This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/B50F71D69739DBF5914AAB576A379411D64051AB.mft
File:                     B50F71D69739DBF5914AAB576A379411D64051AB.mft (raw, json)
Hash identifier:          2vmd/576eqsySTdO+gRMzY3tuifV9LGIVjI30dhFYKc=
Subject key identifier:   7B:26:7C:3A:22:93:0C:AA:A8:9D:75:00:CE:D8:33:AF:64:F2:A1:A3
Authority key identifier: B5:0F:71:D6:97:39:DB:F5:91:4A:AB:57:6A:37:94:11:D6:40:51:AB
Certificate issuer:       /CN=B50F71D69739DBF5914AAB576A379411D64051AB
Certificate serial:       4C16B8F40D5FACF26F146FCBCE80ED6F6A6E5C51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B50F71D69739DBF5914AAB576A379411D64051AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/B50F71D69739DBF5914AAB576A379411D64051AB.mft
Manifest number:          0212
Signing time:             Sun 21 Dec 2025 00:30:24 +0000
Manifest this update:     Sun 21 Dec 2025 00:25:24 +0000
Manifest next update:     Mon 22 Dec 2025 00:53:24 +0000
Files and hashes:         1: 323830343a333265303a3a2f33322d3336203d3e20323635313032.roa (hash: VKqaT3M8Vbs1UbYSEsk+ac4JH864j9LqcYQVRatZ2eQ=)
                          2: B50F71D69739DBF5914AAB576A379411D64051AB.crl (hash: hQgEMZNyh5UH/XgUpg9pNZb/W+VXjO2xkEmUFIYVw/Y=)
                          3: 3137302e3235342e39362e302f32322d3235203d3e20323635313032.roa (hash: 8Ip1mLJ0X42uGFNZKkZsn7bTlhijmzzP2BlHhWF8LpU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/B50F71D69739DBF5914AAB576A379411D64051AB.crl
                          rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/B50F71D69739DBF5914AAB576A379411D64051AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B50F71D69739DBF5914AAB576A379411D64051AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 00:53:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:16:b8:f4:0d:5f:ac:f2:6f:14:6f:cb:ce:80:ed:6f:6a:6e:5c:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B50F71D69739DBF5914AAB576A379411D64051AB
        Validity
            Not Before: Dec 21 00:25:24 2025 GMT
            Not After : Dec 22 00:53:24 2025 GMT
        Subject: CN=7B267C3A22930CAAA89D7500CED833AF64F2A1A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:09:40:9e:32:2c:19:61:fe:7e:fc:d0:4a:9e:
                    3a:d7:e2:62:80:80:0a:d5:7a:46:0f:5c:b0:09:ea:
                    f7:df:9c:81:9a:cb:01:ac:df:45:a2:0a:95:ee:d6:
                    ca:4d:c2:88:e9:47:a8:f1:01:2e:0e:8e:a5:2d:04:
                    5b:8d:43:ac:b4:e9:bb:3a:b9:a5:97:5d:54:9c:39:
                    64:9b:8c:46:7b:4d:a8:63:d7:35:cc:db:23:d3:d2:
                    74:97:aa:23:8d:90:32:4c:bb:6f:4d:a8:67:80:b2:
                    8d:da:1d:58:4a:1b:99:6f:68:a2:e8:2b:6f:e6:e7:
                    bc:fd:41:4d:93:5f:29:c0:4a:5a:99:c6:8f:ba:4e:
                    77:c4:b7:31:ca:8b:bf:7a:bb:bd:97:25:56:d5:d0:
                    70:8f:aa:b7:db:d0:21:3f:49:73:8f:c2:4d:6b:bf:
                    46:94:81:22:4d:cf:86:3b:56:46:34:e6:11:e3:90:
                    ef:82:84:9e:e1:f2:8f:4c:49:4d:43:50:62:51:1a:
                    26:a0:4b:e3:e4:41:79:87:9f:0f:20:3d:e4:e2:06:
                    e6:b5:1b:d7:02:ea:a4:31:9b:fd:e6:05:94:59:57:
                    76:3b:d7:14:e5:af:03:b8:59:e2:07:56:df:89:0c:
                    d6:22:6e:27:be:0a:d9:6e:8d:88:9e:5b:a2:d8:ae:
