This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6BvzNfuhg4BaiHr5cuPoqXri5Lrrnpfqemkca1uWUsZo/0/2C9FA99864590E029577FEA8F4939F2B71325AE2.mft
File:                     2C9FA99864590E029577FEA8F4939F2B71325AE2.mft (raw, json)
Hash identifier:          OaUAaA32pRb42P7ROsaP3kEfTSlGJjdAhyDFC91BgoQ=
Subject key identifier:   08:8B:A3:92:19:73:58:DF:07:92:16:E0:0F:3C:F3:40:6E:3E:26:3D
Authority key identifier: 2C:9F:A9:98:64:59:0E:02:95:77:FE:A8:F4:93:9F:2B:71:32:5A:E2
Certificate issuer:       /CN=2C9FA99864590E029577FEA8F4939F2B71325AE2
Certificate serial:       7F772C4AC7642B03674F600F56DB72C138E9724F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9FA99864590E029577FEA8F4939F2B71325AE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BvzNfuhg4BaiHr5cuPoqXri5Lrrnpfqemkca1uWUsZo/0/2C9FA99864590E029577FEA8F4939F2B71325AE2.mft
Manifest number:          E3
Signing time:             Wed 24 Dec 2025 13:21:45 +0000
Manifest this update:     Wed 24 Dec 2025 13:16:45 +0000
Manifest next update:     Thu 25 Dec 2025 15:18:45 +0000
Files and hashes:         1: 2C9FA99864590E029577FEA8F4939F2B71325AE2.crl (hash: OeaZab85Dw/pr0sRdSoVzA/4dCIhgYB2CkwzGi0BD10=)
                          2: 323830343a316465303a3a2f33322d313238203d3e20323634343030.roa (hash: oX/RKylP4Nd8+kRf1CuAlqfjhQMDsNU+KfOIwew2RRA=)
                          3: 3133312e3136312e3230382e302f32322d3332203d3e20323634343030.roa (hash: Z+33HVjqzXyw6GWg6a+7Vv2QcTqWiKp5v0VHm16gQXs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6BvzNfuhg4BaiHr5cuPoqXri5Lrrnpfqemkca1uWUsZo/0/2C9FA99864590E029577FEA8F4939F2B71325AE2.crl
                          rsync://rpki-repo.registro.br/repo/6BvzNfuhg4BaiHr5cuPoqXri5Lrrnpfqemkca1uWUsZo/0/2C9FA99864590E029577FEA8F4939F2B71325AE2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9FA99864590E029577FEA8F4939F2B71325AE2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 15:18:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:77:2c:4a:c7:64:2b:03:67:4f:60:0f:56:db:72:c1:38:e9:72:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C9FA99864590E029577FEA8F4939F2B71325AE2
        Validity
            Not Before: Dec 24 13:16:45 2025 GMT
            Not After : Dec 25 15:18:45 2025 GMT
        Subject: CN=088BA392197358DF079216E00F3CF3406E3E263D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b7:76:d8:39:65:cb:67:7c:e9:c6:1b:07:c3:
                    32:d6:d4:c9:97:18:c5:e0:fc:db:9a:1a:b1:cc:80:
                    33:48:41:3d:65:24:54:1c:80:57:b5:60:ff:20:4f:
                    56:73:46:e2:24:35:6a:d9:e7:5d:a5:8c:53:f5:db:
                    8c:32:39:56:e3:b2:d6:54:47:fe:47:46:42:ed:bd:
                    59:a7:de:31:90:3b:6b:a8:49:fe:89:06:10:74:f5:
                    2b:43:77:83:b5:5d:f9:8c:39:5b:37:7d:57:63:db:
                    b2:90:61:35:7f:c3:00:81:a1:44:d2:17:5a:2d:86:
                    b3:30:0e:16:00:9d:af:dd:ae:9d:e4:41:8b:ec:7f:
                    45:3c:f6:8c:d1:2a:3e:e8:de:e8:7b:d8:d3:51:af:
                    bf:3a:6c:47:90:3e:72:e5:8e:da:61:6a:96:85:74:
                    a4:d2:92:7a:07:63:be:7c:21:16:86:61:fb:66:c2:
                    ac:41:c8:2c:d1:03:59:66:18:f9:63:f4:2d:a2:38:
                    37:42:d7:e6:cc:4e:f5:02:2a:f5:34:b6:93:12:b4:
                    ed:95:dc:53:fa:c4:00:8c:45:bd:ea:82:a6:45:bc:
                    7a:5a:ab:62:77:0c:9e:2d:0f:f8:44:9b:5a:bd:cd:
                    55:85:28:f0:61:71:f9:0e:c0:ef:d5:7a:32:92:35:
                    f5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:8B:A3:92:19:73:58:DF:07:92:16:E0:0F:3C:F3:40:6E:3E:26:3D
            X509v3 Authority Key Identifier:
                keyid:2C:9F:A9:98:64:59:0E:02:95:77:FE:A8:F4:93:9F:2B:71:32:5A:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BvzNfuhg4BaiHr5cuPoqXri5Lrrnpfqemkca1uWUsZo/0/2C9FA99864590E029577FEA8F4939F2B71325AE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9FA99864590E029577FEA8F4939F2B71325AE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BvzNfuhg4BaiHr5cuPoqXri5Lrrnpfqemkca1uWUsZo/0/2C9FA99864590E029577FEA8F4939F2B71325AE2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:45:73:81:70:c6:67:0c:1e:ae:e5:70:39:8e:7a:f0:73:53:
         6b:90:cc:48:e6:98:1b:07:90:44:21:2a:e3:f0:9b:c2:09:cf:
         0e:14:5a:0f:73:b7:db:75:f0:19:9b:ea:66:df:44:85:25:92:
         31:e5:01:af:7b:da:1a:65:64:49:14:58:0e:66:07:f6:c8:d0:
         d7:6b:84:5a:c2:57:eb:da:ae:9b:68:03:e3:20:92:55:fe:d4:
         50:cf:2c:6b:c0:22:9e:8c:90:cc:31:2e:9c:c4:b1:86:43:2b:
         87:87:bd:1e:85:12:79:09:6f:89:0a:7c:c4:70:02:9b:99:be:
         9c:ac:b0:93:2d:95:72:00:67:45:a6:c4:23:50:44:0f:88:93:
         35:01:c2:9a:ec:13:7b:bc:0f:06:fc:1d:5b:db:63:9e:66:2c:
         69:a4:15:93:cc:50:7f:d0:a5:3c:6f:6f:39:39:93:1f:c3:c8:
         b7:c1:61:dc:ae:07:fa:13:6f:49:ec:ac:ee:99:22:d4:aa:bf:
         b0:10:2d:7f:56:47:f7:4c:11:d3:30:dd:22:c6:8d:9f:20:2f:
         f6:7f:b8:8e:25:de:8d:a3:2e:9f:6b:a3:fd:9e:60:94:92:8f:
         83:a8:80:72:f5:60:22:88:1c:47:86:22:ca:74:de:b5:95:50:
         2d:de:64:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 16:06:08 2025 by rpki-client