This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.mft
File:                     2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.mft (raw, json)
Hash identifier:          iR4u8UEyA+YbGyJuLtKpyVrWPXGRdEEkH/yvMyJGFFM=
Subject key identifier:   93:99:C9:F7:D2:DA:52:A2:6B:60:CB:75:69:99:A3:68:A8:CA:DF:CC
Authority key identifier: 2D:48:EA:07:0A:9B:DA:E0:9A:85:0B:3A:4F:0C:79:71:9A:1F:08:DB
Certificate issuer:       /CN=2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB
Certificate serial:       1191F07D73E5DC1E3B576C4AF103C9213C4C78EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.mft
Manifest number:          0143
Signing time:             Mon 22 Dec 2025 21:55:49 +0000
Manifest this update:     Mon 22 Dec 2025 21:50:49 +0000
Manifest next update:     Wed 24 Dec 2025 01:31:49 +0000
Files and hashes:         1: 3133382e3131372e35332e302f32342d3234203d3e20323634323239.roa (hash: Z8IzKSO9VaQh501nuxLIQmJAS66e27f6OHg+tM2ra8c=)
                          2: 323830343a323438633a383030303a3a2f33342d3334203d3e20323634323239.roa (hash: +hPnJIBqWPZR8CQNcV7ZbOyO929RfGEvVQZzkpqgA3Y=)
                          3: 3133382e3131372e35322e302f32342d3234203d3e20323634323239.roa (hash: 0lBR7nRdo3vyX+HYU13MtiobPfunyTGMl5wWuKD0qJE=)
                          4: 2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.crl (hash: V4zzoUd8RMkUX/pq4xTqbvkC46EM9opws0eZf12mlgc=)
                          5: 3133382e3131372e35342e302f32332d3233203d3e20323634323239.roa (hash: 8LaiUUHJptxCJniKq3fEYtpdbj7uINznaBTJRX0Uk6M=)
                          6: 323830343a323438633a343030303a3a2f33342d3334203d3e20323634323239.roa (hash: sA3Nx/pG2mee0gYzaG2v39F1VEfFCH+sPtcN0j8Gksg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.crl
                          rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 01:31:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:91:f0:7d:73:e5:dc:1e:3b:57:6c:4a:f1:03:c9:21:3c:4c:78:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB
        Validity
            Not Before: Dec 22 21:50:49 2025 GMT
            Not After : Dec 24 01:31:49 2025 GMT
        Subject: CN=9399C9F7D2DA52A26B60CB756999A368A8CADFCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:53:24:fa:8a:50:45:34:7c:f6:f4:29:5a:a9:
                    44:fd:eb:04:12:5f:0f:98:50:d2:1f:a7:9a:36:80:
                    b5:1e:74:3e:7e:19:f3:a7:9f:ba:ed:ce:f2:d7:64:
                    15:5e:b7:c0:37:7d:36:ec:d8:ae:02:d9:39:b7:c2:
                    e2:02:e7:ff:73:67:59:b7:83:6e:46:6a:c0:6d:33:
                    0b:c0:41:d2:92:d2:e6:e4:91:d3:e5:97:d8:a8:03:
                    3a:d1:9f:0e:82:0b:29:36:15:85:36:da:76:3a:b2:
                    26:34:59:df:3f:2c:3b:0f:73:c1:2c:c9:91:36:ff:
                    6e:27:ac:26:06:fd:55:d9:37:a3:87:91:17:9e:8c:
                    36:04:bd:b6:e8:1e:51:5b:00:48:f3:66:a6:74:fb:
                    1a:91:f5:53:4c:68:c0:c8:fa:db:09:24:59:82:91:
                    93:e7:0d:ce:54:35:9c:9f:62:2b:d5:c3:60:0b:f7:
                    95:2a:f9:9a:e5:38:d4:c5:95:9f:4a:9d:9b:84:10:
                    61:4c:25:25:be:4b:33:2e:e5:67:55:4f:82:b5:03:
                    44:18:b9:dd:af:c5:40:cd:ac:14:76:4c:a6:c2:78:
                    5b:58:0d:8b:cd:86:cc:1b:9a:34:02:f9:a2:26:bb:
                    b3:24:ac:db:0a:c8:0f:61:8f:48:ad:2d:f4:e8:f2:
                    ee:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:99:C9:F7:D2:DA:52:A2:6B:60:CB:75:69:99:A3:68:A8:CA:DF:CC
            X509v3 Authority Key Identifier:
                keyid:2D:48:EA:07:0A:9B:DA:E0:9A:85:0B:3A:4F:0C:79:71:9A:1F:08:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:87:4e:ee:b9:93:46:36:8c:66:d1:71:af:15:f4:d1:fa:e3:
         5c:38:d4:49:d5:b4:19:c9:84:21:90:6e:41:64:b7:83:89:a3:
         51:15:88:5a:4e:21:64:0c:e4:72:a9:24:66:98:31:42:d9:25:
         f4:1d:8e:83:6f:04:01:10:7d:01:30:61:f8:c9:ed:d7:c2:d1:
         a4:58:3b:8f:55:64:98:c4:16:a5:d0:eb:ab:f4:fc:cd:83:15:
         f3:c2:e8:0a:cf:32:f2:47:c8:36:9f:0a:7c:aa:76:85:95:70:
         33:c1:f4:45:7f:59:47:98:cd:7e:80:55:fa:a5:68:4a:c9:66:
         ad:0c:3f:2f:34:c5:57:4b:46:0a:e6:58:f6:2d:4d:54:9c:53:
         b1:eb:1f:3f:b5:60:82:7f:bc:61:9e:cf:91:55:3e:05:73:b4:
         b9:e8:31:83:ee:fe:49:41:24:42:07:d1:d1:f6:73:90:6b:a9:
         a0:de:67:d4:e4:ae:9e:b2:a0:44:ed:a6:83:b7:3d:8a:70:8a:
         2a:05:80:fa:93:57:ef:e9:05:1d:e0:21:da:8e:68:21:e1:4e:
         7d:55:2c:66:c0:6b:df:81:65:dc:93:ea:fc:a0:7e:08:78:35:
         99:c9:9e:09:34:b1:fc:0d:95:ca:e8:17:c3:a9:d0:ea:18:73:
         a3:52:0d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 02:25:16 2025 by rpki-client