This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.mft
File:                     947E29F37C387A9590C135AE83DBF68B102E9E57.mft (raw, json)
Hash identifier:          AUGDUogZ6Fl0g+R17Czgl8SOJPcUgJU2UDpXx4iSqME=
Subject key identifier:   BB:F2:E7:FE:AA:81:9F:E0:67:16:63:63:24:54:49:3B:E3:E6:50:B2
Authority key identifier: 94:7E:29:F3:7C:38:7A:95:90:C1:35:AE:83:DB:F6:8B:10:2E:9E:57
Certificate issuer:       /CN=947E29F37C387A9590C135AE83DBF68B102E9E57
Certificate serial:       52A4C017D22F323D6A41BCD06D6091EB0CB1750B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/947E29F37C387A9590C135AE83DBF68B102E9E57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.mft
Manifest number:          66
Signing time:             Fri 05 Dec 2025 23:10:59 +0000
Manifest this update:     Fri 05 Dec 2025 23:05:59 +0000
Manifest next update:     Sun 07 Dec 2025 00:50:59 +0000
Files and hashes:         1: 947E29F37C387A9590C135AE83DBF68B102E9E57.crl (hash: KJltqYKqDNVp6zZGtPKM/28m+nSRI2SeUxVyHQPRYyY=)
                          2: 3137302e38332e3133322e302f32322d3332203d3e20323632353838.roa (hash: 9rOtV+9PL/YX2ts7D12ytVbYuXEy8nUL3xSV2wPxy7g=)
                          3: 3137372e37352e34382e302f32302d3332203d3e20323632353838.roa (hash: g+BQjnshu/T89iCxLxgBpkKWO5lfsmAPBro5ZFYgeKs=)
                          4: 323830343a323930343a3a2f33322d313238203d3e20323632353838.roa (hash: Ql6MXz7sNhTEaV2AQIKeVREm8sq9lGZYeq9HnqYoCt0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.crl
                          rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/947E29F37C387A9590C135AE83DBF68B102E9E57.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 00:50:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:a4:c0:17:d2:2f:32:3d:6a:41:bc:d0:6d:60:91:eb:0c:b1:75:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=947E29F37C387A9590C135AE83DBF68B102E9E57
        Validity
            Not Before: Dec  5 23:05:59 2025 GMT
            Not After : Dec  7 00:50:59 2025 GMT
        Subject: CN=BBF2E7FEAA819FE0671663632454493BE3E650B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:39:38:43:7c:a6:41:d0:25:6a:bf:76:bf:c9:
                    19:e3:3c:98:ed:ab:43:3b:91:6a:21:76:50:69:23:
                    01:89:3c:90:d2:62:d5:bc:1b:c6:51:e3:18:b2:42:
                    b4:50:aa:60:a6:96:54:6a:2d:88:4d:33:90:76:a4:
                    05:16:ce:ea:f3:87:1d:7f:3e:a9:cf:dc:34:dc:69:
                    c7:6c:13:61:94:68:da:a9:48:ee:64:33:d7:bb:8f:
                    24:fc:8b:fe:f0:97:67:b7:f5:52:47:fe:9b:c3:79:
                    07:20:17:e6:66:54:77:83:83:fc:70:fa:5e:2a:40:
                    bc:cf:97:83:44:c4:69:39:b3:b3:df:75:fe:0f:ea:
                    86:a0:a9:14:e4:89:48:46:be:43:15:29:7b:5d:18:
                    bb:56:ee:55:ea:66:a6:8d:1f:dd:45:fe:e4:b0:01:
                    1f:31:d1:8d:20:83:9e:8d:a2:b2:41:6a:6f:45:9e:
                    ec:f7:19:39:6e:51:1c:e3:4b:a1:88:8d:55:0a:aa:
                    79:a8:7e:fd:45:6e:41:89:6c:e9:73:73:ba:31:d9:
                    35:e3:f2:6c:b1:13:28:83:cc:78:d6:ee:b4:44:a4:
                    29:48:35:bd:6e:44:d4:b1:a3:8c:a6:2f:c5:79:a2:
                    b7:5b:a8:83:fa:68:1a:d1:e7:07:51:ad:95:16:f2:
                    43:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F2:E7:FE:AA:81:9F:E0:67:16:63:63:24:54:49:3B:E3:E6:50:B2
            X509v3 Authority Key Identifier:
                keyid:94:7E:29:F3:7C:38:7A:95:90:C1:35:AE:83:DB:F6:8B:10:2E:9E:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/947E29F37C387A9590C135AE83DBF68B102E9E57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:cb:9c:e6:db:f5:fc:59:63:34:45:25:e0:38:c4:91:c0:d3:
         d9:1a:50:ab:ae:57:8d:4a:7b:12:8a:d7:c1:30:d7:2e:7e:60:
         68:02:c9:4f:c8:88:50:bf:09:05:cc:13:3c:34:ba:20:80:cc:
         3a:2c:7e:5b:cc:7e:6f:b2:cb:6b:a0:e3:da:08:78:5e:e0:af:
         11:a2:48:ab:17:df:35:b7:46:3b:fe:4b:f9:53:d3:a7:c0:66:
         44:8e:4f:50:a6:39:1a:f6:21:8d:4e:71:bb:be:6b:2f:cc:a2:
         0f:81:cc:8e:60:92:e7:60:18:49:9e:21:71:e9:c9:69:d1:5c:
         2c:15:b2:91:e7:30:b0:e3:b1:3d:48:19:86:56:99:17:d7:ae:
         60:e7:42:e7:17:aa:4d:cc:f3:52:8f:34:4a:a2:8a:c6:f8:e4:
         47:c0:d8:95:b3:1b:a9:b2:a1:dc:e2:27:3f:55:cd:61:1d:69:
         50:aa:98:3b:ee:c3:40:16:13:89:c0:c1:d3:ea:16:65:85:06:
         d3:69:48:8b:54:35:61:49:dc:3f:79:52:c9:97:b8:80:f7:f1:
         de:e0:ef:d6:56:71:53:86:af:62:5c:43:58:36:04:80:c1:11:
         0c:3a:16:e6:ee:44:9a:72:4a:ac:c3:03:7a:2e:c4:20:da:9b:
         b7:2d:0c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:44:42 2025 by rpki-client