This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FyDE2ADhf8PyAyCDoAUL5EUzxrU1dc8JXJeVYQ96NRyA/0/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.mft
File:                     BD23F2E871C9F5E6138D254501FBE2AC35AA7326.mft (raw, json)
Hash identifier:          kAH4JDwi7+xkkAGmFkmXOWI36VGxABrywlb3NyctuI8=
Subject key identifier:   01:FB:37:84:BB:D3:56:39:14:9C:CC:10:4A:AC:6C:6A:BE:E8:E8:5F
Authority key identifier: BD:23:F2:E8:71:C9:F5:E6:13:8D:25:45:01:FB:E2:AC:35:AA:73:26
Certificate issuer:       /CN=BD23F2E871C9F5E6138D254501FBE2AC35AA7326
Certificate serial:       5223814A0AF8D9D682379D849D41EA23330E674F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FyDE2ADhf8PyAyCDoAUL5EUzxrU1dc8JXJeVYQ96NRyA/0/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.mft
Manifest number:          015F
Signing time:             Sat 06 Dec 2025 08:58:52 +0000
Manifest this update:     Sat 06 Dec 2025 08:53:52 +0000
Manifest next update:     Sun 07 Dec 2025 11:34:52 +0000
Files and hashes:         1: 3138372e36322e3130302e302f32322d3234203d3e20323730323434.roa (hash: 70BJQu4PLqi9KdVVab9jANTw7cydloTHwzKtBuGLFtM=)
                          2: BD23F2E871C9F5E6138D254501FBE2AC35AA7326.crl (hash: qIpHd7OC0JTzHb3JLbr3+BUdc8jp/86PITPgimiddLw=)
                          3: 323830343a363930383a3a2f33322d3438203d3e20323730323434.roa (hash: LfJ27fny3HxOEf2E3+cUrLvQbGwB+jGu3gHJ5S1w/cY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FyDE2ADhf8PyAyCDoAUL5EUzxrU1dc8JXJeVYQ96NRyA/0/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.crl
                          rsync://rpki-repo.registro.br/repo/FyDE2ADhf8PyAyCDoAUL5EUzxrU1dc8JXJeVYQ96NRyA/0/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 11:34:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:23:81:4a:0a:f8:d9:d6:82:37:9d:84:9d:41:ea:23:33:0e:67:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD23F2E871C9F5E6138D254501FBE2AC35AA7326
        Validity
            Not Before: Dec  6 08:53:52 2025 GMT
            Not After : Dec  7 11:34:52 2025 GMT
        Subject: CN=01FB3784BBD35639149CCC104AAC6C6ABEE8E85F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:77:69:57:6b:5a:df:2b:f7:2c:4c:e3:64:d7:
                    4c:9a:0a:e6:ad:da:b9:d6:98:12:41:2b:cf:43:c0:
                    7b:18:99:22:7e:4f:f8:5d:d3:e3:2d:a2:28:c3:a0:
                    02:a8:99:8d:3b:2e:d8:e5:e1:be:43:c4:c5:74:64:
                    66:f7:54:3a:7e:74:aa:91:a4:77:2b:46:c6:90:a8:
                    1d:ab:29:d9:77:5f:c1:2f:45:27:17:69:9a:83:59:
                    70:7a:eb:ee:d7:31:d5:78:9b:da:a9:5b:1f:fb:55:
                    c6:7d:f5:3e:bd:75:db:fb:21:7b:32:5c:42:f2:6a:
                    a6:7f:34:3e:71:38:9a:e3:59:79:63:6a:69:81:47:
                    8d:c5:68:91:2d:13:cf:3f:09:1a:d6:91:e2:85:ea:
                    db:ef:4b:1b:92:60:dd:03:60:8d:cd:48:72:80:6a:
                    a8:61:01:4a:d0:95:d8:71:02:38:0e:82:d9:4b:c2:
                    f7:b2:b2:d2:15:be:50:25:9f:cc:75:75:93:94:0f:
                    c7:de:a9:16:83:e4:1e:65:99:32:f6:a8:0e:cf:89:
                    ef:04:c3:4c:63:e4:0d:b3:58:b3:74:46:af:85:d3:
                    2d:04:30:24:6e:f1:12:72:17:eb:ef:ac:29:d1:00:
                    3e:98:21:ac:ad:84:c9:aa:97:91:16:2d:89:49:73:
                    ef:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:FB:37:84:BB:D3:56:39:14:9C:CC:10:4A:AC:6C:6A:BE:E8:E8:5F
            X509v3 Authority Key Identifier:
                keyid:BD:23:F2:E8:71:C9:F5:E6:13:8D:25:45:01:FB:E2:AC:35:AA:73:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FyDE2ADhf8PyAyCDoAUL5EUzxrU1dc8JXJeVYQ96NRyA/0/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FyDE2ADhf8PyAyCDoAUL5EUzxrU1dc8JXJeVYQ96NRyA/0/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:5a:6f:b7:ad:1e:0e:0f:12:1a:fe:a0:91:6f:68:33:35:a6:
         02:96:54:82:6e:e6:e6:68:6d:18:b1:b9:d1:19:7e:e9:bd:26:
         de:f8:e6:6d:eb:56:45:e5:90:67:2c:c4:c3:7a:29:c8:ba:b5:
         73:02:4d:33:cf:3f:9e:5f:60:38:cf:18:fa:e2:80:ae:b0:55:
         f9:c9:84:28:58:ea:f4:90:fb:b6:da:a6:52:29:d6:7b:6b:9b:
         24:4e:7a:f6:a6:3c:2e:ec:71:9f:d6:ed:ca:b3:3c:b0:d9:71:
         37:1c:64:63:7d:2a:e3:1a:33:01:12:f2:58:3d:71:5b:d0:6e:
         44:08:6f:f4:a1:b8:b8:0e:6d:f9:3c:4d:40:f1:36:ce:71:65:
         12:98:34:04:5d:e1:07:7a:d7:5b:ee:ac:4a:1e:8c:56:4a:b1:
         4a:bc:6a:a1:22:bf:c7:7e:54:d0:ab:34:3b:d2:5e:8d:a4:a1:
         9e:c7:72:0c:79:86:01:1d:0c:76:ba:62:d5:db:f5:b2:b7:54:
         09:c1:95:f5:3a:3b:22:33:ab:a7:43:f6:05:2a:48:18:9c:78:
         63:cd:2e:fb:07:1b:9d:71:24:1b:09:02:89:de:e6:83:ab:26:
         c1:ea:46:cc:58:41:7a:b8:ac:f8:3f:b2:63:98:58:9e:4d:57:
         4e:6d:13:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:05:05 2025 by rpki-client