This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.mft
File:                     B1DBBA8EA92CD857019C49802F323CF13FFF24AF.mft (raw, json)
Hash identifier:          i9sqgv0UqpJ0TgJmEIB7RQaBnWTmnptoYAYear12Wxc=
Subject key identifier:   04:B8:1C:EA:5D:6E:90:C1:1B:D1:59:BB:9E:84:FD:95:8B:96:CC:19
Authority key identifier: B1:DB:BA:8E:A9:2C:D8:57:01:9C:49:80:2F:32:3C:F1:3F:FF:24:AF
Certificate issuer:       /CN=B1DBBA8EA92CD857019C49802F323CF13FFF24AF
Certificate serial:       5DAACD84BD4C30BA6ED5985C622C094E4A9E23A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.mft
Manifest number:          0342
Signing time:             Sat 20 Dec 2025 06:59:09 +0000
Manifest this update:     Sat 20 Dec 2025 06:54:09 +0000
Manifest next update:     Sun 21 Dec 2025 07:55:09 +0000
Files and hashes:         1: 323830343a346633343a3a2f33322d3334203d3e20323638333131.roa (hash: pVe96xhrDJsbS3v/hFVf0gfQ6Akt4/UB+6M4ltF/uHM=)
                          2: 34352e3233382e34302e302f32322d3234203d3e20323638333131.roa (hash: Mg0sWQAlHEW7xnk3ZZaBDMEonBLQLr7YNGgZkvgx5MA=)
                          3: B1DBBA8EA92CD857019C49802F323CF13FFF24AF.crl (hash: 5uvB5Bo22xBqoJDMN06LbUjxT3Or/9/mWL0TXpmsw+M=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.crl
                          rsync://rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 07:55:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:aa:cd:84:bd:4c:30:ba:6e:d5:98:5c:62:2c:09:4e:4a:9e:23:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1DBBA8EA92CD857019C49802F323CF13FFF24AF
        Validity
            Not Before: Dec 20 06:54:09 2025 GMT
            Not After : Dec 21 07:55:09 2025 GMT
        Subject: CN=04B81CEA5D6E90C11BD159BB9E84FD958B96CC19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:46:c3:76:05:5d:34:15:79:16:dd:86:ee:c3:
                    1a:c2:84:33:29:d0:39:13:9c:9f:81:d1:ff:aa:10:
                    40:2a:2f:ff:06:13:75:81:97:52:5a:d4:10:e9:41:
                    58:70:86:a1:24:63:17:44:2f:52:ac:6c:d9:06:38:
                    90:f9:38:ce:ed:7e:f3:12:0b:6d:36:c0:08:77:72:
                    af:dc:b0:00:74:1e:fc:01:2e:da:ca:3d:a6:be:16:
                    11:92:f7:61:5a:1b:e7:37:da:53:a0:48:f6:04:4b:
                    15:3d:d0:ac:d1:02:bc:50:f1:20:7c:27:fd:06:c7:
                    3c:67:41:12:bf:80:10:ec:dd:5c:d4:d1:21:85:0c:
                    60:7b:d9:00:90:40:9e:31:67:77:2c:5e:79:39:c8:
                    64:d3:47:21:a5:d0:e3:a2:22:d9:fe:56:b1:97:0b:
                    d0:54:9f:af:0f:8d:b3:a3:fb:3f:66:c3:50:d5:06:
                    a2:3f:6a:d6:ef:c8:21:c9:a4:b4:ac:45:ca:61:62:
                    68:7c:23:0b:e6:c1:e3:1b:47:16:9b:12:32:91:98:
                    11:3b:62:b0:40:39:08:be:d1:f6:bb:71:1b:b0:fc:
                    58:8f:61:31:83:34:ba:b8:42:2c:a8:85:c7:5a:dc:
                    2f:87:d5:ed:7d:78:32:d5:2d:1a:3d:58:1c:b9:32:
                    6b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B8:1C:EA:5D:6E:90:C1:1B:D1:59:BB:9E:84:FD:95:8B:96:CC:19
            X509v3 Authority Key Identifier:
                keyid:B1:DB:BA:8E:A9:2C:D8:57:01:9C:49:80:2F:32:3C:F1:3F:FF:24:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:75:61:e1:22:81:79:cc:0a:b4:7d:77:46:33:81:b5:f0:61:
         fd:4d:b7:fc:94:5a:f7:44:fb:b9:62:97:f7:06:18:45:74:5a:
         c1:10:92:c5:c4:2a:78:05:2c:6d:02:00:19:0f:d9:a5:4d:2d:
         88:55:e9:bd:32:5c:54:eb:17:95:56:ff:7a:62:2e:83:1d:81:
         14:44:60:85:bd:97:f4:4f:e8:92:50:5d:99:98:56:ce:b5:d1:
         79:3b:d8:06:e7:10:ab:03:54:f6:f7:01:d9:81:9d:86:95:0d:
         0c:39:19:64:cf:b7:07:95:a4:4c:ac:c3:a0:4a:17:57:1b:ea:
         eb:5e:6b:de:45:7a:af:02:e6:cc:26:9b:b2:4d:34:88:56:72:
         25:da:c5:71:59:24:c7:3c:15:f6:6c:85:e6:62:c4:96:c0:fa:
         30:06:65:71:23:f9:3f:f7:6d:8a:87:8f:25:e3:b9:ce:50:49:
         cb:f9:67:2f:c5:71:eb:86:c7:f0:10:72:04:96:e8:2b:ef:a9:
         12:3f:80:7c:a6:d4:d6:62:51:cd:c5:cf:90:97:b7:af:be:ac:
         01:92:f4:0b:00:e4:8a:10:e6:a6:09:4d:bb:ee:82:10:d6:2d:
         5a:45:fd:e7:fe:2a:b6:3f:6f:7a:ce:70:b0:80:b4:ca:be:71:
         43:ed:6f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:29:27 2025 by rpki-client