This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2b3TUZRcH5Q5Ki66vLw9T1z5ojCfmQQhRkd2hq19WbMa/0/EE3D63520B9079DE7C43929F1B5D5F6B10FBB262.mft
File:                     EE3D63520B9079DE7C43929F1B5D5F6B10FBB262.mft (raw, json)
Hash identifier:          ovu/Q14oB4OXywBxTukVJVpSWGVnAjLrFxymYGHe7yo=
Subject key identifier:   46:02:D6:8B:F0:04:A7:C0:CF:21:C0:CD:A3:DA:59:FB:AA:46:D7:1E
Authority key identifier: EE:3D:63:52:0B:90:79:DE:7C:43:92:9F:1B:5D:5F:6B:10:FB:B2:62
Certificate issuer:       /CN=EE3D63520B9079DE7C43929F1B5D5F6B10FBB262
Certificate serial:       70CF439254466F51920FF59BD1EF3F53E8955C59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE3D63520B9079DE7C43929F1B5D5F6B10FBB262.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2b3TUZRcH5Q5Ki66vLw9T1z5ojCfmQQhRkd2hq19WbMa/0/EE3D63520B9079DE7C43929F1B5D5F6B10FBB262.mft
Manifest number:          031C
Signing time:             Mon 22 Dec 2025 15:44:09 +0000
Manifest this update:     Mon 22 Dec 2025 15:39:09 +0000
Manifest next update:     Tue 23 Dec 2025 16:24:09 +0000
Files and hashes:         1: EE3D63520B9079DE7C43929F1B5D5F6B10FBB262.crl (hash: jQsroch++khM827r3GEyZ/4S3+HZZpzL1rrfoU3faRE=)
                          2: 3137392e34322e36342e302f32322d3234203d3e20323733353735.roa (hash: 4LGPVWasegkM9rDZI9/4/tAJxF5hz8Kyf9IiZ6YGfKM=)
                          3: 323830343a383930343a3a2f33322d3334203d3e20323733353735.roa (hash: hYzsnRX/84q5nPY0n3UK7LiipylX0Q2VaAfzB1fCghQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2b3TUZRcH5Q5Ki66vLw9T1z5ojCfmQQhRkd2hq19WbMa/0/EE3D63520B9079DE7C43929F1B5D5F6B10FBB262.crl
                          rsync://rpki-repo.registro.br/repo/2b3TUZRcH5Q5Ki66vLw9T1z5ojCfmQQhRkd2hq19WbMa/0/EE3D63520B9079DE7C43929F1B5D5F6B10FBB262.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE3D63520B9079DE7C43929F1B5D5F6B10FBB262.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 16:24:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:cf:43:92:54:46:6f:51:92:0f:f5:9b:d1:ef:3f:53:e8:95:5c:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE3D63520B9079DE7C43929F1B5D5F6B10FBB262
        Validity
            Not Before: Dec 22 15:39:09 2025 GMT
            Not After : Dec 23 16:24:09 2025 GMT
        Subject: CN=4602D68BF004A7C0CF21C0CDA3DA59FBAA46D71E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:90:df:03:24:a8:f7:5c:96:fc:af:44:a9:b7:
                    0a:78:eb:59:0e:74:36:30:87:55:af:e4:bd:a4:27:
                    3b:2c:5b:20:58:54:b3:3a:ce:e3:c4:94:f9:35:29:
                    2d:26:da:7c:10:4a:87:b0:cb:71:dd:74:0e:10:c7:
                    b5:77:5a:55:5d:29:44:0c:7c:7c:17:b5:d8:ac:9c:
                    85:68:ec:59:12:0d:ad:e8:73:d3:a7:4c:04:9e:aa:
                    76:19:74:7b:f3:2e:b6:7d:d6:1d:45:4c:ec:0d:09:
                    dd:6e:9b:e7:a1:24:a6:6e:6e:e3:4f:bd:22:09:40:
                    d6:4a:3f:23:66:e7:a1:3c:dd:61:3a:f3:02:a6:b1:
                    dc:a1:0a:f3:d2:b3:78:7b:fa:93:de:00:f9:24:52:
                    18:5b:cf:52:2c:6d:29:d4:f1:82:26:4c:63:c4:64:
                    28:06:29:5c:fd:31:bd:7b:92:f5:96:be:46:73:20:
                    5f:53:12:d6:14:3d:1a:4f:dd:ef:3d:51:e4:73:69:
                    4a:27:cf:63:17:cf:e6:26:ad:51:b6:f5:85:51:31:
                    bf:5e:07:86:08:85:fd:ae:76:7f:64:44:bc:bd:b7:
                    04:50:b3:cb:e5:62:80:57:8c:be:de:64:4b:2a:bf:
                    40:cb:b0:a0:c6:98:41:6d:51:02:62:6f:9b:a7:99:
                    a9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:02:D6:8B:F0:04:A7:C0:CF:21:C0:CD:A3:DA:59:FB:AA:46:D7:1E
            X509v3 Authority Key Identifier:
                keyid:EE:3D:63:52:0B:90:79:DE:7C:43:92:9F:1B:5D:5F:6B:10:FB:B2:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2b3TUZRcH5Q5Ki66vLw9T1z5ojCfmQQhRkd2hq19WbMa/0/EE3D63520B9079DE7C43929F1B5D5F6B10FBB262.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE3D63520B9079DE7C43929F1B5D5F6B10FBB262.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2b3TUZRcH5Q5Ki66vLw9T1z5ojCfmQQhRkd2hq19WbMa/0/EE3D63520B9079DE7C43929F1B5D5F6B10FBB262.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:50:16:0d:4a:4e:af:c0:45:c6:86:44:b7:41:22:d3:53:e4:
         72:44:4e:80:1a:d2:a6:77:be:c4:d1:02:6c:66:cc:df:30:e9:
         9a:9b:0b:ef:e1:68:bd:43:35:6d:89:ae:b9:44:58:1e:16:91:
         c2:8d:6a:6d:58:34:4c:76:23:77:bd:08:b7:1d:ed:c7:bb:38:
         cd:03:8d:72:05:1a:42:9d:11:9e:94:07:49:0b:89:c2:ae:19:
         1a:32:03:ad:99:5f:79:e2:c3:a4:ae:da:d9:04:1a:43:1a:f7:
         8b:5a:9a:91:37:cb:06:a7:9a:8c:74:c9:5a:db:ba:1a:85:4d:
         58:d0:44:70:1d:f3:24:54:3b:18:37:80:5a:01:4f:64:80:ad:
         55:cf:60:2c:25:bc:5f:a8:36:33:61:97:5a:e4:2b:c7:80:16:
         41:0d:e8:d8:3d:3d:7b:70:9f:e3:bc:40:b0:da:1e:10:58:a5:
         e8:5c:51:84:e3:b7:14:16:8e:29:b4:9a:77:b1:99:00:3a:e8:
         93:2e:d6:9a:01:be:a0:fc:d0:ab:56:80:4a:4e:7a:b8:68:31:
         f2:38:29:af:01:cd:cd:2d:19:bc:10:97:4c:8b:fb:79:23:bc:
         40:76:0c:3e:0e:5a:60:57:ec:ec:c9:f6:2f:03:0f:6f:20:96:
         da:c4:a2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----