This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.mft
File:                     0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.mft (raw, json)
Hash identifier:          AYWslEMER1htPudoordNqyVBTrFE8mjQ0gAM5ba7h10=
Subject key identifier:   E9:40:D8:30:03:E0:9C:6B:2D:FB:CF:3D:84:DD:0E:5D:69:CD:DD:B9
Authority key identifier: 0A:2B:2F:4D:32:F3:48:A3:E7:5A:31:A4:8F:A6:BC:E1:94:9A:E7:F0
Certificate issuer:       /CN=0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0
Certificate serial:       4880137B6C59052334F2A361FA2426B8F0E6685C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.mft
Manifest number:          D1
Signing time:             Thu 25 Dec 2025 11:58:29 +0000
Manifest this update:     Thu 25 Dec 2025 11:53:29 +0000
Manifest next update:     Fri 26 Dec 2025 15:26:29 +0000
Files and hashes:         1: 0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.crl (hash: /jiC5JLmTbRhnO/+kIBsOxBSqrl7ll1+Om5CEO/w+SU=)
                          2: 34352e3136332e3131362e302f32322d3332203d3e20323638353737.roa (hash: Et77+LynBLMWqk+rHPa5qaEBgzJDRsbZGk2IR87u0z0=)
                          3: 323830343a353335343a3a2f33322d313238203d3e20323638353737.roa (hash: youEd1A6G9ZdagofZd+N94Vs6aXJfkDPw454AC/ppO0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.crl
                          rsync://rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 26 Dec 2025 15:26:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:80:13:7b:6c:59:05:23:34:f2:a3:61:fa:24:26:b8:f0:e6:68:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0
        Validity
            Not Before: Dec 25 11:53:29 2025 GMT
            Not After : Dec 26 15:26:29 2025 GMT
        Subject: CN=E940D83003E09C6B2DFBCF3D84DD0E5D69CDDDB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:cc:8b:26:68:78:71:42:5a:f1:65:88:44:a1:
                    ad:f5:75:53:07:0c:00:3c:0d:ec:92:b8:bc:5f:72:
                    3d:d3:77:54:10:46:7e:3a:d6:b8:6a:21:e9:07:ce:
                    93:ba:a6:e8:9e:d0:93:ae:b6:8e:1e:1a:e7:cb:01:
                    5c:66:22:24:0f:bb:f5:5a:c0:c7:9b:3b:ec:09:4f:
                    b1:a0:9e:af:8b:62:9d:5c:3e:06:f5:2a:eb:a7:35:
                    93:0d:10:91:1f:c2:6e:4e:92:a8:4d:1d:0c:6f:0c:
                    62:72:66:50:5b:fa:74:e9:ac:8b:f3:59:e4:f7:e3:
                    f2:9a:8a:a0:8c:59:3f:cb:c0:c8:b5:ca:26:7f:24:
                    aa:4a:89:19:22:6e:c2:2e:b6:d2:b9:a6:fb:a4:b3:
                    4d:25:b0:96:bc:2d:61:14:be:37:a3:b3:c3:3b:a0:
                    de:51:87:9f:07:79:0e:db:6d:d3:56:f4:10:88:23:
                    94:51:ac:90:00:aa:b6:8b:ab:b2:c7:ff:df:33:1a:
                    e8:69:84:5c:61:c1:02:a4:8f:74:30:e8:81:53:90:
                    4d:fc:29:33:28:e9:30:75:37:d2:3d:0a:ed:91:aa:
                    31:50:53:3e:8f:ce:c1:df:a0:31:e7:c3:38:d1:70:
                    dc:80:b5:de:4b:2d:ad:5b:fd:2a:ae:53:d5:75:91:
                    45:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:40:D8:30:03:E0:9C:6B:2D:FB:CF:3D:84:DD:0E:5D:69:CD:DD:B9
            X509v3 Authority Key Identifier:
                keyid:0A:2B:2F:4D:32:F3:48:A3:E7:5A:31:A4:8F:A6:BC:E1:94:9A:E7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:aa:5f:ea:72:db:84:40:3f:3f:55:f7:18:ef:d2:e3:6c:0a:
         35:2f:b3:91:0d:fd:cd:70:72:14:05:9e:88:59:8b:21:44:d6:
         14:8a:e8:01:30:da:44:d0:ef:4a:b0:5f:6e:4b:4f:27:e2:bc:
         a5:a6:45:22:6d:b8:14:85:58:c4:35:79:da:df:47:0a:8e:61:
         e4:08:cc:1b:19:b3:0d:db:e6:35:68:b2:45:0e:81:cc:48:c1:
         da:3b:1b:41:7a:7f:af:76:20:e6:84:f0:86:30:24:fe:47:e0:
         b1:2c:24:64:f1:86:67:02:1b:3e:19:cd:bf:09:0f:6e:52:71:
         9c:f6:3c:b3:94:ba:7b:f0:bb:1f:c3:47:9b:76:c2:ec:88:5d:
         8e:a3:7c:c0:eb:50:fd:89:eb:fd:34:4a:9a:26:f6:79:d0:7e:
         3f:b4:9c:5a:26:a2:e8:fa:19:de:aa:13:f5:3c:c7:4d:b5:39:
         3c:95:d7:54:82:1c:d6:24:2a:fd:b3:27:df:83:4f:6c:97:29:
         7f:62:81:3f:b1:0f:dd:15:9a:a9:b9:93:91:f7:fc:4e:09:41:
         f9:52:e8:83:7c:6a:61:80:37:4f:83:f3:e0:76:cf:30:b1:c9:
         48:82:2a:6a:bf:96:da:04:2f:7f:96:f3:02:96:e6:d9:3b:1f:
         aa:7f:03:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 20:35:00 2025 by rpki-client