This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/25L2PHHSqQUqb4YqGRq2iFWgczHTJrH6HtxdW9xVHNBj/0/2917CE017809B6041B895DCC93EFF28388A27E5E.mft
File:                     2917CE017809B6041B895DCC93EFF28388A27E5E.mft (raw, json)
Hash identifier:          WtQ2XPooUJ/E+OSZvQy4trDDI+oMq+YZhwRyv2OmO7w=
Subject key identifier:   20:6E:1D:C4:EC:F8:20:AC:15:D9:C6:96:4C:39:E0:12:33:EE:DB:6F
Authority key identifier: 29:17:CE:01:78:09:B6:04:1B:89:5D:CC:93:EF:F2:83:88:A2:7E:5E
Certificate issuer:       /CN=2917CE017809B6041B895DCC93EFF28388A27E5E
Certificate serial:       67D4FE4C7470B139FCC8DDB9AD2B4FA1C665FE33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2917CE017809B6041B895DCC93EFF28388A27E5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25L2PHHSqQUqb4YqGRq2iFWgczHTJrH6HtxdW9xVHNBj/0/2917CE017809B6041B895DCC93EFF28388A27E5E.mft
Manifest number:          97
Signing time:             Wed 24 Dec 2025 11:18:06 +0000
Manifest this update:     Wed 24 Dec 2025 11:13:06 +0000
Manifest next update:     Thu 25 Dec 2025 13:38:06 +0000
Files and hashes:         1: 2917CE017809B6041B895DCC93EFF28388A27E5E.crl (hash: 3urTEv4O8dwKXL/XHKk9bOljzWWYTgQfpBVIXN5NiMY=)
                          2: 32342e3135322e302e302f32322d3332203d3e20323639343831.roa (hash: mrYj5PfHpVIg25olFqGJ7bb6lin+ykVvEDj0EOB/IzM=)
                          3: 34352e3138372e3138302e302f32322d3332203d3e20323639343831.roa (hash: QlSCqtGUYaZI4ilpEf6rQRrlbybda/U4cpUItDoNsjA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25L2PHHSqQUqb4YqGRq2iFWgczHTJrH6HtxdW9xVHNBj/0/2917CE017809B6041B895DCC93EFF28388A27E5E.crl
                          rsync://rpki-repo.registro.br/repo/25L2PHHSqQUqb4YqGRq2iFWgczHTJrH6HtxdW9xVHNBj/0/2917CE017809B6041B895DCC93EFF28388A27E5E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2917CE017809B6041B895DCC93EFF28388A27E5E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 13:38:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:d4:fe:4c:74:70:b1:39:fc:c8:dd:b9:ad:2b:4f:a1:c6:65:fe:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2917CE017809B6041B895DCC93EFF28388A27E5E
        Validity
            Not Before: Dec 24 11:13:06 2025 GMT
            Not After : Dec 25 13:38:06 2025 GMT
        Subject: CN=206E1DC4ECF820AC15D9C6964C39E01233EEDB6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6e:22:26:dc:54:e0:4d:d3:6b:9e:2b:3c:8e:
                    df:8b:01:1b:2a:b2:82:d0:4a:51:56:64:85:0b:61:
                    b9:ef:51:b4:3b:e6:84:c4:1b:53:07:88:d7:e1:a5:
                    96:d5:1b:d9:e2:f7:ba:7b:75:38:62:83:a7:4f:d3:
                    2e:68:ee:66:55:6e:14:a7:11:96:a3:58:c0:86:5f:
                    3d:26:e9:95:b6:3a:9a:f5:b4:a2:3a:20:d2:91:a5:
                    e9:e5:65:05:2f:b5:b6:42:1b:58:36:01:c2:22:07:
                    5e:a9:39:d6:1d:83:f5:70:ca:fa:50:54:0d:76:4c:
                    60:76:2d:73:6b:aa:13:48:2e:f8:3d:cd:1a:2d:bc:
                    40:75:38:80:3f:e7:28:30:6f:25:73:b0:7f:2c:2b:
                    af:e3:5c:1a:5f:ee:5a:57:ce:6d:8b:4d:88:c6:c4:
                    b6:c4:e4:51:13:a0:fa:c4:75:bb:70:af:0e:98:a6:
                    74:5d:81:f5:04:41:76:a5:de:42:f1:ca:00:5e:bf:
                    77:57:8e:aa:a5:8f:d6:1d:79:ff:d7:5d:23:a2:30:
                    27:23:ab:5f:55:aa:f4:c0:cd:50:55:0f:c5:a3:18:
                    2e:78:77:d0:65:bd:5a:d7:3d:a7:36:f2:6a:ba:60:
                    51:30:1a:df:7c:b5:92:06:2c:16:91:a7:5f:6c:a6:
                    2b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6E:1D:C4:EC:F8:20:AC:15:D9:C6:96:4C:39:E0:12:33:EE:DB:6F
            X509v3 Authority Key Identifier:
                keyid:29:17:CE:01:78:09:B6:04:1B:89:5D:CC:93:EF:F2:83:88:A2:7E:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25L2PHHSqQUqb4YqGRq2iFWgczHTJrH6HtxdW9xVHNBj/0/2917CE017809B6041B895DCC93EFF28388A27E5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2917CE017809B6041B895DCC93EFF28388A27E5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25L2PHHSqQUqb4YqGRq2iFWgczHTJrH6HtxdW9xVHNBj/0/2917CE017809B6041B895DCC93EFF28388A27E5E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:d3:e0:4f:5b:89:a3:77:d8:81:03:29:a8:ca:44:d0:cc:7a:
         c4:a2:2b:6b:9b:e2:0b:f4:25:2a:1f:9e:f2:ef:c9:d8:72:c4:
         4c:63:c1:2d:4c:9b:56:1d:28:63:a4:d9:19:18:fe:fa:0f:a9:
         33:ff:c5:f9:33:1a:71:a6:27:e6:52:1b:3e:15:d8:23:a6:0c:
         9d:b7:93:ba:78:ce:ba:c7:09:46:59:8e:db:c4:ea:41:2b:a3:
         a9:7e:12:88:6d:60:ba:f6:1f:82:f3:3d:c5:ab:a8:68:a3:82:
         58:33:49:81:f4:88:b5:2d:6b:ef:c0:6c:a8:9b:e1:00:47:e9:
         c4:de:28:0f:36:1d:58:29:c4:12:95:11:b0:18:64:fc:43:82:
         42:23:fa:27:9b:98:cf:81:1b:b2:0f:57:1b:9a:83:cf:4a:be:
         9f:dd:f7:d1:11:ee:53:a4:5e:af:9d:ae:20:9b:be:5a:a2:4e:
         f9:4a:a8:d6:ce:e2:80:86:2b:4e:ba:28:8c:57:b5:97:44:21:
         6c:e5:79:3b:c2:8d:ad:a9:7e:dd:b8:ee:3e:82:87:6d:a7:2d:
         eb:a3:d5:ed:32:bd:74:97:60:8f:61:ea:ac:c7:cc:ed:43:80:
         b9:d8:62:e8:18:a2:d7:d4:a6:cf:d1:64:0a:4c:7d:4e:86:d9:
         e2:eb:cf:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:29:10 2025 by rpki-client