This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.mft
File:                     2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.mft (raw, json)
Hash identifier:          ymp++zpAM+dpLEIMRcuIoqCcvCZqQguVAzaj7LPBsQ4=
Subject key identifier:   3A:D7:77:09:F2:0F:50:7A:86:CD:13:B0:6A:DC:29:52:7E:C9:26:77
Authority key identifier: 2E:B5:29:B0:ED:AE:44:7E:3F:0B:C4:18:52:21:ED:03:94:CF:C7:DC
Certificate issuer:       /CN=2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC
Certificate serial:       370583A211EB51124112DE71070C4AAB6AE7EC28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.mft
Manifest number:          A9
Signing time:             Sat 20 Dec 2025 17:32:11 +0000
Manifest this update:     Sat 20 Dec 2025 17:27:11 +0000
Manifest next update:     Sun 21 Dec 2025 18:39:11 +0000
Files and hashes:         1: 323830343a313436383a3a2f33322d313238203d3e20323633333238.roa (hash: lIWoaWPRD7cTnw+iHZt+t0X5Bt1zi7EWPtPHof7Zl3k=)
                          2: 3139312e372e3138342e302f32322d3332203d3e20323633333238.roa (hash: pGVVnpwA9IoAsZgnwmaJqp55ATa2ZJZ30/bAb0g1/sw=)
                          3: 34352e3136342e3130362e302f32332d3233203d3e20323633333238.roa (hash: u/vopGCJFzIgr4pM4mboT2fF7srQmhjjZoCuTYSTkSw=)
                          4: 2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.crl (hash: gqJ7MCzzliM1nJ4Zu0zJNPqRMZbv9crXV524yoWKESE=)
                          5: 34352e3136342e3130342e302f32332d3233203d3e20323633333238.roa (hash: HBn5VaMhlqrTmJpKT+PRo6qs2/VuvKi2qwEb9jVf8O0=)
                          6: 3137302e302e35362e302f32322d3332203d3e20323633333238.roa (hash: c+6ShT2cDj596tzwAJb1tGtN0z8WzEUZhQJVwZUg4LE=)
                          7: 34352e3136342e3130342e302f32322d3232203d3e20323633333238.roa (hash: XYaGRbxo6wrGy2KGeIuScyrSvu8sxfpitGCnVNG9W7s=)
                          8: 34352e3136342e3130342e302f32322d3332203d3e20323633333238.roa (hash: +X7u6whcCRGbI9LnftQ/MZpKdzaYeOOJOmdNgLJmTlI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.crl
                          rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 18:39:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:05:83:a2:11:eb:51:12:41:12:de:71:07:0c:4a:ab:6a:e7:ec:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC
        Validity
            Not Before: Dec 20 17:27:11 2025 GMT
            Not After : Dec 21 18:39:11 2025 GMT
        Subject: CN=3AD77709F20F507A86CD13B06ADC29527EC92677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:04:c4:a0:36:fc:25:94:6e:fe:88:12:05:27:
                    f0:c4:7e:c5:6c:73:9c:5d:17:a7:9e:23:22:50:56:
                    ed:d1:12:d3:37:2b:93:6e:ea:c2:ad:89:27:19:d5:
                    e3:d7:24:76:92:84:c4:b8:56:ec:ae:5f:a3:0f:64:
                    ec:a3:b8:2e:ce:8a:3f:b7:a6:10:02:87:7a:3a:06:
                    df:c1:e7:0f:01:5d:86:13:e5:d3:83:07:94:6c:95:
                    23:08:41:3e:78:bd:8d:23:87:df:eb:8b:2d:e9:dc:
                    8b:a1:cf:92:65:d9:82:ee:09:96:7f:ac:c7:ae:0d:
                    f2:57:15:41:f5:96:85:c7:c1:16:ef:8f:61:9e:9f:
                    15:26:79:39:16:d6:c7:9f:b6:25:ba:06:29:2a:7c:
                    8a:6d:38:48:3f:36:26:21:f1:2c:97:17:15:40:04:
                    3e:00:5e:cb:eb:94:bc:5a:5d:08:40:93:54:37:d6:
