This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/EF4027F97A62AA37CB4E993440497A1C0AB87F51.mft
File:                     EF4027F97A62AA37CB4E993440497A1C0AB87F51.mft (raw, json)
Hash identifier:          u4oaB1Wx6BQuzlkRnaFGM+eyQ12KIGUudl9zX+aKEKY=
Subject key identifier:   BD:C3:AF:05:E9:DA:73:1C:AC:5C:78:1B:B4:7F:0B:12:E4:76:74:BA
Authority key identifier: EF:40:27:F9:7A:62:AA:37:CB:4E:99:34:40:49:7A:1C:0A:B8:7F:51
Certificate issuer:       /CN=EF4027F97A62AA37CB4E993440497A1C0AB87F51
Certificate serial:       34EC7100F4B917A24A0A1703394009FA3E6F2C9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF4027F97A62AA37CB4E993440497A1C0AB87F51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/EF4027F97A62AA37CB4E993440497A1C0AB87F51.mft
Manifest number:          0179
Signing time:             Mon 22 Dec 2025 02:48:29 +0000
Manifest this update:     Mon 22 Dec 2025 02:43:29 +0000
Manifest next update:     Tue 23 Dec 2025 05:14:29 +0000
Files and hashes:         1: 3133382e3131372e3134342e302f32322d3332203d3e20323634323432.roa (hash: +U4DhVCuKc0XNVDbDCCzyQy+q2x3GWMEMF6rnMJiEyk=)
                          2: 323830343a323463633a3a2f33322d313238203d3e20323634323432.roa (hash: IE1mSt94cNaTXuqHHUGlx316JgJKc6nz86IT+1yrR20=)
                          3: EF4027F97A62AA37CB4E993440497A1C0AB87F51.crl (hash: +zElIO/K/o+TIf4vi7K8D9LcTXFXjS5ftesHovwPGbw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/EF4027F97A62AA37CB4E993440497A1C0AB87F51.crl
                          rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/EF4027F97A62AA37CB4E993440497A1C0AB87F51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF4027F97A62AA37CB4E993440497A1C0AB87F51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 05:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ec:71:00:f4:b9:17:a2:4a:0a:17:03:39:40:09:fa:3e:6f:2c:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF4027F97A62AA37CB4E993440497A1C0AB87F51
        Validity
            Not Before: Dec 22 02:43:29 2025 GMT
            Not After : Dec 23 05:14:29 2025 GMT
        Subject: CN=BDC3AF05E9DA731CAC5C781BB47F0B12E47674BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:17:e0:de:da:4c:ce:2a:32:f4:db:80:55:71:
                    75:a9:0e:9b:dc:a0:8c:be:45:68:a7:67:86:f6:49:
                    6c:83:b5:d6:df:d2:eb:02:bc:06:ce:13:29:26:dd:
                    cf:db:ba:37:35:96:fc:58:57:9a:b1:08:46:fd:24:
                    8a:52:be:2a:e4:0e:c1:7b:04:2e:6e:c5:a6:49:33:
                    8a:a3:f2:bf:96:3e:90:0f:2d:ce:a2:bd:a9:49:c3:
                    98:5c:8e:4a:bb:77:05:0f:79:e5:3a:4e:b5:00:9d:
                    f6:64:32:31:13:a5:25:40:62:48:25:1a:8f:82:a0:
                    ff:98:58:b6:d1:4f:fe:66:03:36:d6:a8:80:f7:13:
                    2f:74:b4:83:54:0a:47:b5:5f:9a:70:87:f2:62:57:
                    b0:7c:43:5a:3b:fa:5c:1e:c7:d7:83:e6:03:bc:fc:
                    4b:73:3c:38:2e:30:f4:ec:3d:ba:1a:1c:2c:92:87:
                    52:e5:33:94:8d:c9:38:a5:85:00:82:fb:ad:73:98:
                    e8:72:c1:a0:0f:3b:87:cd:c9:a5:a4:2d:7b:f1:96:
                    9b:c2:9c:35:bf:53:e1:48:d7:a5:4e:95:03:3b:21:
                    3a:5c:2f:b7:e0:ad:04:52:22:53:bb:3d:07:f1:d2:
                    e2:8f:16:23:a5:8d:45:85:19:01:e6:57:e0:b8:33:
                    de:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C3:AF:05:E9:DA:73:1C:AC:5C:78:1B:B4:7F:0B:12:E4:76:74:BA
            X509v3 Authority Key Identifier:
                keyid:EF:40:27:F9:7A:62:AA:37:CB:4E:99:34:40:49:7A:1C:0A:B8:7F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/EF4027F97A62AA37CB4E993440497A1C0AB87F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF4027F97A62AA37CB4E993440497A1C0AB87F51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/EF4027F97A62AA37CB4E993440497A1C0AB87F51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:fa:2c:4f:ae:e6:19:1a:46:8b:a6:49:36:8b:2b:30:c4:9f:
         30:6b:b6:10:7b:cc:97:2c:40:41:3f:14:76:4f:4b:49:6f:de:
         52:34:bb:e0:9e:4f:70:34:bf:ba:9a:84:a9:5d:1b:56:6e:13:
         cb:ea:fd:d0:d0:c6:f2:fc:07:34:26:96:71:3e:b6:c8:df:d3:
         31:9a:81:7d:d5:95:1b:bb:1b:54:b3:32:5e:96:b7:48:32:0e:
         0e:a4:dd:fa:a3:6a:0c:13:74:3b:cb:03:7b:69:d7:e3:04:6e:
         9e:7d:6d:01:56:ab:6b:47:f8:57:65:3d:69:3f:c9:9f:69:c6:
         ca:44:8e:04:00:ea:a5:b5:25:17:77:40:b4:0b:e8:b3:f2:88:
         dd:42:92:fa:e7:b2:d6:f5:3b:da:c0:26:02:d8:ec:97:cf:89:
         d6:17:ff:c9:47:b8:fc:db:60:f8:fd:5d:a0:62:2a:9e:d1:e8:
         c4:0a:80:f2:5d:dc:f8:a2:85:b4:63:b7:53:ff:ac:20:99:8d:
         3d:ae:13:23:98:23:60:10:b2:25:12:a4:4e:04:d5:59:7a:72:
         d6:23:57:26:20:17:78:c3:59:3a:27:78:d8:3c:6a:30:dd:3d:
         93:41:b9:38:9f:79:d8:23:6b:5e:57:2d:06:02:f5:b0:c2:16:
         44:bf:f8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:06:26 2025 by rpki-client