This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6ukPz17uVrbMHvjCf4oR5uy539GUWRN8CaGRd7zetzoS/0/2BDEDB462587B54D8EAD035C81DB7FC030F30BBD.mft
File:                     2BDEDB462587B54D8EAD035C81DB7FC030F30BBD.mft (raw, json)
Hash identifier:          BEVSELZ+Zy8aP9XRZ6BHELgWkGkd6K0p5xR5L5BUbM0=
Subject key identifier:   AA:47:FE:AB:41:C7:01:14:54:62:18:3D:43:A5:94:FC:6F:90:3E:94
Authority key identifier: 2B:DE:DB:46:25:87:B5:4D:8E:AD:03:5C:81:DB:7F:C0:30:F3:0B:BD
Certificate issuer:       /CN=2BDEDB462587B54D8EAD035C81DB7FC030F30BBD
Certificate serial:       535115C476B800F39D70F5F8A341AD25DAD330EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BDEDB462587B54D8EAD035C81DB7FC030F30BBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ukPz17uVrbMHvjCf4oR5uy539GUWRN8CaGRd7zetzoS/0/2BDEDB462587B54D8EAD035C81DB7FC030F30BBD.mft
Manifest number:          34
Signing time:             Fri 19 Dec 2025 18:00:22 +0000
Manifest this update:     Fri 19 Dec 2025 17:55:22 +0000
Manifest next update:     Sat 20 Dec 2025 20:35:22 +0000
Files and hashes:         1: 323830343a326336633a3a2f33322d313238203d3e20323635323137.roa (hash: mPmFCm8ilMdueYRD2BbIq8/i/Laj/o3PO3ZZSQdqSls=)
                          2: 2BDEDB462587B54D8EAD035C81DB7FC030F30BBD.crl (hash: nJbBI2VM7NADpB7hclLDgCORutFW3HmhvISGODSz1YM=)
                          3: 3136382e302e382e302f32322d3332203d3e20323635323137.roa (hash: QzUknYbsE//CO8M51w5TSfwgghjqJGCFxGP1tkznYPM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ukPz17uVrbMHvjCf4oR5uy539GUWRN8CaGRd7zetzoS/0/2BDEDB462587B54D8EAD035C81DB7FC030F30BBD.crl
                          rsync://rpki-repo.registro.br/repo/6ukPz17uVrbMHvjCf4oR5uy539GUWRN8CaGRd7zetzoS/0/2BDEDB462587B54D8EAD035C81DB7FC030F30BBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BDEDB462587B54D8EAD035C81DB7FC030F30BBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 20:35:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:51:15:c4:76:b8:00:f3:9d:70:f5:f8:a3:41:ad:25:da:d3:30:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BDEDB462587B54D8EAD035C81DB7FC030F30BBD
        Validity
            Not Before: Dec 19 17:55:22 2025 GMT
            Not After : Dec 20 20:35:22 2025 GMT
        Subject: CN=AA47FEAB41C701145462183D43A594FC6F903E94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:71:6c:5e:0f:8c:43:51:51:c8:6e:c9:11:5e:
                    64:dd:c6:8d:41:af:fe:0c:19:9d:4b:54:75:55:19:
                    ce:9e:c8:9b:e6:76:36:34:24:60:26:17:f2:4f:0c:
                    4b:d2:a3:13:58:3f:ea:80:03:8e:f4:6e:bf:2f:f4:
                    2a:6c:fe:5b:53:72:aa:f3:6c:a8:a9:3e:7f:5b:43:
                    05:70:86:df:2c:f2:25:36:f9:f7:eb:f5:4b:c3:b8:
                    0e:3a:67:8c:f6:42:96:6f:7a:9d:20:84:4a:49:05:
                    7d:8c:a5:6b:80:b8:e9:f7:6f:77:8a:af:d6:b5:72:
                    4a:49:df:15:80:bf:b2:80:85:96:06:c1:26:51:7b:
                    a6:85:2e:af:81:27:a7:96:c6:e8:de:51:66:3e:2c:
                    99:6c:b4:23:8c:b0:ba:4f:d4:76:69:d3:de:96:14:
                    26:27:90:dc:f3:44:e8:23:74:ce:c1:e3:e2:1b:52:
                    ac:58:35:6c:48:c7:da:f0:f6:b4:6f:bf:76:06:38:
                    c3:72:5b:68:5e:1b:26:31:f9:71:73:47:93:29:44:
                    d9:02:b1:75:b4:ec:72:03:0a:e6:d5:b5:eb:7a:13:
                    32:f2:2f:4a:e2:5f:d3:33:5f:14:d1:32:69:17:7d:
                    3d:cb:7d:77:50:6d:07:51:4a:3d:e1:fd:cb:0c:49:
                    77:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:47:FE:AB:41:C7:01:14:54:62:18:3D:43:A5:94:FC:6F:90:3E:94
            X509v3 Authority Key Identifier:
                keyid:2B:DE:DB:46:25:87:B5:4D:8E:AD:03:5C:81:DB:7F:C0:30:F3:0B:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ukPz17uVrbMHvjCf4oR5uy539GUWRN8CaGRd7zetzoS/0/2BDEDB462587B54D8EAD035C81DB7FC030F30BBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BDEDB462587B54D8EAD035C81DB7FC030F30BBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ukPz17uVrbMHvjCf4oR5uy539GUWRN8CaGRd7zetzoS/0/2BDEDB462587B54D8EAD035C81DB7FC030F30BBD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:63:8a:a4:f4:71:40:06:bf:a7:13:8a:0d:19:4c:30:e2:00:
         c9:6b:39:a5:4c:5f:d2:30:77:27:65:4b:c4:e8:55:6b:94:32:
         5a:9b:98:fa:db:b3:35:d8:65:c3:a7:64:ce:a6:89:13:be:75:
         ff:9e:4c:e4:ab:72:21:52:3d:a0:ee:79:0a:9e:7f:d4:80:65:
         33:23:fa:24:2d:20:25:50:7c:11:31:da:12:59:5a:44:22:c6:
         5c:df:4d:22:c3:a0:0b:a1:f1:37:33:d8:28:f2:f9:d7:62:07:
         08:b7:90:fa:9a:15:4d:97:be:67:0f:d0:bb:21:6b:46:9c:23:
         98:49:2b:f2:86:90:04:19:f5:a1:96:b6:8e:1f:7e:f5:c5:23:
         d7:cf:4b:3d:5d:ed:dc:cb:24:72:e6:d9:cc:77:64:4b:7e:8b:
         ff:8c:9b:76:09:ec:10:f1:53:d6:5d:f7:4e:af:a8:09:a3:9b:
         3c:b0:f5:27:19:7f:a5:6c:ab:f2:9e:cb:5b:9d:b2:f4:b4:fd:
         a4:94:69:b6:c2:0e:86:af:d4:95:c2:18:2d:b8:e7:4a:44:7b:
         b3:83:40:13:96:8d:9d:70:59:3b:0d:ea:c4:1c:c1:1d:73:b7:
         a9:46:dc:4b:e8:13:c1:73:1a:dd:58:e4:68:4c:a3:43:89:3f:
         f1:34:f7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:44:08 2025 by rpki-client