This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.mft
File:                     BDF780A1AD20031A92186F4B5C02F049FB8A7D26.mft (raw, json)
Hash identifier:          Tqfn2zrcK0AHPYh3GeG+T1qGLOhixOVNH71cMdHafoc=
Subject key identifier:   93:BD:2A:60:31:59:0B:46:09:21:50:DD:94:D2:27:33:92:68:23:0C
Authority key identifier: BD:F7:80:A1:AD:20:03:1A:92:18:6F:4B:5C:02:F0:49:FB:8A:7D:26
Certificate issuer:       /CN=BDF780A1AD20031A92186F4B5C02F049FB8A7D26
Certificate serial:       1C2E5126DCB6533E8B5E28C94B4F5CF63F7B0BFB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.mft
Manifest number:          031A
Signing time:             Mon 29 Dec 2025 09:33:09 +0000
Manifest this update:     Mon 29 Dec 2025 09:28:09 +0000
Manifest next update:     Tue 30 Dec 2025 13:32:09 +0000
Files and hashes:         1: 34352e3138332e3138382e302f32322d3234203d3e20323639323938.roa (hash: XUloOVfsOzPPxyik/iHPBmw4bQxk/7eIdcUdi8kEcuc=)
                          2: 323830343a363237343a3a2f33322d3438203d3e20323639323938.roa (hash: i3cBezF8IApSQaQqjUBcgOAnsqNsV9UdV/mGucW8iO4=)
                          3: BDF780A1AD20031A92186F4B5C02F049FB8A7D26.crl (hash: glq1YPJB5lHHS+h7+hCX83qrS2zHKnIpcNcWidE+a3k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.crl
                          rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 30 Dec 2025 13:32:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:2e:51:26:dc:b6:53:3e:8b:5e:28:c9:4b:4f:5c:f6:3f:7b:0b:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDF780A1AD20031A92186F4B5C02F049FB8A7D26
        Validity
            Not Before: Dec 29 09:28:09 2025 GMT
            Not After : Dec 30 13:32:09 2025 GMT
        Subject: CN=93BD2A6031590B46092150DD94D227339268230C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:59:7e:cd:38:f6:91:07:fb:87:70:b0:b9:89:
                    e8:18:a2:bb:5e:4d:49:4e:6a:fe:f7:f3:66:61:97:
                    93:3f:5e:ff:7a:e9:08:6b:52:e3:a9:4a:ce:6c:21:
                    6e:83:79:b9:01:89:a8:a6:61:91:2a:44:3d:b7:b4:
                    41:0e:f9:ec:17:91:96:73:ea:21:ba:74:5d:7b:20:
                    55:df:8e:00:e7:d6:79:c4:37:1c:cb:76:1d:72:ad:
                    74:75:4c:a1:14:99:a7:9d:c0:71:f0:bb:6c:39:b7:
                    3c:d9:27:c5:b3:49:ef:69:1a:38:84:bd:e5:88:5a:
                    04:3f:c3:5d:b7:d5:f9:07:17:6e:e8:15:28:7f:aa:
                    e4:3a:0a:ed:ae:98:b8:fc:e6:1f:53:1b:5e:5f:79:
                    da:29:de:d7:b9:8a:b4:b0:bf:3c:89:4f:0a:98:b5:
                    ba:77:9e:4c:1f:5a:f4:53:30:aa:f2:56:15:6b:cf:
                    aa:82:99:eb:ae:ce:82:27:8b:d6:0f:1b:6a:26:5b:
                    31:18:34:32:5e:d5:ca:80:bc:85:43:28:bc:22:fd:
                    06:e7:cd:76:c2:ef:21:c4:6e:04:03:a1:3d:97:ef:
                    22:b9:b6:28:cb:d3:ed:da:c7:d9:79:34:bd:d7:30:
                    1a:ed:06:f8:ba:b6:5c:87:f7:b6:78:c2:fb:eb:3c:
                    5d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:BD:2A:60:31:59:0B:46:09:21:50:DD:94:D2:27:33:92:68:23:0C
            X509v3 Authority Key Identifier:
                keyid:BD:F7:80:A1:AD:20:03:1A:92:18:6F:4B:5C:02:F0:49:FB:8A:7D:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:4c:41:a0:c2:b3:a0:59:63:35:6a:ed:49:4e:1e:bd:34:07:
         4d:c2:ac:db:f7:7d:17:26:a7:76:52:37:f0:d4:71:e8:0c:b4:
         99:f2:0c:1f:38:80:7e:01:ab:a5:77:2a:05:c7:2b:ad:ee:aa:
         fb:f7:07:95:a2:7c:56:e1:0c:e3:e7:9f:09:90:b1:88:26:e3:
         93:90:62:5f:44:17:86:03:6a:0a:f8:d3:43:cb:2d:00:f6:a0:
         bf:10:5e:a7:55:4c:77:a6:d5:a8:1f:89:37:53:19:f7:3b:d9:
         a5:7c:71:77:9f:51:c6:a1:a4:07:14:7d:37:d8:0d:2d:6a:9c:
         20:4a:38:23:62:24:1e:77:cf:83:47:25:0f:46:a5:bd:7e:ee:
         78:10:b7:d1:c8:8d:d8:ae:63:a9:78:42:57:2d:48:92:be:12:
         c2:44:0f:4b:d5:93:c6:b1:ba:1c:d5:0b:c4:9b:09:65:8b:59:
         3b:53:3a:ec:7b:04:70:23:94:48:a5:b3:d4:87:8e:a9:08:2e:
         71:4a:29:d5:e5:d1:ec:b8:d6:51:87:cb:b9:49:19:56:39:f4:
         79:ad:67:06:8e:13:59:e4:bb:28:8b:c5:c5:c6:fb:d5:0b:49:
         47:a9:52:64:1f:0b:07:56:c2:7b:e9:c4:32:b0:be:c4:6c:c7:
         f6:f3:18:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 16:23:26 2025 by rpki-client