This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8m3QbtovZfUDXHE2uBtBKB4vHcm3hGBmShjmwRDrgqeR/1/2A583FEEEEFA7D0F82CFF832874A83CDDD2144A3.mft
File:                     2A583FEEEEFA7D0F82CFF832874A83CDDD2144A3.mft (raw, json)
Hash identifier:          EkRI7VELbbPawI6aIvaU+2lIEWanWNniPJRg7tATYNQ=
Subject key identifier:   B9:61:59:BC:9A:2D:BE:8D:42:43:AD:2A:BF:95:5A:E4:5C:33:DB:60
Authority key identifier: 2A:58:3F:EE:EE:FA:7D:0F:82:CF:F8:32:87:4A:83:CD:DD:21:44:A3
Certificate issuer:       /CN=2A583FEEEEFA7D0F82CFF832874A83CDDD2144A3
Certificate serial:       0ED3A2144D0CB78D5D88829668895B4FF69F375B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A583FEEEEFA7D0F82CFF832874A83CDDD2144A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8m3QbtovZfUDXHE2uBtBKB4vHcm3hGBmShjmwRDrgqeR/1/2A583FEEEEFA7D0F82CFF832874A83CDDD2144A3.mft
Manifest number:          0381
Signing time:             Sat 20 Dec 2025 17:00:01 +0000
Manifest this update:     Sat 20 Dec 2025 16:55:01 +0000
Manifest next update:     Sun 21 Dec 2025 17:00:01 +0000
Files and hashes:         1: 3133312e3139362e3137322e302f32322d3234203d3e203239383032.roa (hash: YJPBxy57g8wO2Dq1AY7YRFTrBKrVXnNrGqnyDyZQY2Q=)
                          2: 3133312e3139362e3137322e302f32322d3234203d3e203534353430.roa (hash: 7zONdnoEmXd0qzW8tSN7PwTP9avMGQq79R39C3He2u4=)
                          3: 2A583FEEEEFA7D0F82CFF832874A83CDDD2144A3.crl (hash: RqxNQKXfiE2wXKFQKG5utOpDjMBGfr6bxrKgnct1prc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8m3QbtovZfUDXHE2uBtBKB4vHcm3hGBmShjmwRDrgqeR/1/2A583FEEEEFA7D0F82CFF832874A83CDDD2144A3.crl
                          rsync://rpki-repo.registro.br/repo/8m3QbtovZfUDXHE2uBtBKB4vHcm3hGBmShjmwRDrgqeR/1/2A583FEEEEFA7D0F82CFF832874A83CDDD2144A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A583FEEEEFA7D0F82CFF832874A83CDDD2144A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:d3:a2:14:4d:0c:b7:8d:5d:88:82:96:68:89:5b:4f:f6:9f:37:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A583FEEEEFA7D0F82CFF832874A83CDDD2144A3
        Validity
            Not Before: Dec 20 16:55:01 2025 GMT
            Not After : Dec 27 17:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a6:85:f3:43:83:e3:05:22:18:16:96:5c:f8:
                    e2:e4:a2:03:53:0a:a1:6b:e3:3a:e0:f3:16:9c:e7:
                    70:1e:47:89:c6:a5:2b:62:3c:68:ee:e2:14:1a:f3:
                    e9:bc:35:74:5c:c9:6d:9f:7a:37:8c:39:fd:f9:6e:
                    d0:fa:da:d7:94:37:6f:64:3b:b6:b7:c0:00:07:91:
                    45:ed:c9:42:fd:94:ce:70:e5:17:57:81:82:fa:68:
                    10:6d:5b:56:62:eb:f8:d4:d8:09:e6:49:a2:80:1b:
                    81:5a:e7:5f:30:8f:28:87:b9:0b:68:07:76:9e:e6:
                    ad:ab:bf:79:c5:37:1e:22:bf:5f:0d:33:08:b0:a9:
                    7d:bb:f2:66:da:73:57:e8:68:9c:a7:90:7e:1a:3e:
                    5c:b6:34:22:69:d0:9e:1d:06:b6:26:f8:92:67:45:
                    88:fb:96:87:46:7b:3f:11:ec:87:51:3b:0e:f5:61:
                    c4:e6:70:94:8f:3c:76:bb:95:8c:53:76:19:73:73:
                    4e:26:d8:06:d4:c3:fe:42:93:aa:25:19:6d:2d:61:
                    16:4e:7b:8f:d6:6f:6f:10:16:6f:4a:a0:10:d7:13:
                    c2:e0:5a:fa:d4:53:38:3b:a8:65:91:5b:e9:ce:80:
                    ef:f2:2f:17:77:cf:74:e6:3d:bf:6a:3b:7c:2a:a3:
                    5f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:61:59:BC:9A:2D:BE:8D:42:43:AD:2A:BF:95:5A:E4:5C:33:DB:60
            X509v3 Authority Key Identifier:
                keyid:2A:58:3F:EE:EE:FA:7D:0F:82:CF:F8:32:87:4A:83:CD:DD:21:44:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8m3QbtovZfUDXHE2uBtBKB4vHcm3hGBmShjmwRDrgqeR/1/2A583FEEEEFA7D0F82CFF832874A83CDDD2144A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A583FEEEEFA7D0F82CFF832874A83CDDD2144A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8m3QbtovZfUDXHE2uBtBKB4vHcm3hGBmShjmwRDrgqeR/1/2A583FEEEEFA7D0F82CFF832874A83CDDD2144A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:fe:15:82:2f:cb:12:48:0f:b3:f2:1b:2f:08:d0:fe:c6:15:
         b1:60:73:1c:a3:16:de:a9:33:f2:b8:d5:67:97:18:fd:30:8a:
         a8:ed:2b:b7:94:8d:22:84:c2:0e:0d:30:b3:2c:ac:84:78:d8:
         7f:4d:61:0c:05:2c:7a:76:df:66:1b:fa:ec:ae:bf:9c:6d:a9:
         e1:35:5f:ff:46:a2:97:98:a3:d0:69:65:e8:82:72:3b:0e:29:
         a3:a4:de:71:30:ee:72:b0:6c:15:04:ff:2b:2a:d8:d2:7a:e7:
         c5:2f:7b:00:ce:31:71:f9:6f:80:d7:71:33:b6:8f:61:fe:b3:
         1a:de:a7:1e:05:97:55:59:4a:52:5a:d8:6a:ff:cc:78:51:e5:
         15:1a:38:55:9c:ea:22:18:c3:4f:89:44:13:45:bc:ba:3c:08:
         da:4f:86:b2:5e:d7:75:22:d4:68:ba:98:45:88:3d:0b:29:38:
         c1:c3:74:af:e1:10:64:d2:ad:31:f2:f8:9e:8c:ff:94:2a:e2:
         c4:93:c2:a1:1b:86:da:84:9c:71:b2:07:6b:24:33:d6:fb:57:
         b4:72:ee:d8:6d:75:35:07:07:b5:3f:10:15:94:8e:65:e2:55:
         85:04:c8:e9:72:9e:d0:e6:22:b1:2f:26:81:cb:46:dd:c8:fd:
         81:d5:68:59
