This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DbkySwzj61GCg4BJzkguhAfwQR4RLLKkT4bsUuA8wkYY/0/B085162E58077268172F873FFB370095424571A1.mft
File:                     B085162E58077268172F873FFB370095424571A1.mft (raw, json)
Hash identifier:          4YNZ4EL65PKIV36GUTHRMrLG9eMrbCOavQad9bHqEjo=
Subject key identifier:   D2:23:39:7B:31:45:DE:68:F8:A8:58:8D:68:0E:C6:C9:24:9C:47:9F
Authority key identifier: B0:85:16:2E:58:07:72:68:17:2F:87:3F:FB:37:00:95:42:45:71:A1
Certificate issuer:       /CN=B085162E58077268172F873FFB370095424571A1
Certificate serial:       6334DD10E0B971D9F6E8BCAA9089C369B1806A38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B085162E58077268172F873FFB370095424571A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DbkySwzj61GCg4BJzkguhAfwQR4RLLKkT4bsUuA8wkYY/0/B085162E58077268172F873FFB370095424571A1.mft
Manifest number:          26
Signing time:             Fri 05 Dec 2025 14:34:12 +0000
Manifest this update:     Fri 05 Dec 2025 14:29:12 +0000
Manifest next update:     Sat 06 Dec 2025 15:58:12 +0000
Files and hashes:         1: B085162E58077268172F873FFB370095424571A1.crl (hash: WE8zrhJnLrxMAiI2EZ8ueGZ8jtksD79UA77oEDxA6dc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DbkySwzj61GCg4BJzkguhAfwQR4RLLKkT4bsUuA8wkYY/0/B085162E58077268172F873FFB370095424571A1.crl
                          rsync://rpki-repo.registro.br/repo/DbkySwzj61GCg4BJzkguhAfwQR4RLLKkT4bsUuA8wkYY/0/B085162E58077268172F873FFB370095424571A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B085162E58077268172F873FFB370095424571A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 15:58:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:34:dd:10:e0:b9:71:d9:f6:e8:bc:aa:90:89:c3:69:b1:80:6a:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B085162E58077268172F873FFB370095424571A1
        Validity
            Not Before: Dec  5 14:29:12 2025 GMT
            Not After : Dec  6 15:58:12 2025 GMT
        Subject: CN=D223397B3145DE68F8A8588D680EC6C9249C479F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:71:ff:12:e6:02:4d:5a:3c:e2:b3:bf:f7:3b:
                    43:2c:9c:fb:ab:4a:c2:59:5d:2a:74:6e:c4:28:f3:
                    c6:61:85:af:de:6d:43:0f:d2:9d:11:9e:f1:bf:e5:
                    34:4a:e4:48:d3:b5:2a:33:db:67:15:dd:ad:49:57:
                    b3:6b:48:0a:6b:b4:8f:34:47:bb:ae:64:f9:94:79:
                    2e:a5:2d:01:6b:81:93:de:05:e0:b1:13:4d:db:ba:
                    68:9e:33:4f:59:55:04:0b:03:4f:e8:87:be:df:19:
                    c4:c9:41:f7:34:d8:94:1a:9a:30:cd:18:e3:cb:6d:
                    b3:34:97:c7:2e:59:ef:9c:e9:26:02:f7:5f:d9:c8:
                    28:c8:3e:f0:c9:cd:ec:61:05:09:6d:73:58:3e:ed:
                    e8:81:e6:5f:3c:4b:15:82:b8:ed:3d:0f:55:e7:b5:
                    de:d3:0d:c1:a1:e5:15:ed:e7:f7:be:49:3c:d3:df:
                    29:7a:a5:db:ad:66:e7:0c:b4:7b:cc:76:b7:0a:71:
                    27:23:78:83:f4:e9:9c:8a:65:b1:dc:53:5b:95:af:
                    bf:81:37:30:b5:77:97:e4:68:5c:29:21:f4:01:53:
                    af:18:2b:b5:bf:5f:2d:44:0a:a7:5f:9f:d2:65:62:
                    4e:33:31:7d:2c:d9:3d:91:aa:7e:10:f0:5a:b9:ca:
                    54:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:23:39:7B:31:45:DE:68:F8:A8:58:8D:68:0E:C6:C9:24:9C:47:9F
