This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.mft
File:                     2D7667AAA3EBB72048A79335E58D7FD1F8263830.mft (raw, json)
Hash identifier:          pP0qSwY1+lsjNxFq68eOnkXgTsNRO2RmSPoq1VzjUr8=
Subject key identifier:   60:00:B9:A5:DC:39:99:99:C3:62:B7:50:B1:37:25:86:D1:FA:8C:B6
Authority key identifier: 2D:76:67:AA:A3:EB:B7:20:48:A7:93:35:E5:8D:7F:D1:F8:26:38:30
Certificate issuer:       /CN=2D7667AAA3EBB72048A79335E58D7FD1F8263830
Certificate serial:       4DE70AA4B68359E14AFA11C5CC21410F1D966184
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.mft
Manifest number:          03B1
Signing time:             Wed 24 Dec 2025 02:50:00 +0000
Manifest this update:     Wed 24 Dec 2025 02:45:00 +0000
Manifest next update:     Thu 25 Dec 2025 02:50:00 +0000
Files and hashes:         1: 2D7667AAA3EBB72048A79335E58D7FD1F8263830.crl (hash: Cl0P3upmtrXG3ke1dDBZyUceAfhX/2p3fPKQ9Hbh7vI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.crl
                          rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 02:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e7:0a:a4:b6:83:59:e1:4a:fa:11:c5:cc:21:41:0f:1d:96:61:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D7667AAA3EBB72048A79335E58D7FD1F8263830
        Validity
            Not Before: Dec 24 02:45:00 2025 GMT
            Not After : Dec 31 02:50:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:12:76:ca:3f:5b:8a:27:41:e7:f1:e3:71:85:
                    68:41:63:b5:15:d6:7c:ad:f0:16:08:27:4f:f6:9c:
                    a2:9e:86:51:ef:28:f1:3f:5c:61:b6:e7:a2:ec:54:
                    3e:b5:51:ad:c4:73:5a:3f:07:32:f1:85:80:11:55:
                    26:66:bd:c7:6e:ca:3a:2e:9a:e1:6b:18:f3:e4:d3:
                    0d:0a:85:67:e6:69:93:44:0f:9e:fd:a6:42:fa:4a:
                    0c:d6:4b:c3:07:4f:d3:d3:97:1d:af:58:5b:87:e6:
                    f5:69:69:86:1e:cd:9f:e1:94:7f:58:27:31:9d:4f:
                    70:3d:17:ee:6d:79:0c:1e:18:92:74:aa:bc:6e:94:
                    93:71:2c:84:f9:79:14:73:ac:09:7e:88:1e:a8:b5:
                    ee:d7:f6:70:66:6e:de:19:80:07:25:9e:90:56:82:
                    d1:b8:04:55:88:56:70:06:f5:ea:87:08:d0:ba:a5:
                    6c:1e:56:e9:cc:57:85:64:fc:d2:77:e3:ae:fa:65:
                    ca:cc:31:e6:b4:69:2f:94:83:7d:6f:ed:7e:9b:f4:
                    97:1f:df:b4:da:a5:f9:82:dd:37:fa:ba:f4:c6:08:
                    c6:26:11:94:36:ee:86:09:fd:5e:96:df:98:18:79:
                    b8:00:94:0b:25:30:0b:fb:31:cd:4e:31:c9:43:a1:
                    3a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:00:B9:A5:DC:39:99:99:C3:62:B7:50:B1:37:25:86:D1:FA:8C:B6
            X509v3 Authority Key Identifier:
                keyid:2D:76:67:AA:A3:EB:B7:20:48:A7:93:35:E5:8D:7F:D1:F8:26:38:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:db:01:a1:36:09:3c:f9:ea:9d:68:c4:55:5c:93:9b:a3:df:
         ad:55:75:23:57:17:6d:2b:db:a9:b1:f6:c8:14:24:33:f3:25:
         2a:3d:61:28:6a:21:5d:1f:c6:23:5e:95:34:52:ad:a7:51:db:
         2e:48:6b:df:15:51:17:e4:58:6c:d0:5b:24:51:fa:a9:91:8a:
         12:b7:56:88:2c:26:72:39:1f:21:68:8c:7b:bb:02:5a:cb:b4:
         9b:2c:83:48:95:18:ba:80:ba:b2:00:d3:21:f8:34:e8:be:d4:
         40:ad:3e:60:e7:7a:74:ef:16:b5:e9:39:d0:37:4b:c9:3f:61:
         a3:1e:0c:2b:1b:23:48:09:4b:02:2a:e7:59:00:a5:c8:0f:6d:
         0f:cf:78:e0:20:81:de:ef:7c:21:74:c6:8e:bf:8e:50:5b:35:
         e5:ef:e8:6d:ab:62:42:19:a1:69:ce:3f:8d:6a:0a:60:74:ec:
         d1:af:88:e2:08:c4:53:b0:75:5b:f7:81:a9:fd:af:d3:a7:53:
         62:ba:0a:6d:46:77:a6:c1:ad:36:c2:47:76:e4:9c:ab:9e:af:
         48:9a:a1:a5:12:57:aa:4f:ef:5f:64:8c:7d:d3:cc:18:ae:da:
         35:0d:bf:f9:aa:a5:e8:cf:25:48:21:f7:aa:96:f1:99:be:23:
         7d:bd:38:57
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:21:48 2025 by rpki-client