This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3jfxaRn6ggQRB9tu7KYyoEpcQ2ybYNAysrHnjEm6WmcR/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.mft
File:                     B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.mft (raw, json)
Hash identifier:          1/WNc//bt1T3nQO805Rdr730MZVWVPro4vz0gx6yOlI=
Subject key identifier:   8A:9A:F7:C4:27:F7:66:2D:4D:06:B9:23:8F:D4:6D:CB:CD:DB:E0:B8
Authority key identifier: B9:02:C5:20:3B:F2:1D:82:8D:72:D8:FA:7C:EA:88:31:AD:EB:E8:DD
Certificate issuer:       /CN=B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD
Certificate serial:       30658977FEA61162AB81932EA53961EF81A2ED95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3jfxaRn6ggQRB9tu7KYyoEpcQ2ybYNAysrHnjEm6WmcR/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.mft
Manifest number:          01F2
Signing time:             Thu 18 Dec 2025 11:44:36 +0000
Manifest this update:     Thu 18 Dec 2025 11:39:36 +0000
Manifest next update:     Fri 19 Dec 2025 13:00:36 +0000
Files and hashes:         1: 323830343a3735633a3a2f33322d3438203d3e20323632363337.roa (hash: Ftk5zUW9PGUhuWcjjpH1k9AK4GPuJKDm/gU//7U8NGw=)
                          2: 3137372e3130352e36342e302f32302d3234203d3e20323632363337.roa (hash: CQB0pMvjsu0JQejxzWyA7AFkchjQbY+9fm2Gzu5OSuw=)
                          3: B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.crl (hash: qR9uPuszrzHOSjgiJ08f1YmwnzM5HKzUKfy4/AXBBHs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3jfxaRn6ggQRB9tu7KYyoEpcQ2ybYNAysrHnjEm6WmcR/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.crl
                          rsync://rpki-repo.registro.br/repo/3jfxaRn6ggQRB9tu7KYyoEpcQ2ybYNAysrHnjEm6WmcR/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 13:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:65:89:77:fe:a6:11:62:ab:81:93:2e:a5:39:61:ef:81:a2:ed:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD
        Validity
            Not Before: Dec 18 11:39:36 2025 GMT
            Not After : Dec 19 13:00:36 2025 GMT
        Subject: CN=8A9AF7C427F7662D4D06B9238FD46DCBCDDBE0B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b1:de:83:42:f4:b9:ea:1c:40:a6:a1:90:29:
                    70:b1:52:7b:69:a3:3a:bd:be:9f:62:c5:5f:e9:e4:
                    f0:32:0f:82:6c:d3:91:99:22:33:86:39:65:15:62:
                    bd:59:53:1c:30:9a:11:c1:2f:80:47:29:a1:a8:02:
                    20:9c:00:cd:a8:8c:36:65:9d:11:21:1c:e8:16:43:
                    37:cb:68:15:7a:40:12:b2:b7:eb:86:13:42:b4:54:
                    ad:f7:ff:58:da:4a:32:84:88:6d:b9:38:36:a0:49:
                    19:f0:dc:79:76:26:c4:7d:15:d4:eb:7f:2e:e4:17:
                    fb:44:d0:17:b2:1b:9e:c3:dd:ac:01:30:95:48:e2:
                    62:cf:b3:b9:90:38:2b:b0:03:d6:fd:11:29:45:6c:
                    51:7c:07:ef:d8:4d:45:80:28:d5:93:7f:1a:d7:b3:
                    a1:7a:ea:61:14:01:4e:1c:2f:38:95:df:c8:75:e8:
                    a3:3d:96:87:51:cd:91:eb:aa:70:21:ae:b3:8d:12:
                    8a:0f:1c:92:6a:47:94:e2:93:7b:7a:8a:d7:8e:81:
                    6c:a5:e1:e4:84:6e:e7:5f:72:a9:c0:87:cc:31:15:
                    b7:ba:0e:b8:8d:d9:48:3a:16:ee:00:1b:27:71:ff:
                    ea:02:39:68:b7:45:89:5a:82:0f:76:fd:f9:5d:a1:
                    c4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9A:F7:C4:27:F7:66:2D:4D:06:B9:23:8F:D4:6D:CB:CD:DB:E0:B8
            X509v3 Authority Key Identifier:
                keyid:B9:02:C5:20:3B:F2:1D:82:8D:72:D8:FA:7C:EA:88:31:AD:EB:E8:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3jfxaRn6ggQRB9tu7KYyoEpcQ2ybYNAysrHnjEm6WmcR/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3jfxaRn6ggQRB9tu7KYyoEpcQ2ybYNAysrHnjEm6WmcR/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:e4:5c:15:32:4f:dc:7a:ef:bc:23:bb:de:eb:ec:06:cd:23:
         65:bf:df:92:90:06:0f:47:dc:13:78:2e:7a:e9:47:9d:c1:bf:
         4f:61:7d:7a:b6:3b:ea:07:40:fa:3c:22:d7:29:97:2d:2a:b1:
         02:16:bf:10:f3:d2:17:80:ce:cb:75:05:a2:6f:8d:a2:52:e4:
         43:3a:8f:c2:cd:fa:dd:d0:cc:00:84:44:5e:ad:66:5f:70:b0:
         51:24:0b:53:b3:f2:9e:7f:59:6d:9a:eb:11:e6:83:c8:bd:8c:
         dd:e3:3a:3a:a6:3b:b3:18:e6:2d:27:3e:2f:40:59:1d:4d:63:
         75:24:86:5f:98:15:3e:e7:5b:ef:a4:ce:55:ef:10:6f:a4:4e:
         ec:c0:0c:8e:77:f0:0f:3c:7a:af:c3:87:ac:55:37:3a:54:c7:
         f2:f1:5a:3e:77:97:5d:1c:40:20:83:c5:10:b0:51:7b:a9:d7:
         d7:d6:04:52:76:87:2a:57:d2:bc:57:2a:7e:01:08:05:f8:a9:
         09:40:e8:64:79:d1:39:e9:ae:86:d7:c1:26:07:52:56:21:77:
         e4:ec:c7:ba:30:21:10:d1:94:e7:9c:88:db:3a:2f:a4:9b:17:
         3b:ea:67:01:f7:c7:a6:f1:85:0f:ab:f7:a4:3f:2f:58:fa:f0:
         73:cc:02:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 18:31:54 2025 by rpki-client