This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.mft
File:                     B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.mft (raw, json)
Hash identifier:          UndoutEEh3hRfxeNFgEVj4+n+wGWeGBP4oZb0omSWBw=
Subject key identifier:   3B:F8:09:6D:88:4E:C9:43:5F:2F:B2:04:F2:F7:36:E5:D4:57:66:3C
Authority key identifier: B4:E1:EA:35:85:A9:85:2E:5C:12:D3:92:21:F0:8A:C0:DF:FC:13:2D
Certificate issuer:       /CN=B4E1EA3585A9852E5C12D39221F08AC0DFFC132D
Certificate serial:       0703213F46F01D289043582D4D7C0954A1501B0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.mft
Manifest number:          37
Signing time:             Sat 06 Dec 2025 06:59:22 +0000
Manifest this update:     Sat 06 Dec 2025 06:54:22 +0000
Manifest next update:     Sun 07 Dec 2025 08:08:22 +0000
Files and hashes:         1: 323830343a393061303a3a2f33322d3332203d3e20323733353634.roa (hash: FnPpSEPPrchiw1SlAW+8IuLHpz91450Nmisum2CL9QY=)
                          2: 323830343a393061303a363330303a3a2f34302d3430203d3e20323733353634.roa (hash: 7jgtfo785KzZM9OtZKD40EpXNOKRnNHhZI240qfEKbI=)
                          3: 323830343a393061303a383030303a3a2f33332d3333203d3e20323733353634.roa (hash: pqDVUnKE3sWtOneeWubtKyT9k4LBf8ZGnsVJLDpooTc=)
                          4: 323830343a393061303a376630303a3a2f34302d3430203d3e20323733353634.roa (hash: 6VMO3BCjiiwMf4yDLydEYqF5sOvBnUAfe161UTqxSCI=)
                          5: 323830343a393061303a3a2f33332d3333203d3e20323733353634.roa (hash: XkbBJEX5hmLw2byM6yVVSyqMuMmnhVPG83K7j4iMdKc=)
                          6: B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.crl (hash: JxJLfWjQvw3+4oW3VkjnocUGrJjRzTwhTTQHQZgw/PE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.crl
                          rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 08:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:03:21:3f:46:f0:1d:28:90:43:58:2d:4d:7c:09:54:a1:50:1b:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4E1EA3585A9852E5C12D39221F08AC0DFFC132D
        Validity
            Not Before: Dec  6 06:54:22 2025 GMT
            Not After : Dec  7 08:08:22 2025 GMT
        Subject: CN=3BF8096D884EC9435F2FB204F2F736E5D457663C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5f:e9:d1:a6:34:73:f4:d5:17:5d:b6:42:b8:
                    91:71:64:04:c5:f6:d4:43:51:6e:10:92:c8:d7:d9:
                    82:12:6f:95:17:4d:66:f6:89:7a:8f:99:65:2a:08:
                    80:92:f6:13:f9:ce:6c:05:ae:c0:2b:18:3c:d4:e9:
                    23:ae:35:87:f4:29:ca:53:c5:c9:e6:4a:1a:2a:d6:
                    c6:63:cf:f0:18:76:e6:d4:73:11:85:09:04:a9:eb:
                    44:ad:e1:1f:ca:78:a1:87:21:90:76:a2:d6:71:59:
                    93:10:6c:85:d1:eb:8e:df:a1:1f:64:1c:74:bb:a7:
                    4b:22:79:40:28:1a:11:45:33:e6:2d:7a:09:94:a8:
                    cf:4d:73:25:c6:0c:30:70:5e:07:02:80:32:a4:3f:
                    07:ea:87:09:5a:3e:03:91:64:16:e9:a4:6d:13:05:
                    97:d0:89:27:da:9d:b5:f7:2f:08:70:66:9d:17:6d:
                    1e:53:9f:55:56:a8:91:3d:1c:a6:6c:5c:f1:42:ce:
                    57:16:93:68:7b:84:bc:20:6f:d8:dc:59:f6:d6:6d:
                    b9:84:51:98:8e:ce:6c:dc:b2:29:ef:e7:5d:f2:f1:
                    d7:5a:a9:36:f2:8c:e5:a0:0c:db:ee:c9:1c:47:a3:
                    14:ef:ba:55:c2:15:e7:8b:fc:ea:09:e8:c7:96:1b:
                    d2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F8:09:6D:88:4E:C9:43:5F:2F:B2:04:F2:F7:36:E5:D4:57:66:3C
            X509v3 Authority Key Identifier:
                keyid:B4:E1:EA:35:85:A9:85:2E:5C:12:D3:92:21:F0:8A:C0:DF:FC:13:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:1a:78:38:4d:b3:95:87:1f:9d:ad:0f:1e:cf:77:b2:5b:32:
         5e:73:d1:f3:6d:8d:75:38:07:ae:72:b1:75:83:0c:3e:4e:6c:
         1e:eb:0b:8a:58:7d:bd:c8:49:26:ab:db:ec:44:23:0e:a8:69:
         ac:5b:20:dc:f2:fb:de:dd:b2:61:5a:21:ba:61:b9:68:25:f7:
         cd:86:72:fe:78:ef:3d:9d:37:f0:b0:75:68:2b:0b:c3:90:36:
         6e:dc:a4:53:b4:6a:f2:90:ce:f2:00:18:00:3c:32:93:0b:9e:
         f1:62:60:00:b6:a7:36:8c:d4:f6:4a:cd:1f:6b:89:30:eb:3a:
         fb:87:2c:f4:e4:3a:b4:4b:8f:03:b5:bc:bb:2f:03:8d:33:cc:
         fa:b0:52:a4:e8:0d:c5:81:04:b9:79:6b:6b:bc:29:69:4a:c2:
         10:a3:3b:66:1b:d4:43:3d:14:25:fb:18:64:c4:81:33:a6:50:
         99:ed:40:5d:10:63:bc:8d:4c:6f:11:47:a7:5a:ea:6a:07:3b:
         8f:b0:09:9b:e0:ce:79:24:47:72:e0:cf:35:06:e9:b5:07:17:
         80:06:9f:fe:bc:ac:81:3b:3e:85:9f:28:14:d8:b2:2f:87:5a:
         8b:6f:f2:74:17:40:75:c8:e6:c7:41:bc:47:f0:c8:ef:ef:56:
         18:50:d3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:55:27 2025 by rpki-client