsaZo8EkP3hez6kVata/+EL1B7NLek=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.crl
                          rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 05:24:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:63:86:f6:3e:dc:13:1e:6c:e8:e5:f4:64:67:86:d4:b7:d8:6e:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB
        Validity
            Not Before: Dec 20 04:24:08 2025 GMT
            Not After : Dec 21 05:24:08 2025 GMT
        Subject: CN=BB279192BE85A57F4975350D2DD46D9D3DB09C2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7c:93:ab:17:66:01:b4:94:d3:4d:45:be:bc:
                    49:23:f0:2b:7e:27:fb:ce:44:d7:53:1a:60:bc:d4:
                    a4:1d:23:5c:ea:bd:17:be:ac:1b:6a:4d:29:4f:eb:
                    71:40:35:4a:08:1a:6a:81:68:92:2a:9f:3a:7b:36:
                    22:51:32:ab:11:37:c4:8a:17:ee:3d:70:2a:80:bc:
                    80:03:e0:5b:26:2f:f7:bf:79:ae:ec:60:67:e0:46:
                    52:05:a9:e7:f2:80:24:d6:49:c2:cb:0b:f7:60:c6:
                    1f:c8:fc:de:2f:19:16:ed:b6:58:9f:4e:76:8d:13:
                    4a:15:53:f1:39:75:78:fb:8b:90:f2:ee:bf:98:6b:
                    9b:c9:0b:36:b7:c6:69:39:d9:e3:e7:cb:3b:2a:70:
                    09:ac:54:16:6e:10:5a:90:54:97:20:e8:eb:c9:e5:
                    df:66:96:e7:b9:81:13:35:38:25:77:19:b1:b3:92:
                    77:1c:43:ac:d1:27:ec:e5:6f:62:e8:fa:1e:59:5e:
                    ab:9b:04:27:43:0c:05:b2:d0:eb:8f:73:3e:f6:96:
                    51:7d:c9:a2:ea:89:c8:28:15:9a:76:4e:65:91:7d:
                    62:12:15:e6:ab:72:59:7b:85:43:38:1c:1b:f1:e9:
                    b3:ee:ea:16:b7:88:a8:9f:d1:12:02:28:5c:2e:6a:
                    c7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:27:91:92:BE:85:A5:7F:49:75:35:0D:2D:D4:6D:9D:3D:B0:9C:2D
            X509v3 Authority Key Identifier:
                keyid:C2:F8:4B:29:34:A2:4F:6C:FD:BE:C3:12:44:B3:FA:0C:7A:85:2B:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:84:24:5b:0c:94:02:64:a2:03:27:74:6f:c1:4e:56:41:94:
         e4:86:12:77:72:ce:c0:46:c7:ab:d9:f9:27:fd:07:99:78:e2:
         9e:17:ab:39:24:2a:d0:7a:26:ee:9a:4b:16:2e:ed:f2:d7:b1:
         c8:2b:ae:91:23:88:de:2e:ea:2a:f2:26:bc:04:20:25:06:8a:
         12:a7:e2:b3:84:72:44:ed:fa:9f:14:a6:f2:af:bb:d5:b2:58:
         72:9c:67:09:94:f0:3c:d6:0a:7f:11:29:76:72:7a:67:40:d3:
         f1:a5:8c:c7:91:60:85:b4:e0:02:38:43:55:f3:ce:5b:bc:dc:
         12:99:9b:0c:11:f8:9c:9b:20:8d:12:76:f1:4e:39:21:0f:4c:
         5f:9b:40:d0:c0:f1:d6:53:2d:ae:b6:dd:34:49:eb:f6:db:84:
         a9:d8:45:e8:33:80:b3:15:89:6e:54:cc:dc:e7:2c:ff:81:67:
         14:d9:94:ae:75:7e:e2:cb:21:37:b1:1e:08:1f:47:97:79:9a:
         06:77:35:6a:6b:32:4a:f5:08:c4:0d:fe:3f:cd:23:37:a4:c2:
         d6:bd:e4:42:f5:9c:bb:8d:49:96:85:2f:17:ab:cd:8d:bf:e0:
         88:63:e6:a1:d4:03:c8:b7:5d:80:41:f7:a8:1a:12:96:6e:fa:
         d5:34:9b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----