This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.mft
File:                     B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.mft (raw, json)
Hash identifier:          lnT0EiiVJZcZez/8TniSaAyBHnyKSRZIaxmT6SR/Qzg=
Subject key identifier:   50:8C:8E:75:C1:67:7D:42:A4:7C:4E:A1:6C:3E:C1:18:B0:76:A7:12
Authority key identifier: B2:A1:BA:E4:B3:4B:FC:AC:AD:5F:1A:7C:AF:81:C3:FE:7E:9C:02:04
Certificate issuer:       /CN=B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204
Certificate serial:       51B72160D5061A4629A260070D00BFCA9B1BA93E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.mft
Manifest number:          02AD
Signing time:             Sat 06 Dec 2025 13:51:56 +0000
Manifest this update:     Sat 06 Dec 2025 13:46:56 +0000
Manifest next update:     Sun 07 Dec 2025 16:15:56 +0000
Files and hashes:         1: 3133382e33362e3234382e302f32322d3234203d3e203631393334.roa (hash: ibfxx9xY2l0DsWb+oIxuINzCmDa5dVqPiI98xteOseM=)
                          2: 323830343a313837343a3a2f33322d3438203d3e203631393334.roa (hash: UIySHMheDiLr/87rGSNcCOqgWn2BEo9Py1XZITvdQEA=)
                          3: B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.crl (hash: x/DYBXYKzociSTgXzPjwu5Vwt/FEg//LdQU57scUBPk=)
                          4: 3136372e3235302e34302e302f32322d3234203d3e203631393334.roa (hash: ZAxZHYn1jd1KIEOx0LwEAOQYXFQhjO3G56yExriAALs=)
                          5: 3230302e31302e3133322e302f32322d3234203d3e203631393334.roa (hash: Uh2VZJXBFjwIXsk6dNIPR+r7ZelmgSXtkE8Do2UhAi8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.crl
                          rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 16:15:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b7:21:60:d5:06:1a:46:29:a2:60:07:0d:00:bf:ca:9b:1b:a9:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204
        Validity
            Not Before: Dec  6 13:46:56 2025 GMT
            Not After : Dec  7 16:15:56 2025 GMT
        Subject: CN=508C8E75C1677D42A47C4EA16C3EC118B076A712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:68:33:63:14:33:e0:fc:95:13:be:9b:6f:ae:
                    22:7b:55:e3:02:6e:e6:18:cb:35:0d:70:94:ef:46:
                    f4:53:87:3a:1e:fd:cd:8b:e2:1e:38:a3:4f:41:16:
                    73:4f:2b:7e:ee:42:2c:aa:a8:30:6e:f8:20:04:61:
                    46:c5:bf:ce:f2:44:d1:9d:53:5d:b0:4b:b7:93:ec:
                    1c:c7:93:34:e5:56:42:cf:3e:6f:87:3f:fa:fb:56:
                    d7:36:eb:f6:40:40:e3:a8:82:18:40:2b:0d:f6:f0:
                    e4:6a:54:a1:46:33:e7:ab:ec:fe:35:69:dd:e4:3b:
                    79:c7:34:df:43:da:0f:0a:33:e5:ae:24:17:7d:69:
                    e3:02:05:af:38:53:17:c2:3e:f4:c0:dc:dd:0a:4a:
                    49:37:e9:f1:1b:c7:34:59:bf:f2:d3:ce:fe:70:d8:
                    5d:63:65:6d:72:7b:0a:39:5d:6a:32:83:c0:bb:73:
                    16:3c:05:0f:58:dd:f1:39:0c:65:32:3c:02:6d:70:
                    9b:16:e0:f7:ac:0a:b3:29:71:70:89:01:30:62:1b:
                    1c:b4:e9:76:de:f3:f7:b9:c7:88:13:ee:7c:f0:3e:
                    25:21:b5:1c:4d:a3:d4:51:0a:ca:32:89:02:22:b8:
