This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.mft
File:                     B87E403FD04360E1BA519D841853FF5C9E675A23.mft (raw, json)
Hash identifier:          fmAqn/HWNTZNN8w0wixogPezASSDBGmBtb61Ikdwxb8=
Subject key identifier:   85:CF:23:95:3B:DD:68:BC:50:82:AC:E7:87:6E:B2:C8:BF:69:BE:9F
Authority key identifier: B8:7E:40:3F:D0:43:60:E1:BA:51:9D:84:18:53:FF:5C:9E:67:5A:23
Certificate issuer:       /CN=B87E403FD04360E1BA519D841853FF5C9E675A23
Certificate serial:       22207FBC0848897B797C2120FD2C28B29D9C3E41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87E403FD04360E1BA519D841853FF5C9E675A23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.mft
Manifest number:          033B
Signing time:             Tue 16 Dec 2025 08:10:00 +0000
Manifest this update:     Tue 16 Dec 2025 08:05:00 +0000
Manifest next update:     Wed 17 Dec 2025 10:51:00 +0000
Files and hashes:         1: 3136382e39302e3132302e302f32322d3234203d3e203533313735.roa (hash: kmPbp9SIMWkNQPWpAWYgRGrTVxQTvYRtPinUblfqjEI=)
                          2: 323830343a3161633a3a2f33322d3634203d3e203533313735.roa (hash: hthaHQ1W4Hhi7UR8B+WN+HOaWbENvNu2yu6xV3d/KEc=)
                          3: 3138362e3232352e3232342e302f32302d3234203d3e203533313735.roa (hash: 8clL3fZ/UcUBet/ByyqI0tz/CBKDL/m9LuvOyhWETW0=)
                          4: 3138362e3232352e3234302e302f32302d3234203d3e203533313735.roa (hash: w0owl7DF+mAIOGXYpwnTswecX/S7RFKkX0sboH3wAh8=)
                          5: B87E403FD04360E1BA519D841853FF5C9E675A23.crl (hash: KqEVIMwZOtqlGMfKMq1ifxzpLNNXhQld/zBkn/tyKgs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.crl
                          rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87E403FD04360E1BA519D841853FF5C9E675A23.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Dec 2025 10:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:20:7f:bc:08:48:89:7b:79:7c:21:20:fd:2c:28:b2:9d:9c:3e:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B87E403FD04360E1BA519D841853FF5C9E675A23
        Validity
            Not Before: Dec 16 08:05:00 2025 GMT
            Not After : Dec 17 10:51:00 2025 GMT
        Subject: CN=85CF23953BDD68BC5082ACE7876EB2C8BF69BE9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9a:27:31:48:97:9a:df:f6:d6:91:30:d1:f9:
                    59:bd:52:db:58:15:93:4f:c7:ee:14:b7:55:f4:a3:
                    1f:d1:ac:93:b1:36:ad:2c:a1:b4:16:77:0a:05:25:
                    06:32:37:7b:99:19:0a:76:60:a5:55:0d:9d:54:c5:
                    29:75:4c:14:37:5f:83:6d:ee:77:84:de:2a:a5:c9:
                    2a:7a:38:d4:89:b4:e5:f8:4b:33:91:13:0d:ad:93:
                    18:f2:27:0f:72:f8:91:91:e6:32:48:4e:6e:53:18:
                    e3:02:14:a0:f9:ae:6e:6a:a8:2a:c2:5e:e2:bf:0e:
                    9e:a5:89:cf:0f:d4:13:6f:1b:9d:9e:69:8b:1b:be:
                    90:9a:f5:9d:2d:37:df:52:2d:21:7f:57:8d:eb:44:
                    27:14:ed:fc:ca:e2:4c:2c:4b:2f:3d:d4:52:ba:6a:
                    4c:fa:aa:8c:ff:ba:a4:8e:1a:e0:b9:75:55:9a:ed:
                    75:f9:93:1e:b7:1f:f6:1c:23:3d:75:24:14:e2:c4:
                    dd:76:89:60:8d:f8:d6:4d:34:51:25:1a:a9:06:c9:
                    41:48:5d:8a:b6:72:47:14:01:4e:d8:e1:6c:d6:4a:
                    da:a0:0b:ba:6a:0e:c5:3f:13:28:e3:0a:68:14:a9:
                    ba:8e:41:d6:13:19:1f:22:7a:eb:de:6e:b8:f0:d2:
                    84:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:CF:23:95:3B:DD:68:BC:50:82:AC:E7:87:6E:B2:C8:BF:69:BE:9F
            X509v3 Authority Key Identifier:
                keyid:B8:7E:40:3F:D0:43:60:E1:BA:51:9D:84:18:53:FF:5C:9E:67:5A:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87E403FD04360E1BA519D841853FF5C9E675A23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:99:41:05:55:fa:da:d9:d4:d6:09:ca:3a:e1:d5:00:f4:16:
         64:f5:42:95:ad:5f:ce:7f:0e:87:43:0e:97:f7:a1:2e:f1:ef:
         e1:84:43:30:74:b1:43:62:48:2a:b5:76:6c:d7:85:a3:36:2d:
         7f:7a:0e:f8:fc:e1:c9:4b:3c:c9:73:fb:d7:ea:63:c6:ed:51:
         a0:51:f8:89:ec:60:9e:a4:de:db:7f:c6:de:49:06:e9:f4:c8:
         42:f1:d5:2a:5e:53:2c:cf:98:93:c8:9b:27:59:0f:a1:b5:64:
         53:e5:d5:29:52:2e:99:59:ba:4d:e4:97:0c:91:6d:10:2e:d8:
         32:ae:6f:9d:b7:b5:40:19:39:4b:c1:88:f1:8e:0b:36:b9:9a:
         77:20:ca:e9:57:4b:e7:12:a1:82:81:d3:ac:89:bf:0b:39:0d:
         1b:e0:a2:19:0e:8c:02:7d:3e:77:e6:2e:a7:2e:84:7c:7a:c0:
         9e:69:c2:ba:69:94:cf:21:de:99:78:63:3c:c7:16:8d:5d:9f:
         81:f3:fb:b1:f3:dc:47:e2:c7:2d:6b:0b:de:89:25:4b:1e:49:
         91:84:e4:17:83:98:22:12:1c:f6:ea:e5:8f:12:63:f9:5a:ff:
         ab:2a:6f:59:64:33:c8:69:ee:c7:bf:43:4a:49:c0:c5:f4:f9:
         5a:5b:fe:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 14:24:52 2025 by rpki-client