This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.mft
File:                     2C425257AE7B63529EB88108AC7DEA60648B43E5.mft (raw, json)
Hash identifier:          6PIXLMHVViipSh1U+dR3gz6kAWL5W9WLkxqQKO4F9AA=
Subject key identifier:   B7:0D:8F:C7:94:0B:8D:B2:D2:67:23:1E:76:72:C4:2C:7D:30:0A:50
Authority key identifier: 2C:42:52:57:AE:7B:63:52:9E:B8:81:08:AC:7D:EA:60:64:8B:43:E5
Certificate issuer:       /CN=2C425257AE7B63529EB88108AC7DEA60648B43E5
Certificate serial:       6C2568B13C30AB0389C72A4FEFDB940EB2FEFC45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.mft
Manifest number:          03BE
Signing time:             Wed 24 Dec 2025 22:30:00 +0000
Manifest this update:     Wed 24 Dec 2025 22:25:00 +0000
Manifest next update:     Thu 25 Dec 2025 22:30:00 +0000
Files and hashes:         1: 323830343a383466383a3a2f33322d3332203d3e20323732353439.roa (hash: C1IawEC+o6OAP2IOtB/Ag3dA3sk7hTscFzrf4BAUjlQ=)
                          2: 3138312e3233322e3233302e302f32332d3233203d3e20323732353439.roa (hash: 8OHMiHE5dcOgAsMhbBCcvNrL//3RCMee5hTRkbJhvvI=)
                          3: 3138372e38342e3135322e302f32322d3234203d3e20323732353439.roa (hash: 88Oyt4SvBIiJaIaQSNPFg5v321OQ5Fgtzv8WaDmJVwo=)
                          4: 2C425257AE7B63529EB88108AC7DEA60648B43E5.crl (hash: kO1YoXh5ui4Zf6MaSYSvIB/2zEYyj+yMjrtOwHGPft4=)
                          5: 323830343a383466383a313130303a3a2f34302d3430203d3e20323732353439.roa (hash: E99zoi2NY/K4TXY6d6YryWjCWjyBxydG2Mg6fKnJJ7Q=)
                          6: 323830343a383466383a313030303a3a2f34302d3430203d3e20323732353439.roa (hash: fQMLDKNtYQ2TopGPimFS4OOXFrsmUpOC4jnXswrVWuE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.crl
                          rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 22:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:25:68:b1:3c:30:ab:03:89:c7:2a:4f:ef:db:94:0e:b2:fe:fc:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C425257AE7B63529EB88108AC7DEA60648B43E5
        Validity
            Not Before: Dec 24 22:25:00 2025 GMT
            Not After : Dec 25 22:30:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7f:78:40:cb:cc:c0:a4:45:a1:ab:8b:ba:68:
                    5e:3e:85:e4:8f:96:79:21:10:d0:ad:95:46:ce:4f:
                    ca:b7:39:d2:dc:5d:b7:30:89:ce:e7:ed:bf:78:49:
                    3a:79:29:92:dc:30:ac:0f:07:8e:12:4f:25:97:ed:
                    39:af:cc:f7:91:7a:db:b6:58:18:0f:44:9f:83:62:
                    8f:75:12:3c:e2:9c:38:61:02:f8:99:03:cb:f1:23:
                    39:19:42:a2:b3:fe:30:f7:4e:f2:30:41:48:71:0c:
                    33:2d:2e:6c:49:51:86:93:d5:8e:bd:e8:03:88:79:
                    2a:87:90:fe:f1:87:66:e0:dd:5a:e2:ed:da:2c:48:
                    cf:54:22:e4:1b:68:f3:09:ee:3a:57:a2:09:3c:25:
                    51:21:4c:e5:e8:6c:8f:93:ee:a1:84:ad:81:64:5e:
                    63:fe:75:60:87:2f:2c:b1:c8:8e:12:44:39:cf:70:
                    37:b5:a1:5e:53:55:5c:68:ec:82:8f:f8:2d:af:13:
                    6d:27:35:d4:cf:19:f7:81:af:01:44:90:65:59:e0:
                    ac:a5:7c:3f:ed:eb:9c:a9:7e:f2:17:c5:1d:b3:7b:
                    b7:c7:9f:08:ba:89:c4:c3:f1:7e:5f:ea:9a:b0:e1:
                    88:a0:75:6a:f7:24:23:52:27:ba:89:ca:66:3b:90:
                    dd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:0D:8F:C7:94:0B:8D:B2:D2:67:23:1E:76:72:C4:2C:7D:30:0A:50
            X509v3 Authority Key Identifier:
