This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/694E467AB1724A6A93118B4CF4A776D05EEBCCE0.mft
File:                     694E467AB1724A6A93118B4CF4A776D05EEBCCE0.mft (raw, json)
Hash identifier:          C5h8I0VE1pzU6Sf39jbXSTYBzoF8ZmlOVRWvajZuBUY=
Subject key identifier:   AF:57:A0:41:98:D2:04:E1:2F:F2:B4:4C:41:83:18:21:C1:D6:DB:50
Authority key identifier: 69:4E:46:7A:B1:72:4A:6A:93:11:8B:4C:F4:A7:76:D0:5E:EB:CC:E0
Certificate issuer:       /CN=694E467AB1724A6A93118B4CF4A776D05EEBCCE0
Certificate serial:       391CC32118E0C86CCA6EE0281FE64B3BCB64E06C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694E467AB1724A6A93118B4CF4A776D05EEBCCE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/694E467AB1724A6A93118B4CF4A776D05EEBCCE0.mft
Manifest number:          031A
Signing time:             Fri 05 Dec 2025 23:58:56 +0000
Manifest this update:     Fri 05 Dec 2025 23:53:56 +0000
Manifest next update:     Sun 07 Dec 2025 00:25:56 +0000
Files and hashes:         1: 323830343a313566303a3a2f33322d3438203d3e20323633343139.roa (hash: /QXUyOaCXcCHzdPGyvXW4DwkJ+vHltr5OMuOpdVJ344=)
                          2: 694E467AB1724A6A93118B4CF4A776D05EEBCCE0.crl (hash: JQo91kQfPfVKRCEjMUSYijIK3ONbLm9MCt+aA2MtIyM=)
                          3: 3137372e3138352e3135322e302f32312d3234203d3e20323633343139.roa (hash: Uek3JTGzjZvUJodcB1F+yEOJo719BBnzNvO7w34Mx6I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/694E467AB1724A6A93118B4CF4A776D05EEBCCE0.crl
                          rsync://rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/694E467AB1724A6A93118B4CF4A776D05EEBCCE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694E467AB1724A6A93118B4CF4A776D05EEBCCE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 00:25:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:1c:c3:21:18:e0:c8:6c:ca:6e:e0:28:1f:e6:4b:3b:cb:64:e0:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694E467AB1724A6A93118B4CF4A776D05EEBCCE0
        Validity
            Not Before: Dec  5 23:53:56 2025 GMT
            Not After : Dec  7 00:25:56 2025 GMT
        Subject: CN=AF57A04198D204E12FF2B44C41831821C1D6DB50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:83:43:e0:4f:bb:ca:a8:58:41:6f:cb:e4:cc:
                    5e:b0:8b:3a:cf:9f:02:65:14:0d:8b:1d:c0:51:fc:
                    bf:dc:ac:b0:67:82:d6:db:bf:09:aa:ff:f3:9d:25:
                    3f:86:54:f6:74:14:ca:2a:67:f6:3c:50:59:b6:5a:
                    2d:5b:f0:89:d0:70:c4:ea:05:0c:20:cb:70:7a:76:
                    b5:55:44:ef:a5:02:d7:7a:e1:b7:af:02:ac:e1:97:
                    2b:11:ee:28:e5:bf:0d:57:97:95:7c:b9:25:b1:8c:
                    35:1d:b1:0c:e5:15:8e:7e:dd:18:4a:58:4b:69:54:
                    d6:cd:b7:12:5e:a2:69:16:4f:d4:51:0e:2c:d4:09:
                    3d:b2:6e:6f:93:f7:fa:7b:88:9c:97:66:c1:3c:78:
                    5a:70:d3:65:ce:06:0f:3c:88:7b:c6:2b:0a:d6:17:
                    13:fc:2c:7a:cd:56:78:ef:1a:d0:33:6f:53:d4:cf:
                    8b:66:18:82:49:7a:48:95:6b:3f:c8:78:13:5b:12:
                    6b:fe:33:41:21:42:d4:2a:48:8f:66:c7:5b:35:70:
                    7e:8a:6b:3e:65:25:dc:e0:03:0b:6e:35:4e:be:b5:
                    9c:cb:1e:6b:8f:94:0c:68:77:8d:2a:56:f6:72:ae:
                    bc:d0:61:06:a2:55:ea:ed:67:19:ec:7b:df:d4:9b:
                    26:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:57:A0:41:98:D2:04:E1:2F:F2:B4:4C:41:83:18:21:C1:D6:DB:50
            X509v3 Authority Key Identifier:
                keyid:69:4E:46:7A:B1:72:4A:6A:93:11:8B:4C:F4:A7:76:D0:5E:EB:CC:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/694E467AB1724A6A93118B4CF4A776D05EEBCCE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694E467AB1724A6A93118B4CF4A776D05EEBCCE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/694E467AB1724A6A93118B4CF4A776D05EEBCCE0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:51:91:5e:81:9d:cf:3d:4b:58:28:fc:ac:45:a9:84:1d:ba:
         84:6c:37:8c:61:81:26:27:d9:01:80:41:38:c3:f1:62:b1:6c:
         e3:b5:37:53:a7:c1:fd:a3:0f:ac:b6:16:86:ff:e2:b5:ad:ef:
         59:5f:e5:fa:4a:76:d2:06:cb:89:5c:60:0d:1c:36:57:14:b2:
         aa:3c:e0:c2:26:0a:d0:6e:27:b6:ea:14:c8:a0:f1:62:cd:cc:
         3e:a6:17:e0:94:2c:02:34:51:90:0f:01:96:a2:e8:20:75:d6:
         75:ff:1b:0b:13:c8:19:7b:73:34:6e:a1:1f:0c:af:0b:e2:34:
         78:fa:c0:05:67:5e:c9:91:54:08:f4:1d:1c:8c:ec:64:1f:6c:
         20:93:ba:da:f2:f6:9b:0b:ab:ca:c3:6a:ab:58:72:0c:e3:4e:
         63:10:b5:c7:1a:2e:1d:44:7c:b2:4d:9e:60:3b:19:c4:8e:52:
         43:eb:df:11:93:60:26:ff:ff:6c:fc:da:41:56:5f:da:76:e2:
         b3:36:3b:96:b9:8c:a8:17:f5:d0:85:74:24:f4:59:bf:d5:6b:
         a6:1d:da:1a:c0:1e:29:8e:5d:98:29:d3:cb:18:85:7f:c6:93:
         6b:5c:0f:fd:14:e5:a4:9a:ad:b4:08:2f:22:ab:3c:fd:1f:ad:
         10:b5:58:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:34:56 2025 by rpki-client