This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.mft
File:                     B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.mft (raw, json)
Hash identifier:          st9fokCcpoXWTbIDLOU4Zx82MGv5RGUJ1iSZ9saJ/5A=
Subject key identifier:   43:A7:82:00:A8:EA:73:F9:CC:80:17:DE:15:BF:77:F7:17:4A:61:7A
Authority key identifier: B4:35:88:C8:AB:54:53:3C:6B:AF:EC:39:CA:9E:C4:E2:6E:05:D7:7B
Certificate issuer:       /CN=B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B
Certificate serial:       5CB1751055DE223998010195BE39438A96A2242E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.mft
Manifest number:          036D
Signing time:             Sat 06 Dec 2025 06:00:00 +0000
Manifest this update:     Sat 06 Dec 2025 05:55:00 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:00 +0000
Files and hashes:         1: 3137392e3132372e38302e302f32302d3234203d3e203238323932.roa (hash: fWDx1Fi6mw6Ca6ZucRKlJCI/fMGdFESCD3/Jzd0xj/o=)
                          2: B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.crl (hash: NNUX6PnLRDHgPHoVQtCLdyzpdcwbM5oXegp6Zc/pnwg=)
                          3: 3137372e35342e34382e302f32302d3234203d3e203238323932.roa (hash: 40IYTjHiZO7EvGhruJ83FGAT4mQNUc8uvivoD/9QYP0=)
                          4: 3138392e32382e3137362e302f32302d3234203d3e203238323932.roa (hash: Bnl9bp41rgXoRcKOfyv6fT3qi9QRw6WJNdIPgdsg8NI=)
                          5: 3138392e3132342e3131322e302f32302d3234203d3e203238323932.roa (hash: Iq9Imp3qaQEaGFQWqL4EpTLVcZyaAgjQqWljK8thbFo=)
                          6: 323030313a313261303a3a2f33322d3438203d3e203238323932.roa (hash: dKQt4v2JdWqatl/R0rZkWZ5H3UnSmexxO6GH5f47Zss=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.crl
                          rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:b1:75:10:55:de:22:39:98:01:01:95:be:39:43:8a:96:a2:24:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B
        Validity
            Not Before: Dec  6 05:55:00 2025 GMT
            Not After : Dec 13 06:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fe:0b:52:e8:b4:27:73:eb:57:47:be:b7:fc:
                    54:b4:c0:75:01:1d:dd:1d:80:db:5f:52:be:97:a3:
                    0d:4d:33:ac:c0:e2:90:2e:f2:f0:97:c4:d0:9d:6a:
                    32:7d:9b:da:6f:b3:04:1e:11:bd:b1:2c:e7:85:26:
                    6b:f6:1c:6f:ad:fb:a4:ae:c3:49:32:ff:44:fe:c1:
                    09:f5:97:2d:96:a3:ce:6e:42:77:17:93:f7:cc:5b:
                    e9:e4:a8:3b:0a:70:32:9a:23:b6:18:c8:97:3c:a2:
                    c7:e4:8d:0c:de:6a:76:5e:b8:53:5b:51:9f:97:cc:
                    17:09:aa:2a:fe:1b:d6:4c:22:94:ba:60:50:d4:26:
                    51:b8:8d:8b:47:1e:6b:9b:bd:a7:8f:e4:b5:f6:e7:
                    74:3c:b5:e5:e0:4e:a8:a7:28:2c:f6:6f:1f:c9:5a:
                    de:2f:63:d2:d3:7b:14:49:77:b9:f1:e3:05:3e:f4:
                    c2:73:53:50:54:0c:31:f2:81:aa:8b:fa:2f:78:aa:
                    ff:62:16:da:4e:4d:f5:dc:03:9d:44:24:7f:c2:e5:
                    2f:9c:c4:d4:ce:21:80:36:b1:55:d6:cc:73:4c:18:
                    31:0c:01:ec:00:2d:40:c0:46:3d:63:9d:6e:29:8e:
                    ce:0a:78:c2:67:f8:c6:67:0b:ec:0d:f6:2b:b7:40:
                    c0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A7:82:00:A8:EA:73:F9:CC:80:17:DE:15:BF:77:F7:17:4A:61:7A
            X509v3 Authority Key Identifier:
                keyid:B4:35:88:C8:AB:54:53:3C:6B:AF:EC:39:CA:9E:C4:E2:6E:05:D7:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:de:84:2b:09:98:b8:3a:7a:51:87:c7:4b:08:49:b3:d2:94:
         98:1a:f7:ce:fd:ac:75:5c:53:a6:26:6e:e1:72:5f:7c:d6:5a:
         e6:5f:5b:44:45:f2:ad:53:e9:07:8c:e6:c3:8a:04:9e:28:52:
         af:bf:48:b6:17:f9:28:f5:c1:df:49:68:52:e1:bc:b9:a8:3a:
         76:4d:9b:bf:d5:92:ba:80:c7:08:e5:76:61:b4:89:3c:15:26:
         97:dc:c1:34:a9:9d:4a:e7:e0:b0:f2:7b:fb:0f:13:12:e0:f7:
         21:77:49:9e:4c:c1:26:9d:60:29:8c:79:20:71:f6:80:5a:4e:
         41:e6:a3:23:6a:5f:12:d1:b6:86:47:42:68:43:16:7d:cd:af:
         35:9a:36:f8:3c:b4:e3:07:5a:50:e7:32:2d:96:73:6e:b8:10:
         5a:11:99:dc:07:06:45:e6:39:b3:45:c6:88:00:af:00:f0:89:
         2f:dc:57:49:db:76:85:d0:92:31:a6:74:e3:4a:4c:3d:66:05:
         df:9e:de:d8:d9:a5:4d:e4:89:11:17:ec:bf:34:26:a5:c4:a7:
         49:20:40:32:30:da:63:93:d2:5d:0a:b1:72:4e:28:9c:8a:60:
         0e:29:b8:1c:f1:3c:86:87:c3:bf:b6:58:38:f5:dc:bf:6d:1b:
         20:9d:b6:f1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:19:48 2025 by rpki-client