This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft
File:                     2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft (raw, json)
Hash identifier:          z+I99rzgjflcUfS+4wyjcLaO9j/e4lMGUMW/wCssuOs=
Subject key identifier:   C0:C9:C8:2B:73:A2:8C:F1:C6:DD:72:1B:25:A3:D3:A2:57:99:9F:09
Authority key identifier: 2B:47:0E:5C:23:88:FD:4E:E2:7F:D0:93:A1:88:DB:51:D5:7C:AD:3B
Certificate issuer:       /CN=2B470E5C2388FD4EE27FD093A188DB51D57CAD3B
Certificate serial:       37D038F49239DFA8779818A78D20D4822CF4DF87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft
Manifest number:          0340
Signing time:             Thu 18 Dec 2025 23:41:51 +0000
Manifest this update:     Thu 18 Dec 2025 23:36:51 +0000
Manifest next update:     Sat 20 Dec 2025 02:57:51 +0000
Files and hashes:         1: 3137372e38372e34342e302f32322d3234203d3e203532353839.roa (hash: U1bU2vymA1trGo0kqdj5LljKi5zORYlms1D3T/ome8k=)
                          2: 2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.crl (hash: vdUo7e+R/vKs+m1H6qCpatdaNDQdhDR0gPZulgm3wIw=)
                          3: 323830343a316164383a3a2f33322d3438203d3e203532353839.roa (hash: nM9/FgUa0C68sG38T5nV/uNQ86svUq5vsVkQhqR+lIs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.crl
                          rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 02:57:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d0:38:f4:92:39:df:a8:77:98:18:a7:8d:20:d4:82:2c:f4:df:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B470E5C2388FD4EE27FD093A188DB51D57CAD3B
        Validity
            Not Before: Dec 18 23:36:51 2025 GMT
            Not After : Dec 20 02:57:51 2025 GMT
        Subject: CN=C0C9C82B73A28CF1C6DD721B25A3D3A257999F09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:49:c2:71:c8:68:80:82:4b:68:35:b7:ee:f2:
                    c4:0e:cc:3e:6e:51:37:a0:9c:ee:ec:32:92:ad:71:
                    95:e5:fe:cd:b3:e6:c3:16:c4:8a:af:4c:f0:11:78:
                    24:a6:21:92:d2:0c:e4:fb:1e:95:2d:b8:e4:56:a3:
                    af:1b:9d:c7:2b:3c:08:f7:94:73:34:0c:78:16:d1:
                    89:9d:c8:cb:07:be:46:a8:78:b9:6c:ed:55:a0:81:
                    4a:92:f9:c1:2e:45:6c:e3:98:bc:c5:7b:e8:73:b3:
                    2c:2f:8c:4b:6e:fa:05:ee:45:d8:30:c0:72:8d:e0:
                    b4:e9:56:35:69:82:f5:d4:2c:03:1f:81:74:53:3d:
                    ab:0a:8b:5f:1b:27:2d:e2:3c:05:79:49:1e:50:3e:
                    9c:a5:19:9b:55:cc:50:ae:e5:6d:1e:0a:46:a9:ff:
                    56:b9:fb:a8:39:c1:63:02:b6:11:f3:1b:7c:9e:ed:
                    50:3d:ec:d9:2e:08:11:b9:78:07:b4:99:30:1e:93:
                    d3:47:8c:d8:0e:6b:ec:fb:72:d0:86:8b:b0:bf:a1:
                    bc:91:19:bb:f9:88:c6:a7:5e:c7:ea:f1:24:eb:43:
                    bd:78:b5:83:e0:ab:09:03:af:0b:46:36:c3:7a:0d:
                    b9:58:8f:c6:db:0d:4f:81:b1:06:95:6f:c0:66:8c:
                    15:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C9:C8:2B:73:A2:8C:F1:C6:DD:72:1B:25:A3:D3:A2:57:99:9F:09
            X509v3 Authority Key Identifier:
                keyid:2B:47:0E:5C:23:88:FD:4E:E2:7F:D0:93:A1:88:DB:51:D5:7C:AD:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:8e:45:a6:bd:d5:af:e8:d9:3f:42:db:18:7a:26:3c:fd:2c:
         35:6a:15:16:02:0c:d2:fc:dd:6f:6b:ab:23:8c:e5:44:b6:85:
         66:0f:c3:f6:90:61:80:9f:77:d3:58:f5:e9:25:27:be:36:ef:
         c0:5c:39:30:d3:0e:c4:9e:c2:43:4c:0c:5c:af:82:3c:d3:30:
         30:70:e4:9f:be:79:52:10:61:dd:37:bb:57:79:14:cf:8d:3d:
         36:d6:47:a1:0c:f3:fb:d0:47:d1:30:0a:b9:f0:14:de:66:14:
         17:68:1a:64:7b:2a:06:5c:7d:71:5c:53:0f:18:a9:27:33:5c:
         a0:52:a5:81:39:d8:80:16:42:2a:29:00:61:0e:7b:54:cb:c0:
         ea:e9:49:4a:e8:de:50:a1:91:db:07:ec:0f:62:81:a7:f7:13:
         a2:04:44:1c:a4:e9:9e:87:e3:c1:77:17:db:97:21:e5:13:0b:
         f7:be:1b:97:2d:a3:e3:b7:5c:e5:b8:b9:ff:bf:d3:be:19:98:
         30:60:1e:c2:fa:4c:72:47:9d:6c:2e:4e:ca:a9:be:cb:a3:dd:
         56:f8:be:e1:3e:43:60:d6:d8:c2:53:2c:95:d3:c7:46:0b:3f:
         d7:aa:6e:93:c6:48:e3:84:f3:b1:45:4a:ac:cb:47:59:58:8c:
         cf:8b:e3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:35:00 2025 by rpki-client