This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.mft
File:                     E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.mft (raw, json)
Hash identifier:          jO2fG+v4xkbUHc3ZKWK2vz8SalaF1Z7K4Qu7vYr0bfk=
Subject key identifier:   E8:18:1C:52:4C:92:6E:33:CB:49:A9:FB:69:80:D0:19:40:6F:D1:76
Authority key identifier: E1:BB:FD:E5:A7:EB:A9:69:95:77:93:A5:D2:A2:93:42:8D:4D:7B:B9
Certificate issuer:       /CN=E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9
Certificate serial:       65586C5D189F4490CF46CF608D28329A7B562FC4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.mft
Manifest number:          033B
Signing time:             Tue 30 Dec 2025 14:03:09 +0000
Manifest this update:     Tue 30 Dec 2025 13:58:09 +0000
Manifest next update:     Wed 31 Dec 2025 16:02:09 +0000
Files and hashes:         1: E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.crl (hash: ye/NMUcRQwsVhr7KO0GE3VnR6zgWvuMwpK9Q4/W5Jgk=)
                          2: 3133382e39342e34342e302f32322d3234203d3e20323634313235.roa (hash: /NNSuwtSTAZex6aVtEcltvfx1O5f3eY00+oED5jPTmA=)
                          3: 323830343a323264343a3a2f33322d3438203d3e20323634313235.roa (hash: A353h4nPQV5mug8PsxdBSNnozUQ5PiKI50pWLOozO7M=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.crl
                          rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 31 Dec 2025 16:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:58:6c:5d:18:9f:44:90:cf:46:cf:60:8d:28:32:9a:7b:56:2f:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9
        Validity
            Not Before: Dec 30 13:58:09 2025 GMT
            Not After : Dec 31 16:02:09 2025 GMT
        Subject: CN=E8181C524C926E33CB49A9FB6980D019406FD176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c0:09:7a:b1:f7:41:a3:88:4f:de:82:d4:8c:
                    4c:e1:6b:95:06:ed:9c:73:42:68:d8:4e:f2:50:43:
                    14:29:93:e2:05:5b:05:fd:f6:2a:18:9e:d0:fb:4e:
                    97:44:7b:dd:62:56:62:b7:cd:11:db:32:5d:bc:8a:
                    5b:d0:78:67:93:f8:5b:60:a1:8d:a0:09:3d:87:f3:
                    af:af:eb:ff:cd:29:47:98:81:75:09:62:28:b1:8f:
                    d6:03:89:9b:51:d6:e4:be:bb:65:c2:df:bb:0e:ea:
                    da:60:cd:75:cc:50:7c:da:d3:f2:83:94:e4:1d:5c:
                    5d:6f:a4:c0:fd:a7:3c:d3:7a:c2:c2:90:7c:4f:88:
                    b3:2f:d7:6d:2b:3a:ee:06:b2:e2:ce:1d:4f:2c:68:
                    54:74:ee:0a:35:3d:92:7f:86:63:87:50:e5:6f:21:
                    95:88:8e:cf:59:1e:5a:31:2b:49:45:b4:f3:e0:9a:
                    47:fd:da:f6:a8:17:1a:01:2d:97:77:12:ba:f9:1f:
                    9d:d7:00:c0:05:9e:cf:84:e5:d7:35:67:75:07:4a:
                    44:58:5a:8e:fb:f3:e7:f9:3d:75:f6:1c:87:46:ff:
                    bc:7a:b5:c4:ea:5c:83:7c:4a:d2:bc:ad:ab:09:66:
                    df:ff:25:8c:74:8d:e6:a3:98:12:26:b4:37:7d:62:
                    c0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:18:1C:52:4C:92:6E:33:CB:49:A9:FB:69:80:D0:19:40:6F:D1:76
            X509v3 Authority Key Identifier:
                keyid:E1:BB:FD:E5:A7:EB:A9:69:95:77:93:A5:D2:A2:93:42:8D:4D:7B:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:e6:0e:e5:95:61:09:85:01:75:e5:60:42:7b:e9:db:45:d1:
         11:d1:23:46:c7:ef:6a:31:56:2f:8b:a2:ff:11:fe:2a:15:b9:
         a4:64:c0:4f:3c:43:e8:e7:18:61:74:70:26:3d:84:b4:87:e6:
         8d:6e:2b:e7:27:f2:60:cf:f5:7c:26:d1:73:21:ec:87:eb:75:
         54:e2:0c:44:90:c1:ab:de:30:5a:b3:6e:1f:1c:a9:59:de:29:
         2b:59:4a:d4:0b:2e:b0:5c:1e:ee:d1:0a:14:7b:ed:d9:c0:07:
         6f:9c:a6:0d:1b:77:86:11:34:34:35:c6:28:43:22:db:a9:4c:
         30:7e:63:1c:27:22:2e:8d:2d:71:8f:45:bd:75:1e:27:cd:62:
         ec:6d:4d:7b:26:1a:67:ae:da:8b:a3:00:21:59:b2:6b:e8:05:
         ca:b5:fb:df:16:3b:ca:29:42:a7:b7:df:1f:b1:03:9d:60:a7:
         02:1b:ed:43:4a:c3:fe:58:d8:a3:0b:b1:34:7c:ae:d0:f0:66:
         52:92:4f:22:fe:b9:d6:f9:9e:8a:49:10:a4:8f:e1:70:9a:d5:
         be:66:75:ff:a1:26:47:0a:d3:87:a3:dd:9b:f7:52:aa:fd:42:
         84:d8:da:47:6f:30:49:bc:a2:83:5b:1c:ab:7c:10:08:af:8d:
         db:71:8e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 05:24:47 2025 by rpki-client