This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/ED21D10C23C2376429733090A859B9263A7A9ADC.mft
File:                     ED21D10C23C2376429733090A859B9263A7A9ADC.mft (raw, json)
Hash identifier:          JtAme8fKEvkdTmS2QJSF3fHseO4s16OX+d+MGGB8r2k=
Subject key identifier:   C7:55:E0:F2:C1:28:B9:95:E7:2F:13:66:04:15:6A:C7:43:11:40:E9
Authority key identifier: ED:21:D1:0C:23:C2:37:64:29:73:30:90:A8:59:B9:26:3A:7A:9A:DC
Certificate issuer:       /CN=ED21D10C23C2376429733090A859B9263A7A9ADC
Certificate serial:       105A1D4EF33A355C4917B4B44D95473B9E83648D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED21D10C23C2376429733090A859B9263A7A9ADC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/ED21D10C23C2376429733090A859B9263A7A9ADC.mft
Manifest number:          0292
Signing time:             Mon 29 Dec 2025 12:16:52 +0000
Manifest this update:     Mon 29 Dec 2025 12:11:52 +0000
Manifest next update:     Tue 30 Dec 2025 13:53:52 +0000
Files and hashes:         1: 34352e3138382e3137362e302f32322d3332203d3e20323639353335.roa (hash: qVrhSjcY3K4UfNwcC/dV12GQv2xMkkxByFEq3c9l3as=)
                          2: 323830343a363633633a3a2f33322d313238203d3e20323639353335.roa (hash: 4GsVdnrX70b5P2ipb6ZsdX0i4/IV3OWiKJlfoqHPjdQ=)
                          3: ED21D10C23C2376429733090A859B9263A7A9ADC.crl (hash: q6K4axMF+PEJg5wfRagHEgp4olNMlhytCIpbHtx1wOY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/ED21D10C23C2376429733090A859B9263A7A9ADC.crl
                          rsync://rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/ED21D10C23C2376429733090A859B9263A7A9ADC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED21D10C23C2376429733090A859B9263A7A9ADC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 30 Dec 2025 13:53:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:5a:1d:4e:f3:3a:35:5c:49:17:b4:b4:4d:95:47:3b:9e:83:64:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED21D10C23C2376429733090A859B9263A7A9ADC
        Validity
            Not Before: Dec 29 12:11:52 2025 GMT
            Not After : Dec 30 13:53:52 2025 GMT
        Subject: CN=C755E0F2C128B995E72F136604156AC7431140E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7e:a8:c3:cc:95:4b:a0:c3:cc:90:63:9b:61:
                    30:f1:dc:39:d4:74:39:20:01:de:43:2b:b5:4f:01:
                    ce:c2:79:db:9e:97:07:22:d9:d6:40:b2:b8:80:2d:
                    e6:52:ee:1e:40:e0:7c:a5:f1:3e:17:85:85:67:8e:
                    81:f0:6f:05:b8:d0:2d:7f:0a:2a:8e:c9:53:da:c7:
                    b0:52:b6:11:d8:67:c1:00:a3:36:d7:ab:8d:bf:fb:
                    25:c1:45:97:42:1a:05:fa:fd:ac:65:c4:29:7e:d6:
                    47:e2:0e:5f:d3:32:61:4a:ba:98:83:c9:f5:64:3e:
                    7f:5b:4b:9a:55:b5:2f:af:77:bd:e7:9e:84:6b:fb:
                    7d:8c:f6:c9:88:de:4e:11:5f:49:4f:d2:cc:55:cc:
                    ea:8c:c8:d5:ee:2f:2c:9e:a8:51:9f:7e:29:72:12:
                    4c:6c:71:79:95:b6:08:42:27:ce:6d:c6:f8:20:6d:
                    c3:65:c9:8b:2e:ba:3f:7c:55:b6:25:82:15:9b:a0:
                    7c:d9:9f:92:c3:c9:ea:e5:ed:5d:09:67:33:6b:db:
                    28:69:ce:d2:84:d9:79:bb:79:33:b3:db:a9:aa:02:
                    7c:df:56:cb:7e:8e:55:f1:63:53:32:30:58:81:96:
                    57:86:33:46:2c:9c:2d:91:b9:19:5e:de:aa:0e:d4:
                    e7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:55:E0:F2:C1:28:B9:95:E7:2F:13:66:04:15:6A:C7:43:11:40:E9
            X509v3 Authority Key Identifier:
                keyid:ED:21:D1:0C:23:C2:37:64:29:73:30:90:A8:59:B9:26:3A:7A:9A:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/ED21D10C23C2376429733090A859B9263A7A9ADC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED21D10C23C2376429733090A859B9263A7A9ADC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/ED21D10C23C2376429733090A859B9263A7A9ADC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:c3:71:67:ff:a4:0a:b6:34:15:f8:bf:38:84:0a:ef:0c:13:
         a1:a2:37:1b:a8:e1:e5:4a:73:e5:c3:d5:c6:5a:74:d4:84:4a:
         73:f4:ee:00:05:7f:56:8d:93:03:7e:c5:ae:4a:65:a2:31:48:
         d2:ac:c2:0a:a0:3b:73:be:c5:82:d3:54:54:e8:8d:9d:e1:31:
         af:7f:39:52:c8:f6:4a:a6:1e:e8:1b:d7:ef:08:43:e4:5a:ef:
         06:bf:ea:f8:36:eb:63:56:69:b4:4a:68:2a:eb:d5:db:7e:6a:
         36:4b:c0:4f:19:04:75:47:b6:08:47:b4:5c:e1:e0:39:8d:0f:
         d0:87:e7:bd:5f:1a:f0:d7:20:1f:50:a9:87:9c:60:47:c5:4e:
         c5:48:ce:53:ed:f1:69:ee:87:dd:17:ae:8a:52:7c:6c:c0:98:
         24:d7:ef:21:88:28:b2:14:d0:98:68:46:04:36:98:78:e3:e4:
         1f:14:7e:3b:8b:fb:df:75:e4:d3:5a:8c:0f:d8:25:2f:96:7c:
         f4:19:85:d7:c0:58:1e:73:f0:44:85:47:f2:9e:45:a6:ab:e9:
         08:14:f8:f7:94:f1:27:f2:07:f4:c2:37:64:62:ec:73:32:7b:
         c4:97:55:03:96:b3:14:aa:02:51:39:93:64:a1:b6:cd:eb:c9:
         e7:8a:37:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 16:31:33 2025 by rpki-client