This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.mft
File:                     2A2D171F50E53E6487FE9AC612997F616E111F59.mft (raw, json)
Hash identifier:          Fho1Zuwy8OI1pDf1GGzMq+TeX6RO7+MCm/Yoag1wlao=
Subject key identifier:   AE:21:25:6F:3F:99:53:F7:4B:80:83:E0:2C:67:B3:5F:3C:C7:53:4B
Authority key identifier: 2A:2D:17:1F:50:E5:3E:64:87:FE:9A:C6:12:99:7F:61:6E:11:1F:59
Certificate issuer:       /CN=2A2D171F50E53E6487FE9AC612997F616E111F59
Certificate serial:       754194184A6D536D3056D656D8D9DAFB1115402D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A2D171F50E53E6487FE9AC612997F616E111F59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.mft
Manifest number:          3C
Signing time:             Mon 15 Dec 2025 18:30:55 +0000
Manifest this update:     Mon 15 Dec 2025 18:25:55 +0000
Manifest next update:     Tue 16 Dec 2025 20:50:55 +0000
Files and hashes:         1: 323830343a376334303a3430303a3a2f34302d3430203d3e20323731343834.roa (hash: TFcDjtx6//UfjHrYWfUHw80DG3xe7v+eWyGykRUS6AM=)
                          2: 323830343a376334303a383030303a3a2f34302d3430203d3e20323731343834.roa (hash: WPAvjwj5Ob5x5Y4/XHcKHyOhP8jUseedMfyHODlE7zQ=)
                          3: 3138312e3233332e31362e302f32332d3233203d3e20323731343834.roa (hash: gKMoHy+rODKPUAf8QM5/Ap55BaDN4Q3v0d6D/qgH98o=)
                          4: 3138312e3233332e31382e302f32332d3233203d3e20323731343834.roa (hash: j6SbIxVSu1bsT170jIGIovQddlhPv/2q+jfCF1LtDeI=)
                          5: 3138312e3233332e31362e302f32342d3234203d3e20323731343834.roa (hash: H3Ta+a74iESvXKsBavQB8MADzD0plamDdxORJTG+4Bo=)
                          6: 323830343a376334303a3130303a3a2f34302d3430203d3e20323731343834.roa (hash: da714LbJ/u7Te0j7UsVMjQoOsI/HKoynpRSszQ55V+c=)
                          7: 323830343a376334303a3530303a3a2f34302d3430203d3e20323731343834.roa (hash: qOcpib71FCIgJuWP11hIWR0xsdWC5aYwUouS6GK4PHM=)
                          8: 3138312e3233332e31382e302f32342d3234203d3e20323731343834.roa (hash: 8HFNj0UvH/mT6+am50eZsPlT2RkGuhVCAxpux8S88Tk=)
                          9: 323830343a376334303a3a2f33322d3332203d3e20323731343834.roa (hash: qs+i4/FHT6E8OpWubLPRLNoqjZKQ0j2e6KGbpWPi0hA=)
                          10: 3138312e3233332e31362e302f32322d3232203d3e20323731343834.roa (hash: sZ7mauTccR6Vr33eBysyROpFZqy4NIdemkOk7+qk1mc=)
                          11: 323830343a376334303a3330303a3a2f34302d3430203d3e20323731343834.roa (hash: VYPJmR+bSgKh4ZSmIyNc+43+bncYaleMRi0FjrTAjQc=)
                          12: 323830343a376334303a3230303a3a2f34302d3430203d3e20323731343834.roa (hash: vcrlJvntgLlMme52fDMwOsL8kYlF7Ez8P7dfDopf8bk=)
