This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/2FF3BD981631E49037509A952007559286688690.mft
File:                     2FF3BD981631E49037509A952007559286688690.mft (raw, json)
Hash identifier:          Sq8L4r9CMMu7IVTle6R0NDjj+WpZnZgsnvC/aG+br2I=
Subject key identifier:   1E:1D:0F:DB:07:57:2B:47:F7:88:29:FD:CD:E8:FD:42:74:53:FC:99
Authority key identifier: 2F:F3:BD:98:16:31:E4:90:37:50:9A:95:20:07:55:92:86:68:86:90
Certificate issuer:       /CN=2FF3BD981631E49037509A952007559286688690
Certificate serial:       5C547A33F2AF5C354F4B79CE317CDB929B1D70CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF3BD981631E49037509A952007559286688690.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/2FF3BD981631E49037509A952007559286688690.mft
Manifest number:          0115
Signing time:             Tue 23 Dec 2025 09:17:42 +0000
Manifest this update:     Tue 23 Dec 2025 09:12:42 +0000
Manifest next update:     Wed 24 Dec 2025 10:22:42 +0000
Files and hashes:         1: 323830343a353463303a3a2f33322d313238203d3e20323638363638.roa (hash: FfHFO6q7SrPv5YkaZCJ5uZmzMi3udScNHZXDi2iReDA=)
                          2: 34352e3136342e3232302e302f32322d3332203d3e20323638363638.roa (hash: Fe3slJe0kAz3P+lnt9VNZRIbJY9aNCulq95Hm/heJSI=)
                          3: 2FF3BD981631E49037509A952007559286688690.crl (hash: cJ8YLPGLf8f88b8FfYtvC8n2OLqemxRHIA28fa7pSaM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/2FF3BD981631E49037509A952007559286688690.crl
                          rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/2FF3BD981631E49037509A952007559286688690.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF3BD981631E49037509A952007559286688690.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 10:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:54:7a:33:f2:af:5c:35:4f:4b:79:ce:31:7c:db:92:9b:1d:70:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FF3BD981631E49037509A952007559286688690
        Validity
            Not Before: Dec 23 09:12:42 2025 GMT
            Not After : Dec 24 10:22:42 2025 GMT
        Subject: CN=1E1D0FDB07572B47F78829FDCDE8FD427453FC99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a8:17:5d:ac:30:1c:06:2c:51:4a:5e:9d:5f:
                    e9:4c:24:9c:c5:78:34:dd:70:6b:92:b2:13:62:a1:
                    47:91:f5:11:f3:9f:5a:c3:0f:bd:13:08:04:de:31:
                    f2:a5:94:05:f4:c3:0b:da:e9:2e:77:40:5a:0b:3a:
                    cf:87:5b:58:3e:91:34:41:a1:bb:17:7a:b3:77:80:
                    bc:99:38:6c:8d:79:77:6a:09:09:da:da:42:24:e6:
                    cf:b9:88:35:f9:2c:f2:40:de:0c:1f:e8:ba:d6:b8:
                    8e:69:48:48:7b:97:d4:7d:08:d8:9a:70:e9:7c:8e:
                    69:e7:c4:f6:04:eb:b7:70:d1:80:b3:d0:8e:23:6f:
                    5b:a5:25:67:7c:2b:e5:e0:83:53:ee:cf:e5:ca:9a:
                    b6:d0:d0:41:c0:86:ce:72:18:e5:ad:6f:d6:09:80:
                    9a:23:ca:ed:c2:79:8c:6c:e2:4c:2a:fd:c5:8c:c9:
                    67:b2:f9:e9:11:13:81:78:b3:f3:cc:6e:4e:6d:17:
                    f5:d5:49:90:a8:a9:66:78:df:8c:d5:c7:b2:e2:e4:
                    3c:c6:64:99:ee:c3:9e:35:9f:6c:25:27:a4:35:8a:
                    f4:28:37:5d:4f:c1:76:2f:18:24:a1:30:ab:ab:bb:
                    bc:09:12:5f:df:f7:cb:22:4d:3c:de:20:dd:74:3a:
                    65:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:1D:0F:DB:07:57:2B:47:F7:88:29:FD:CD:E8:FD:42:74:53:FC:99
            X509v3 Authority Key Identifier:
                keyid:2F:F3:BD:98:16:31:E4:90:37:50:9A:95:20:07:55:92:86:68:86:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/2FF3BD981631E49037509A952007559286688690.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF3BD981631E49037509A952007559286688690.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/2FF3BD981631E49037509A952007559286688690.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:06:5b:71:a4:93:61:60:e1:64:e2:81:e1:aa:23:98:20:4f:
         96:1a:9b:a7:7d:ba:b0:c7:84:d5:2f:3f:f3:66:85:6d:aa:8a:
         b9:a6:57:d2:00:90:66:f4:8f:6f:5e:a5:4f:ba:c6:e2:08:61:
         b4:a3:c7:3f:b1:92:d2:30:5f:09:c5:89:84:46:eb:5a:e0:8e:
         f3:7e:aa:3a:48:dd:13:e7:be:2c:ef:4c:9c:fc:a3:dd:09:e9:
         b9:98:a8:7c:76:86:07:b1:42:57:2a:5e:f9:2c:88:87:2c:39:
         96:9d:0b:35:bd:67:cd:69:23:ce:00:f7:a5:1c:c8:e5:aa:15:
         ab:57:92:8c:33:f0:1e:a5:06:74:3f:e7:3a:2d:f7:f0:c3:b3:
         17:e6:75:92:f7:73:c2:b1:b1:d3:d8:c5:6c:61:1b:4b:ee:b5:
         01:01:e8:90:3a:ce:36:e0:d8:66:87:46:92:ce:4d:65:1a:42:
         62:b5:7d:a3:64:29:30:99:2f:71:0a:90:99:8e:4b:d5:5d:19:
         ef:07:c0:3c:73:69:fd:f4:7b:0c:12:af:56:00:2d:74:85:65:
         06:67:56:4f:e1:c8:04:4a:09:b7:25:9c:6c:f8:36:a8:71:92:
         74:de:d4:a2:aa:15:08:6c:a4:3b:2e:37:4b:53:d6:f3:3a:4e:
         de:1d:99:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 22:39:39 2025 by rpki-client