This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/0/13859B0BB4F0468D0BA8B5FE506B90E1ACC1F804.mft
File:                     13859B0BB4F0468D0BA8B5FE506B90E1ACC1F804.mft (raw, json)
Hash identifier:          sF2BmQLQwIQwIckdK/o5A5dmvZ1/8Ze5VG7FqOyK0TE=
Subject key identifier:   7B:B9:72:C5:DF:43:69:AB:A3:FF:C1:6F:6B:D7:31:F0:72:B5:4B:6B
Authority key identifier: 13:85:9B:0B:B4:F0:46:8D:0B:A8:B5:FE:50:6B:90:E1:AC:C1:F8:04
Certificate issuer:       /CN=13859B0BB4F0468D0BA8B5FE506B90E1ACC1F804
Certificate serial:       20AEDB826422ED3E0F7A258CF7AA5128027DDC26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13859B0BB4F0468D0BA8B5FE506B90E1ACC1F804.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/0/13859B0BB4F0468D0BA8B5FE506B90E1ACC1F804.mft
Manifest number:          22
Signing time:             Fri 05 Dec 2025 22:23:46 +0000
Manifest this update:     Fri 05 Dec 2025 22:18:46 +0000
Manifest next update:     Sat 06 Dec 2025 22:45:46 +0000
Files and hashes:         1: 323830343a313138633a3a2f33322d3338203d3e203533313832.roa (hash: m0GQWwrlPymg5hoh/pfHTQ2m3Oy10jbEIsJFM/8P/og=)
                          2: 3138362e3232372e31362e302f32302d3234203d3e203533313832.roa (hash: pYMlFvNk2YpYgCY7kiT3Y4PoIoVHorMrzCTSG0MP6Fw=)
                          3: 13859B0BB4F0468D0BA8B5FE506B90E1ACC1F804.crl (hash: FGU6Gv54s1xy+hkMZqzVlmGd5OkAxV2JwbgpxNpTnAw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/0/13859B0BB4F0468D0BA8B5FE506B90E1ACC1F804.crl
                          rsync://rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/0/13859B0BB4F0468D0BA8B5FE506B90E1ACC1F804.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13859B0BB4F0468D0BA8B5FE506B90E1ACC1F804.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 22:45:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ae:db:82:64:22:ed:3e:0f:7a:25:8c:f7:aa:51:28:02:7d:dc:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13859B0BB4F0468D0BA8B5FE506B90E1ACC1F804
        Validity
            Not Before: Dec  5 22:18:46 2025 GMT
            Not After : Dec  6 22:45:46 2025 GMT
        Subject: CN=7BB972C5DF4369ABA3FFC16F6BD731F072B54B6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:14:90:50:37:8f:58:a2:db:01:48:20:5e:71:
                    7a:71:41:b7:2d:64:03:34:79:8c:04:ae:a8:cc:29:
                    6c:f4:d2:2e:85:16:c7:d9:67:fb:13:a8:b3:a9:4a:
                    01:df:d3:88:c0:08:34:52:3b:52:3c:e4:bf:b8:f8:
                    e5:a1:9d:5a:31:cb:66:01:d8:75:8a:a6:7f:40:1e:
                    8a:a1:b0:65:da:68:68:a9:ec:2a:79:5f:65:67:70:
                    1b:e9:5f:e4:e5:1d:23:58:13:30:f4:b5:87:ec:83:
                    14:1b:e8:d5:2b:5b:4c:62:94:60:a3:e3:53:56:b5:
                    87:95:be:76:05:52:5e:31:77:1c:67:32:f0:c2:d3:
                    48:34:7f:ed:5a:79:95:04:15:68:f4:60:89:bb:35:
                    39:2d:5b:6a:f8:06:df:f8:f5:2b:3f:a3:89:3f:fa:
                    4f:46:fa:c8:d3:57:33:a5:eb:f2:7a:6e:70:f0:e8:
                    d4:bd:08:91:71:44:c7:a7:e7:68:17:01:ce:2b:ab:
                    5a:e8:d5:95:bd:b6:6d:61:96:d5:ea:0b:b8:b1:d6:
                    9e:8f:2a:bc:01:67:5b:73:8a:7e:65:c5:fc:4d:54:
                    dc:84:ec:3b:1a:0b:ce:eb:32:57:f2:47:02:16:0b:
                    a2:3e:bd:2f:3b:32:c2:a2:6a:85:1c:36:ac:4e:be:
                    44:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B9:72:C5:DF:43:69:AB:A3:FF:C1:6F:6B:D7:31:F0:72:B5:4B:6B
            X509v3 Authority Key Identifier:
                keyid:13:85:9B:0B:B4:F0:46:8D:0B:A8:B5:FE:50:6B:90:E1:AC:C1:F8:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/0/13859B0BB4F0468D0BA8B5FE506B90E1ACC1F804.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13859B0BB4F0468D0BA8B5FE506B90E1ACC1F804.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/0/13859B0BB4F0468D0BA8B5FE506B90E1ACC1F804.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:53:5c:76:ed:3b:f1:8c:6b:f3:7d:d3:70:b7:49:ce:64:46:
         00:8d:db:58:79:6c:3a:52:a2:40:4a:18:5d:6b:c4:3c:dc:56:
         7c:2b:6b:f0:26:db:c1:70:4d:40:ab:8f:3f:1e:1c:d2:2c:ce:
         cc:9e:26:14:4a:96:4d:f7:31:a5:2a:84:87:4a:1f:94:03:79:
         4e:6b:98:55:cc:d3:15:26:fa:c5:cc:e5:2e:2c:79:12:37:e4:
         87:df:66:4d:b2:cd:e7:26:7a:a1:b8:f1:ce:08:14:a6:b3:78:
         e1:ee:d4:76:09:4d:77:dc:e3:d7:27:ec:3a:61:a9:4e:0e:80:
         63:42:64:4d:9d:82:8d:ac:4f:46:a7:60:48:ce:f2:ec:74:3e:
         8a:a3:e4:a8:f7:92:5f:8c:82:fd:65:b4:33:e4:0d:4d:1b:1b:
         08:2e:0c:50:32:50:14:29:3b:71:30:54:08:a4:f9:11:c3:b3:
         8f:c7:4c:43:18:e9:7f:57:6a:5e:0a:a9:83:2a:f4:6e:cf:3c:
         ef:f9:c8:ba:2d:5b:a7:e2:21:5d:7a:6c:7f:4c:61:31:ff:75:
         b7:b4:65:8c:e2:8d:40:8c:52:f7:75:3e:eb:23:ff:43:fe:58:
         69:ab:7e:6a:3f:73:7a:39:14:ec:8d:c6:9b:a9:cc:92:4b:77:
         58:df:2b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:09:33 2025 by rpki-client