This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft
File:                     2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft (raw, json)
Hash identifier:          Ib3JoUGBOHyQjJlev/PyhyU04cFxuuhzG9epQdzKn+o=
Subject key identifier:   6B:D1:FC:9B:25:C3:A3:48:DF:5F:9D:08:1D:08:BF:FF:40:0A:33:CB
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Certificate issuer:       /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial:       29144F230A3DFB244248187B3657456A8FE5F275
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft
Manifest number:          03C1
Signing time:             Tue 23 Dec 2025 03:51:01 +0000
Manifest this update:     Tue 23 Dec 2025 03:46:01 +0000
Manifest next update:     Wed 24 Dec 2025 04:23:01 +0000
Files and hashes:         1: 3137392e3130392e3136302e302f32302d3332203d3e20323633303837.roa (hash: XRhfslxEoTNm+hxIZ2x4tmw31Lm059fbAltLDLKYMTE=)
                          2: 323830343a3937383a3a2f33322d313238203d3e20323633303837.roa (hash: G/FFJ7H4y3UmSNdQvjTb1QYjVB9bKR8OycW7xU2KFuI=)
                          3: 3137372e3133372e3230382e302f32302d3332203d3e20323633303837.roa (hash: lsPfySBrQRokkFGPXoHfXtf83HsA13dTki6xitZ2OTw=)
                          4: 2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl (hash: bGHqT4c8OXJDgB8ZRqY15XYti+OdSaTFoGobA23cOqg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl
                          rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 04:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:14:4f:23:0a:3d:fb:24:42:48:18:7b:36:57:45:6a:8f:e5:f2:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
        Validity
            Not Before: Dec 23 03:46:01 2025 GMT
            Not After : Dec 24 04:23:01 2025 GMT
        Subject: CN=6BD1FC9B25C3A348DF5F9D081D08BFFF400A33CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:18:c6:64:ab:05:96:33:15:c3:bf:0a:4b:d9:
                    0c:93:8a:20:84:de:c6:3a:b4:09:3e:03:a9:99:50:
                    1f:f6:97:2f:83:d7:1d:31:4b:69:da:d5:23:04:48:
                    56:8d:32:ee:cb:21:59:2f:23:9e:15:7c:b3:68:2e:
                    b4:c7:95:9c:10:5b:2d:91:d6:cf:53:e0:b8:5b:ca:
                    6f:d6:79:5f:1f:d1:24:f0:b3:7d:29:20:dd:4e:aa:
                    27:76:09:47:0e:39:61:42:58:66:c7:0e:0c:82:b1:
                    fd:11:f7:99:43:74:92:aa:c8:60:e0:28:91:ab:f6:
                    cf:4d:7f:4d:a9:78:3b:0b:70:e6:9d:48:a4:dc:54:
                    2e:5a:36:fe:dd:df:9d:c4:5a:9d:32:24:f6:4a:2b:
                    e5:db:24:93:b2:dc:a1:22:42:2d:b1:db:a4:9d:5b:
                    c0:43:46:37:60:29:a4:39:30:7f:7d:6c:61:5a:6a:
                    13:a7:ef:03:c3:c0:ce:85:3e:63:f8:21:6e:4f:44:
                    48:c8:78:ee:62:80:46:76:51:40:eb:df:09:89:a9:
                    76:88:26:83:d7:40:16:28:0d:2a:64:aa:c0:a3:c5:
                    ea:03:c3:35:0b:f8:57:98:95:78:2b:b0:93:b0:0c:
                    65:28:1e:31:f1:22:14:d6:5b:6a:53:c8:8a:e3:62:
                    9f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D1:FC:9B:25:C3:A3:48:DF:5F:9D:08:1D:08:BF:FF:40:0A:33:CB
            X509v3 Authority Key Identifier:
                keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:f0:f2:f5:b7:c6:b3:0b:56:d1:dd:7f:f5:e2:5f:2a:c5:ad:
         bb:d1:8b:65:ed:42:1e:89:9b:d9:81:bf:90:03:68:cb:15:c1:
         3b:c4:e6:f0:7b:5d:21:90:79:fe:81:e1:70:e3:6b:6b:10:c2:
         6b:c7:f3:b5:d5:b1:5c:59:0e:58:be:9a:1f:43:5b:a1:b5:ff:
         c4:a6:03:a1:57:63:92:5a:47:02:64:d0:31:0e:3d:7f:1e:43:
         2f:92:ed:5b:1f:68:4e:c6:ed:30:a4:90:26:85:ca:f1:7a:ef:
         90:b3:aa:f1:57:44:7c:ed:c1:f2:7a:d7:4e:58:1b:99:93:ee:
         3e:07:fc:27:34:19:7c:bb:0f:37:c6:43:6f:4c:78:a4:90:80:
         f2:82:f5:69:68:b9:34:ed:c7:47:ed:d6:3c:f1:48:d5:69:b6:
         88:c7:fb:a6:4a:53:a7:c3:01:93:29:54:6e:1f:dc:2b:05:9c:
         6c:6f:2f:41:97:02:b8:b0:b3:5f:d9:fd:e3:9f:68:8c:67:4a:
         14:37:73:0e:1f:35:b7:d3:1d:8b:8e:8b:35:d6:f7:60:ce:7d:
         9a:f8:85:05:ff:0d:34:d7:65:5c:22:b2:f0:9c:59:1d:3e:0a:
         de:a7:fd:6b:30:62:6c:11:a7:f5:1d:b7:3f:57:25:4f:1e:58:
         e5:8b:95:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 17:14:52 2025 by rpki-client