                    75:84:59:ee:71:c6:23:2e:02:82:5e:f3:b1:b5:53:
                    64:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:8C:8E:75:C1:67:7D:42:A4:7C:4E:A1:6C:3E:C1:18:B0:76:A7:12
            X509v3 Authority Key Identifier:
                keyid:B2:A1:BA:E4:B3:4B:FC:AC:AD:5F:1A:7C:AF:81:C3:FE:7E:9C:02:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:53:80:eb:70:70:c6:8c:a9:9b:78:c7:c9:b5:1f:5b:30:88:
         9a:49:58:69:85:e2:32:b2:10:e3:6d:a9:5d:bd:8f:2b:f9:1e:
         b2:b0:33:ab:69:60:e5:19:7a:bc:f9:52:39:fc:b0:43:71:d5:
         4c:8b:8e:db:a8:23:c0:28:1e:1d:17:cd:34:73:92:96:53:c4:
         8f:97:08:f9:8a:78:b6:3f:9c:62:c0:7e:37:04:9b:67:79:7d:
         5d:22:9e:7b:6f:57:e6:f0:96:aa:ce:51:cf:ba:35:b6:24:c1:
         70:21:d2:39:13:89:17:9b:d8:43:fe:be:cc:68:86:f2:08:70:
         6b:5b:6b:65:b3:9a:37:2d:4d:7d:1d:98:f4:02:a6:22:11:30:
         e4:8a:f1:20:17:36:cc:42:70:ad:bc:81:41:d1:2b:2c:64:51:
         68:09:7b:61:9f:34:22:f8:5e:43:6c:69:04:72:ba:ae:1b:b8:
         1e:a2:4e:e5:51:d2:aa:c7:d0:de:58:33:a6:d2:e4:3b:67:54:
         ed:89:13:e9:65:dd:aa:9b:5d:0f:72:24:80:37:c2:c3:d1:26:
         ee:43:75:02:89:2e:cf:11:34:d9:af:cd:a2:92:ca:eb:2f:c3:
         a0:cb:3b:96:93:38:fd:3f:2e:8f:04:e6:12:13:c0:b8:ab:38:
         39:10:6a:af
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUUbchYNUGGkYpomAHDQC/ypsbqT4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjJBMUJBRTRCMzRCRkNBQ0FENUYxQTdDQUY4MUMzRkU3
RTlDMDIwNDAeFw0yNTEyMDYxMzQ2NTZaFw0yNTEyMDcxNjE1NTZaMDMxMTAvBgNV
BAMTKDUwOEM4RTc1QzE2NzdENDJBNDdDNEVBMTZDM0VDMTE4QjA3NkE3MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOaDNjFDPg/JUTvptvriJ7VeMC
buYYyzUNcJTvRvRThzoe/c2L4h44o09BFnNPK37uQiyqqDBu+CAEYUbFv87yRNGd
U12wS7eT7BzHkzTlVkLPPm+HP/r7Vtc26/ZAQOOoghhAKw328ORqVKFGM+er7P41
ad3kO3nHNN9D2g8KM+WuJBd9aeMCBa84UxfCPvTA3N0KSkk36fEbxzRZv/LTzv5w
2F1jZW1yewo5XWoyg8C7cxY8BQ9Y3fE5DGUyPAJtcJsW4PesCrMpcXCJATBiGxy0
6Xbe8/e5x4gT7nzwPiUhtRxNo9RRCsoyiQIiuHWEWe5xxiMuAoJe87G1U2S/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUUIyOdcFnfUKkfE6hbD7BGLB2pxIwHwYDVR0j
BBgwFoAUsqG65LNL/KytXxp8r4HD/n6cAgQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRU5aTkxNd2V3SHpwYkptZ25kbmg5VnVTU2JLMmNjMVBVRlhGNHZvQVhD
bjQvMC9CMkExQkFFNEIzNEJGQ0FDQUQ1RjFBN0NBRjgxQzNGRTdFOUMwMjA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IyQTFCQUU0QjM0QkZDQUNB
RDVGMUE3Q0FGODFDM0ZFN0U5QzAyMDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RU5aTkxNd2V3SHpwYkptZ25kbmg5VnVTU2JLMmNjMVBVRlhGNHZvQVhDbjQvMC9C
MkExQkFFNEIzNEJGQ0FDQUQ1RjFBN0NBRjgxQzNGRTdFOUMwMjA0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsVOA63Bwxoypm3jHybUfWzCImklYaYXiMrIQ422pXb2PK/kesrAzq2lg5Rl6
vPlSOfywQ3HVTIuO26gjwCgeHRfNNHOSllPEj5cI+Yp4tj+cYsB+NwSbZ3l9XSKe
e29X5vCWqs5Rz7o1tiTBcCHSOROJF5vYQ/6+zGiG8ghwa1trZbOaNy1NfR2Y9AKm
IhEw5IrxIBc2zEJwrbyBQdErLGRRaAl7YZ80IvheQ2xpBHK6rhu4HqJO5VHSqsfQ
3lgzptLkO2dU7YkT6WXdqptdD3IkgDfCw9Em7kN1AokuzxE02a/NopLK6y/DoMs7
lpM4/T8ujwTmEhPAuKs4ORBqrw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:31:21 2025 by rpki-client