This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/81FyMMaErXNwV6L3wgwgFsNePGyajh6D1EoQQidLZ1Pn/0/241DA0E2A6F4A4E7C8831857C66C16E87C2C5C6B.mft
File:                     241DA0E2A6F4A4E7C8831857C66C16E87C2C5C6B.mft (raw, json)
Hash identifier:          yFHlekUFvhbzJVTLZtP3Y3VDrY6Gi3tsdDXkMAOriEE=
Subject key identifier:   70:24:F8:0C:D1:43:38:5B:51:B7:4A:0D:57:BE:1A:6A:80:FA:22:6E
Authority key identifier: 24:1D:A0:E2:A6:F4:A4:E7:C8:83:18:57:C6:6C:16:E8:7C:2C:5C:6B
Certificate issuer:       /CN=241DA0E2A6F4A4E7C8831857C66C16E87C2C5C6B
Certificate serial:       5EBDB2261547FCB982108FBDB86BFE5D4C668DEA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/241DA0E2A6F4A4E7C8831857C66C16E87C2C5C6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81FyMMaErXNwV6L3wgwgFsNePGyajh6D1EoQQidLZ1Pn/0/241DA0E2A6F4A4E7C8831857C66C16E87C2C5C6B.mft
Manifest number:          026F
Signing time:             Wed 24 Dec 2025 00:09:13 +0000
Manifest this update:     Wed 24 Dec 2025 00:04:13 +0000
Manifest next update:     Thu 25 Dec 2025 00:59:13 +0000
Files and hashes:         1: 3230302e3136392e36342e302f32312d3332203d3e203532393736.roa (hash: lXNmJFhn9Gt0a1sH15ggRjal7O17kLI6s4HvaRLOnRM=)
                          2: 241DA0E2A6F4A4E7C8831857C66C16E87C2C5C6B.crl (hash: 6pIs55pqcaNQRmrOGCr6Niu9zOXeEG4Tw0HwxTLRU6s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/81FyMMaErXNwV6L3wgwgFsNePGyajh6D1EoQQidLZ1Pn/0/241DA0E2A6F4A4E7C8831857C66C16E87C2C5C6B.crl
                          rsync://rpki-repo.registro.br/repo/81FyMMaErXNwV6L3wgwgFsNePGyajh6D1EoQQidLZ1Pn/0/241DA0E2A6F4A4E7C8831857C66C16E87C2C5C6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/241DA0E2A6F4A4E7C8831857C66C16E87C2C5C6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 00:59:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:bd:b2:26:15:47:fc:b9:82:10:8f:bd:b8:6b:fe:5d:4c:66:8d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=241DA0E2A6F4A4E7C8831857C66C16E87C2C5C6B
        Validity
            Not Before: Dec 24 00:04:13 2025 GMT
            Not After : Dec 25 00:59:13 2025 GMT
        Subject: CN=7024F80CD143385B51B74A0D57BE1A6A80FA226E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d0:e9:f9:f1:9c:07:0b:8a:62:8f:9e:f1:9e:
                    8a:31:ed:b0:14:74:ba:0a:2f:83:cb:a4:5c:76:97:
                    95:70:8c:0d:10:2e:23:28:1a:7f:e6:39:c1:f3:2d:
                    77:24:d6:f0:66:47:4d:76:f1:78:ce:ed:9d:db:4f:
                    d6:08:e4:64:ee:ca:42:35:e0:5d:67:fd:c5:74:4b:
                    19:0c:5e:37:de:72:52:67:ca:68:ae:0e:5b:ab:33:
                    81:bb:c8:f9:fd:d8:41:5e:b6:65:c4:67:c2:57:46:
                    76:1e:46:38:42:2c:f7:eb:70:c6:92:bf:6b:b6:07:
                    31:99:88:ea:b1:76:c9:b2:ec:29:d7:e3:85:5d:43:
                    51:cd:fc:72:36:32:08:97:9b:db:9b:8e:11:7b:72:
                    41:ea:8e:3e:47:33:bf:6e:47:2a:15:d5:fc:0f:75:
                    d3:96:e0:c0:b2:37:1e:13:39:f3:78:57:39:97:f7:
                    79:3a:ee:19:69:3a:0c:25:92:0c:d8:16:b9:65:64:
                    3e:c0:e0:f6:0a:ca:21:6e:e0:98:c7:ab:f7:64:eb:
                    23:64:90:92:29:75:2d:fc:6c:19:11:c8:32:3b:8a:
                    16:13:fb:de:28:c9:b5:45:8c:be:9e:b3:5c:29:5a:
                    f3:1c:ca:7f:7b:f8:b4:fc:1a:e4:8e:11:e2:ba:b0:
                    8c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:24:F8:0C:D1:43:38:5B:51:B7:4A:0D:57:BE:1A:6A:80:FA:22:6E
            X509v3 Authority Key Identifier:
                keyid:24:1D:A0:E2:A6:F4:A4:E7:C8:83:18:57:C6:6C:16:E8:7C:2C:5C:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81FyMMaErXNwV6L3wgwgFsNePGyajh6D1EoQQidLZ1Pn/0/241DA0E2A6F4A4E7C8831857C66C16E87C2C5C6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/241DA0E2A6F4A4E7C8831857C66C16E87C2C5C6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81FyMMaErXNwV6L3wgwgFsNePGyajh6D1EoQQidLZ1Pn/0/241DA0E2A6F4A4E7C8831857C66C16E87C2C5C6B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:9b:48:e4:b1:98:80:a7:8f:8f:49:70:a6:20:27:ba:85:42:
         01:c1:8b:20:bf:3d:e1:a2:83:05:e1:57:3b:49:ee:31:fb:7f:
         d6:3d:87:11:6c:2c:f1:4c:d5:c0:52:51:d8:4c:e2:56:af:e4:
         b1:b0:71:06:8e:84:05:b3:33:f9:c4:a4:26:f0:71:cb:7c:f3:
         09:30:a7:82:a5:1d:06:15:06:73:1f:5a:49:62:01:8b:48:6e:
         cf:d6:86:56:c4:8a:7e:4e:12:72:6d:3e:66:7c:a5:de:b5:45:
         b3:f0:a4:81:c9:a6:0c:55:50:97:9d:87:a4:f0:05:c0:15:d5:
         1c:de:e1:3a:a1:38:3d:bb:e0:a3:4a:16:38:a9:69:0e:ce:f1:
         65:e2:0f:bf:fb:a3:9a:61:1c:c3:08:57:5a:40:35:49:a3:a5:
         99:60:90:a7:fb:76:17:b2:22:60:3b:e7:e3:1c:24:cf:13:c7:
         08:a5:99:8d:57:66:be:95:df:d9:7c:fe:66:51:54:33:d6:2b:
         8e:a7:a5:b5:55:1f:4a:dc:da:fe:46:74:9b:3d:ef:bd:0d:9e:
         df:c1:3f:86:82:bc:d8:ba:34:bd:e3:1d:32:2f:29:67:37:76:
         ae:bb:aa:8d:20:0d:02:a2:31:9f:cb:b7:1f:2d:25:0d:9b:6d:
         51:e1:b3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 16:05:16 2025 by rpki-client