                    6d:76:33:13:e8:82:8a:81:43:57:ea:68:e8:aa:34:
                    6b:71:fa:15:7c:4c:ab:b4:33:e3:b9:f8:a8:61:97:
                    61:5d:93:29:6e:1e:d8:f5:ac:be:eb:51:a4:91:7f:
                    f4:35:2d:2d:f4:bf:4c:be:5d:85:07:a5:26:d0:93:
                    94:2d:2e:47:e3:0c:7b:e9:20:fc:ad:37:40:a4:39:
                    f5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:D7:77:09:F2:0F:50:7A:86:CD:13:B0:6A:DC:29:52:7E:C9:26:77
            X509v3 Authority Key Identifier:
                keyid:2E:B5:29:B0:ED:AE:44:7E:3F:0B:C4:18:52:21:ED:03:94:CF:C7:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:dc:0e:15:f5:35:3a:f6:e4:c6:74:7f:42:3a:30:b0:fe:69:
         37:68:43:9b:0a:f7:9f:e7:ac:0a:d5:06:ea:ff:de:36:cd:4e:
         eb:64:3f:8a:f9:c7:a1:81:c6:3c:5e:9c:d0:5a:2f:a5:f9:0f:
         2d:65:cb:2b:63:f3:2f:3e:76:5d:a2:45:7d:13:c4:c6:65:d2:
         8d:02:88:32:d1:e9:01:f9:a5:b0:d2:0e:b6:cc:d3:f2:3c:57:
         1c:0f:79:a6:5d:c7:8c:04:e8:7c:33:65:ff:ed:13:6e:cb:d0:
         cd:6d:05:74:76:c7:67:4e:a8:67:08:d2:d8:50:d9:23:73:f1:
         41:95:43:88:85:34:0a:4c:45:16:72:40:4a:c1:27:db:d0:68:
         c6:b5:53:b4:75:ed:7a:3d:f3:97:cc:4f:9b:b0:62:89:da:d9:
         8f:80:bc:1d:e1:b5:b3:43:60:f1:54:af:e3:65:cc:f1:29:7a:
         38:ff:1e:26:02:9b:74:4e:f4:ef:06:bc:2c:ec:7f:a1:f7:1d:
         95:f9:c1:89:9a:08:87:0f:2e:f7:b3:d2:ca:e2:94:79:eb:87:
         2c:87:78:42:91:19:f7:e5:2e:e7:91:a8:a8:65:41:80:09:cb:
         b4:f4:64:f5:e4:c9:0c:ba:a3:59:46:f6:3f:05:eb:30:86:e8:
         af:10:74:48
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNwWDohHrURJBEt5xBwxKq2rn7CgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkVCNTI5QjBFREFFNDQ3RTNGMEJDNDE4NTIyMUVEMDM5
NENGQzdEQzAeFw0yNTEyMjAxNzI3MTFaFw0yNTEyMjExODM5MTFaMDMxMTAvBgNV
BAMTKDNBRDc3NzA5RjIwRjUwN0E4NkNEMTNCMDZBREMyOTUyN0VDOTI2NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFBMSgNvwllG7+iBIFJ/DEfsVs
c5xdF6eeIyJQVu3REtM3K5Nu6sKtiScZ1ePXJHaShMS4VuyuX6MPZOyjuC7Oij+3
phACh3o6Bt/B5w8BXYYT5dODB5RslSMIQT54vY0jh9/riy3p3Iuhz5Jl2YLuCZZ/
rMeuDfJXFUH1loXHwRbvj2GenxUmeTkW1seftiW6BikqfIptOEg/NiYh8SyXFxVA
BD4AXsvrlLxaXQhAk1Q31m12MxPogoqBQ1fqaOiqNGtx+hV8TKu0M+O5+Khhl2Fd
kyluHtj1rL7rUaSRf/Q1LS30v0y+XYUHpSbQk5QtLkfjDHvpIPytN0CkOfVFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUOtd3CfIPUHqGzROwatwpUn7JJncwHwYDVR0j
BBgwFoAULrUpsO2uRH4/C8QYUiHtA5TPx9wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEVMaGRDYWdEaFJkcnpydzZoNFlhMUNxSkZxY0FLbXdRVExRUzlVM0d5
MlgvMC8yRUI1MjlCMEVEQUU0NDdFM0YwQkM0MTg1MjIxRUQwMzk0Q0ZDN0RDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFQjUyOUIwRURBRTQ0N0Uz
RjBCQzQxODUyMjFFRDAzOTRDRkM3REMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NEVMaGRDYWdEaFJkcnpydzZoNFlhMUNxSkZxY0FLbXdRVExRUzlVM0d5MlgvMC8y
RUI1MjlCMEVEQUU0NDdFM0YwQkM0MTg1MjIxRUQwMzk0Q0ZDN0RDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAC9wOFfU1OvbkxnR/QjowsP5pN2hDmwr3n+esCtUG6v/eNs1O62Q/ivnHoYHG
PF6c0FovpfkPLWXLK2PzLz52XaJFfRPExmXSjQKIMtHpAfmlsNIOtszT8jxXHA95
pl3HjATofDNl/+0TbsvQzW0FdHbHZ06oZwjS2FDZI3PxQZVDiIU0CkxFFnJASsEn
29BoxrVTtHXtej3zl8xPm7BiidrZj4C8HeG1s0Ng8VSv42XM8Sl6OP8eJgKbdE70
7wa8LOx/ofcdlfnBiZoIhw8u97PSyuKUeeuHLId4QpEZ9+Uu55GoqGVBgAnLtPRk
9eTJDLqjWUb2PwXrMIborxB0SA==
-----END CERTIFICATE-----
Generated at Sat Dec 20 23:58:00 2025 by rpki-client