This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EQBZfaM31vw31vmd6fvD8e1UHg7epaSscr4HbGgJrZrR/0/ECC476EEF0025078A76C96EE377194228F90C3A1.mft
File:                     ECC476EEF0025078A76C96EE377194228F90C3A1.mft (raw, json)
Hash identifier:          A45GxETaB77ahMpyGlq/Z3Hzm2nRrKLh5U32adZTUO0=
Subject key identifier:   56:CB:18:19:9D:BC:47:9E:7C:A6:C7:62:4D:F5:6D:DA:C0:47:5B:D9
Authority key identifier: EC:C4:76:EE:F0:02:50:78:A7:6C:96:EE:37:71:94:22:8F:90:C3:A1
Certificate issuer:       /CN=ECC476EEF0025078A76C96EE377194228F90C3A1
Certificate serial:       33EBF2B2451B9648ADD7CD2FE32477F03F695E72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECC476EEF0025078A76C96EE377194228F90C3A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQBZfaM31vw31vmd6fvD8e1UHg7epaSscr4HbGgJrZrR/0/ECC476EEF0025078A76C96EE377194228F90C3A1.mft
Manifest number:          BC
Signing time:             Tue 16 Dec 2025 17:24:13 +0000
Manifest this update:     Tue 16 Dec 2025 17:19:13 +0000
Manifest next update:     Wed 17 Dec 2025 20:27:13 +0000
Files and hashes:         1: 3137372e33392e3139362e302f32322d3332203d3e203532373734.roa (hash: /9br6QVPdWIkV/9o1/HGP8CkMnhxDB1cXWx6NAD/XIQ=)
                          2: 323830343a323034343a3a2f33322d313238203d3e203532373734.roa (hash: OR8EPEhNkXm5n15xKeqrn+yE8a9Ouc7Nd6P5/eu2WwE=)
                          3: ECC476EEF0025078A76C96EE377194228F90C3A1.crl (hash: ZeVg28gXzg6Mxgpnpp9qaC920aoaPE2oaGJbdKnDklg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQBZfaM31vw31vmd6fvD8e1UHg7epaSscr4HbGgJrZrR/0/ECC476EEF0025078A76C96EE377194228F90C3A1.crl
                          rsync://rpki-repo.registro.br/repo/EQBZfaM31vw31vmd6fvD8e1UHg7epaSscr4HbGgJrZrR/0/ECC476EEF0025078A76C96EE377194228F90C3A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECC476EEF0025078A76C96EE377194228F90C3A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Dec 2025 20:27:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:eb:f2:b2:45:1b:96:48:ad:d7:cd:2f:e3:24:77:f0:3f:69:5e:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECC476EEF0025078A76C96EE377194228F90C3A1
        Validity
            Not Before: Dec 16 17:19:13 2025 GMT
            Not After : Dec 17 20:27:13 2025 GMT
        Subject: CN=56CB18199DBC479E7CA6C7624DF56DDAC0475BD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3c:b0:13:2a:99:eb:8d:be:c1:1f:21:15:1b:
                    a2:af:6d:8f:cc:6d:96:16:2b:70:94:2f:6a:5b:73:
                    6d:cb:e0:f7:f5:38:7f:75:8c:5c:5f:63:3c:54:67:
                    9a:50:ba:5c:27:43:6e:5d:f5:d2:30:cd:88:77:62:
                    de:81:05:ff:e9:2d:2c:51:35:11:fe:30:d5:28:00:
                    2e:6a:a5:f6:61:ba:42:e8:ca:aa:b0:09:02:90:92:
                    aa:e5:20:3f:fb:68:25:6f:00:c1:c7:28:48:64:3d:
                    27:e8:6b:7d:2c:97:05:ae:ae:cc:07:7d:f7:9a:fe:
                    c3:5c:7f:a9:a5:30:0c:77:43:65:10:09:08:81:77:
                    6c:8f:d2:68:64:df:14:3f:65:fc:da:e3:98:ea:7a:
                    c6:8e:35:15:08:df:74:3d:7f:aa:51:d9:7e:d1:c7:
                    ae:fb:72:d1:67:f9:ff:6f:cd:cb:36:fa:87:6a:c8:
                    3f:33:b1:14:d8:c8:b4:f8:7a:59:4f:a3:cd:b3:17:
                    b7:6a:b2:c1:9f:8a:2b:37:63:91:0c:62:c4:27:29:
                    20:ba:a4:16:38:70:a9:1e:df:ce:27:43:f9:5e:df:
                    fb:22:36:23:8d:c1:f5:1c:21:e1:0c:c9:1a:0e:68:
                    8b:b1:49:12:fb:f7:3b:f5:14:10:aa:f0:ec:83:db:
                    e9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:CB:18:19:9D:BC:47:9E:7C:A6:C7:62:4D:F5:6D:DA:C0:47:5B:D9
            X509v3 Authority Key Identifier:
                keyid:EC:C4:76:EE:F0:02:50:78:A7:6C:96:EE:37:71:94:22:8F:90:C3:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQBZfaM31vw31vmd6fvD8e1UHg7epaSscr4HbGgJrZrR/0/ECC476EEF0025078A76C96EE377194228F90C3A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECC476EEF0025078A76C96EE377194228F90C3A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQBZfaM31vw31vmd6fvD8e1UHg7epaSscr4HbGgJrZrR/0/ECC476EEF0025078A76C96EE377194228F90C3A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:15:24:c7:55:14:e3:bf:d5:81:d2:fc:5c:2a:9a:5b:22:db:
         e8:b4:6b:8a:f1:53:68:73:d9:0e:41:df:ff:c0:33:91:ae:23:
         1c:7f:e9:99:fc:1f:28:a1:92:81:ec:f7:2b:d7:a7:86:09:26:
         85:ab:18:21:c6:af:93:45:10:b3:9a:d6:c1:aa:3c:45:d9:69:
         9e:48:d2:4a:77:37:af:e4:43:a5:42:5a:4e:43:1d:15:2a:42:
         a5:fa:b2:5a:8f:c1:83:ed:34:96:47:6e:4c:4a:0d:40:bd:78:
         33:81:2a:07:c3:fd:46:f7:ea:84:cf:f1:23:d0:49:11:01:e0:
         76:3b:77:8d:9d:74:03:5c:20:af:a1:91:9a:e1:da:d6:a1:eb:
         78:21:7d:27:2c:e9:5c:65:f1:46:aa:2c:5e:10:25:f7:3f:81:
         29:42:04:a7:92:5f:a8:d7:60:44:18:5f:57:03:4f:e5:9d:19:
         5e:39:2d:42:be:5c:df:d4:7f:b7:44:4d:fe:1c:ee:0a:39:3a:
         43:7c:c9:21:1a:d9:c2:82:25:f1:09:25:0d:76:df:db:6f:26:
         7a:eb:77:28:41:b3:a9:6a:29:29:aa:fb:df:5d:6f:46:0e:10:
         e0:24:8b:db:24:91:23:b7:84:dc:e2:04:77:da:d5:c6:c6:63:
         e0:7f:29:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 20:22:44 2025 by rpki-client