This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.mft
File:                     BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.mft (raw, json)
Hash identifier:          ZWlLsAZL3DBRAryopqqHodmpIEFtXv53DokgSidYRis=
Subject key identifier:   90:CE:E6:57:BA:09:80:99:3C:86:F3:AC:16:60:45:44:C8:88:AD:BC
Authority key identifier: BD:3A:86:10:EB:89:85:A3:AA:9F:38:7E:DE:09:73:0A:AE:F0:6F:4E
Certificate issuer:       /CN=BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E
Certificate serial:       637D04E22A90EB854C44F2F5ADDD182435C8148D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.mft
Manifest number:          2B
Signing time:             Fri 05 Dec 2025 17:11:14 +0000
Manifest this update:     Fri 05 Dec 2025 17:06:14 +0000
Manifest next update:     Sat 06 Dec 2025 18:36:14 +0000
Files and hashes:         1: 3137302e3233332e3132302e302f32342d3234203d3e20323635303830.roa (hash: UQXu2hQXHRN2je3euhZZyn9PUypsZVOOhjs5UK8A/bM=)
                          2: 323830343a333237383a3a2f33322d3332203d3e20323635303830.roa (hash: 5B/+vfFGdF3IJoTrS9TeBsQvxm7kgyg44LTsGmD5N98=)
                          3: 3137302e3233332e3132322e302f32332d3233203d3e20323635303830.roa (hash: P0h7l+SiWRbWxbwbdGayBtSVOA3PqofNYXoBFXjyF2Y=)
                          4: 323830343a333237383a383030303a3a2f33332d3333203d3e20323635303830.roa (hash: k+owxz3l68cprZCV0+3obZmXyYo5ofrM4/CRu+pOcko=)
                          5: 3137302e3233332e3132332e302f32342d3234203d3e20323635303830.roa (hash: QaEwq9CjYPQg9XB/xC9mJEcrxzexB7rgdQeR7cGgREo=)
                          6: 3137302e3233332e3132302e302f32332d3233203d3e20323635303830.roa (hash: kgMnQvFQZ41NmFQiiTfB9er4UvYH9awM9HsX7+MBHPU=)
                          7: 323830343a333237383a343030303a3a2f33342d3334203d3e20323635303830.roa (hash: ytq9/JXR5mL09eUGCEFYeLztJqnlsf79ZDVOTj0Nt+A=)
                          8: 323830343a333237383a3a2f33342d3334203d3e20323635303830.roa (hash: NSak5ER7+MAC0xU7nbH0pQGj8bMe+2muo5Do/DYaqX8=)
                          9: 323830343a333237383a3a2f34382d3438203d3e20323635303830.roa (hash: 3c35Sa1vs4KaYssZIcwRB2/bFofdsYxoZj9drQm8oag=)
                          10: 323830343a333237383a3a2f33332d3333203d3e20323635303830.roa (hash: bujYDSW3nhUTEnjiY26vATKpg4+iqTkcy30ORRNiXhM=)
                          11: 3137302e3233332e3132302e302f32322d3232203d3e20323635303830.roa (hash: /a2y4aWHo28lvVRWC/abKo7CnvEkblWEARGoZ2mTN+4=)
                          12: 323830343a333237383a633030303a3a2f33342d3334203d3e20323635303830.roa (hash: QAGx0Yj4jJ2xXyr2rLQE4GAUGzzvVbqpP4lyFevhLng=)
                          13: BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.crl (hash: iM/v8RBtn6E2Gd//MMNfk7u3pvbYgJQAaqGAt2O9hus=)
                          14: 323830343a333237383a343030303a3a2f34382d3438203d3e20323635303830.roa (hash: pQdsswWDxVePBoPmNKpkVs2XaQl3ZUuXa6gWuMdedDU=)
                          15: 3137302e3233332e3132312e302f32342d3234203d3e20323635303830.roa (hash: y1QhIZbdYepzcdoxIZqGNBMxC53wsudaiKNsqEV9cH0=)
                          16: 323830343a333237383a383030303a3a2f33342d3334203d3e20323635303830.roa (hash: WrF8hQYEh/sGsppfpPesov8ngoxD0nE/e0IKlgdOawQ=)
