This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/E25CD2A4A3979D30BC2FFFCF024DBE94CD0D8D5F.mft
File:                     E25CD2A4A3979D30BC2FFFCF024DBE94CD0D8D5F.mft (raw, json)
Hash identifier:          qjYHJ1MA5Twvp/VzpXI9TtlmdwStdjiGHRE6lOiNBHU=
Subject key identifier:   76:81:E2:13:C1:85:7F:9B:9A:79:4C:FB:29:51:02:FA:0C:BB:92:8E
Authority key identifier: E2:5C:D2:A4:A3:97:9D:30:BC:2F:FF:CF:02:4D:BE:94:CD:0D:8D:5F
Certificate issuer:       /CN=E25CD2A4A3979D30BC2FFFCF024DBE94CD0D8D5F
Certificate serial:       51F8340F312CAFBA501DCC1A63645D5941723C3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E25CD2A4A3979D30BC2FFFCF024DBE94CD0D8D5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/E25CD2A4A3979D30BC2FFFCF024DBE94CD0D8D5F.mft
Manifest number:          A7
Signing time:             Sun 21 Dec 2025 03:44:17 +0000
Manifest this update:     Sun 21 Dec 2025 03:39:17 +0000
Manifest next update:     Mon 22 Dec 2025 06:12:17 +0000
Files and hashes:         1: 323830343a346437343a3a2f33322d313238203d3e20323638313937.roa (hash: zfj4BAtxxfpv9yeZqU0bCdMPpJvgpAQwlVjRwwyHAQw=)
                          2: 34352e3233352e3134342e302f32322d3332203d3e20323638313937.roa (hash: S7Da8DFMxkjKDB/XOb75nmWzM4CyLgqNGvwkOLEUA58=)
                          3: E25CD2A4A3979D30BC2FFFCF024DBE94CD0D8D5F.crl (hash: bQ7NoJ7KhP5mgROl/DXm38V9S9iT2v5MOiZEcGtQ/yg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/E25CD2A4A3979D30BC2FFFCF024DBE94CD0D8D5F.crl
                          rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/E25CD2A4A3979D30BC2FFFCF024DBE94CD0D8D5F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E25CD2A4A3979D30BC2FFFCF024DBE94CD0D8D5F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 06:12:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f8:34:0f:31:2c:af:ba:50:1d:cc:1a:63:64:5d:59:41:72:3c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E25CD2A4A3979D30BC2FFFCF024DBE94CD0D8D5F
        Validity
            Not Before: Dec 21 03:39:17 2025 GMT
            Not After : Dec 22 06:12:17 2025 GMT
        Subject: CN=7681E213C1857F9B9A794CFB295102FA0CBB928E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:82:16:b6:57:56:db:7a:28:75:ed:90:d8:03:
                    be:58:8f:80:72:5b:9b:86:0b:69:1f:a9:c4:80:62:
                    00:f4:35:04:78:ef:d0:4f:2c:bf:97:c7:7a:34:c3:
                    cd:b8:7f:dc:29:4b:89:0e:c0:09:d6:a5:65:cc:6f:
                    91:f6:9b:38:a3:ea:6c:a9:ae:10:75:2d:66:dd:48:
                    2b:9b:bc:69:bf:42:f4:d2:4e:57:50:ea:e0:77:ee:
                    db:2c:51:f2:f2:08:1f:9d:6e:8e:5e:9c:21:58:1b:
                    e1:39:26:3f:88:49:22:82:f5:57:9c:2a:0c:1c:d6:
                    c9:b5:9a:6b:8a:c0:19:ec:3c:a3:7d:c2:18:91:86:
                    24:99:01:11:1e:21:52:fa:ca:49:f4:58:36:31:a9:
                    03:6d:1e:59:fd:d1:43:de:ae:e7:48:11:3c:6a:bf:
                    3b:3e:31:9d:88:51:b6:e7:79:65:fd:a7:77:b3:25:
                    4e:f2:5a:16:09:24:ef:35:72:23:ba:f4:82:9a:86:
                    05:74:54:f9:29:39:ca:2d:f9:18:fc:3a:17:03:57:
                    5f:0d:55:58:95:03:1f:ba:d4:be:05:31:ff:2f:d2:
                    0a:d7:ac:af:fc:15:75:07:dd:fa:f0:d1:40:3e:91:
                    8c:7e:00:7e:e7:71:ef:aa:35:7b:e7:36:1e:96:4e:
                    6a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:81:E2:13:C1:85:7F:9B:9A:79:4C:FB:29:51:02:FA:0C:BB:92:8E
            X509v3 Authority Key Identifier:
                keyid:E2:5C:D2:A4:A3:97:9D:30:BC:2F:FF:CF:02:4D:BE:94:CD:0D:8D:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/E25CD2A4A3979D30BC2FFFCF024DBE94CD0D8D5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E25CD2A4A3979D30BC2FFFCF024DBE94CD0D8D5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/E25CD2A4A3979D30BC2FFFCF024DBE94CD0D8D5F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:8c:96:c9:d6:ab:31:c7:7b:63:0e:5f:1c:8d:17:b2:b6:c2:
         f0:07:37:6a:65:b5:4d:61:2e:df:cb:5e:80:c1:aa:c4:80:44:
         21:ee:92:93:3c:7f:99:41:14:c2:82:66:a5:dd:ab:19:8f:0d:
         2a:82:c4:d9:ae:db:73:b8:f8:34:39:7e:7c:c2:d9:24:e0:d3:
         b7:a6:1f:c1:69:9a:1d:06:82:04:d2:80:da:70:13:37:3e:f0:
         27:42:85:f1:1b:a2:40:97:e4:a1:6d:52:4d:44:06:64:08:90:
         b0:bd:25:0a:23:6a:26:e5:4b:8e:26:e9:67:e9:8e:24:bd:b5:
         42:dc:1c:a3:eb:00:b5:c4:30:58:ea:c3:80:37:90:1f:8d:4e:
         54:53:af:d1:da:02:c9:73:71:43:31:d9:89:4d:49:52:66:82:
         14:57:de:fb:7f:5a:cc:01:b3:44:99:e5:c5:e1:86:3b:fd:d1:
         c1:5d:53:87:49:4f:35:77:93:d8:ba:51:e2:d6:07:e1:43:1e:
         ea:53:d0:37:9a:12:52:39:14:41:52:22:4e:07:6e:be:38:db:
         f3:a5:80:97:eb:88:2b:db:dd:10:61:c5:77:45:5e:96:82:5d:
         c3:3a:ef:20:cc:b6:e2:41:8d:69:41:1c:f5:97:87:f8:0e:ab:
         fc:c2:98:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 17:27:47 2025 by rpki-client