This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/1/BA632A9087D3F9A39D150D208B6706857AEB9D59.mft
File:                     BA632A9087D3F9A39D150D208B6706857AEB9D59.mft (raw, json)
Hash identifier:          tag6nhCREiuloJ3mio7Fj78zdCZRNIn2huNhCv87ojE=
Subject key identifier:   C9:7B:F0:33:DE:62:D0:0A:C0:E9:50:2A:5F:21:17:02:8C:3C:EA:E0
Authority key identifier: BA:63:2A:90:87:D3:F9:A3:9D:15:0D:20:8B:67:06:85:7A:EB:9D:59
Certificate issuer:       /CN=BA632A9087D3F9A39D150D208B6706857AEB9D59
Certificate serial:       1FC72F8D7431E3B8BB473F5B360ADA1E86559692
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA632A9087D3F9A39D150D208B6706857AEB9D59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/1/BA632A9087D3F9A39D150D208B6706857AEB9D59.mft
Manifest number:          03A8
Signing time:             Thu 18 Dec 2025 20:00:00 +0000
Manifest this update:     Thu 18 Dec 2025 19:55:00 +0000
Manifest next update:     Fri 19 Dec 2025 20:00:00 +0000
Files and hashes:         1: BA632A9087D3F9A39D150D208B6706857AEB9D59.crl (hash: 7s9+jh81kBbqvBQ5IFbppWX+uDQSwSVgnMnyav6d0Do=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/1/BA632A9087D3F9A39D150D208B6706857AEB9D59.crl
                          rsync://rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/1/BA632A9087D3F9A39D150D208B6706857AEB9D59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA632A9087D3F9A39D150D208B6706857AEB9D59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c7:2f:8d:74:31:e3:b8:bb:47:3f:5b:36:0a:da:1e:86:55:96:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA632A9087D3F9A39D150D208B6706857AEB9D59
        Validity
            Not Before: Dec 18 19:55:00 2025 GMT
            Not After : Dec 25 20:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1b:bf:c7:03:0f:c7:61:fe:a0:d0:65:36:43:
                    84:1a:b2:18:8c:50:df:fa:02:bc:7c:ff:2e:97:92:
                    e3:a6:88:83:d7:05:f9:f7:4e:55:bd:83:02:c7:55:
                    72:72:40:7d:7e:25:16:47:23:e3:79:38:7f:83:cb:
                    56:ef:d9:3f:34:13:21:97:47:40:db:15:86:c4:4b:
                    6a:23:e0:a3:99:45:a8:aa:3f:9f:16:1c:f0:53:dc:
                    d5:d7:a3:67:6c:9b:72:15:d7:2a:36:d9:97:1f:44:
                    aa:59:25:2a:51:78:ed:ed:a7:17:b2:48:75:2e:f4:
                    d3:b3:22:21:35:58:c2:7a:73:28:70:15:ab:34:71:
                    04:c8:df:72:41:9e:2f:e1:a1:06:8e:71:89:83:a3:
                    48:46:79:f8:39:f6:7b:1a:1c:97:88:9d:7f:44:1c:
                    ef:8f:a6:2b:7d:c0:be:46:83:b8:a6:57:67:5c:02:
                    21:6f:4e:42:5b:9f:0d:50:2b:6b:21:76:c7:31:e5:
                    76:62:23:ed:c5:20:91:15:7b:d6:cd:21:6e:27:bf:
                    47:f6:c6:28:3d:90:ad:8e:80:bf:44:f9:12:a8:df:
                    f4:61:f6:66:69:10:71:1a:77:6f:60:95:b0:9c:f1:
                    52:99:66:c2:93:63:23:79:32:43:f1:cf:21:49:a2:
                    80:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7B:F0:33:DE:62:D0:0A:C0:E9:50:2A:5F:21:17:02:8C:3C:EA:E0
            X509v3 Authority Key Identifier:
                keyid:BA:63:2A:90:87:D3:F9:A3:9D:15:0D:20:8B:67:06:85:7A:EB:9D:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/1/BA632A9087D3F9A39D150D208B6706857AEB9D59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA632A9087D3F9A39D150D208B6706857AEB9D59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/1/BA632A9087D3F9A39D150D208B6706857AEB9D59.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:3a:50:1b:84:b8:e7:20:f8:e0:d2:d8:ba:3a:f2:8e:73:62:
         d3:11:47:a9:e3:27:c5:e3:db:4c:ae:50:49:b9:dd:59:53:b0:
         0b:c6:d9:a6:5c:7a:85:34:2c:25:a0:78:18:53:09:5e:44:11:
         58:60:38:61:34:f4:26:6e:66:f1:3a:8c:31:40:e9:36:cc:ab:
         ff:e4:b4:f4:3c:8f:d1:1e:c9:f8:48:d1:2c:65:db:a5:ee:bb:
         b2:c3:e1:3e:be:83:d0:72:08:1e:4e:11:61:47:08:46:fd:3a:
         83:2b:f3:7b:19:37:18:4a:a3:c5:6f:79:27:63:52:a3:06:d4:
         43:85:39:27:4f:aa:3b:85:43:cf:72:a8:c1:de:71:be:da:52:
         87:e9:b4:c5:22:ca:3d:68:0c:e2:ee:72:c2:e6:08:29:1a:a9:
         aa:9f:83:bd:bb:f8:41:0e:d8:35:6b:6a:12:ab:1c:47:49:95:
         4d:57:13:0a:6f:bb:c1:a1:27:53:33:f6:6f:6a:2d:63:a6:87:
         a3:c1:8e:f3:64:eb:bf:dd:df:19:05:f8:d9:f9:3a:c1:02:49:
         6e:46:57:ac:03:f1:e2:71:ea:6d:26:7f:cf:79:32:12:0d:05:
         c2:f2:43:5e:14:3f:9e:72:df:74:84:32:08:95:f3:0c:57:5f:
         10:70:a1:d3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----