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUDtOiFE0Mt41diIKWaIlbT/afN1swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE1ODNGRUVFRUZBN0QwRjgyQ0ZGODMyODc0QTgzQ0RE
RDIxNDRBMzAeFw0yNTEyMjAxNjU1MDFaFw0yNTEyMjcxNzAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjFBNjg1RjM0MzgzRTMwNTIy
MTgxNjk2NUNGOEUyRTRBMjAzNTMwQUExNkJFMzNBRTBGMzE2OUNFNzcwMUU0Nzg5
QzZBNTJCNjIzQzY4RUVFMjE0MUFGM0U5QkMzNTc0NUNDOTZEOUY3QTM3OEMzOUZE
Rjk2RUQwRkFEQUQ3OTQzNzZGNjQzQkI2QjdDMDAwMDc5MTQ1RURDOTQyRkQ5NENF
NzBFNTE3NTc4MTgyRkE2ODEwNkQ1QjU2NjJFQkY4RDREODA5RTY0OUEyODAxQjgx
NUFFNzVGMzA4RjI4ODdCOTBCNjgwNzc2OUVFNkFEQUJCRjc5QzUzNzFFMjJCRjVG
MEQzMzA4QjBBOTdEQkJGMjY2REE3MzU3RTg2ODlDQTc5MDdFMUEzRTVDQjYzNDIy
NjlEMDlFMUQwNkI2MjZGODkyNjc0NTg4RkI5Njg3NDY3QjNGMTFFQzg3NTEzQjBF
RjU2MUM0RTY3MDk0OEYzQzc2QkI5NThDNTM3NjE5NzM3MzRFMjZEODA2RDRDM0ZF
NDI5M0FBMjUxOTZEMkQ2MTE2NEU3QjhGRDY2RjZGMTAxNjZGNEFBMDEwRDcxM0My
RTA1QUZBRDQ1MzM4M0JBODY1OTE1QkU5Q0U4MEVGRjIyRjE3NzdDRjc0RTYzREJG
NkEzQjdDMkFBMzVGNUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsaaF80OD4wUiGBaWXPji5KIDUwqha+M64PMWnOdwHkeJxqUrYjxo
7uIUGvPpvDV0XMltn3o3jDn9+W7Q+trXlDdvZDu2t8AAB5FF7clC/ZTOcOUXV4GC
+mgQbVtWYuv41NgJ5kmigBuBWudfMI8oh7kLaAd2nuatq795xTceIr9fDTMIsKl9
u/Jm2nNX6Gicp5B+Gj5ctjQiadCeHQa2JviSZ0WI+5aHRns/EeyHUTsO9WHE5nCU
jzx2u5WMU3YZc3NOJtgG1MP+QpOqJRltLWEWTnuP1m9vEBZvSqAQ1xPC4Fr61FM4
O6hlkVvpzoDv8i8Xd8905j2/ajt8KqNfXwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FLlhWbyaLb6NQkOtKr+VWuRcM9tgMB8GA1UdIwQYMBaAFCpYP+7u+n0Pgs/4ModK
g83dIUSjMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhtM1FidG92WmZVRFhI
RTJ1QnRCS0I0dkhjbTNoR0JtU2hqbXdSRHJncWVSLzEvMkE1ODNGRUVFRUZBN0Qw
RjgyQ0ZGODMyODc0QTgzQ0RERDIxNDRBMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8yQTU4M0ZFRUVFRkE3RDBGODJDRkY4MzI4NzRBODNDREREMjE0
NEEzLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhtM1FidG92WmZVRFhIRTJ1QnRC
S0I0dkhjbTNoR0JtU2hqbXdSRHJncWVSLzEvMkE1ODNGRUVFRUZBN0QwRjgyQ0ZG
ODMyODc0QTgzQ0RERDIxNDRBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABT+FYIvyxJID7PyGy8I0P7G
FbFgcxyjFt6pM/K41WeXGP0wiqjtK7eUjSKEwg4NMLMsrIR42H9NYQwFLHp232Yb
+uyuv5xtqeE1X/9GopeYo9BpZeiCcjsOKaOk3nEw7nKwbBUE/ysq2NJ658UvewDO
MXH5b4DXcTO2j2H+sxrepx4Fl1VZSlJa2Gr/zHhR5RUaOFWc6iIYw0+JRBNFvLo8
CNpPhrJe13Ui1Gi6mEWIPQspOMHDdK/hEGTSrTHy+J6M/5Qq4sSTwqEbhtqEnHGy
B2skM9b7V7Ry7thtdTUHB7U/EBWUjmXiVYUEyOlyntDmIrEvJoHLRt3I/YHVaFk=
-----END CERTIFICATE-----
Generated at Sun Dec 21 10:05:07 2025 by rpki-client