This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.mft
File:                     C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.mft (raw, json)
Hash identifier:          mFdbP0BJph7Q0cys9/9FXqPLk0QxiloN+uYCoETQwIo=
Subject key identifier:   96:2E:F5:C2:47:11:D9:31:5C:7A:8B:86:53:E3:58:C0:11:A4:F6:E2
Authority key identifier: C3:29:B9:ED:4E:5F:36:AA:39:0B:AE:0F:D9:C5:41:28:D4:90:DC:4F
Certificate issuer:       /CN=C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F
Certificate serial:       44B17156E823C0842FB9780FD86C3AFCBD2330C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.mft
Manifest number:          01B2
Signing time:             Sat 06 Dec 2025 13:59:28 +0000
Manifest this update:     Sat 06 Dec 2025 13:54:28 +0000
Manifest next update:     Sun 07 Dec 2025 17:20:28 +0000
Files and hashes:         1: 3137302e38332e3139362e302f32322d3234203d3e20323636343736.roa (hash: 2OZaK3XVHDYJW95YQoRuXz+veAnFcZdofQ9N3sdy+d4=)
                          2: C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.crl (hash: dvSAD6TLIqoFLd9t3w0qBEyO1QKOetLvIOKyCKgzHkY=)
                          3: 323830343a333836633a3a2f33322d3336203d3e20323636343736.roa (hash: 2GvlRynMXEvu3A0kCDLQB+Gp55iYyLUR7ENalGcUhBc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.crl
                          rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 17:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b1:71:56:e8:23:c0:84:2f:b9:78:0f:d8:6c:3a:fc:bd:23:30:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F
        Validity
            Not Before: Dec  6 13:54:28 2025 GMT
            Not After : Dec  7 17:20:28 2025 GMT
        Subject: CN=962EF5C24711D9315C7A8B8653E358C011A4F6E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f0:c6:c0:0c:c4:ff:9e:29:0f:61:84:63:06:
                    d7:87:ac:1e:bb:62:fd:74:0c:33:6f:e5:c3:ad:80:
                    57:b0:27:84:75:3b:19:cf:8d:05:19:2f:ed:19:24:
                    19:ca:c0:56:ce:f4:f2:85:e7:32:ae:93:dc:5b:78:
                    fc:06:2f:df:52:42:67:52:49:a7:5f:9c:70:b4:42:
                    49:07:41:04:34:76:ba:94:3f:d5:2b:7e:b7:d7:56:
                    75:ac:5e:25:8d:a0:ec:5b:5a:9c:ea:06:ef:ea:cc:
                    8d:7b:0f:8b:57:6d:72:25:ce:58:d3:20:92:c4:72:
                    f6:ea:5a:03:e4:36:01:a4:79:7a:65:25:df:28:5f:
                    3e:b1:8d:69:c5:b5:08:24:8d:55:ce:0f:ed:ff:14:
                    1d:97:ac:c9:c8:9c:f9:71:df:64:78:05:36:d9:bd:
                    c9:05:bc:9e:1e:10:d9:8e:1d:00:ec:18:77:48:85:
                    04:96:d0:4d:10:51:37:b8:dc:39:e1:95:2f:ee:09:
                    1d:58:45:97:dc:d3:7c:fa:56:c1:34:4a:8d:9c:83:
                    b6:62:9a:9d:12:7e:af:fc:75:9d:d8:87:5d:4e:b1:
                    48:a4:c4:d9:df:fd:e4:70:e2:0b:b2:15:c8:a8:18:
                    b0:a9:2e:43:85:6d:6c:90:92:23:c6:d8:18:0b:3e:
                    7c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:2E:F5:C2:47:11:D9:31:5C:7A:8B:86:53:E3:58:C0:11:A4:F6:E2
            X509v3 Authority Key Identifier:
                keyid:C3:29:B9:ED:4E:5F:36:AA:39:0B:AE:0F:D9:C5:41:28:D4:90:DC:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:f0:b8:92:53:12:5a:3f:8a:c1:cb:65:39:87:f0:e1:2c:72:
         41:85:c7:2d:a7:22:93:d6:8b:65:2b:6d:6c:db:96:85:7f:d1:
         9d:ea:59:6b:84:cb:25:80:c9:dc:64:b3:50:6e:65:ce:49:da:
         a9:40:3a:a8:d9:fd:93:6b:b8:7e:da:42:36:e7:65:b4:9d:97:
         ba:9a:55:20:2b:17:1a:6c:86:df:90:5e:4c:44:33:f3:cc:2c:
         37:63:73:d8:11:d4:08:44:e8:cb:76:f0:29:7c:05:20:13:28:
         0c:5b:01:11:6c:41:cd:28:bb:87:e6:ea:bf:4e:08:ff:45:f1:
         f9:13:8b:53:21:9e:d6:ad:e5:88:1d:e5:07:5a:3d:02:b6:d6:
         4b:a2:fc:76:e8:99:3c:f7:ec:2d:03:71:b0:03:3e:3d:e4:a1:
         87:34:09:e4:73:8d:8a:b9:72:05:89:d8:b8:25:7f:2d:6a:27:
         8b:93:ab:09:0a:e6:b0:68:c3:d0:25:d1:35:ec:aa:4a:e0:21:
         71:cd:8c:47:06:b3:e0:60:e8:25:5e:91:9d:61:53:3f:0a:ac:
         a0:cc:3c:7e:bc:3a:bc:90:c0:b1:1b:4c:5a:59:6a:3c:bc:9d:
         81:3b:d4:f4:66:5d:12:da:27:05:92:5b:c9:5d:04:45:6c:c7:
         e9:c5:08:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:28:43 2025 by rpki-client