This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.mft
File:                     D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.mft (raw, json)
Hash identifier:          Sa+Zx6r/3EJcQTKu2+MZD1PjQHrwXyP98wuQQWQVisw=
Subject key identifier:   B6:FB:BF:79:1F:4E:3E:9B:4B:B6:27:62:B9:25:1E:7E:C0:9D:77:DD
Authority key identifier: D7:31:01:88:F9:E2:12:C8:3E:92:DE:1C:5E:BB:FE:55:EB:88:CE:9B
Certificate issuer:       /CN=D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B
Certificate serial:       2AD0EB45827336D0D8E481B50872F95A30028DF0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.mft
Manifest number:          B3
Signing time:             Sat 06 Dec 2025 01:12:25 +0000
Manifest this update:     Sat 06 Dec 2025 01:07:25 +0000
Manifest next update:     Sun 07 Dec 2025 01:35:25 +0000
Files and hashes:         1: 34352e3138322e33322e302f32322d3232203d3e20323639323635.roa (hash: pCzDonosnG1M/FMYP6mGKnR9D//kOSapxlVj/nSW3nk=)
                          2: 34352e3138322e33342e302f32342d3234203d3e20323639323635.roa (hash: xOoERlEhSi9M48UCfsW4Jh3De+JMGZNiha1TchGUW94=)
                          3: D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.crl (hash: NkFt5vSG5gwvUMxD3ZlQxR4gA+0ya0vkg4kgttzDWIc=)
                          4: 323830343a363165633a3a2f33322d3332203d3e20323639323635.roa (hash: G5uYp0ecuOs4MuZb+A34zoxhoZ/nOHhZNf5CuuFyumo=)
                          5: 34352e3138322e33322e302f32342d3234203d3e20323639323635.roa (hash: gDKF4Wwnv8nYlZMHxKheOOJRwPHFzRP2IDSa3GY2Mi4=)
                          6: 34352e3138322e33332e302f32342d3234203d3e20323639323635.roa (hash: mOXkqMNclDJ7PmlNw0yxQWbMww+lvOI6qELEBEEMLH0=)
                          7: 34352e3138322e33352e302f32342d3234203d3e20323639323635.roa (hash: mySaU6fwlINwOm8Fs2UnMlGXQ421idH9Xpz0cducaT4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.crl
                          rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 01:35:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d0:eb:45:82:73:36:d0:d8:e4:81:b5:08:72:f9:5a:30:02:8d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B
        Validity
            Not Before: Dec  6 01:07:25 2025 GMT
            Not After : Dec  7 01:35:25 2025 GMT
        Subject: CN=B6FBBF791F4E3E9B4BB62762B9251E7EC09D77DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1b:77:ac:64:b7:04:6e:3c:06:fe:fb:2f:90:
                    22:f3:af:d1:31:5d:0c:c0:57:6c:18:5d:77:1b:39:
                    f6:29:60:b1:61:56:f3:c2:65:2d:3f:f9:f6:9e:00:
                    f1:f7:7b:eb:ee:b4:e7:9f:f5:19:7b:2c:59:84:ee:
                    cb:71:21:43:32:d2:d7:28:b6:51:e8:2b:2d:28:07:
                    3b:fc:f4:83:a3:89:4b:83:d6:61:f8:cf:e1:2c:91:
                    5d:39:a8:6f:fe:68:ee:42:9e:31:ed:64:63:42:6d:
                    1f:30:ec:29:a7:d2:5c:31:24:aa:79:68:53:92:7c:
                    5e:46:ef:0a:aa:57:d2:73:cd:d5:05:6d:7a:11:b5:
                    d2:25:95:29:e7:ac:0b:16:f0:20:b6:9e:be:be:b7:
                    e4:2f:96:26:f7:8a:d3:04:34:eb:7d:07:24:f7:6a:
                    a6:3e:00:cd:6d:53:e2:e7:d4:31:a2:ea:8d:f7:59:
                    9c:4e:ad:34:a5:24:88:24:06:f1:bd:6c:86:9d:88:
                    15:8b:36:9c:83:28:dc:3a:2d:77:22:d2:23:a0:9d:
                    d1:d3:6f:f0:cd:08:ad:b5:e8:62:65:9c:b3:dc:21:
                    bd:42:24:47:68:bc:46:8a:45:0b:3f:87:19:c1:0f:
                    30:da:34:2f:f3:4d:64:3f:2d:e0:15:4f:e0:97:97:
                    30:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:FB:BF:79:1F:4E:3E:9B:4B:B6:27:62:B9:25:1E:7E:C0:9D:77:DD
            X509v3 Authority Key Identifier:
                keyid:D7:31:01:88:F9:E2:12:C8:3E:92:DE:1C:5E:BB:FE:55:EB:88:CE:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:32:43:db:91:06:ea:d0:c0:42:c6:09:1e:33:fa:47:54:85:
         19:85:dd:df:6b:8b:df:f3:c6:05:85:fe:60:dc:df:dc:9c:e2:
         e1:80:03:5f:c5:4c:d4:6f:6c:d7:a5:e1:0d:60:47:02:1f:23:
         40:99:b6:0b:ec:dc:1e:ef:bb:62:15:05:59:a4:f9:7f:8b:d1:
         01:93:8b:2f:60:8e:1b:ec:8c:ea:c4:ed:95:19:87:ff:17:e4:
         c0:11:d9:1a:78:11:21:a7:87:f0:24:59:f5:76:72:3b:7e:d5:
         89:3b:5e:11:45:ed:79:e5:07:9a:e6:bf:8e:54:59:ab:ca:9d:
         38:c2:f8:f2:20:22:9b:22:cf:1d:d4:c4:92:cb:e9:ef:0a:03:
         79:fb:e0:4b:98:0d:a8:4b:f3:ac:32:f9:c9:7a:fb:36:18:5a:
         cb:4b:3f:ec:85:ec:c3:fd:8d:64:84:4f:ca:bd:ee:1e:63:ad:
         0d:7a:e0:29:e2:fb:5e:b8:37:6b:65:70:b3:3e:f3:53:71:24:
         29:6b:d4:18:30:0e:b2:43:f0:34:90:2d:8a:db:72:08:42:ab:
         89:03:4a:d9:29:c4:d4:80:52:f6:98:4a:2b:d3:30:fd:6a:42:
         6f:0a:8e:29:2f:c0:d8:65:8f:3f:40:58:41:42:57:df:4a:36:
         1f:35:2d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:07:42 2025 by rpki-client