This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4epocpKUp1Q9fFFL4QGa9CnsLFZyrJ4Xn4uFGj8qxT7E/0/BBAC19E92B4587A3AD58AD449516DFD76BB3CD73.mft
File:                     BBAC19E92B4587A3AD58AD449516DFD76BB3CD73.mft (raw, json)
Hash identifier:          FoQBZli34pR9Rmn2C/Mzd/nku8Mfk/DmHCp7VpRZFBk=
Subject key identifier:   2A:1C:4B:69:0D:16:13:D3:58:EB:2B:BE:85:84:C2:AC:9B:3E:01:C0
Authority key identifier: BB:AC:19:E9:2B:45:87:A3:AD:58:AD:44:95:16:DF:D7:6B:B3:CD:73
Certificate issuer:       /CN=BBAC19E92B4587A3AD58AD449516DFD76BB3CD73
Certificate serial:       1265B934D666EDF413CED9FA0D44AEAC17146BDE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBAC19E92B4587A3AD58AD449516DFD76BB3CD73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4epocpKUp1Q9fFFL4QGa9CnsLFZyrJ4Xn4uFGj8qxT7E/0/BBAC19E92B4587A3AD58AD449516DFD76BB3CD73.mft
Manifest number:          031B
Signing time:             Sat 06 Dec 2025 13:04:00 +0000
Manifest this update:     Sat 06 Dec 2025 12:59:00 +0000
Manifest next update:     Sun 07 Dec 2025 14:04:00 +0000
Files and hashes:         1: 323830343a346232343a3a2f33322d3438203d3e20323637323836.roa (hash: +86fR/6zUDvEHqu8wzco41oJOMSvCX/lLIZUMRvsLss=)
                          2: BBAC19E92B4587A3AD58AD449516DFD76BB3CD73.crl (hash: h55DM5LbtoQHf+DKV63l86HcyVQ8yyEreQCgO8R7P/w=)
                          3: 34352e3233332e382e302f32322d3234203d3e20323637323836.roa (hash: q/IVs5DaCPor7CoHdrT9iz4OEi9SGQ2URXHVbCaew/g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4epocpKUp1Q9fFFL4QGa9CnsLFZyrJ4Xn4uFGj8qxT7E/0/BBAC19E92B4587A3AD58AD449516DFD76BB3CD73.crl
                          rsync://rpki-repo.registro.br/repo/4epocpKUp1Q9fFFL4QGa9CnsLFZyrJ4Xn4uFGj8qxT7E/0/BBAC19E92B4587A3AD58AD449516DFD76BB3CD73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBAC19E92B4587A3AD58AD449516DFD76BB3CD73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 14:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:65:b9:34:d6:66:ed:f4:13:ce:d9:fa:0d:44:ae:ac:17:14:6b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBAC19E92B4587A3AD58AD449516DFD76BB3CD73
        Validity
            Not Before: Dec  6 12:59:00 2025 GMT
            Not After : Dec  7 14:04:00 2025 GMT
        Subject: CN=2A1C4B690D1613D358EB2BBE8584C2AC9B3E01C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a6:77:0d:09:5d:c2:30:3d:ea:8e:8e:4a:2a:
                    a3:53:60:bc:bf:89:ba:fb:4f:93:f0:86:3d:ed:10:
                    3a:f3:c2:fe:a5:de:73:9d:34:dd:1e:82:44:f0:17:
                    f2:92:24:68:16:ee:7c:05:b8:10:d8:a1:e5:f0:d0:
                    6d:7a:ab:e6:6b:48:9e:07:ab:27:ae:a1:4f:8c:27:
                    01:82:b8:29:b2:9b:ae:70:cd:40:02:02:f7:f4:90:
                    b8:bf:e7:7d:fc:cb:9f:f1:77:02:7e:f3:2b:4a:da:
                    6b:f4:dd:47:9f:40:27:32:87:b0:47:36:cc:a7:06:
                    04:33:14:cc:9c:b5:c4:1a:7f:82:cf:b1:bb:f1:97:
                    ed:83:2a:bb:af:c4:ba:b1:6d:d7:5c:ef:45:b4:92:
                    76:5c:29:68:32:da:b5:11:7a:c7:a8:e6:d2:d8:9b:
                    af:70:06:a4:18:aa:f2:2b:70:1e:e5:6e:d7:1a:ae:
                    38:5f:05:9f:2c:c6:5c:5e:9b:c4:a5:04:74:37:8a:
                    dc:22:de:a5:72:cf:8d:06:7a:30:12:7c:9c:8c:de:
                    6b:f1:c7:50:6e:03:e5:6c:85:e9:82:08:75:04:24:
                    6d:dc:a2:9c:74:c5:52:4c:6e:a2:1d:d2:a6:9e:1f:
                    d3:85:fc:c6:79:5b:32:c0:6e:72:a4:11:41:aa:77:
                    88:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:1C:4B:69:0D:16:13:D3:58:EB:2B:BE:85:84:C2:AC:9B:3E:01:C0
            X509v3 Authority Key Identifier:
                keyid:BB:AC:19:E9:2B:45:87:A3:AD:58:AD:44:95:16:DF:D7:6B:B3:CD:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4epocpKUp1Q9fFFL4QGa9CnsLFZyrJ4Xn4uFGj8qxT7E/0/BBAC19E92B4587A3AD58AD449516DFD76BB3CD73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBAC19E92B4587A3AD58AD449516DFD76BB3CD73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4epocpKUp1Q9fFFL4QGa9CnsLFZyrJ4Xn4uFGj8qxT7E/0/BBAC19E92B4587A3AD58AD449516DFD76BB3CD73.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:d9:e4:ed:93:d6:2a:86:f8:5a:bf:30:ec:46:89:6e:f9:d7:
         d8:05:21:33:d3:06:aa:49:78:2a:ec:76:85:e2:05:cf:6d:52:
         8b:5e:ef:5b:9f:da:24:1e:f4:67:03:cd:c6:c9:79:38:14:14:
         df:b4:0c:01:09:97:01:7b:a9:e9:2b:09:8f:54:27:aa:16:4b:
         d9:58:af:63:49:18:ee:0d:70:96:5a:0d:04:b6:a7:11:45:35:
         b8:fa:b1:69:58:f9:2c:b5:0d:8f:b6:78:51:1d:fe:86:e6:db:
         9d:b0:dd:f9:42:25:37:72:a9:68:be:5a:60:3a:b5:91:2a:cd:
         e4:30:9d:78:ce:76:98:57:07:f3:39:b8:62:40:c5:ff:0d:3d:
         06:bc:04:bb:31:7f:d4:f4:6c:4d:af:9b:27:b4:39:a9:76:89:
         a9:e1:f1:b0:6b:48:49:ca:f4:2d:fe:4d:14:d1:75:3d:c1:cc:
         22:52:36:0b:1d:7e:87:3a:d3:82:d7:18:59:50:94:42:d5:b7:
         cc:b1:2c:21:a3:f4:54:be:4e:24:04:87:ae:02:d5:e0:eb:4c:
         1b:22:3c:32:31:22:d7:58:26:0b:cd:fd:00:64:39:ea:c5:c2:
         4d:12:69:6b:25:b1:f4:1f:d5:76:9b:60:29:72:4d:e8:32:54:
         e3:89:42:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:54:24 2025 by rpki-client