This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7T51mrW3foQi5vJibr1zhiseizBULjN8YKXomHczvbdL/0/2BD48FEDF99502AA90CEB1258214DB7F00A373AB.mft
File:                     2BD48FEDF99502AA90CEB1258214DB7F00A373AB.mft (raw, json)
Hash identifier:          il2OW4p/DUGc7/e4PIcakhbiNGzZLbiiRlRmRbo377Y=
Subject key identifier:   30:9B:5B:32:8F:6C:74:18:95:33:3E:9D:6C:E5:70:01:F6:BF:80:67
Authority key identifier: 2B:D4:8F:ED:F9:95:02:AA:90:CE:B1:25:82:14:DB:7F:00:A3:73:AB
Certificate issuer:       /CN=2BD48FEDF99502AA90CEB1258214DB7F00A373AB
Certificate serial:       01BC0DFBE2F907F032A2857C8B6587DB35E460A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD48FEDF99502AA90CEB1258214DB7F00A373AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7T51mrW3foQi5vJibr1zhiseizBULjN8YKXomHczvbdL/0/2BD48FEDF99502AA90CEB1258214DB7F00A373AB.mft
Manifest number:          011C
Signing time:             Tue 23 Dec 2025 05:14:01 +0000
Manifest this update:     Tue 23 Dec 2025 05:09:01 +0000
Manifest next update:     Wed 24 Dec 2025 06:18:01 +0000
Files and hashes:         1: 2BD48FEDF99502AA90CEB1258214DB7F00A373AB.crl (hash: f8d5LYTFYjA4tg1pGZMgYZ9v1y0UwPctnNUCEP93S2k=)
                          2: 3137372e3132392e3232302e302f32322d3332203d3e20323731363434.roa (hash: ptIAEI9JmYgLEgDsDekVmfQdWjUKmrVkfNlDDTwbKz4=)
                          3: 323830343a376562633a3a2f33322d313238203d3e20323731363434.roa (hash: awKApxcU3/DtnCBqdvCgmgO9MlwvI40k5WzdBQDk/NE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7T51mrW3foQi5vJibr1zhiseizBULjN8YKXomHczvbdL/0/2BD48FEDF99502AA90CEB1258214DB7F00A373AB.crl
                          rsync://rpki-repo.registro.br/repo/7T51mrW3foQi5vJibr1zhiseizBULjN8YKXomHczvbdL/0/2BD48FEDF99502AA90CEB1258214DB7F00A373AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD48FEDF99502AA90CEB1258214DB7F00A373AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 06:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:bc:0d:fb:e2:f9:07:f0:32:a2:85:7c:8b:65:87:db:35:e4:60:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BD48FEDF99502AA90CEB1258214DB7F00A373AB
        Validity
            Not Before: Dec 23 05:09:01 2025 GMT
            Not After : Dec 24 06:18:01 2025 GMT
        Subject: CN=309B5B328F6C741895333E9D6CE57001F6BF8067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:94:14:de:a6:33:10:f4:6c:b2:27:78:21:fa:
                    fa:e5:85:ba:9f:19:63:96:56:3e:a7:c3:08:22:b1:
                    0b:bf:7b:45:4e:8e:88:54:b4:a3:e2:a7:d6:0a:cf:
                    28:0e:bf:57:c8:42:f7:e2:97:18:c1:c2:21:e5:56:
                    1b:23:fd:c2:da:9d:cf:0b:2a:2a:03:85:ac:aa:e3:
                    de:c7:6d:31:74:82:d7:0b:17:b6:ee:31:18:87:9a:
                    a8:66:5f:03:da:af:b2:bb:18:23:55:82:97:aa:f5:
                    68:0d:41:47:fb:2d:a0:b3:0d:3d:da:3d:81:bf:e6:
                    c3:ea:26:8d:eb:01:bd:ec:b4:b8:f5:68:87:f6:a0:
                    62:a2:69:8c:74:7d:6a:cd:51:b0:68:82:e4:61:f5:
                    be:e0:ea:50:00:53:7e:93:6a:a7:19:78:2b:2d:37:
                    61:fc:2c:6c:f4:dc:57:01:44:7e:e4:b0:8e:7c:2d:
                    08:d1:ac:fa:4f:5d:f4:66:4b:96:39:16:cd:03:a7:
                    8e:8f:11:98:06:a8:1a:c7:81:1a:38:9a:1c:04:c2:
                    71:a9:7a:e1:39:03:aa:61:27:eb:1c:b9:5e:55:30:
                    05:01:fc:46:71:82:e2:de:bf:bd:20:2a:c7:60:96:
                    25:58:7c:42:21:cd:10:a3:41:32:26:49:c0:c9:1b:
                    85:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:9B:5B:32:8F:6C:74:18:95:33:3E:9D:6C:E5:70:01:F6:BF:80:67
            X509v3 Authority Key Identifier:
                keyid:2B:D4:8F:ED:F9:95:02:AA:90:CE:B1:25:82:14:DB:7F:00:A3:73:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7T51mrW3foQi5vJibr1zhiseizBULjN8YKXomHczvbdL/0/2BD48FEDF99502AA90CEB1258214DB7F00A373AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD48FEDF99502AA90CEB1258214DB7F00A373AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7T51mrW3foQi5vJibr1zhiseizBULjN8YKXomHczvbdL/0/2BD48FEDF99502AA90CEB1258214DB7F00A373AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:62:37:ec:db:ee:33:2a:23:cd:9c:a3:98:39:dd:4b:9f:9c:
         ae:55:b5:30:d1:84:7b:69:31:51:97:2d:55:a6:85:15:bf:11:
         49:b9:a8:a7:c5:8d:d8:0a:48:bf:99:6d:ee:94:fd:3b:f6:f5:
         22:3c:a6:78:de:09:78:b6:a9:45:04:df:02:26:d1:a7:66:16:
         36:6f:98:73:2b:00:b7:95:ed:68:25:f7:e5:f4:7c:9f:85:f6:
         81:ce:b2:40:9e:b7:63:a3:3b:4e:1a:20:71:71:45:89:47:53:
         75:4d:00:e0:43:d0:6e:67:5a:e8:8e:06:d4:df:f6:25:1e:ad:
         4b:5e:6a:8d:03:d0:83:d6:6c:c7:75:bd:9e:a5:ea:cb:74:26:
         94:16:ed:79:ce:98:52:a0:9c:33:1b:f2:60:07:4b:49:78:b9:
         dd:95:e3:0e:c4:ee:87:11:aa:9c:c2:37:70:22:a6:ba:d8:22:
         bd:0b:8b:07:0d:95:d0:d5:77:2b:bb:62:72:6e:f3:8e:62:96:
         f1:82:4c:d1:42:58:6e:82:45:4e:7c:f6:d2:2b:81:9f:01:e4:
         0d:ab:23:0e:c0:20:43:83:e8:34:18:51:58:a2:c3:53:84:b4:
         eb:4c:b1:cc:88:d2:b6:f2:14:26:04:3f:3b:c2:ed:b9:b6:1e:
         5b:10:d4:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUAbwN++L5B/AyooV8i2WH2zXkYKQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJENDhGRURGOTk1MDJBQTkwQ0VCMTI1ODIxNERCN0Yw
MEEzNzNBQjAeFw0yNTEyMjMwNTA5MDFaFw0yNTEyMjQwNjE4MDFaMDMxMTAvBgNV
BAMTKDMwOUI1QjMyOEY2Qzc0MTg5NTMzM0U5RDZDRTU3MDAxRjZCRjgwNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCalBTepjMQ9GyyJ3gh+vrlhbqf
GWOWVj6nwwgisQu/e0VOjohUtKPip9YKzygOv1fIQvfilxjBwiHlVhsj/cLanc8L
KioDhayq497HbTF0gtcLF7buMRiHmqhmXwPar7K7GCNVgpeq9WgNQUf7LaCzDT3a
PYG/5sPqJo3rAb3stLj1aIf2oGKiaYx0fWrNUbBoguRh9b7g6lAAU36TaqcZeCst
N2H8LGz03FcBRH7ksI58LQjRrPpPXfRmS5Y5Fs0Dp46PEZgGqBrHgRo4mhwEwnGp
euE5A6phJ+scuV5VMAUB/EZxguLev70gKsdgliVYfEIhzRCjQTImScDJG4VzAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUMJtbMo9sdBiVMz6dbOVwAfa/gGcwHwYDVR0j
BBgwFoAUK9SP7fmVAqqQzrElghTbfwCjc6swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1Q1MW1yVzNmb1FpNXZKaWJyMXpoaXNlaXpCVUxqTjhZS1hvbUhjenZi
ZEwvMC8yQkQ0OEZFREY5OTUwMkFBOTBDRUIxMjU4MjE0REI3RjAwQTM3M0FCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCRDQ4RkVERjk5NTAyQUE5
MENFQjEyNTgyMTREQjdGMDBBMzczQUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N1Q1MW1yVzNmb1FpNXZKaWJyMXpoaXNlaXpCVUxqTjhZS1hvbUhjenZiZEwvMC8y
QkQ0OEZFREY5OTUwMkFBOTBDRUIxMjU4MjE0REI3RjAwQTM3M0FCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZGI37NvuMyojzZyjmDndS5+crlW1MNGEe2kxUZctVaaFFb8RSbmop8WN2ApI
v5lt7pT9O/b1IjymeN4JeLapRQTfAibRp2YWNm+YcysAt5XtaCX35fR8n4X2gc6y
QJ63Y6M7ThogcXFFiUdTdU0A4EPQbmda6I4G1N/2JR6tS15qjQPQg9Zsx3W9nqXq
y3QmlBbtec6YUqCcMxvyYAdLSXi53ZXjDsTuhxGqnMI3cCKmutgivQuLBw2V0NV3
K7ticm7zjmKW8YJM0UJYboJFTnz20iuBnwHkDasjDsAgQ4PoNBhRWKLDU4S060yx
zIjStvIUJgQ/O8LtubYeWxDUYQ==
-----END CERTIFICATE-----