                          17: 3137302e3233332e3132322e302f32342d3234203d3e20323635303830.roa (hash: J+2cGeedQSkQuUMX8IRAr/pw89GMZTOHvWopcXCptdg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.crl
                          rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 18:36:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:7d:04:e2:2a:90:eb:85:4c:44:f2:f5:ad:dd:18:24:35:c8:14:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E
        Validity
            Not Before: Dec  5 17:06:14 2025 GMT
            Not After : Dec  6 18:36:14 2025 GMT
        Subject: CN=90CEE657BA0980993C86F3AC16604544C888ADBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6a:5b:3e:81:5f:92:4e:bf:1d:b2:bc:3e:65:
                    95:91:f1:f7:90:cd:cb:aa:ce:de:7f:31:20:9f:f5:
                    1f:d6:50:27:f9:47:96:20:22:3d:fa:25:96:f7:17:
                    90:bf:c9:b0:02:c1:cc:90:19:f0:f0:d8:1e:03:4c:
                    53:55:56:54:58:f7:a6:d0:8a:25:db:f2:3e:fa:56:
                    11:78:79:41:32:6f:09:8c:16:49:6b:b5:8f:04:4e:
                    98:67:a0:46:72:48:f2:33:bc:95:0c:a0:30:58:35:
                    93:0d:e7:b6:c5:3c:57:e7:dd:ec:38:73:22:8e:72:
                    e1:9d:31:6c:f9:5a:a6:4b:2f:a2:21:dc:41:1f:cc:
                    c4:6b:dc:22:54:c6:4d:1d:ef:94:00:f3:7f:57:13:
                    48:60:66:4a:87:70:fb:0e:cc:7d:b5:05:3f:59:94:
                    bb:45:7e:a5:34:59:fc:3d:eb:13:ed:9e:d4:51:3e:
                    68:11:f0:d4:25:da:92:b0:78:a2:ed:99:11:93:93:
                    00:91:bd:ad:bd:b0:04:4f:b5:52:de:a1:aa:69:a2:
                    07:d2:31:6e:eb:24:fb:98:4a:c9:b7:9d:3c:be:cd:
                    f1:3b:9a:26:79:3a:d4:95:ff:49:e0:34:3e:07:52:
                    fb:34:de:4b:5c:61:77:c7:51:67:33:a8:27:76:d6:
                    b1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:CE:E6:57:BA:09:80:99:3C:86:F3:AC:16:60:45:44:C8:88:AD:BC
            X509v3 Authority Key Identifier:
                keyid:BD:3A:86:10:EB:89:85:A3:AA:9F:38:7E:DE:09:73:0A:AE:F0:6F:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:ea:f4:7c:79:fe:96:b9:8b:b1:f7:41:8c:8e:fd:94:84:90:
         62:79:fa:64:55:83:57:a2:8a:bf:ce:5f:2e:71:8f:34:57:2e:
         2f:a6:c9:d8:be:58:e0:b4:fa:aa:bc:fd:2b:7b:8f:ad:99:04:
         73:14:64:0d:dc:ae:99:4c:d2:89:e1:f0:c0:a3:1d:8f:bd:cc:
         22:d5:ae:1a:05:4c:12:70:7d:be:56:f6:20:12:d8:b4:a7:6c:
         57:dc:47:36:9b:f2:27:02:7b:57:af:11:be:6d:02:78:71:a0:
         ea:97:ec:01:e8:d8:8c:3a:bf:c5:2f:67:7e:f7:15:c7:26:12:
         61:e3:d8:89:81:55:53:30:53:e5:48:db:f5:0c:c0:08:4c:46:
         39:a7:38:1b:b4:ba:dc:97:da:08:35:d9:5d:8c:98:65:5a:a9:
         5e:10:1e:1f:3b:da:9b:2e:4b:33:6d:f7:f9:27:d6:b3:ea:0d:
         cc:fb:2b:b0:9c:46:45:d9:ba:76:ba:89:3c:fb:36:4b:7b:6b:
         08:a3:f0:85:c2:67:48:74:03:cd:f1:c9:be:fc:36:42:ad:87:
         ae:a5:d1:84:c3:ea:46:9f:2b:4a:25:da:2c:4e:5b:8a:85:3d:
         3f:42:28:7f:31:d8:e2:c7:db:48:0c:0a:d4:83:d1:c9:87:7b:
         4b:c4:10:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:55:47 2025 by rpki-client