                    1b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:26:7C:3A:22:93:0C:AA:A8:9D:75:00:CE:D8:33:AF:64:F2:A1:A3
            X509v3 Authority Key Identifier:
                keyid:B5:0F:71:D6:97:39:DB:F5:91:4A:AB:57:6A:37:94:11:D6:40:51:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/B50F71D69739DBF5914AAB576A379411D64051AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B50F71D69739DBF5914AAB576A379411D64051AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/B50F71D69739DBF5914AAB576A379411D64051AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:9c:b0:87:ac:01:0c:e8:09:b7:4a:e3:0a:d6:d6:fa:1a:26:
         3d:02:c8:7e:62:54:f4:a7:68:22:a0:fe:f2:72:a1:49:77:02:
         dd:9b:9f:f6:59:d2:9d:2b:8f:9c:ee:8a:48:74:88:30:42:5c:
         b4:6d:d4:03:47:69:ea:77:2f:5f:5b:0f:e4:64:aa:2f:2e:e9:
         0d:e0:89:30:13:c8:5a:78:58:56:06:fb:59:6d:4d:1c:37:19:
         2a:76:53:e0:4d:4f:32:3c:89:25:0f:76:d9:3f:eb:38:d0:a4:
         a6:6e:f7:83:79:ca:f7:01:c9:b2:f7:e4:8c:58:27:31:6d:14:
         80:ea:2d:cc:7c:0f:ce:c6:6c:dd:3e:f6:d8:39:cf:44:9a:2b:
         5e:ce:52:85:5d:00:8e:bb:18:82:31:ac:9e:dd:df:3d:c7:0b:
         6d:d8:eb:47:96:0c:44:0e:41:71:b8:0d:d6:b8:1a:5c:cf:9b:
         a9:86:da:17:69:31:6e:67:1f:d1:65:7b:59:01:c9:0b:fe:54:
         9d:8d:fa:38:3a:3d:6c:24:ca:4d:f8:9c:57:00:76:af:4a:f3:
         33:7f:07:e1:29:11:6c:62:f6:ba:f4:49:88:bf:bc:a2:a5:4a:
         58:4b:91:e1:c6:1c:12:db:63:32:80:2a:53:86:2e:cf:fb:09:
         75:36:19:a2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTBa49A1frPJvFG/LzoDtb2puXFEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjUwRjcxRDY5NzM5REJGNTkxNEFBQjU3NkEzNzk0MTFE
NjQwNTFBQjAeFw0yNTEyMjEwMDI1MjRaFw0yNTEyMjIwMDUzMjRaMDMxMTAvBgNV
BAMTKDdCMjY3QzNBMjI5MzBDQUFBODlENzUwMENFRDgzM0FGNjRGMkExQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsCUCeMiwZYf5+/NBKnjrX4mKA
gArVekYPXLAJ6vffnIGaywGs30WiCpXu1spNwojpR6jxAS4OjqUtBFuNQ6y06bs6
uaWXXVScOWSbjEZ7Tahj1zXM2yPT0nSXqiONkDJMu29NqGeAso3aHVhKG5lvaKLo
K2/m57z9QU2TXynASlqZxo+6TnfEtzHKi796u72XJVbV0HCPqrfb0CE/SXOPwk1r
v0aUgSJNz4Y7VkY05hHjkO+ChJ7h8o9MSU1DUGJRGiagS+PkQXmHnw8gPeTiBua1
G9cC6qQxm/3mBZRZV3Y71xTlrwO4WeIHVt+JDNYibie+CtlujYieW6LYrhuzAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUeyZ8OiKTDKqonXUAztgzr2TyoaMwHwYDVR0j
BBgwFoAUtQ9x1pc52/WRSqtXajeUEdZAUaswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEVrUG9CWDNYYnhiRlpla2lyUnFuOEJYaURVOGVuU3JmcndoV2V4WGhQ
VE4vMC9CNTBGNzFENjk3MzlEQkY1OTE0QUFCNTc2QTM3OTQxMUQ2NDA1MUFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1MEY3MUQ2OTczOURCRjU5
MTRBQUI1NzZBMzc5NDExRDY0MDUxQUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NEVrUG9CWDNYYnhiRlpla2lyUnFuOEJYaURVOGVuU3JmcndoV2V4WGhQVE4vMC9C
NTBGNzFENjk3MzlEQkY1OTE0QUFCNTc2QTM3OTQxMUQ2NDA1MUFCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvJywh6wBDOgJt0rjCtbW+homPQLIfmJU9KdoIqD+8nKhSXcC3Zuf9lnSnSuP
nO6KSHSIMEJctG3UA0dp6ncvX1sP5GSqLy7pDeCJMBPIWnhYVgb7WW1NHDcZKnZT
4E1PMjyJJQ922T/rONCkpm73g3nK9wHJsvfkjFgnMW0UgOotzHwPzsZs3T722DnP
RJorXs5ShV0AjrsYgjGsnt3fPccLbdjrR5YMRA5BcbgN1rgaXM+bqYbaF2kxbmcf
0WV7WQHJC/5UnY36ODo9bCTKTficVwB2r0rzM38H4SkRbGL2uvRJiL+8oqVKWEuR
4cYcEttjMoAqU4Yuz/sJdTYZog==
-----END CERTIFICATE-----
Generated at Sun Dec 21 13:05:16 2025 by rpki-client