                          13: 3138312e3233332e31392e302f32342d3234203d3e20323731343834.roa (hash: rfuOi95nQx4MtMO9tjUGqSZ/3TsvDGgZk+ZmNoXGy5A=)
                          14: 3138312e3233332e31372e302f32342d3234203d3e20323731343834.roa (hash: +lsjrk2UIScYi8SDIHluwvVTWNsZRS6AIaGL7QvTJZc=)
                          15: 2A2D171F50E53E6487FE9AC612997F616E111F59.crl (hash: lp2C3Z7m+kD/Qb63RvKxZeaUoXz0qf/ovr/Xz3a6unY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.crl
                          rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A2D171F50E53E6487FE9AC612997F616E111F59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Dec 2025 20:50:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:41:94:18:4a:6d:53:6d:30:56:d6:56:d8:d9:da:fb:11:15:40:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2D171F50E53E6487FE9AC612997F616E111F59
        Validity
            Not Before: Dec 15 18:25:55 2025 GMT
            Not After : Dec 16 20:50:55 2025 GMT
        Subject: CN=AE21256F3F9953F74B8083E02C67B35F3CC7534B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f5:63:6c:83:b7:a9:49:02:a2:0a:28:8f:6c:
                    49:00:f4:ea:77:ca:66:2b:1f:09:20:04:b4:b6:e5:
                    ae:90:04:3d:43:f3:7b:b4:f5:2a:d1:0b:36:2c:87:
                    34:fb:0e:85:94:42:da:a7:a2:0c:1b:5b:45:c8:95:
                    c3:64:08:6b:96:ab:fa:fb:aa:d8:11:b8:cb:40:ec:
                    2a:ba:4a:ba:c3:29:d2:e8:c0:58:fb:05:fa:ca:ed:
                    84:8c:15:b3:35:87:0b:99:cd:98:17:26:83:e9:10:
                    b1:e1:e2:fc:16:74:4a:de:e4:8c:f6:f1:64:a0:0a:
                    02:44:cd:af:92:61:f1:32:3a:4d:48:34:57:5b:b8:
                    eb:d3:b1:2d:da:86:18:44:80:5b:c0:09:e3:df:be:
                    3d:5c:19:d8:39:ce:db:ff:68:76:b5:3d:cc:72:06:
                    e5:18:ae:b9:a0:23:39:81:61:19:09:d4:f1:e0:1a:
                    83:f7:81:c8:cd:5d:1d:46:cb:6a:09:60:8b:a1:9c:
                    68:30:49:f8:22:99:a2:50:d1:76:07:f5:75:18:22:
                    7c:b3:07:2c:b7:a2:e1:4e:c8:94:0d:36:b0:ec:c3:
                    d1:e4:13:02:b8:0f:f4:e4:6f:db:14:73:be:e9:2c:
                    62:8a:47:a9:88:e3:96:4b:db:84:d7:7b:b5:04:da:
                    48:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:21:25:6F:3F:99:53:F7:4B:80:83:E0:2C:67:B3:5F:3C:C7:53:4B
            X509v3 Authority Key Identifier:
                keyid:2A:2D:17:1F:50:E5:3E:64:87:FE:9A:C6:12:99:7F:61:6E:11:1F:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A2D171F50E53E6487FE9AC612997F616E111F59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:f8:ca:f8:ba:f2:5a:18:b4:00:ad:b0:2b:04:06:38:87:11:
