This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/ECADEA938914F9A8499264BBC9B579A4EDF92D27.mft
File:                     ECADEA938914F9A8499264BBC9B579A4EDF92D27.mft (raw, json)
Hash identifier:          CF59xxSdK8Bw310vVumHON0rb3coJQu88KrDWD0F63Q=
Subject key identifier:   CB:C5:B5:72:86:4C:44:8A:4F:6A:CA:EA:9D:9E:6D:DC:F2:8D:57:CF
Authority key identifier: EC:AD:EA:93:89:14:F9:A8:49:92:64:BB:C9:B5:79:A4:ED:F9:2D:27
Certificate issuer:       /CN=ECADEA938914F9A8499264BBC9B579A4EDF92D27
Certificate serial:       41CF5A1731CCBC2AA7D8F65C0797412A9A55BB7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECADEA938914F9A8499264BBC9B579A4EDF92D27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/ECADEA938914F9A8499264BBC9B579A4EDF92D27.mft
Manifest number:          42
Signing time:             Fri 19 Dec 2025 21:12:34 +0000
Manifest this update:     Fri 19 Dec 2025 21:07:34 +0000
Manifest next update:     Sun 21 Dec 2025 00:17:34 +0000
Files and hashes:         1: ECADEA938914F9A8499264BBC9B579A4EDF92D27.crl (hash: bqrIiKnlzPqotQMMl+wkJJ0ezB+gQHyzwteko4SaL6g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/ECADEA938914F9A8499264BBC9B579A4EDF92D27.crl
                          rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/ECADEA938914F9A8499264BBC9B579A4EDF92D27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECADEA938914F9A8499264BBC9B579A4EDF92D27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 00:17:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:cf:5a:17:31:cc:bc:2a:a7:d8:f6:5c:07:97:41:2a:9a:55:bb:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECADEA938914F9A8499264BBC9B579A4EDF92D27
        Validity
            Not Before: Dec 19 21:07:34 2025 GMT
            Not After : Dec 21 00:17:34 2025 GMT
        Subject: CN=CBC5B572864C448A4F6ACAEA9D9E6DDCF28D57CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:21:b5:78:61:26:eb:0f:64:a5:f0:3a:e2:b4:
                    fe:4e:97:1b:66:9c:d1:91:65:a3:8a:ff:7f:74:af:
                    fa:92:6a:d8:e8:7e:92:92:fe:a4:c8:ce:1d:27:fd:
                    61:15:41:e4:bb:b1:f2:9d:51:c8:ea:99:c0:f7:98:
                    2a:cc:7e:d6:89:70:10:96:a0:1e:18:46:fb:21:7e:
                    ee:d3:b2:83:4e:a8:91:d0:0f:e3:8d:f1:26:97:0e:
                    fe:49:68:bc:b2:ef:be:bf:32:32:ea:5b:14:86:38:
                    d5:53:86:06:f9:d7:8d:df:ac:a6:1e:af:04:c1:10:
                    cd:d6:73:58:0c:07:37:ec:88:30:b1:1b:75:8f:b9:
                    c7:10:3e:85:b1:98:49:0b:e0:d6:b4:f2:54:ce:4c:
                    3d:58:df:49:40:1a:bb:22:c1:e3:00:35:4b:3c:f2:
                    26:da:38:2e:42:5a:46:a4:0f:34:0b:d8:fe:61:ed:
                    a2:bd:4a:ee:7d:8a:8f:3a:30:eb:ef:f5:38:8d:67:
                    28:b3:65:56:45:e9:01:d9:e1:d2:b8:c4:82:cb:fd:
                    7a:bf:c9:58:c0:a3:ec:e6:74:7f:20:2c:ea:cb:63:
                    79:67:ff:b4:94:6d:63:fa:a4:93:bb:ff:86:07:84:
                    bd:cb:24:90:d8:6e:e2:c6:9e:6d:68:d1:f1:ad:f2:
                    7e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C5:B5:72:86:4C:44:8A:4F:6A:CA:EA:9D:9E:6D:DC:F2:8D:57:CF
            X509v3 Authority Key Identifier:
                keyid:EC:AD:EA:93:89:14:F9:A8:49:92:64:BB:C9:B5:79:A4:ED:F9:2D:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/ECADEA938914F9A8499264BBC9B579A4EDF92D27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECADEA938914F9A8499264BBC9B579A4EDF92D27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/ECADEA938914F9A8499264BBC9B579A4EDF92D27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:10:4c:ec:36:6a:30:2e:14:9f:5e:c9:74:1a:7b:15:5f:b6:
         73:d1:99:31:1e:01:2b:37:91:00:42:06:4a:3f:6c:59:40:e6:
         52:12:89:30:c4:5c:a9:95:3d:aa:82:46:a5:76:eb:e6:bc:5d:
         cd:b4:7b:75:65:db:ea:a9:6f:90:b4:22:55:44:81:40:05:8b:
         4e:93:3a:6c:60:69:5f:11:d6:39:e2:2d:7e:f5:e2:7d:b6:13:
         0f:2b:18:f0:fa:08:7b:24:f7:4d:36:17:82:8a:5d:b9:a9:ef:
         d6:6c:d1:a3:49:7e:88:d0:97:63:ea:5e:07:73:08:9b:0d:5d:
         53:80:5e:31:14:5e:8b:1b:26:36:48:28:17:8c:13:4a:ec:74:
         52:a0:a4:9a:a6:57:96:48:1d:f9:8e:42:4d:93:fc:ea:2c:41:
         be:7b:bb:fb:50:ee:17:9f:ec:e9:bd:78:30:75:f7:2a:bd:fe:
         3b:43:5b:c1:5a:a4:35:d3:30:e7:57:9a:66:37:ac:38:1f:a8:
         1c:fa:e7:9d:3f:02:4d:07:82:eb:13:bb:dc:fc:8a:e9:7e:a3:
         ae:d3:fb:74:ef:53:fe:89:77:ba:c2:26:a6:c6:30:a8:14:b6:
         7a:5c:35:1e:49:fd:c6:a2:58:3c:35:2c:e5:0f:9e:5e:8f:41:
         08:e9:26:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 06:07:56 2025 by rpki-client