This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/371XwPGVbALNHEq2HbyHF2uDkHZrrqWTfNvLxpjbiHVv/0/B7BB7BE8E44F9F853E4EF9EFA80E680D7CBEEF0D.mft
File:                     B7BB7BE8E44F9F853E4EF9EFA80E680D7CBEEF0D.mft (raw, json)
Hash identifier:          uisrYvVl7gXV5kvAw3Jp9U03sIK1s2Gde5xyHT0NjHM=
Subject key identifier:   8A:3D:F4:09:FF:73:DF:F4:5E:85:8A:9A:49:D5:B8:20:5C:4F:50:59
Authority key identifier: B7:BB:7B:E8:E4:4F:9F:85:3E:4E:F9:EF:A8:0E:68:0D:7C:BE:EF:0D
Certificate issuer:       /CN=B7BB7BE8E44F9F853E4EF9EFA80E680D7CBEEF0D
Certificate serial:       015D61894A49C214CF7E1DDF4DB231F70CE86F0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7BB7BE8E44F9F853E4EF9EFA80E680D7CBEEF0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/371XwPGVbALNHEq2HbyHF2uDkHZrrqWTfNvLxpjbiHVv/0/B7BB7BE8E44F9F853E4EF9EFA80E680D7CBEEF0D.mft
Manifest number:          22
Signing time:             Sat 20 Dec 2025 07:24:34 +0000
Manifest this update:     Sat 20 Dec 2025 07:19:34 +0000
Manifest next update:     Sun 21 Dec 2025 08:01:34 +0000
Files and hashes:         1: B7BB7BE8E44F9F853E4EF9EFA80E680D7CBEEF0D.crl (hash: lIYSE8YrdBNGhwauLIxtaWV62gQ1/QfepBRLMrskX3I=)
                          2: 323830343a3236303a3a2f33322d3438203d3e203533323134.roa (hash: CSjxJIPVekiuAihuhqys3CVPKgtFric0Aso8vB1SYNs=)
                          3: 3138372e34392e3234302e302f32312d3234203d3e203533323134.roa (hash: Rcxwf78xdkMUd+GwCI3PGhsKJ2EGDmMyalA7TbfcFBk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/371XwPGVbALNHEq2HbyHF2uDkHZrrqWTfNvLxpjbiHVv/0/B7BB7BE8E44F9F853E4EF9EFA80E680D7CBEEF0D.crl
                          rsync://rpki-repo.registro.br/repo/371XwPGVbALNHEq2HbyHF2uDkHZrrqWTfNvLxpjbiHVv/0/B7BB7BE8E44F9F853E4EF9EFA80E680D7CBEEF0D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7BB7BE8E44F9F853E4EF9EFA80E680D7CBEEF0D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 08:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:5d:61:89:4a:49:c2:14:cf:7e:1d:df:4d:b2:31:f7:0c:e8:6f:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7BB7BE8E44F9F853E4EF9EFA80E680D7CBEEF0D
        Validity
            Not Before: Dec 20 07:19:34 2025 GMT
            Not After : Dec 21 08:01:34 2025 GMT
        Subject: CN=8A3DF409FF73DFF45E858A9A49D5B8205C4F5059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7f:58:0b:de:28:d0:d7:e3:3b:4e:7c:a5:54:
                    7c:26:27:6d:d1:29:86:11:3b:d0:39:98:0e:10:11:
                    34:69:2f:88:d2:93:00:a8:72:0c:66:56:c6:e9:cc:
                    67:f7:92:02:0d:24:c1:53:54:15:05:df:b6:73:b7:
                    28:77:eb:56:00:50:08:0b:6a:3b:5a:5e:cf:0d:8f:
                    6b:f2:19:86:b3:ec:d8:db:29:0a:fc:fe:10:7b:04:
                    e8:fa:b5:44:5b:99:3a:5e:a3:4f:dc:94:fe:be:32:
                    5f:a4:3f:51:8c:07:b3:30:7f:2b:f9:21:1d:79:e5:
                    30:73:3f:06:10:b6:7d:b3:c0:5f:4a:92:71:9a:73:
                    e5:fd:28:64:cc:1e:b7:f3:9c:b1:4e:92:7d:92:fc:
                    97:4c:40:83:d0:2b:cc:e7:c1:e1:57:9b:ca:be:35:
                    72:a9:36:ec:40:34:d2:89:ed:3f:ad:7a:0c:f2:c5:
                    9b:da:11:01:6d:83:12:cc:7f:4f:0c:63:ea:82:a6:
                    fc:dd:61:64:82:b4:7e:40:e5:d0:03:1c:d1:1c:15:
                    c4:59:77:81:16:6e:eb:62:5c:6c:b1:37:98:ad:1c:
                    3e:20:42:43:e5:fc:6d:0f:91:c8:5f:51:b0:6c:5c:
                    f8:d7:4e:a8:4a:04:71:94:d0:59:71:12:26:b5:2a:
                    26:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3D:F4:09:FF:73:DF:F4:5E:85:8A:9A:49:D5:B8:20:5C:4F:50:59
            X509v3 Authority Key Identifier:
                keyid:B7:BB:7B:E8:E4:4F:9F:85:3E:4E:F9:EF:A8:0E:68:0D:7C:BE:EF:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/371XwPGVbALNHEq2HbyHF2uDkHZrrqWTfNvLxpjbiHVv/0/B7BB7BE8E44F9F853E4EF9EFA80E680D7CBEEF0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7BB7BE8E44F9F853E4EF9EFA80E680D7CBEEF0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/371XwPGVbALNHEq2HbyHF2uDkHZrrqWTfNvLxpjbiHVv/0/B7BB7BE8E44F9F853E4EF9EFA80E680D7CBEEF0D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:41:2c:ad:a1:b9:1b:7f:9f:15:36:94:ad:99:36:f3:52:df:
         e8:48:c7:a0:f6:ad:f9:7d:86:b4:83:84:2d:47:28:2b:f1:06:
         df:ee:5c:74:56:61:ff:4e:b9:21:88:8c:d3:fe:98:a4:51:34:
         58:fa:37:f6:70:ca:c4:9f:cb:cc:4a:f0:eb:85:9f:2a:6f:62:
         af:f8:dc:97:2c:1d:d0:5e:ea:3d:2f:ce:26:64:30:3e:4d:33:
         66:11:f5:a6:1d:23:6c:66:d1:7e:ea:bb:da:62:fc:f9:95:4c:
         af:15:ff:72:e6:8f:36:5f:65:21:3c:82:c6:ea:bf:09:39:d5:
         0a:1a:a5:47:45:7b:c7:fa:7b:a4:dc:b4:2d:61:41:68:a0:72:
         30:2d:97:70:d5:2c:31:53:7c:8c:04:31:1c:2e:c8:11:b4:53:
         43:07:37:03:b9:11:f2:82:77:c4:a6:a8:e9:8e:cd:5f:23:ee:
         31:c5:4a:62:47:02:8b:c4:4f:d1:db:ae:9a:df:21:10:81:9a:
         c8:31:5d:4b:c6:56:dd:d2:77:3b:86:74:f2:27:00:e3:e5:a0:
         57:e7:15:86:85:b3:5f:7c:44:69:bf:59:ab:4b:0c:d5:b7:1d:
         8c:df:ac:51:53:a7:98:32:47:47:5b:b5:34:bd:8a:06:03:ef:
         d1:52:b3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:22:17 2025 by rpki-client