This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/BB28C577DF924111463D0D089EB3700DB6333A08.mft
File:                     BB28C577DF924111463D0D089EB3700DB6333A08.mft (raw, json)
Hash identifier:          2QDMr3aBheAiebMwEqQVtMPDEcVCNNv7Ku/X56sxffw=
Subject key identifier:   22:06:53:3D:30:02:7B:3B:BA:01:83:E1:EE:D6:1B:F4:78:87:B9:0C
Authority key identifier: BB:28:C5:77:DF:92:41:11:46:3D:0D:08:9E:B3:70:0D:B6:33:3A:08
Certificate issuer:       /CN=BB28C577DF924111463D0D089EB3700DB6333A08
Certificate serial:       1381CB43BD12BC4F02F37BDE73A95DFD6BA7A43E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB28C577DF924111463D0D089EB3700DB6333A08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/BB28C577DF924111463D0D089EB3700DB6333A08.mft
Manifest number:          01B4
Signing time:             Sat 06 Dec 2025 06:09:35 +0000
Manifest this update:     Sat 06 Dec 2025 06:04:35 +0000
Manifest next update:     Sun 07 Dec 2025 07:05:35 +0000
Files and hashes:         1: 3137392e34382e3138372e302f32342d3234203d3e20323731303935.roa (hash: SavhPxPE5Lyf7T0B4MpwnGMSqHRjb2lI5Yxz3msUeYc=)
                          2: 3137392e34382e3138342e302f32322d3232203d3e20323731303935.roa (hash: mf5kOnGLinzLoK2P/Age80BdVk/qTly4H6v3aFtSNSc=)
                          3: 3137392e34382e3138362e302f32342d3234203d3e20323731303935.roa (hash: 3k9Wk5BftPyULW/+XZwhH81s3yMlae2T/feE4Z166ZI=)
                          4: 3137392e34382e3138352e302f32342d3234203d3e20323731303935.roa (hash: qwQzXDvA/TR6rEcBF3MKa/9LCG7ymfe1c48+OCzzsOE=)
                          5: 3137392e34382e3138342e302f32332d3233203d3e20323731303935.roa (hash: hkmXaAW54tx3D58QrdDkfMXZVkhFpkSCBOUaBNTviWk=)
                          6: 3137392e34382e3138342e302f32342d3234203d3e20323731303935.roa (hash: rxXWlnG9uSrzj/oTEfd1aQfeZWUr6LNsK2YLrN23yqg=)
                          7: BB28C577DF924111463D0D089EB3700DB6333A08.crl (hash: BsgaFapSpeJs7N2jrnHM6eyHcID5bPuXkBtMkGnVw38=)
                          8: 323830343a373633303a3a2f33332d3333203d3e20323731303935.roa (hash: rMLm5hkY3lLZTv23WMtyompaxAN9MdvbPHahAcydOtI=)
                          9: 323830343a373633303a3a2f33322d3332203d3e20323731303935.roa (hash: kOaelJSbrawNGUj8SHViCcp4NpZdOn1Ab0xJJJsOHrU=)
                          10: 3137392e34382e3138362e302f32332d3233203d3e20323731303935.roa (hash: UK1FVjUUS4NN95+sbBGz7vOGXmhAugdySF3Yo3LFggk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/BB28C577DF924111463D0D089EB3700DB6333A08.crl
                          rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/BB28C577DF924111463D0D089EB3700DB6333A08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB28C577DF924111463D0D089EB3700DB6333A08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:05:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:81:cb:43:bd:12:bc:4f:02:f3:7b:de:73:a9:5d:fd:6b:a7:a4:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB28C577DF924111463D0D089EB3700DB6333A08
