This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.mft
File:                     B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.mft (raw, json)
Hash identifier:          iw5KMxVX+xC/HCPSg500FcjF2byaIGhLlByM1r3Ock4=
Subject key identifier:   BF:5C:F5:2C:38:B0:3C:08:CF:1E:53:84:AD:BA:3B:B7:EF:D6:A4:BE
Authority key identifier: B4:02:2F:9C:6A:00:6A:A6:CF:0F:6C:3A:F5:C0:A2:4B:BE:14:B0:A2
Certificate issuer:       /CN=B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2
Certificate serial:       2505E3DF262BEB0B7E98F9B6A76E6A1AB36DF132
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.mft
Manifest number:          032C
Signing time:             Fri 05 Dec 2025 21:13:56 +0000
Manifest this update:     Fri 05 Dec 2025 21:08:56 +0000
Manifest next update:     Sat 06 Dec 2025 23:29:56 +0000
Files and hashes:         1: 323830343a336235383a3a2f33322d3438203d3e20323636313433.roa (hash: YrJVt/+CP945BO5Kr5+xUkFP3RBB6Iw2yWnCDr5yJEc=)
                          2: 3136302e32302e32302e302f32322d3234203d3e20323636313433.roa (hash: OomXrdPs8dELsiPSTDiVuKxLUJ9ztg6/tT72Pi346+g=)
                          3: B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.crl (hash: 2iWfX2kv3n/GTPedxCqAzvqKwtjN4+JL4KpuJ173Inw=)
                          4: 3138362e3235312e3230362e302f32332d3332203d3e20323636313433.roa (hash: u0tPZ9yzR5yombDc/pmeMBai97VsuYa5H3q+ZbB9dfA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.crl
                          rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 23:29:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:05:e3:df:26:2b:eb:0b:7e:98:f9:b6:a7:6e:6a:1a:b3:6d:f1:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2
        Validity
            Not Before: Dec  5 21:08:56 2025 GMT
            Not After : Dec  6 23:29:56 2025 GMT
        Subject: CN=BF5CF52C38B03C08CF1E5384ADBA3BB7EFD6A4BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c7:90:73:6e:84:26:5c:9f:44:7b:93:d4:f8:
                    eb:28:98:aa:ad:fa:f8:57:96:d2:db:d5:05:49:a3:
                    86:b0:48:b5:df:f3:94:b6:ec:8e:df:98:0d:fc:f5:
                    bb:37:1a:1b:8e:1b:01:bb:03:1a:02:f7:61:d9:cf:
                    f5:5e:41:ae:8c:37:de:d6:e6:39:3d:e2:1c:22:b7:
                    2b:44:47:89:7d:c2:7c:ca:5d:c2:d9:9e:3b:d6:24:
                    50:96:ca:dd:d0:66:94:66:20:aa:34:0d:fe:82:85:
                    87:76:eb:57:aa:30:93:04:ac:b1:79:e2:75:4d:07:
                    91:e6:3b:07:4a:d7:db:56:3d:61:0b:7b:df:77:0a:
                    ad:25:50:8d:e9:53:a7:57:ef:54:66:a4:80:b1:ec:
                    4f:80:5b:81:83:e3:a1:4c:8e:3d:c6:c6:b2:f8:7c:
                    eb:61:74:e6:32:f3:78:18:1c:aa:92:d3:5e:5b:0b:
                    68:5b:07:fc:62:87:98:86:68:ba:33:90:3b:ab:b0:
                    60:b8:1e:8a:56:35:51:2b:a3:34:d9:0a:a6:79:fa:
                    ed:1b:77:bb:0e:c6:8d:07:5d:79:fd:b3:e3:3c:c6:
                    43:42:36:47:87:ad:3e:41:9b:ad:df:c0:c0:f4:96:
                    81:3a:d0:12:ce:18:5d:e7:f7:55:13:34:aa:d2:70:
                    81:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:5C:F5:2C:38:B0:3C:08:CF:1E:53:84:AD:BA:3B:B7:EF:D6:A4:BE
            X509v3 Authority Key Identifier:
                keyid:B4:02:2F:9C:6A:00:6A:A6:CF:0F:6C:3A:F5:C0:A2:4B:BE:14:B0:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:9e:03:3d:3b:9f:e1:ce:27:80:34:df:79:c6:f9:f4:7e:e7:
         4a:08:df:b5:67:ca:a2:e7:29:3f:e6:a0:a3:46:4b:4d:5f:34:
         d6:f8:e1:44:67:a9:f5:c8:6e:39:2b:bc:e4:b1:e0:50:1f:24:
         84:60:0b:f4:97:2a:57:66:20:82:bf:7a:a9:4b:6c:a2:cb:3a:
         c7:9e:fc:ef:83:b7:73:79:8f:85:37:b7:16:f3:e6:63:56:f3:
         e3:f8:29:79:7f:bb:7a:3f:45:80:09:0c:c4:35:64:9e:94:3f:
         88:1e:72:4a:e7:38:9b:01:6c:97:6d:bd:24:ab:83:52:9f:19:
         18:14:07:0b:ed:98:55:d9:15:d6:a1:58:1d:c1:c5:44:17:a3:
         77:9f:80:b5:a4:ec:27:cb:0e:8f:85:53:c2:f8:42:c7:0a:27:
         27:52:63:7c:35:ee:1f:72:c0:9e:db:74:35:60:87:e6:c0:33:
         57:37:4e:f8:b2:e5:99:63:e4:2d:28:a5:02:67:ef:d7:21:c2:
         99:f4:16:99:06:2d:2c:f1:ff:19:04:44:59:87:fc:d6:d6:69:
         83:c9:44:ba:ff:c8:1b:60:9a:00:fe:c3:8b:5a:4f:40:04:d4:
         a4:fd:81:2a:d5:20:19:a0:62:ad:eb:45:d7:f0:0b:94:28:67:
         d7:09:14:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:33:03 2025 by rpki-client