This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CX5H7R32WDj13tDcMgVCUoZFe5MywwTrXWvHt9ePMYpm/0/EE78CB8F1548BA17CB0086EB5D390D7B026FCA5B.mft
File:                     EE78CB8F1548BA17CB0086EB5D390D7B026FCA5B.mft (raw, json)
Hash identifier:          Z9PH8U2VUdhxyuOMmKQb6hBKnSROETD9EFy1vxsGwHE=
Subject key identifier:   3A:9F:3C:EC:E1:31:8F:AC:DB:B5:B9:A6:E9:FD:A0:E5:0F:28:E8:76
Authority key identifier: EE:78:CB:8F:15:48:BA:17:CB:00:86:EB:5D:39:0D:7B:02:6F:CA:5B
Certificate issuer:       /CN=EE78CB8F1548BA17CB0086EB5D390D7B026FCA5B
Certificate serial:       0698D4D806BA34B2E44121D96C3A6DE2B9048604
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE78CB8F1548BA17CB0086EB5D390D7B026FCA5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CX5H7R32WDj13tDcMgVCUoZFe5MywwTrXWvHt9ePMYpm/0/EE78CB8F1548BA17CB0086EB5D390D7B026FCA5B.mft
Manifest number:          0296
Signing time:             Fri 19 Dec 2025 16:43:46 +0000
Manifest this update:     Fri 19 Dec 2025 16:38:46 +0000
Manifest next update:     Sat 20 Dec 2025 19:04:46 +0000
Files and hashes:         1: EE78CB8F1548BA17CB0086EB5D390D7B026FCA5B.crl (hash: /JlgX1tM1fFg5hjcTTHWcTejIblZinV+GQNXedcE83A=)
                          2: 323830343a383739383a3a2f33322d3333203d3e20323732373139.roa (hash: NDSyJzTIRSFNTGy6Dbg8LWWYwwqJnkdYj/ktRX9ZwD0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CX5H7R32WDj13tDcMgVCUoZFe5MywwTrXWvHt9ePMYpm/0/EE78CB8F1548BA17CB0086EB5D390D7B026FCA5B.crl
                          rsync://rpki-repo.registro.br/repo/CX5H7R32WDj13tDcMgVCUoZFe5MywwTrXWvHt9ePMYpm/0/EE78CB8F1548BA17CB0086EB5D390D7B026FCA5B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE78CB8F1548BA17CB0086EB5D390D7B026FCA5B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 19:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:98:d4:d8:06:ba:34:b2:e4:41:21:d9:6c:3a:6d:e2:b9:04:86:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE78CB8F1548BA17CB0086EB5D390D7B026FCA5B
        Validity
            Not Before: Dec 19 16:38:46 2025 GMT
            Not After : Dec 20 19:04:46 2025 GMT
        Subject: CN=3A9F3CECE1318FACDBB5B9A6E9FDA0E50F28E876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c9:69:17:15:56:89:2c:49:bd:61:0e:47:0e:
                    44:65:05:a5:e7:78:5b:1a:2a:da:cb:b9:33:5d:7a:
                    35:be:f9:df:b7:d1:f4:4c:53:26:16:df:33:3f:df:
                    7e:34:7b:ef:80:af:48:8f:b4:87:e2:3f:c0:eb:85:
                    5f:b5:f5:76:8d:5c:26:8e:84:07:f0:30:e8:c2:aa:
                    63:a7:ec:5c:48:97:95:57:cd:2c:4b:b8:d4:ab:af:
                    00:24:2c:90:46:f4:c8:71:79:52:ad:c8:33:c9:66:
                    05:56:63:ad:a4:96:bf:12:fd:fa:f5:ef:66:4f:37:
                    d2:fa:79:cf:17:70:9c:f3:0e:db:fc:1b:c2:19:36:
                    84:b3:87:2e:5a:89:16:c6:2e:d6:f3:f4:18:9b:fe:
                    d5:08:d1:42:69:b2:cd:52:1a:d3:d5:24:da:e3:5e:
                    52:ed:dd:58:44:78:a3:f2:87:58:d9:dc:5d:13:7b:
                    b8:3f:4b:97:cb:42:3e:34:d8:73:48:59:31:b1:a5:
                    07:30:b9:9d:5a:e5:f9:a9:0a:2c:f8:d3:9d:1c:85:
                    3a:49:5b:f2:1b:65:31:95:91:11:73:ae:75:ce:31:
                    58:69:65:a7:66:59:aa:a0:c0:e2:9a:41:27:2d:eb:
                    1b:7b:28:7d:31:3f:e0:b0:6a:b3:cb:91:b4:c0:14:
                    b6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:9F:3C:EC:E1:31:8F:AC:DB:B5:B9:A6:E9:FD:A0:E5:0F:28:E8:76
            X509v3 Authority Key Identifier:
                keyid:EE:78:CB:8F:15:48:BA:17:CB:00:86:EB:5D:39:0D:7B:02:6F:CA:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CX5H7R32WDj13tDcMgVCUoZFe5MywwTrXWvHt9ePMYpm/0/EE78CB8F1548BA17CB0086EB5D390D7B026FCA5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE78CB8F1548BA17CB0086EB5D390D7B026FCA5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CX5H7R32WDj13tDcMgVCUoZFe5MywwTrXWvHt9ePMYpm/0/EE78CB8F1548BA17CB0086EB5D390D7B026FCA5B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f0:f1:eb:8e:1e:1a:c2:c6:db:92:3a:bd:db:45:b4:2f:f7:
         20:9c:0e:bb:b4:bd:5e:56:20:dd:79:f8:3c:f4:c5:7b:78:cb:
         f1:65:f2:68:cb:c8:14:b1:16:86:6b:cd:10:e5:2a:58:e6:cd:
         e6:fe:be:19:df:59:e6:81:25:4b:8a:eb:c4:13:21:fc:07:60:
         3a:e1:43:f0:c7:d6:51:7b:c1:e9:a4:39:66:66:01:a5:b5:7b:
         7e:27:1e:cd:35:f7:1c:2d:c3:c2:f4:36:19:1d:a8:c0:e3:6a:
         19:2e:c7:fe:a7:e2:1a:81:df:6e:35:bc:49:75:bd:cf:65:73:
         54:5c:46:73:d3:9a:ee:e6:9f:8a:8d:fd:bf:d8:50:c2:ba:bf:
         ff:20:09:8e:22:8d:56:d9:53:a1:57:fe:c5:c5:bd:f3:83:eb:
         21:63:30:bd:a0:92:6c:9d:53:e5:fd:4b:8f:39:d7:21:4a:ce:
         3c:97:c9:53:e3:d5:39:9c:df:a4:3f:b6:12:05:cd:8c:3d:f4:
         b8:95:a9:e4:eb:68:90:23:84:b9:5a:44:5d:7b:58:98:c2:5c:
         0b:68:47:6f:20:fe:e3:28:0d:78:13:80:ea:ae:fc:41:9d:b7:
         7c:a5:b1:00:34:6e:a9:5b:64:9c:43:01:a6:06:2c:34:ca:2d:
         2c:da:df:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----