This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft
File:                     CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft (raw, json)
Hash identifier:          geWRoa6tboft/UWEp6VOge+QlJVzLW2TwevwdfmlNaM=
Subject key identifier:   44:90:3F:B7:E4:7D:C1:CD:7B:06:03:60:47:70:28:3A:18:B0:DF:2A
Authority key identifier: CC:DF:B2:52:84:D1:41:1A:05:C2:D5:A9:81:69:BA:A0:90:EE:F4:E1
Certificate issuer:       /CN=CCDFB25284D1411A05C2D5A98169BAA090EEF4E1
Certificate serial:       47DD9C49D508CA4A9FB4D0AC7D514446192DE0C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft
Manifest number:          033F
Signing time:             Sat 20 Dec 2025 01:45:55 +0000
Manifest this update:     Sat 20 Dec 2025 01:40:55 +0000
Manifest next update:     Sun 21 Dec 2025 05:19:55 +0000
Files and hashes:         1: 34352e3138382e32342e302f32322d3332203d3e20323633393435.roa (hash: lfLBExi7aLPt672tmYUHeQIJlNv5s8Hx5DVc0Wer/Iw=)
                          2: 3133382e3231392e3138302e302f32322d3332203d3e20323633393435.roa (hash: MszwjcuIe9rjs+cHuQWMig87jp5DXLRmq5gNTuVD1fY=)
                          3: 3137302e38342e37322e302f32322d3332203d3e20323633393435.roa (hash: t8HVSafrX1OjhJjFHS8Bmtbbsk9VCeE3SLniXiYbwmM=)
                          4: CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl (hash: EqUEKoo2974qGguWKQA3i0Jo9joP1qTTdPDO9O9BkRY=)
                          5: 323830343a323832633a3a2f33322d313238203d3e20323633393435.roa (hash: nlVhDanKVg64ya0hokzfUPThna0mKMIOPZJ9pKVwclg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl
                          rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 05:19:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:dd:9c:49:d5:08:ca:4a:9f:b4:d0:ac:7d:51:44:46:19:2d:e0:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCDFB25284D1411A05C2D5A98169BAA090EEF4E1
        Validity
            Not Before: Dec 20 01:40:55 2025 GMT
            Not After : Dec 21 05:19:55 2025 GMT
        Subject: CN=44903FB7E47DC1CD7B0603604770283A18B0DF2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7a:69:5c:72:14:3b:3e:38:a5:05:87:cb:99:
                    cf:2c:88:72:c4:2d:58:09:ba:25:10:de:3e:80:6c:
                    da:b7:1b:cf:92:5d:cf:b5:c0:7d:e2:a7:1e:9c:4f:
                    e2:fc:2e:1d:69:cd:4f:77:5a:ad:87:d9:ce:05:91:
                    b4:f9:c3:fe:aa:e5:4a:c4:75:c5:94:e2:c8:57:64:
                    dd:0d:46:45:04:11:49:d1:23:a6:ac:d9:f7:b4:78:
                    6f:ce:f8:d2:fa:bc:d2:a7:96:64:d9:d8:80:46:ca:
                    88:93:2f:91:f6:3f:82:0d:9f:b4:54:8a:3c:56:fd:
                    9b:19:a0:d0:ee:89:a4:4a:16:5e:54:dc:6f:b3:1c:
                    a6:38:cb:60:62:50:90:06:52:af:ad:80:12:89:55:
                    41:c0:ec:e0:cf:2d:48:b0:48:1b:97:54:cf:66:b9:
                    cf:d5:af:c5:98:cc:e9:7b:2e:30:0a:5b:5a:cf:4a:
                    41:47:e5:07:91:f8:7e:35:e7:a4:ec:11:4b:61:3d:
                    1c:f2:ab:a0:bb:2d:09:5b:a7:d2:65:40:d9:f0:75:
                    65:cc:46:93:82:13:d4:63:54:0b:3a:6f:2c:7d:79:
                    37:6b:31:d6:a1:c1:11:4f:c3:31:a7:78:20:0c:08:
                    35:86:7e:88:86:18:df:6a:3d:51:97:fc:f6:f6:dd:
                    56:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:90:3F:B7:E4:7D:C1:CD:7B:06:03:60:47:70:28:3A:18:B0:DF:2A
            X509v3 Authority Key Identifier:
                keyid:CC:DF:B2:52:84:D1:41:1A:05:C2:D5:A9:81:69:BA:A0:90:EE:F4:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:ad:12:1e:d2:ab:da:56:39:87:f5:d5:9a:17:16:c4:8b:ff:
         58:ef:e7:ec:f9:03:f8:a3:16:df:a1:28:f7:bc:0a:63:bc:0d:
         cd:6e:f4:e1:61:ba:bf:34:76:09:3e:01:71:8b:06:a1:75:27:
         ed:a0:dc:25:73:d6:e0:36:24:52:6b:29:04:86:c3:11:80:a0:
         aa:e2:b3:8f:70:4b:21:58:10:64:8a:79:a5:a7:73:1b:31:7e:
         5e:67:7d:ce:79:5d:fa:1e:be:59:c5:c9:bc:ad:d3:ce:4b:c2:
         51:af:f3:b7:68:aa:d3:a5:e5:35:59:56:54:c7:11:d9:90:8a:
         1b:27:45:41:13:5e:81:88:28:d4:71:7a:f0:23:69:7e:15:6c:
         15:c2:a2:06:b1:79:9c:80:00:b5:49:c7:09:a0:a6:c9:81:0b:
         7e:1b:df:83:8a:e0:fd:bb:24:c0:22:e0:e8:e9:84:a4:f7:5e:
         24:e0:b6:5f:5b:e7:30:1d:18:06:6a:b8:14:0f:20:99:52:fc:
         14:e1:33:2a:a7:d2:a1:58:5c:96:f9:0c:c5:c3:3d:2f:67:ea:
         2c:3c:0c:fd:34:4a:ff:c5:b4:f7:2f:91:5d:2f:c7:5d:cc:cf:
         1d:13:29:7f:16:53:95:90:bd:2b:53:b1:84:66:a3:6d:57:0d:
         d1:92:1a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:41:44 2025 by rpki-client