This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.mft
File:                     C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.mft (raw, json)
Hash identifier:          RNoi27h08U9edZ4zMxVAOdhIISQx6JOhTSuiqH7KwSI=
Subject key identifier:   E6:5B:5E:DC:E8:2A:62:18:45:BB:FF:28:C5:3B:2D:AE:84:F2:FD:81
Authority key identifier: C1:EB:54:5F:26:E5:2D:C8:9E:77:A7:72:F1:AD:8A:6B:70:57:B2:D8
Certificate issuer:       /CN=C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8
Certificate serial:       1AA2C959CA191546D4ACFB732F3E36822B74D98B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.mft
Manifest number:          6D
Signing time:             Sat 20 Dec 2025 13:16:15 +0000
Manifest this update:     Sat 20 Dec 2025 13:11:15 +0000
Manifest next update:     Sun 21 Dec 2025 16:06:15 +0000
Files and hashes:         1: 3137372e31322e3232302e302f32322d3234203d3e20323730373531.roa (hash: b8uK8SK9lypoIfDWw1v0evX0i9JkB2JRA3ywki39qhU=)
                          2: C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.crl (hash: qPiFHgTbzYHGPDB1ti38XR8gjPygWxMIKtssTmmkbbA=)
                          3: 323830343a373064343a3a2f33322d3438203d3e20323730373531.roa (hash: BBQfvfs5At2uATUo3OhItBuxlawLkJ1AX7cM59tiKVk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.crl
                          rsync://rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 16:06:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:a2:c9:59:ca:19:15:46:d4:ac:fb:73:2f:3e:36:82:2b:74:d9:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8
        Validity
            Not Before: Dec 20 13:11:15 2025 GMT
            Not After : Dec 21 16:06:15 2025 GMT
        Subject: CN=E65B5EDCE82A621845BBFF28C53B2DAE84F2FD81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9e:0f:44:6f:8a:2e:7a:eb:43:cc:94:32:70:
                    af:a2:f8:f6:f3:37:a8:6a:31:cb:3a:01:b4:0d:4f:
                    96:76:e7:7d:bd:cb:bf:29:99:32:b0:f1:4b:a7:68:
                    69:75:20:90:62:69:02:87:bb:f0:b1:aa:5d:a1:1d:
                    84:32:51:98:cf:a2:3e:35:bd:24:3d:9a:75:8b:78:
                    b1:83:77:80:08:f0:36:5a:0d:d1:f5:78:4a:dc:3b:
                    15:16:a0:bd:1b:0c:91:80:b7:44:79:83:58:3a:1a:
                    bb:17:ca:67:a7:bb:06:5f:49:78:95:3c:b9:fc:85:
                    ec:6d:e5:fd:a1:19:52:21:59:52:56:1a:bf:df:2b:
                    3e:38:f6:26:79:76:48:fc:db:d0:01:3f:2e:6e:57:
                    e0:92:1e:37:b0:b6:29:e9:06:4a:35:12:3a:fd:32:
                    f1:5a:53:f3:a2:63:20:00:a6:fc:88:a7:90:b3:a0:
                    1d:c0:ea:f8:13:2b:6e:35:01:80:9d:8e:05:3d:8f:
                    00:a7:9e:6d:b3:f7:c6:60:2b:9a:e7:eb:1c:44:dd:
                    98:db:4a:ca:e3:db:c4:7c:36:02:08:de:bb:1f:4d:
                    8e:26:3f:50:74:49:c4:ec:cf:0c:00:f1:7a:c4:60:
                    be:84:b3:30:de:ae:b2:79:8c:54:83:25:cf:df:28:
                    68:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:5B:5E:DC:E8:2A:62:18:45:BB:FF:28:C5:3B:2D:AE:84:F2:FD:81
            X509v3 Authority Key Identifier:
                keyid:C1:EB:54:5F:26:E5:2D:C8:9E:77:A7:72:F1:AD:8A:6B:70:57:B2:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:f0:38:c6:88:ff:11:1f:86:65:5b:38:6d:9a:fd:b1:f3:93:
         7b:c1:cc:0a:a4:4e:c0:16:0b:d8:fb:7c:22:d7:e9:f1:5d:d3:
         8b:32:77:d4:d6:7c:85:65:4d:ce:de:b8:81:c9:d5:8f:1d:e5:
         6a:51:2b:37:3f:92:a1:e6:fa:8a:be:ff:9c:da:f0:e9:cd:d7:
         7b:ea:70:e2:14:a3:be:56:86:82:57:1c:71:10:96:0f:fc:93:
         c0:ea:bc:72:ad:4f:f6:46:f1:08:c8:9c:a6:eb:7a:37:ec:37:
         d0:cf:6e:dd:de:ad:81:50:58:88:40:c8:cd:aa:11:6d:b4:82:
         04:84:8f:47:20:5a:6e:34:89:1d:a8:6a:fe:2d:a1:a1:80:ab:
         78:a3:a3:88:42:37:11:cb:07:d9:c0:68:fe:7c:e3:96:b7:3b:
         03:de:c0:1c:e8:f8:31:b8:3a:a7:c7:6f:88:d3:da:11:23:af:
         21:01:f5:5e:42:22:1a:6a:92:73:41:11:d0:73:5c:fa:1d:0a:
         0e:e0:82:76:81:c4:7b:96:91:84:35:e6:87:ed:60:ea:f3:64:
         3a:8b:38:19:ff:55:ae:3d:a7:09:24:52:90:67:61:3d:0c:56:
         ee:cf:18:6d:fc:0d:9b:0c:83:0c:5c:ae:68:fa:2b:46:49:67:
         53:c5:5e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:46:05 2025 by rpki-client