This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CX5H7R32WDj13tDcMgVCUoZFe5MywwTrXWvHt9ePMYpm/0/EE78CB8F1548BA17CB0086EB5D390D7B026FCA5B.mft
File:                     EE78CB8F1548BA17CB0086EB5D390D7B026FCA5B.mft (raw, json)
Hash identifier:          xawsMeg6ktDrhvb9btc/BVfn8jqYUKIDHyhznVwRgo8=
Subject key identifier:   59:3A:22:5A:02:0A:1D:FF:E7:83:6B:C6:30:12:4F:7C:F8:4B:CA:4D
Authority key identifier: EE:78:CB:8F:15:48:BA:17:CB:00:86:EB:5D:39:0D:7B:02:6F:CA:5B
Certificate issuer:       /CN=EE78CB8F1548BA17CB0086EB5D390D7B026FCA5B
Certificate serial:       74ED2C0CC0CAA260DACFFE4939B7CC250B88FB5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE78CB8F1548BA17CB0086EB5D390D7B026FCA5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CX5H7R32WDj13tDcMgVCUoZFe5MywwTrXWvHt9ePMYpm/0/EE78CB8F1548BA17CB0086EB5D390D7B026FCA5B.mft
Manifest number:          02A5
Signing time:             Tue 30 Dec 2025 14:58:46 +0000
Manifest this update:     Tue 30 Dec 2025 14:53:46 +0000
Manifest next update:     Wed 31 Dec 2025 15:45:46 +0000
Files and hashes:         1: 323830343a383739383a3a2f33322d3333203d3e20323732373139.roa (hash: AAyktxd7hn+V4+zoRx2mQssaQx0gLnWezUL3jBwyk9s=)
                          2: EE78CB8F1548BA17CB0086EB5D390D7B026FCA5B.crl (hash: IcgneyU3C5WAlhC+9xVu+p/Pi3d75KQawNW59lQNjeI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CX5H7R32WDj13tDcMgVCUoZFe5MywwTrXWvHt9ePMYpm/0/EE78CB8F1548BA17CB0086EB5D390D7B026FCA5B.crl
                          rsync://rpki-repo.registro.br/repo/CX5H7R32WDj13tDcMgVCUoZFe5MywwTrXWvHt9ePMYpm/0/EE78CB8F1548BA17CB0086EB5D390D7B026FCA5B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE78CB8F1548BA17CB0086EB5D390D7B026FCA5B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 31 Dec 2025 15:45:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ed:2c:0c:c0:ca:a2:60:da:cf:fe:49:39:b7:cc:25:0b:88:fb:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE78CB8F1548BA17CB0086EB5D390D7B026FCA5B
        Validity
            Not Before: Dec 30 14:53:46 2025 GMT
            Not After : Dec 31 15:45:46 2025 GMT
        Subject: CN=593A225A020A1DFFE7836BC630124F7CF84BCA4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c8:23:3c:24:8b:86:f1:ef:2d:76:d1:92:9d:
                    27:60:f1:57:0f:44:5a:66:ed:9d:4c:00:05:9b:9d:
                    bb:ef:ea:41:cf:ec:c3:31:10:cc:01:ae:3c:36:80:
                    78:48:4d:13:11:52:13:18:1f:4c:4c:87:ca:e0:eb:
                    6d:fe:e2:2d:99:5c:22:e9:c5:65:e7:55:78:dc:a7:
                    d2:40:26:6e:d4:5e:89:ba:97:21:75:ac:bb:8f:f7:
                    fb:8a:c0:d0:e9:85:fe:6e:15:e3:74:92:b0:0d:c0:
                    35:15:16:48:3c:ba:f7:e0:bc:6d:ba:8c:a2:1b:2f:
                    53:3d:98:78:c3:82:df:84:3a:a3:6a:3d:26:b0:84:
                    6f:8a:75:3d:87:2a:dd:1f:4a:53:59:9c:6d:d6:7f:
                    60:32:fb:da:74:7e:59:d7:95:ad:cb:5d:dc:a6:0c:
                    63:98:f5:b7:89:07:cf:47:db:24:10:06:b6:41:e6:
                    01:48:69:7d:03:7b:49:79:d8:e3:7c:e2:a7:ad:09:
                    c4:f3:a6:a4:4a:5c:40:91:c4:3e:bc:09:83:53:b5:
                    02:58:da:2b:92:d0:ef:1c:17:59:c4:ce:fe:fc:0c:
                    cc:d2:c4:46:ea:20:9e:ab:6c:80:5c:6e:a9:60:0f:
                    81:02:ac:09:c5:3c:a3:b2:71:41:8b:37:f9:cd:36:
                    ca:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:3A:22:5A:02:0A:1D:FF:E7:83:6B:C6:30:12:4F:7C:F8:4B:CA:4D
            X509v3 Authority Key Identifier:
                keyid:EE:78:CB:8F:15:48:BA:17:CB:00:86:EB:5D:39:0D:7B:02:6F:CA:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CX5H7R32WDj13tDcMgVCUoZFe5MywwTrXWvHt9ePMYpm/0/EE78CB8F1548BA17CB0086EB5D390D7B026FCA5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE78CB8F1548BA17CB0086EB5D390D7B026FCA5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CX5H7R32WDj13tDcMgVCUoZFe5MywwTrXWvHt9ePMYpm/0/EE78CB8F1548BA17CB0086EB5D390D7B026FCA5B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:a7:2d:29:75:eb:53:6e:83:35:66:6d:44:cd:82:af:5e:03:
         30:6a:66:20:54:62:22:7f:b3:77:20:f4:a9:36:d5:31:56:7b:
         cf:24:23:c4:ae:f7:c1:9d:5a:99:f7:d6:cd:27:63:00:42:b6:
         31:4d:74:9c:f6:3e:3a:b8:70:ca:c3:4c:60:44:59:09:1e:3f:
         ea:85:4b:18:c4:c4:76:95:43:dc:60:1d:74:78:5f:4a:74:26:
         ed:30:ba:a2:f2:7a:a1:eb:5b:b1:ee:72:e6:9e:49:24:b3:ce:
         3e:85:40:da:08:fc:e1:40:b0:a7:55:c6:8f:64:bc:54:07:51:
         22:94:cd:60:e2:43:20:43:4f:f7:e1:3a:26:a0:10:21:49:b4:
         65:41:9d:cf:d8:08:42:97:af:b7:d4:1d:63:44:45:67:3a:49:
         dd:8d:26:14:ab:55:05:88:af:86:f8:6a:fe:ff:ff:79:80:d4:
         e5:12:b8:6a:21:1e:94:5a:40:a2:23:f7:13:2d:36:cd:78:2e:
         4f:9e:6c:8f:7f:e0:d4:c6:1c:ff:ed:0b:a2:62:af:96:79:d9:
         a0:62:0f:c9:a6:cf:df:19:1d:d1:e0:8b:2b:c2:a3:ee:2e:00:
         76:0f:76:b2:22:54:ab:45:44:26:94:b8:64:85:57:da:c0:2d:
         80:8b:df:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 18:43:54 2025 by rpki-client