            X509v3 Authority Key Identifier:
                keyid:B0:85:16:2E:58:07:72:68:17:2F:87:3F:FB:37:00:95:42:45:71:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DbkySwzj61GCg4BJzkguhAfwQR4RLLKkT4bsUuA8wkYY/0/B085162E58077268172F873FFB370095424571A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B085162E58077268172F873FFB370095424571A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DbkySwzj61GCg4BJzkguhAfwQR4RLLKkT4bsUuA8wkYY/0/B085162E58077268172F873FFB370095424571A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:37:3d:97:74:0b:c7:00:8e:f6:ac:cb:69:07:b8:4f:ef:00:
         1c:4c:87:5a:f5:dd:8b:34:8b:d2:76:57:de:a4:36:d2:13:28:
         98:7c:a9:60:77:a6:83:a5:43:40:5d:a2:0e:b8:de:5e:b1:36:
         8e:c3:1d:67:b5:1d:85:ef:51:7d:f2:7b:a4:24:e1:a7:06:df:
         51:85:4d:2b:d0:08:08:b8:72:8c:53:48:6c:96:0f:1c:b3:9e:
         24:9d:f7:e4:6e:af:08:4f:b8:6a:c1:74:92:4f:15:31:f6:e5:
         21:e3:1f:b8:d3:1b:f7:45:9b:82:d7:2e:53:8e:5b:d6:2b:e1:
         02:cb:fe:be:15:e1:d3:ff:a1:db:d5:a2:47:4c:45:7f:96:38:
         a6:16:d4:2e:d7:f9:a7:08:26:7f:64:6b:c5:70:0f:69:51:bc:
         b2:90:be:ba:cc:ef:75:3c:9f:2e:cc:73:e6:33:f3:b7:3c:64:
         46:95:d0:8b:9a:4a:1d:79:30:fa:3b:95:6d:34:34:3f:51:54:
         17:74:4e:c5:87:6d:3b:4c:b6:76:80:7a:ea:81:66:d2:5b:ce:
         9d:f4:54:aa:02:56:46:b7:9b:78:a5:70:66:6f:54:71:4c:61:
         ac:f7:7a:4a:8f:14:ae:2a:52:5e:44:6e:fa:30:7d:15:26:ee:
         70:f8:f4:26
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYzTdEOC5cdn26LyqkInDabGAajgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjA4NTE2MkU1ODA3NzI2ODE3MkY4NzNGRkIzNzAwOTU0
MjQ1NzFBMTAeFw0yNTEyMDUxNDI5MTJaFw0yNTEyMDYxNTU4MTJaMDMxMTAvBgNV
BAMTKEQyMjMzOTdCMzE0NURFNjhGOEE4NTg4RDY4MEVDNkM5MjQ5QzQ3OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2cf8S5gJNWjzis7/3O0MsnPur
SsJZXSp0bsQo88Zhha/ebUMP0p0RnvG/5TRK5EjTtSoz22cV3a1JV7NrSAprtI80
R7uuZPmUeS6lLQFrgZPeBeCxE03bumieM09ZVQQLA0/oh77fGcTJQfc02JQamjDN
GOPLbbM0l8cuWe+c6SYC91/ZyCjIPvDJzexhBQltc1g+7eiB5l88SxWCuO09D1Xn
td7TDcGh5RXt5/e+STzT3yl6pdutZucMtHvMdrcKcScjeIP06ZyKZbHcU1uVr7+B
NzC1d5fkaFwpIfQBU68YK7W/Xy1ECqdfn9JlYk4zMX0s2T2Rqn4Q8Fq5ylRpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU0iM5ezFF3mj4qFiNaA7GySScR58wHwYDVR0j
BBgwFoAUsIUWLlgHcmgXL4c/+zcAlUJFcaEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGJreVN3emo2MUdDZzRCSnprZ3VoQWZ3UVI0UkxMS2tUNGJzVXVBOHdr
WVkvMC9CMDg1MTYyRTU4MDc3MjY4MTcyRjg3M0ZGQjM3MDA5NTQyNDU3MUExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwODUxNjJFNTgwNzcyNjgx
NzJGODczRkZCMzcwMDk1NDI0NTcxQTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RGJreVN3emo2MUdDZzRCSnprZ3VoQWZ3UVI0UkxMS2tUNGJzVXVBOHdrWVkvMC9C
MDg1MTYyRTU4MDc3MjY4MTcyRjg3M0ZGQjM3MDA5NTQyNDU3MUExLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYjc9l3QLxwCO9qzLaQe4T+8AHEyHWvXdizSL0nZX3qQ20hMomHypYHemg6VD
QF2iDrjeXrE2jsMdZ7Udhe9RffJ7pCThpwbfUYVNK9AICLhyjFNIbJYPHLOeJJ33
5G6vCE+4asF0kk8VMfblIeMfuNMb90WbgtcuU45b1ivhAsv+vhXh0/+h29WiR0xF
f5Y4phbULtf5pwgmf2RrxXAPaVG8spC+uszvdTyfLsxz5jPztzxkRpXQi5pKHXkw
+juVbTQ0P1FUF3ROxYdtO0y2doB66oFm0lvOnfRUqgJWRrebeKVwZm9UcUxhrPd6
So8UripSXkRu+jB9FSbucPj0Jg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:55:26 2025 by rpki-client