        Validity
            Not Before: Dec  6 06:04:35 2025 GMT
            Not After : Dec  7 07:05:35 2025 GMT
        Subject: CN=2206533D30027B3BBA0183E1EED61BF47887B90C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:43:95:70:27:28:7f:63:3f:c3:9f:c5:85:7e:
                    c3:ae:83:d3:ae:d8:82:da:c6:9b:ba:e6:0a:60:b4:
                    1e:90:a1:b3:93:d4:3a:96:9e:48:9d:7c:08:93:44:
                    bd:39:5b:7e:e2:47:5a:cb:14:a9:54:52:4d:e0:17:
                    a8:75:bf:24:5b:14:e4:37:0b:68:60:22:95:b6:66:
                    41:bc:77:0d:45:52:83:2f:a0:94:3c:e6:14:e8:30:
                    36:5d:c0:49:c1:0c:27:c8:88:94:5b:3d:82:f7:5a:
                    e4:39:f9:9c:64:8f:37:62:35:96:4e:99:52:c4:df:
                    be:43:8d:bf:04:1f:fa:35:71:a0:7f:39:88:f1:81:
                    3c:0d:ce:5f:10:fd:7f:e8:56:60:a7:c5:89:55:f0:
                    13:b5:3a:04:8a:f4:39:9f:6a:18:66:25:80:d5:7c:
                    ab:f8:ae:c0:df:9f:6d:ee:ba:f7:ab:77:ba:01:dc:
                    e8:52:61:2d:07:67:bb:be:1c:cd:c9:22:a2:b2:f9:
                    0e:48:b7:bb:07:74:04:1c:c4:52:69:8c:4d:df:8e:
                    ab:86:be:74:46:db:cc:db:08:87:fe:b8:90:c8:ff:
                    2a:fd:6c:87:f7:1d:17:f0:01:93:5b:50:d4:12:1f:
                    93:b2:cb:31:87:79:22:8b:92:3e:05:cc:99:ec:38:
                    77:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:06:53:3D:30:02:7B:3B:BA:01:83:E1:EE:D6:1B:F4:78:87:B9:0C
            X509v3 Authority Key Identifier:
                keyid:BB:28:C5:77:DF:92:41:11:46:3D:0D:08:9E:B3:70:0D:B6:33:3A:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/BB28C577DF924111463D0D089EB3700DB6333A08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB28C577DF924111463D0D089EB3700DB6333A08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/BB28C577DF924111463D0D089EB3700DB6333A08.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:07:24:26:61:64:68:3c:d3:43:69:b6:1d:83:bc:19:9e:13:
         8e:49:77:4b:e6:07:1e:b2:d6:48:4e:64:2a:32:bd:b5:94:bc:
         5a:af:8e:d8:75:e6:3e:ca:6b:aa:cd:4c:27:44:6e:fc:7e:7e:
         5f:19:e4:e5:61:6b:1d:02:c2:16:af:2b:4c:a0:2d:c0:c8:c0:
         cc:a0:46:70:ba:ff:b8:11:c9:5f:86:e2:65:b3:c2:48:4f:51:
         36:41:52:da:cc:c3:3d:57:2f:90:92:e2:a9:eb:19:46:96:0f:
         cc:ce:93:86:af:21:5f:db:06:77:d7:1f:ce:38:16:9a:b9:0b:
         86:13:59:19:21:1b:7e:a5:da:f0:2a:bc:bc:e0:2f:9b:41:f1:
         3f:41:c5:df:6f:c7:a9:54:b2:2c:01:e2:2c:22:ca:ad:4e:40:
         e9:0b:a8:5f:0e:8c:2b:14:c0:8e:32:16:fe:5b:60:b2:a0:47:
         51:85:51:f0:3a:36:26:83:e4:09:ff:2b:ef:2b:1c:e6:d1:d6:
         9c:85:48:2f:ad:10:62:1c:9a:d9:66:e0:16:5f:8e:c6:e7:e8:
         8e:39:f3:06:61:e0:63:06:3f:bc:6d:cc:d0:5d:4a:6a:7b:63:
         76:9a:93:8c:5e:e9:e6:2f:17:3e:fe:cc:51:b0:dc:db:02:95:
         2f:67:e5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:11:40 2025 by rpki-client