This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.mft
File:                     B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.mft (raw, json)
Hash identifier:          GQpbi1ZZO8598knTvC9WhtMBx9miThJucaw+CaB7+94=
Subject key identifier:   32:CC:DC:C8:D1:E4:79:45:83:0E:8E:C6:77:BA:95:1E:25:FE:3F:65
Authority key identifier: B5:D1:33:C4:C7:CD:B2:87:64:5E:4A:A0:27:A4:9A:E2:3A:77:B8:F4
Certificate issuer:       /CN=B5D133C4C7CDB287645E4AA027A49AE23A77B8F4
Certificate serial:       40E3030132638C57843AA8439237AA56E2851F49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.mft
Manifest number:          031B
Signing time:             Fri 05 Dec 2025 16:21:04 +0000
Manifest this update:     Fri 05 Dec 2025 16:16:04 +0000
Manifest next update:     Sat 06 Dec 2025 18:40:04 +0000
Files and hashes:         1: B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.crl (hash: 0n5c5RUyNmiUeGThdf2/Y/2+6+Uxf1CIhyB/t3fVweU=)
                          2: 323830343a386661383a3a2f33322d3438203d3e203631363137.roa (hash: lNIOdL2aKxnS8NlOzIaP7/ySJO/apvdxQI14jcwE3/0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.crl
                          rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 18:40:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:e3:03:01:32:63:8c:57:84:3a:a8:43:92:37:aa:56:e2:85:1f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D133C4C7CDB287645E4AA027A49AE23A77B8F4
        Validity
            Not Before: Dec  5 16:16:04 2025 GMT
            Not After : Dec  6 18:40:04 2025 GMT
        Subject: CN=32CCDCC8D1E47945830E8EC677BA951E25FE3F65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d7:3d:81:dc:cf:5e:78:e5:f9:01:73:af:c3:
                    c0:c8:10:73:97:4a:b7:e3:a0:bb:a0:e7:19:c4:0c:
                    7b:ad:5e:a2:03:fb:96:94:da:64:10:30:31:5f:2a:
                    45:11:39:02:1a:e1:53:a1:00:ba:7f:59:44:67:5e:
                    32:a5:ea:65:ff:25:c2:30:37:c9:a9:d8:2f:9b:34:
                    ac:d4:e6:d4:b5:be:22:1e:a3:c3:28:cc:94:2e:2d:
                    27:95:6a:b9:cc:bb:49:d8:fc:97:88:c7:8f:99:30:
                    01:91:3f:92:ca:7a:ac:8c:ef:cb:b9:01:f9:9c:d6:
                    c4:c8:d1:29:e6:74:c3:8e:74:9e:7e:e6:ee:f1:27:
                    bf:7f:92:04:7c:ad:59:d7:4b:8f:55:35:9c:f1:9c:
                    8d:a1:61:c0:d1:4c:dc:9b:78:e3:51:22:f0:1b:d1:
                    e5:8b:82:66:46:25:11:ab:34:a9:1b:86:89:7f:7a:
                    d4:7e:27:10:ad:91:be:a7:7d:09:6f:5b:13:ef:a4:
                    97:89:73:2c:92:23:27:f4:ab:df:4e:87:a4:8e:51:
                    68:de:c1:82:c2:77:6a:0d:62:bc:0c:b9:59:dd:87:
                    a9:d5:51:e4:b7:68:f5:c4:87:f6:cf:90:df:46:ba:
                    de:57:db:d6:15:4f:63:b8:e6:81:25:17:2e:b2:9a:
                    4a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:CC:DC:C8:D1:E4:79:45:83:0E:8E:C6:77:BA:95:1E:25:FE:3F:65
            X509v3 Authority Key Identifier:
                keyid:B5:D1:33:C4:C7:CD:B2:87:64:5E:4A:A0:27:A4:9A:E2:3A:77:B8:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:d9:63:69:41:f9:38:96:0c:3d:f7:1b:fe:a6:24:62:c6:71:
         91:22:33:1a:0d:ab:a2:0d:b2:42:8f:9d:95:9a:95:0f:58:d6:
         20:cf:05:e8:d2:e1:1b:35:3c:fc:f7:6b:75:ed:1c:73:65:4c:
         f9:af:dd:bb:66:15:b6:00:49:8d:33:4f:ff:ef:72:a3:bc:46:
         34:90:85:d6:ee:fb:02:10:ce:47:a0:71:49:1e:76:f5:8d:bf:
         23:e9:f3:2b:37:f9:32:e0:62:22:c0:55:3e:3e:3e:14:e2:ca:
         a8:d8:9f:a4:e7:02:91:53:15:43:f6:ab:f0:16:f5:b9:7c:9c:
         30:32:ce:12:31:eb:55:97:59:40:a2:5e:34:78:ae:96:d1:96:
         0b:17:99:bc:a3:e6:e1:c6:f4:dc:93:11:ab:d6:50:ea:bd:48:
         20:0d:5f:d5:a5:ef:be:32:59:92:f6:57:0e:7d:5f:b9:6f:ce:
         07:58:c9:1d:b7:c2:bc:08:6c:44:07:62:16:5f:3c:bd:1d:c6:
         b5:c6:06:33:ae:ac:dc:af:f0:6c:fb:4d:ec:09:01:a8:6c:2d:
         45:48:4f:af:f9:d9:55:b3:c1:69:91:0b:9b:9b:04:e3:d6:0b:
         f2:69:cc:db:32:06:d3:79:34:1d:d7:91:ef:b6:b6:e9:27:ce:
         6a:94:dc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:27:38 2025 by rpki-client