This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.mft
File:                     ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.mft (raw, json)
Hash identifier:          bsm6hNY6/wmFkHiEFAvFGQJhrkfKLhUiQlfQ+pIEcvk=
Subject key identifier:   ED:1B:22:25:64:AC:A0:C8:D4:70:2F:7D:35:AB:5E:C9:73:A7:B0:18
Authority key identifier: EC:BC:B7:D7:11:8D:E9:A8:EF:59:6B:31:7E:05:F1:AB:E3:64:66:F1
Certificate issuer:       /CN=ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1
Certificate serial:       7AB7CA156678B98698D8D22907FAB8969B9BF5C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.mft
Manifest number:          0347
Signing time:             Sat 20 Dec 2025 18:10:24 +0000
Manifest this update:     Sat 20 Dec 2025 18:05:24 +0000
Manifest next update:     Sun 21 Dec 2025 19:51:24 +0000
Files and hashes:         1: 323830343a366165383a3a2f33322d3332203d3e20323730333635.roa (hash: g8iaC5IwJXsqxj7chEHOHEt5yF5cMV3akMgC0+nbHyk=)
                          2: 3139302e38392e33342e302f32342d3234203d3e20323730333635.roa (hash: KvuzlUZ7nQOW0EVQMfCKOKp5x1yIS2D+Co4jzNj4CJc=)
                          3: 323830343a366165383a633030303a3a2f33342d3334203d3e20323730333635.roa (hash: 08nOTiWuFsD6x2lLARhWloIzhTQV/4QO/Y0oaHQhxus=)
                          4: ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.crl (hash: orZfvL8DKR9p701y7wcOTtoXkKHfLdm4ofQh4j1QbOo=)
                          5: 323830343a366165383a383030303a3a2f33342d3334203d3e20323730333635.roa (hash: mm7PYorTmysIP6YUcKKt5udF2tifT7gLTOujeY6VRd0=)
                          6: 323830343a366165383a3a2f33342d3334203d3e20323730333635.roa (hash: 6WMz9LUr06cqJeCHqehX2QdawxE5WD2pBW3nIrtNGEc=)
                          7: 323830343a366165383a343030303a3a2f33342d3334203d3e20323730333635.roa (hash: uKvEwSdG5WrkGudCo/Ey4B3GflDR32N5BEwd8BrGmy0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.crl
                          rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 19:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b7:ca:15:66:78:b9:86:98:d8:d2:29:07:fa:b8:96:9b:9b:f5:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1
        Validity
            Not Before: Dec 20 18:05:24 2025 GMT
            Not After : Dec 21 19:51:24 2025 GMT
        Subject: CN=ED1B222564ACA0C8D4702F7D35AB5EC973A7B018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5e:84:d5:1e:dc:2d:78:81:0b:bb:89:f5:b5:
                    5d:4d:4b:b2:46:ad:15:bd:5a:33:0c:85:25:79:20:
                    a7:a3:53:d0:34:31:a5:44:74:97:8a:03:98:66:2b:
                    b7:66:23:d3:6f:98:94:15:f5:bc:87:3a:ae:a6:58:
                    26:93:07:a5:9f:a0:ff:18:dd:52:68:2b:35:9f:3e:
                    7a:ee:ba:89:00:97:73:24:d6:ff:e6:98:44:91:84:
                    4c:34:6a:99:c0:d1:fd:a3:87:22:15:a0:4b:59:33:
                    04:70:5d:e8:a7:ac:8e:53:92:14:74:71:44:65:72:
                    e7:c1:97:7d:38:3b:0c:45:66:d3:2e:fe:3c:b7:f0:
                    a8:9a:2e:d3:19:ec:63:77:f7:d5:f4:4c:13:85:f2:
                    e1:fc:c6:15:b7:24:e2:fc:bd:a1:52:37:75:43:a2:
                    bc:dc:d7:68:30:26:ba:42:c6:44:4b:41:02:30:a5:
                    18:f0:d8:10:68:63:e1:69:1b:f8:9e:57:4f:0f:fa:
                    82:7a:56:b9:bb:01:ec:ef:49:ce:60:48:f6:70:e8:
                    08:05:78:24:3c:8a:bb:ff:29:13:aa:90:3e:94:84:
                    21:66:5c:28:ef:0e:11:58:de:40:38:d0:bc:27:cb:
                    5e:ec:d9:fe:38:72:d7:c6:19:5d:9f:ba:c7:04:cd:
                    21:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1B:22:25:64:AC:A0:C8:D4:70:2F:7D:35:AB:5E:C9:73:A7:B0:18
            X509v3 Authority Key Identifier:
                keyid:EC:BC:B7:D7:11:8D:E9:A8:EF:59:6B:31:7E:05:F1:AB:E3:64:66:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:2f:9e:dc:65:a7:ec:1c:57:38:d5:c3:78:74:e6:9f:b3:da:
         ba:9a:27:52:a7:61:ce:52:23:98:47:11:2a:2c:ee:f0:47:22:
         fc:19:17:f2:49:2e:44:d8:20:e3:7f:7e:02:a4:2b:f1:36:79:
         64:96:69:d3:ce:e8:13:5e:74:43:95:20:1c:dd:44:78:d2:9e:
         d1:cc:18:ad:a5:24:3b:14:d7:34:6a:20:8c:36:65:53:e7:91:
         0c:ef:98:ce:a9:48:34:cb:94:64:ea:98:1e:05:b3:5a:a3:84:
         b2:1a:68:77:27:a3:62:3f:30:c6:0f:d0:41:1c:9c:50:a9:47:
         e4:48:7f:22:f0:02:8f:18:ae:23:4f:ba:b2:cc:b8:38:61:37:
         e2:7c:4c:91:d8:a2:7a:3f:58:ea:7c:55:b8:b7:34:ce:1f:cc:
         62:bc:75:b7:e9:99:75:24:72:d3:a6:32:af:39:4d:29:b4:b5:
         18:80:c7:10:46:10:ed:08:90:6b:73:f0:0c:f7:57:6f:e3:0d:
         97:c5:40:a6:3b:e2:e0:4d:9b:ff:8d:cb:21:d6:9c:9f:fd:dc:
         e9:0c:77:62:87:1b:2c:74:79:08:95:f8:af:22:30:cd:f8:75:
         a3:47:37:b6:4b:32:e5:a5:63:4a:55:87:fb:d0:2a:af:dd:bf:
         7e:33:86:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 19:57:25 2025 by rpki-client