This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/13123FFD48CC363E7FDE5D171F9FFC145A5D4B63.mft
File:                     13123FFD48CC363E7FDE5D171F9FFC145A5D4B63.mft (raw, json)
Hash identifier:          X3RH4SGG6bY2NR+E3Jvp4C4TDPYv7b64MSgIie9AYKk=
Subject key identifier:   0C:2B:70:66:F2:AD:80:F1:89:80:B6:D3:D5:89:D7:B6:50:7D:8B:69
Authority key identifier: 13:12:3F:FD:48:CC:36:3E:7F:DE:5D:17:1F:9F:FC:14:5A:5D:4B:63
Certificate issuer:       /CN=13123FFD48CC363E7FDE5D171F9FFC145A5D4B63
Certificate serial:       46326B5C1463CB2AC6A609AE09F5ED92E12B21E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13123FFD48CC363E7FDE5D171F9FFC145A5D4B63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/13123FFD48CC363E7FDE5D171F9FFC145A5D4B63.mft
Manifest number:          2D
Signing time:             Fri 19 Dec 2025 09:00:25 +0000
Manifest this update:     Fri 19 Dec 2025 08:55:25 +0000
Manifest next update:     Sat 20 Dec 2025 10:02:25 +0000
Files and hashes:         1: 3137302e38322e32302e302f32322d3332203d3e20323636343430.roa (hash: 4zBrhYrGGGZWFhI+Blc54VN5xU44QGaVpeKu+EC/1TY=)
                          2: 13123FFD48CC363E7FDE5D171F9FFC145A5D4B63.crl (hash: Wt9pgy7EdlGC2BEvoLhzR0UjeMedcfBUbsNI3vQqRSs=)
                          3: 323830343a333764633a3a2f33322d313238203d3e20323636343430.roa (hash: 05b7KGz9GymuR2iEsjGi/5zcEvcg2VnptZ/baXJJsI0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/13123FFD48CC363E7FDE5D171F9FFC145A5D4B63.crl
                          rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/13123FFD48CC363E7FDE5D171F9FFC145A5D4B63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13123FFD48CC363E7FDE5D171F9FFC145A5D4B63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 10:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:32:6b:5c:14:63:cb:2a:c6:a6:09:ae:09:f5:ed:92:e1:2b:21:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13123FFD48CC363E7FDE5D171F9FFC145A5D4B63
        Validity
            Not Before: Dec 19 08:55:25 2025 GMT
            Not After : Dec 20 10:02:25 2025 GMT
        Subject: CN=0C2B7066F2AD80F18980B6D3D589D7B6507D8B69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:87:66:67:39:7e:a3:1f:fa:2b:89:72:1e:0f:
                    f0:35:b5:3b:a4:73:48:b2:ed:a6:76:5d:6f:86:df:
                    a5:53:b0:e0:3a:47:e1:b9:60:d5:a2:f6:2e:ff:a8:
                    51:ba:c1:d4:28:be:e2:8f:0c:d0:9f:4e:4e:f1:d9:
                    9e:06:97:be:2a:00:47:a0:ba:8e:2d:f8:52:dc:e3:
                    98:e6:03:31:48:bd:08:66:b7:ee:e8:ac:a9:37:f0:
                    9f:15:cf:f6:cb:4d:3e:49:af:a0:b2:51:99:f2:cc:
                    7e:0a:6d:32:c6:c6:5e:3a:f5:bc:e7:8f:41:49:8a:
                    6e:43:f3:cf:0c:57:2f:70:7c:00:fb:97:88:63:0f:
                    eb:37:15:c4:c1:df:be:cc:e2:24:3a:34:05:72:95:
                    53:43:43:fd:c0:e6:b3:3f:7e:a3:31:fc:26:5f:16:
                    27:41:ca:c1:27:12:d7:72:be:1d:ad:b1:f2:9d:30:
                    4a:19:8e:e0:be:6d:96:ef:84:b3:9c:d9:26:17:ca:
                    14:0f:aa:8e:36:8c:25:8f:3b:5a:4a:a2:c0:4b:f2:
                    0f:42:73:0f:26:b0:0e:8e:32:16:f1:8c:f1:22:a4:
                    41:74:e8:ae:40:64:b6:54:95:5b:8e:97:75:77:51:
                    1b:cc:87:1e:71:5c:d6:ff:83:c9:e4:11:1d:4e:b0:
                    a1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:2B:70:66:F2:AD:80:F1:89:80:B6:D3:D5:89:D7:B6:50:7D:8B:69
            X509v3 Authority Key Identifier:
                keyid:13:12:3F:FD:48:CC:36:3E:7F:DE:5D:17:1F:9F:FC:14:5A:5D:4B:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/13123FFD48CC363E7FDE5D171F9FFC145A5D4B63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13123FFD48CC363E7FDE5D171F9FFC145A5D4B63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/13123FFD48CC363E7FDE5D171F9FFC145A5D4B63.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:49:43:89:a9:1b:50:93:cb:a5:48:7d:1b:60:04:58:8e:36:
         93:4c:0f:af:98:d1:e0:e1:09:0d:8a:80:95:a3:0a:59:07:03:
         a9:70:f2:5d:e4:fb:71:fa:44:eb:7d:d8:38:0a:3b:42:dc:99:
         7f:cc:66:7d:57:ce:bb:5f:b0:63:41:21:3c:d3:03:be:8b:10:
         3f:0d:64:80:ce:f1:dc:8a:02:03:20:2a:0b:31:9b:54:39:a8:
         cd:c4:96:0e:aa:5c:b8:39:18:1c:9c:18:ee:bf:d1:8d:f6:f0:
         c2:61:95:37:a2:0b:ce:fc:61:fc:a5:d3:b0:58:b2:89:1b:95:
         7b:4a:bd:2b:5a:f4:1d:06:e2:fc:95:03:62:68:55:55:06:5a:
         92:98:b3:f4:ec:df:22:43:30:ff:e1:a5:42:15:fd:a4:24:07:
         78:a6:69:49:68:dd:47:1b:15:35:43:96:15:e4:3e:60:c8:e3:
         3e:4c:33:2f:d7:b1:a4:19:de:b8:65:44:47:22:3e:72:0a:b1:
         35:9c:4a:25:d7:e0:d8:a3:c0:e7:eb:7f:9d:7b:9b:7b:c6:02:
         8b:02:af:6d:4e:b0:c5:f8:df:b0:88:ff:f2:57:98:05:03:d4:
         b4:28:54:c2:ac:1e:68:dc:9c:d8:03:e6:61:71:5b:f9:22:eb:
         52:0d:59:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:34:35 2025 by rpki-client