This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.mft
File:                     CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.mft (raw, json)
Hash identifier:          XN9YCU3a+M+nH7EnVmtJ6rkX1ep9qWPH4OcSnrYsaxQ=
Subject key identifier:   E6:F1:E0:E4:FD:94:63:A3:4D:90:C0:06:75:95:39:B8:47:F3:09:7B
Authority key identifier: CE:24:98:E8:CE:7B:48:8E:BF:B1:05:BF:E2:A0:48:76:60:0C:B5:A3
Certificate issuer:       /CN=CE2498E8CE7B488EBFB105BFE2A04876600CB5A3
Certificate serial:       0296E725ACC8B8A8D8B19F24600B3D48B0122B90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.mft
Manifest number:          BB
Signing time:             Sat 20 Dec 2025 10:51:18 +0000
Manifest this update:     Sat 20 Dec 2025 10:46:18 +0000
Manifest next update:     Sun 21 Dec 2025 13:51:18 +0000
Files and hashes:         1: 3230312e3133312e32342e302f32312d3234203d3e20323632353139.roa (hash: mP9+5bqfsDm/dmjMQXVlmyWNr6uSZK6tCq5xBi+Kc8Q=)
                          2: 3137372e36372e3132382e302f32312d3234203d3e20323632353139.roa (hash: fYY0WES9YoeoCKQ/AV0YzDdZUnBg9K2Sc6Z9kqWN/Sg=)
                          3: 323830343a3939633a3a2f33322d3336203d3e20323632353139.roa (hash: gTiVAYf6/KXw1jjv/9yejWK3xD+mYu/04AQI9+Lo66Q=)
                          4: CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.crl (hash: kr7XGebLBUGx4khlamWAKO7ybjgo+iaaPjUJauJYpmg=)
                          5: 3136382e3230352e3130342e302f32322d3234203d3e20323632353139.roa (hash: u7jFTziinpjWAlsLMJk9e+7JdYhWkIUNYw3qzq5Fx8c=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.crl
                          rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 12:44:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:96:e7:25:ac:c8:b8:a8:d8:b1:9f:24:60:0b:3d:48:b0:12:2b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE2498E8CE7B488EBFB105BFE2A04876600CB5A3
        Validity
            Not Before: Dec 20 10:46:18 2025 GMT
            Not After : Dec 21 13:51:18 2025 GMT
        Subject: CN=E6F1E0E4FD9463A34D90C006759539B847F3097B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:74:56:67:9b:e6:ca:92:bd:33:92:23:53:c1:
                    e0:30:2e:f5:bf:db:27:9d:34:ee:8a:71:0a:cd:4b:
                    d8:36:ea:ca:81:8b:b4:64:b5:1f:8a:79:cd:56:5b:
                    15:48:75:1a:8a:40:fd:89:ff:d3:44:82:09:a4:6b:
                    86:15:12:a6:64:4f:30:83:37:58:f2:1d:0f:94:d7:
                    08:58:3c:c7:33:d1:23:7e:1b:2d:ce:f9:98:cb:21:
                    3e:72:24:14:5c:db:4b:d3:4e:9a:af:6b:58:02:4c:
                    2e:e5:4d:61:57:0f:d9:e4:1f:ce:dc:55:b5:2f:e7:
                    1d:94:a1:f3:1f:e3:0a:3f:f1:01:86:14:d2:e1:9c:
                    0e:8c:57:d8:f6:97:15:52:9f:17:fa:7a:6e:e1:46:
                    71:1b:c3:7e:f6:e7:01:15:4d:28:3a:3c:12:25:10:
                    3e:31:22:4b:bc:26:5d:b5:c1:ea:6d:ee:1b:ae:b6:
                    08:44:ab:99:a3:3d:11:6c:de:c4:a5:16:c4:ef:84:
                    ac:3a:0d:92:fa:e1:cd:91:be:8e:bb:56:af:f2:03:
                    fe:80:b9:13:95:c0:34:e7:32:ba:00:b9:37:37:64:
                    64:44:30:b2:1e:67:b1:99:b8:53:e9:5d:26:aa:9a:
                    05:56:90:3e:60:44:82:1b:ce:40:f3:9e:f5:a7:ea:
                    43:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F1:E0:E4:FD:94:63:A3:4D:90:C0:06:75:95:39:B8:47:F3:09:7B
            X509v3 Authority Key Identifier:
                keyid:CE:24:98:E8:CE:7B:48:8E:BF:B1:05:BF:E2:A0:48:76:60:0C:B5:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:78:78:24:ee:23:87:54:8d:93:d9:31:ea:c5:61:b1:e3:90:
         36:91:8b:d5:3b:40:f6:21:72:75:ac:20:63:e6:73:6a:70:ca:
         90:59:7e:71:e5:20:72:3f:eb:68:35:a0:e3:10:6e:01:26:65:
         f0:6b:dd:dd:e6:05:0a:6c:d1:8a:a4:cd:7e:d2:66:be:88:1a:
         d7:83:28:22:f7:29:25:86:73:a6:02:93:23:65:c0:82:06:00:
         b4:f7:e0:c1:30:c6:b8:2e:e0:8b:e0:79:8d:8c:47:e2:c9:ba:
         dc:9a:ed:0d:fb:bc:df:c5:18:56:0b:1a:d1:43:92:da:41:42:
         e9:26:b8:44:30:ee:c8:80:9f:23:39:98:50:53:26:e8:45:ab:
         ce:e5:24:8b:ab:86:d6:3b:c1:21:f4:96:5b:f1:74:7f:95:34:
         8a:60:23:4f:03:fd:11:de:d9:79:18:d0:11:53:71:e3:6a:5b:
         a5:ec:b4:d8:1d:5b:62:97:10:ee:69:56:1f:37:c0:67:d7:79:
         3a:64:b7:62:9c:42:f5:6e:fa:12:2c:a7:c6:65:a9:d0:19:fc:
         55:22:1d:c5:7d:32:ec:b2:d2:83:0a:c8:1b:51:36:93:a0:a4:
         aa:b9:44:30:01:2d:dd:3b:19:93:65:d2:6f:57:d8:06:7f:87:
         bc:5f:c9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:17:08 2025 by rpki-client