This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HUkVQ9Sd9hRFVJiZE5jPGPER95rqUeMD3sZCoXpVznQJ/0/EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.mft
File:                     EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.mft (raw, json)
Hash identifier:          ZFvbFzMwLN3Pwk8m3NA1tCvr7BKnBqx8THiWQCqkZKg=
Subject key identifier:   54:EE:29:60:57:A7:EB:2D:40:34:88:0B:14:33:40:63:79:6A:AA:A2
Authority key identifier: EF:21:25:E5:4F:B1:A3:8B:58:02:EE:2C:F4:8F:C3:EA:E1:E0:36:5C
Certificate issuer:       /CN=EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C
Certificate serial:       34A4FCA486EFA8360FC1F496832100E58FE41344
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUkVQ9Sd9hRFVJiZE5jPGPER95rqUeMD3sZCoXpVznQJ/0/EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.mft
Manifest number:          0291
Signing time:             Fri 19 Dec 2025 21:12:14 +0000
Manifest this update:     Fri 19 Dec 2025 21:07:14 +0000
Manifest next update:     Sat 20 Dec 2025 21:32:14 +0000
Files and hashes:         1: 323830343a356361303a3a2f33322d313238203d3e20323638393230.roa (hash: q/ezCvpn0L/NBlM1GgwYbIDiBNKtr2cYPmEdialO0S0=)
                          2: 34352e3137352e3139362e302f32322d3332203d3e20323638393230.roa (hash: fx6DYvXt9y+O7pKR1zk6o+181Dloz19CVo8Onx1T55E=)
                          3: EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.crl (hash: LrAeECXLF9rCrntCgvVqlHqbtV3od27fvLB8PlJRvVg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HUkVQ9Sd9hRFVJiZE5jPGPER95rqUeMD3sZCoXpVznQJ/0/EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.crl
                          rsync://rpki-repo.registro.br/repo/HUkVQ9Sd9hRFVJiZE5jPGPER95rqUeMD3sZCoXpVznQJ/0/EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 21:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a4:fc:a4:86:ef:a8:36:0f:c1:f4:96:83:21:00:e5:8f:e4:13:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C
        Validity
            Not Before: Dec 19 21:07:14 2025 GMT
            Not After : Dec 20 21:32:14 2025 GMT
        Subject: CN=54EE296057A7EB2D4034880B14334063796AAAA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d3:86:03:1b:34:55:b6:58:c2:cb:b9:7d:fa:
                    d6:d8:e7:0a:09:fa:30:26:36:67:61:f5:b1:ca:2f:
                    7e:58:10:b3:a3:14:3e:ab:a8:3c:35:93:c4:08:5c:
                    9e:be:5b:67:da:8a:77:58:21:aa:0d:96:51:9b:fd:
                    26:42:1a:46:4d:6c:35:e2:8c:28:38:1a:6e:00:e6:
                    cb:8b:5f:06:1d:f0:ce:92:e3:0a:25:13:46:ee:f1:
                    03:52:48:c5:a5:38:eb:d6:60:5a:3f:9c:c6:2d:ab:
                    95:d2:dc:8b:40:99:10:3e:77:08:4a:5d:e1:9e:b8:
                    d8:66:9f:94:88:11:c5:77:ec:58:92:ff:60:22:64:
                    83:01:97:57:cc:1e:be:90:c6:f2:89:5f:9e:76:c3:
                    99:0e:cd:33:26:c3:6c:2d:c7:2d:ac:c5:95:bb:02:
                    4a:f2:90:e0:b9:29:26:59:e9:3e:67:e0:cb:fd:cc:
                    77:b6:2c:ed:b0:5a:15:c3:55:69:f5:50:9c:02:b7:
                    6a:26:d1:58:06:05:ee:d0:01:53:b7:65:2b:3a:12:
                    a0:d6:00:e4:28:12:32:f1:fb:59:be:60:3b:35:bc:
                    07:b3:f8:74:a7:d5:a9:85:7b:07:bb:7a:f7:0d:53:
                    8e:42:5d:d0:9f:9c:4d:3b:1d:11:26:f8:c0:ca:3d:
                    94:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:EE:29:60:57:A7:EB:2D:40:34:88:0B:14:33:40:63:79:6A:AA:A2
            X509v3 Authority Key Identifier:
                keyid:EF:21:25:E5:4F:B1:A3:8B:58:02:EE:2C:F4:8F:C3:EA:E1:E0:36:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUkVQ9Sd9hRFVJiZE5jPGPER95rqUeMD3sZCoXpVznQJ/0/EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUkVQ9Sd9hRFVJiZE5jPGPER95rqUeMD3sZCoXpVznQJ/0/EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:23:58:47:97:bd:97:29:7a:26:59:66:a4:22:a5:50:f1:58:
         cf:bf:ff:77:a6:f2:d4:8f:75:a4:93:6f:bf:8b:b5:e0:d4:6d:
         79:50:4f:18:2b:dd:42:e4:58:d5:d1:63:96:99:02:0a:d7:a5:
         4c:5d:eb:9a:a6:62:74:53:67:e8:00:56:53:01:05:1c:9c:60:
         de:43:30:1b:2b:08:16:56:a2:db:7c:78:76:dc:80:8e:1d:8b:
         a0:0e:14:a3:e8:32:3c:98:bf:41:bd:6d:94:a4:aa:01:4e:b7:
         28:02:bf:b8:1a:e3:4b:c8:d6:21:33:89:3e:6d:98:19:cb:79:
         6e:d4:8c:f5:15:ef:eb:94:0b:4d:67:3d:5e:6e:b6:27:94:fd:
         26:05:9c:43:0d:0d:20:fd:bc:20:fc:56:25:0e:e3:4e:95:9f:
         d1:68:2d:c4:57:59:47:6b:52:d5:ff:33:4b:72:1f:bc:d3:86:
         31:57:15:0f:68:b4:3c:94:f4:15:61:e8:db:10:33:2c:d7:ed:
         9d:07:18:01:7e:86:27:9d:aa:13:44:7b:eb:e1:a2:fc:58:39:
         1b:2c:5f:21:e1:c4:1b:70:49:95:11:93:37:b5:c7:c6:10:c4:
         93:2d:d5:6c:1d:64:60:1c:0c:66:1d:13:d8:c0:29:92:2e:8c:
         c4:4f:11:47
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNKT8pIbvqDYPwfSWgyEA5Y/kE0QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUYyMTI1RTU0RkIxQTM4QjU4MDJFRTJDRjQ4RkMzRUFF
MUUwMzY1QzAeFw0yNTEyMTkyMTA3MTRaFw0yNTEyMjAyMTMyMTRaMDMxMTAvBgNV
BAMTKDU0RUUyOTYwNTdBN0VCMkQ0MDM0ODgwQjE0MzM0MDYzNzk2QUFBQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK04YDGzRVtljCy7l9+tbY5woJ
+jAmNmdh9bHKL35YELOjFD6rqDw1k8QIXJ6+W2faindYIaoNllGb/SZCGkZNbDXi
jCg4Gm4A5suLXwYd8M6S4wolE0bu8QNSSMWlOOvWYFo/nMYtq5XS3ItAmRA+dwhK
XeGeuNhmn5SIEcV37FiS/2AiZIMBl1fMHr6QxvKJX552w5kOzTMmw2wtxy2sxZW7
AkrykOC5KSZZ6T5n4Mv9zHe2LO2wWhXDVWn1UJwCt2om0VgGBe7QAVO3ZSs6EqDW
AOQoEjLx+1m+YDs1vAez+HSn1amFewe7evcNU45CXdCfnE07HREm+MDKPZS3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUVO4pYFen6y1ANIgLFDNAY3lqqqIwHwYDVR0j
BBgwFoAU7yEl5U+xo4tYAu4s9I/D6uHgNlwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFVrVlE5U2Q5aFJGVkppWkU1alBHUEVSOTVycVVlTUQzc1pDb1hwVnpu
UUovMC9FRjIxMjVFNTRGQjFBMzhCNTgwMkVFMkNGNDhGQzNFQUUxRTAzNjVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGMjEyNUU1NEZCMUEzOEI1
ODAyRUUyQ0Y0OEZDM0VBRTFFMDM2NUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SFVrVlE5U2Q5aFJGVkppWkU1alBHUEVSOTVycVVlTUQzc1pDb1hwVnpuUUovMC9F
RjIxMjVFNTRGQjFBMzhCNTgwMkVFMkNGNDhGQzNFQUUxRTAzNjVDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlyNYR5e9lyl6JllmpCKlUPFYz7//d6by1I91pJNvv4u14NRteVBPGCvdQuRY
1dFjlpkCCtelTF3rmqZidFNn6ABWUwEFHJxg3kMwGysIFlai23x4dtyAjh2LoA4U
o+gyPJi/Qb1tlKSqAU63KAK/uBrjS8jWITOJPm2YGct5btSM9RXv65QLTWc9Xm62
J5T9JgWcQw0NIP28IPxWJQ7jTpWf0WgtxFdZR2tS1f8zS3IfvNOGMVcVD2i0PJT0
FWHo2xAzLNftnQcYAX6GJ52qE0R76+Gi/Fg5GyxfIeHEG3BJlRGTN7XHxhDEky3V
bB1kYBwMZh0T2MApki6MxE8RRw==
-----END CERTIFICATE-----
Generated at Sat Dec 20 09:36:56 2025 by rpki-client