This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.mft
File:                     2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.mft (raw, json)
Hash identifier:          X/X5IQUgOYQtI2diOLtBj2PX5UGp3dlfwbNQm/m54/E=
Subject key identifier:   5B:70:67:EA:27:36:8E:90:72:D9:F0:2F:D4:BF:9B:85:E4:89:3B:0B
Authority key identifier: 2D:FD:4B:E1:F9:27:C8:BE:F3:5D:FC:0E:99:76:94:31:71:A5:17:B1
Certificate issuer:       /CN=2DFD4BE1F927C8BEF35DFC0E9976943171A517B1
Certificate serial:       343D80DC9136584954000D99DBC35C8FD1F59FBC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.mft
Manifest number:          C0
Signing time:             Sat 20 Dec 2025 02:04:57 +0000
Manifest this update:     Sat 20 Dec 2025 01:59:57 +0000
Manifest next update:     Sun 21 Dec 2025 03:19:57 +0000
Files and hashes:         1: 323830343a343730383a3a2f33322d3337203d3e20323637303237.roa (hash: U/9M15TeapksX8XUjds2E9NJq2AK4bxt/Wst1EkaNVc=)
                          2: 2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.crl (hash: xAxJkWXuaQVQ+Uv84uXFHL7uhg1d5CW+GjB6Z7DXxNE=)
                          3: 34352e3232372e3136382e302f32322d3234203d3e20323637303237.roa (hash: gY9FLBibYF5xfxYl0Nb9MQTIvah3Wu8qO7IYCcOhaFs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.crl
                          rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 03:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:3d:80:dc:91:36:58:49:54:00:0d:99:db:c3:5c:8f:d1:f5:9f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DFD4BE1F927C8BEF35DFC0E9976943171A517B1
        Validity
            Not Before: Dec 20 01:59:57 2025 GMT
            Not After : Dec 21 03:19:57 2025 GMT
        Subject: CN=5B7067EA27368E9072D9F02FD4BF9B85E4893B0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ac:be:10:00:75:17:55:52:0f:61:8a:0f:2f:
                    d6:48:7d:5f:08:20:e0:ec:6a:ff:67:38:ca:4f:32:
                    4f:52:5b:9a:2a:ab:0e:b6:4b:3e:83:2a:12:61:24:
                    dd:0b:e5:51:cc:65:e7:a8:dc:6e:62:3d:74:c6:7d:
                    ea:e9:e7:46:a6:54:be:68:8c:a9:47:f6:8c:0e:7e:
                    4d:59:bb:5a:4a:41:11:67:27:f7:14:5a:fe:e7:b6:
                    57:19:36:e3:40:a8:3c:f1:b3:4e:e7:41:9a:8f:9a:
                    ae:08:8b:52:51:36:b6:f3:52:13:64:e1:ac:b9:48:
                    1e:52:bf:f5:6f:b5:c4:73:93:97:36:a2:f4:86:3f:
                    b0:6e:da:3a:3b:00:7f:01:f9:6e:1c:bf:b1:94:dc:
                    a7:d4:57:ad:66:64:d1:11:0e:97:92:94:d3:5b:49:
                    e6:e9:ef:c2:47:b8:bc:3a:eb:71:0d:7d:71:2a:a4:
                    25:2c:08:d3:29:40:31:f2:8f:ce:57:bd:3b:46:f7:
                    b2:44:22:47:34:66:40:e1:10:54:68:74:7b:14:14:
                    59:8d:e5:6f:2f:ab:1f:b0:f8:30:1e:f5:1b:59:4b:
                    cd:88:66:51:c0:79:7b:b2:00:1d:d6:2d:ca:9e:7e:
                    13:de:e0:24:46:dc:10:1c:03:c2:05:fb:eb:d8:49:
                    90:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:70:67:EA:27:36:8E:90:72:D9:F0:2F:D4:BF:9B:85:E4:89:3B:0B
            X509v3 Authority Key Identifier:
                keyid:2D:FD:4B:E1:F9:27:C8:BE:F3:5D:FC:0E:99:76:94:31:71:A5:17:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:e7:19:f5:29:22:57:87:f5:f1:86:0d:fe:34:51:06:e1:0f:
         a8:a8:7c:25:16:71:12:63:f9:af:a3:92:26:5c:de:ab:93:cd:
         b2:d8:ad:7d:c0:2f:cc:37:71:4d:eb:c3:19:1f:40:81:67:ae:
         81:89:10:8f:73:10:11:8f:99:ce:3f:10:7f:b9:8c:cd:2f:3a:
         32:c8:44:5c:2e:65:49:f2:3d:31:5a:85:a6:51:f1:f1:8c:c3:
         7a:32:cd:4a:be:0e:e1:c2:77:a7:40:54:af:85:cd:50:d9:0a:
         e5:a7:bd:8b:a6:03:30:15:b8:7c:8d:a0:42:33:c4:0d:0c:b8:
         cf:e5:4c:5b:61:1a:ac:d5:fb:a6:20:a2:31:45:cd:0f:db:a5:
         2c:37:a7:2f:27:d6:5f:0f:6f:4f:ce:bb:54:f8:70:87:a5:c5:
         d6:97:24:43:b4:ff:29:2f:be:29:c5:87:89:d0:87:be:36:c9:
         ae:2c:dd:68:22:42:b4:27:d1:4a:c0:bf:e3:7f:fa:ed:9a:d3:
         db:8d:bb:24:0e:fb:46:f4:66:9d:6a:c6:ee:77:e3:c4:b1:6e:
         c2:34:40:a3:9c:6a:04:a3:2c:1f:c5:fc:45:8a:66:9e:09:c6:
         62:1e:b5:2b:83:9d:f1:20:d4:10:eb:31:38:7d:7e:fa:8d:ba:
         60:ed:32:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:55:02 2025 by rpki-client