                keyid:2C:42:52:57:AE:7B:63:52:9E:B8:81:08:AC:7D:EA:60:64:8B:43:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:e3:17:01:f6:b2:ab:f3:ee:ec:ae:eb:19:b3:c7:2d:27:db:
         02:9b:9e:f9:ed:0b:ac:d3:fe:57:b0:2e:d7:75:7f:81:1c:fc:
         64:15:0a:87:66:c3:52:70:01:2c:12:cc:22:60:75:b3:88:28:
         12:d2:d2:6b:66:ec:d3:31:fb:f0:12:91:96:66:27:2c:bf:ed:
         55:34:e4:61:97:90:86:ac:a3:bd:e1:53:fc:6c:19:16:35:19:
         4e:34:8b:13:80:0a:50:7a:b9:e4:df:97:65:7e:99:24:64:eb:
         b6:e5:3e:94:ea:75:41:16:b5:ea:71:42:f0:9a:fa:50:3b:cb:
         2c:6a:80:c6:44:1c:01:33:2c:50:6d:46:7f:a4:84:fe:a6:1f:
         2f:38:01:67:1f:66:cd:1a:22:8b:41:ec:49:4d:47:1d:2a:50:
         d0:2a:07:73:1e:71:ca:5c:41:f2:63:01:f4:42:82:ea:46:e1:
         f6:ce:5c:a0:04:cb:d9:01:fd:06:23:3b:18:c6:2f:ab:e1:61:
         2a:97:a8:81:7f:aa:f9:84:b7:2a:88:42:bc:d3:ef:b0:50:d8:
         62:d0:10:07:25:ce:49:e9:28:4c:ec:b4:3e:3e:76:16:4a:0a:
         15:88:4d:d5:28:d0:f7:f8:55:e5:fd:c4:61:ba:21:2f:77:cf:
         0c:c1:23:d5
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUbCVosTwwqwOJxypP79uUDrL+/EUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkM0MjUyNTdBRTdCNjM1MjlFQjg4MTA4QUM3REVBNjA2
NDhCNDNFNTAeFw0yNTEyMjQyMjI1MDBaFw0yNTEyMjUyMjMwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0Q3Rjc4NDBDQkNDQzBBNDQ1
QTFBQjhCQkE2ODVFM0U4NUU0OEY5Njc5MjExMEQwQUQ5NTQ2Q0U0RkNBQjczOUQy
REM1REI3MzA4OUNFRTdFREJGNzg0OTNBNzkyOTkyREMzMEFDMEYwNzhFMTI0RjI1
OTdFRDM5QUZDQ0Y3OTE3QURCQjY1ODE4MEY0NDlGODM2MjhGNzUxMjNDRTI5QzM4
NjEwMkY4OTkwM0NCRjEyMzM5MTk0MkEyQjNGRTMwRjc0RUYyMzA0MTQ4NzEwQzMz
MkQyRTZDNDk1MTg2OTNENThFQkRFODAzODg3OTJBODc5MEZFRjE4NzY2RTBERDVB
RTJFRERBMkM0OENGNTQyMkU0MUI2OEYzMDlFRTNBNTdBMjA5M0MyNTUxMjE0Q0U1
RTg2QzhGOTNFRUExODRBRDgxNjQ1RTYzRkU3NTYwODcyRjJDQjFDODhFMTI0NDM5
Q0Y3MDM3QjVBMTVFNTM1NTVDNjhFQzgyOEZGODJEQUYxMzZEMjczNUQ0Q0YxOUY3
ODFBRjAxNDQ5MDY1NTlFMEFDQTU3QzNGRURFQjlDQTk3RUYyMTdDNTFEQjM3QkI3
Qzc5RjA4QkE4OUM0QzNGMTdFNUZFQTlBQjBFMTg4QTA3NTZBRjcyNDIzNTIyN0JB
ODlDQTY2M0I5MEREMEYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzX94QMvMwKRFoauLumhePoXkj5Z5IRDQrZVGzk/KtznS3F23MInO
5+2/eEk6eSmS3DCsDweOEk8ll+05r8z3kXrbtlgYD0Sfg2KPdRI84pw4YQL4mQPL
8SM5GUKis/4w907yMEFIcQwzLS5sSVGGk9WOvegDiHkqh5D+8Ydm4N1a4u3aLEjP
VCLkG2jzCe46V6IJPCVRIUzl6GyPk+6hhK2BZF5j/nVghy8ssciOEkQ5z3A3taFe
U1VcaOyCj/gtrxNtJzXUzxn3ga8BRJBlWeCspXw/7eucqX7yF8Uds3u3x58IuonE
w/F+X+qasOGIoHVq9yQjUie6icpmO5DdDwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FLcNj8eUC42y0mcjHnZyxCx9MApQMB8GA1UdIwQYMBaAFCxCUleue2NSnriBCKx9
6mBki0PlMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhkaU5tWktkdlBBR3JH
cWhyNXVaN21mQVRnaXpuRnlQbm5zc1lMcGZYZHJMLzEvMkM0MjUyNTdBRTdCNjM1
MjlFQjg4MTA4QUM3REVBNjA2NDhCNDNFNS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8yQzQyNTI1N0FFN0I2MzUyOUVCODgxMDhBQzdERUE2MDY0OEI0
M0U1LmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhkaU5tWktkdlBBR3JHcWhyNXVa
N21mQVRnaXpuRnlQbm5zc1lMcGZYZHJMLzEvMkM0MjUyNTdBRTdCNjM1MjlFQjg4
MTA4QUM3REVBNjA2NDhCNDNFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACbjFwH2sqvz7uyu6xmzxy0n
2wKbnvntC6zT/lewLtd1f4Ec/GQVCodmw1JwASwSzCJgdbOIKBLS0mtm7NMx+/AS
kZZmJyy/7VU05GGXkIaso73hU/xsGRY1GU40ixOAClB6ueTfl2V+mSRk67blPpTq
dUEWtepxQvCa+lA7yyxqgMZEHAEzLFBtRn+khP6mHy84AWcfZs0aIotB7ElNRx0q
UNAqB3MeccpcQfJjAfRCgupG4fbOXKAEy9kB/QYjOxjGL6vhYSqXqIF/qvmEtyqI
QrzT77BQ2GLQEAclzknpKEzstD4+dhZKChWITdUo0Pf4VeX9xGG6IS93zwzBI9U=
-----END CERTIFICATE-----