         84:46:bf:ac:22:ed:c8:ea:41:96:32:fc:67:24:e0:94:78:00:
         e7:d4:cf:8f:72:f4:33:fa:36:74:b3:2f:17:30:65:a3:76:56:
         07:13:50:55:8b:a3:5a:e6:79:dc:d4:9d:44:40:d1:dd:b5:31:
         b0:86:94:64:2f:d7:67:81:ed:1d:dc:02:1d:c0:85:b3:22:5e:
         25:5a:17:a6:26:73:6b:fb:ba:84:55:0b:97:f2:fc:c7:e7:e5:
         2c:0d:25:31:bf:f6:8d:5e:ad:93:83:8f:af:7e:76:37:76:2a:
         8e:6d:d0:87:9b:c2:d7:81:07:e3:bd:ce:d7:7d:a4:cc:39:91:
         bd:49:8b:b5:ca:a5:54:ae:4c:00:ec:8f:76:b7:a7:0a:01:45:
         9e:96:2c:af:89:6f:2b:92:0d:8d:8c:86:46:7b:e9:30:6c:de:
         ce:23:ee:dd:d9:c1:09:e8:4b:a4:30:9b:d4:0b:54:c6:79:88:
         47:21:2d:de:5b:38:bd:f9:43:53:76:5b:5f:8e:3d:4d:78:c9:
         cd:df:6d:22:bf:38:dd:f1:3f:70:1e:ee:43:cd:0f:4d:d3:0f:
         d8:47:b7:6c:a4:84:51:d2:b0:ed:b6:e7:61:3f:d4:85:58:4c:
         a4:e8:32:ba
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUdUGUGEptU20wVtZW2Nna+xEVQC0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRDE3MUY1MEU1M0U2NDg3RkU5QUM2MTI5OTdGNjE2
RTExMUY1OTAeFw0yNTEyMTUxODI1NTVaFw0yNTEyMTYyMDUwNTVaMDMxMTAvBgNV
BAMTKEFFMjEyNTZGM0Y5OTUzRjc0QjgwODNFMDJDNjdCMzVGM0NDNzUzNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCH9WNsg7epSQKiCiiPbEkA9Op3
ymYrHwkgBLS25a6QBD1D83u09SrRCzYshzT7DoWUQtqnogwbW0XIlcNkCGuWq/r7
qtgRuMtA7Cq6SrrDKdLowFj7BfrK7YSMFbM1hwuZzZgXJoPpELHh4vwWdEre5Iz2
8WSgCgJEza+SYfEyOk1INFdbuOvTsS3ahhhEgFvACePfvj1cGdg5ztv/aHa1Pcxy
BuUYrrmgIzmBYRkJ1PHgGoP3gcjNXR1Gy2oJYIuhnGgwSfgimaJQ0XYH9XUYInyz
Byy3ouFOyJQNNrDsw9HkEwK4D/Tkb9sUc77pLGKKR6mI45ZL24TXe7UE2kg7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUriElbz+ZU/dLgIPgLGezXzzHU0swHwYDVR0j
BBgwFoAUKi0XH1DlPmSH/prGEpl/YW4RH1kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFZyUGRDckJwdURwZnFVeWlKYkYyaWpSdmp0Y0tQclhVa1RWN3lMdmdv
azQvMC8yQTJEMTcxRjUwRTUzRTY0ODdGRTlBQzYxMjk5N0Y2MTZFMTExRjU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBMkQxNzFGNTBFNTNFNjQ4
N0ZFOUFDNjEyOTk3RjYxNkUxMTFGNTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NFZyUGRDckJwdURwZnFVeWlKYkYyaWpSdmp0Y0tQclhVa1RWN3lMdmdvazQvMC8y
QTJEMTcxRjUwRTUzRTY0ODdGRTlBQzYxMjk5N0Y2MTZFMTExRjU5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFPjK+LryWhi0AK2wKwQGOIcRhEa/rCLtyOpBljL8ZyTglHgA59TPj3L0M/o2
dLMvFzBlo3ZWBxNQVYujWuZ53NSdREDR3bUxsIaUZC/XZ4HtHdwCHcCFsyJeJVoX
piZza/u6hFULl/L8x+flLA0lMb/2jV6tk4OPr352N3Yqjm3Qh5vC14EH473O132k
zDmRvUmLtcqlVK5MAOyPdrenCgFFnpYsr4lvK5INjYyGRnvpMGzeziPu3dnBCehL
pDCb1AtUxnmIRyEt3ls4vflDU3ZbX449TXjJzd9tIr843fE/cB7uQ80PTdMP2Ee3
bKSEUdKw7bbnYT/UhVhMpOgyug==
-----END CERTIFICATE-----
Generated at Tue Dec 16 07:59:18 2025 by rpki-client