This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft
File:                     BFB590FA7A04C15A07E802593C4472D77FAB7820.mft (raw, json)
Hash identifier:          2I6u8MPRyzsJhDIV2kuxaOzLpB1oNJYDgz+pPbHk3Nc=
Subject key identifier:   BD:A9:31:E5:8E:B0:B2:D3:22:FD:C7:7B:53:59:75:CA:3B:0D:36:FE
Authority key identifier: BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20
Certificate issuer:       /CN=BFB590FA7A04C15A07E802593C4472D77FAB7820
Certificate serial:       3181ED44E5EF9AB3215CF0BB2C22E0CF5C27B5BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft
Manifest number:          01E6
Signing time:             Mon 29 Dec 2025 21:32:20 +0000
Manifest this update:     Mon 29 Dec 2025 21:27:20 +0000
Manifest next update:     Wed 31 Dec 2025 00:39:20 +0000
Files and hashes:         1: 34352e3137342e31362e302f32332d3233203d3e20323638383738.roa (hash: keXIpMElmj/p1Ii/+at+te+ilCZkFZnEutXTtt+hJ0U=)
                          2: 323830343a356266303a3a2f33322d313238203d3e20323638383738.roa (hash: 17+u0HNFwo8Q2gdhCBAuIkj02jj+cd6wojbAGTJYvRE=)
                          3: 323830343a356266303a383030303a3a2f33332d3333203d3e20323638383738.roa (hash: mPcgWOQP3Yfaj4II6jjlLcd9TZ991tq6OUlMO7aXDKs=)
                          4: BFB590FA7A04C15A07E802593C4472D77FAB7820.crl (hash: PIvhHiBKGthS0QxpbKGy8irz+tIfKX5Y9Xa/2NvsOPU=)
                          5: 323830343a356266303a3a2f33322d3332203d3e20323638383738.roa (hash: 84h5WIrRdNIuOAKxo5jqkxy4MZCfgun5O5sJhst6mPo=)
                          6: 34352e3137342e31362e302f32322d3332203d3e20323638383738.roa (hash: N0IcTOYFU5ZMMu+cgyyvQqnzYkGJv2HWossKq/fnmK8=)
                          7: 323830343a356266303a3a2f33332d3333203d3e20323638383738.roa (hash: LpZUFdp5QtcnhG/XEq0FRx2E8yWn4lVSq4AvIB5A+RQ=)
                          8: 34352e3137342e31382e302f32332d3233203d3e20323638383738.roa (hash: r+Ce4bAI52p7w4milCYkcttrWEjX2kGjkA82VJ3Espc=)
                          9: 34352e3137342e31362e302f32322d3232203d3e20323638383738.roa (hash: 2ZOwE2PR0CMiaImusRVey0Ti2u141VZv3wxhLAy74xo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.crl
                          rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 30 Dec 2025 22:41:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:81:ed:44:e5:ef:9a:b3:21:5c:f0:bb:2c:22:e0:cf:5c:27:b5:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFB590FA7A04C15A07E802593C4472D77FAB7820
        Validity
            Not Before: Dec 29 21:27:20 2025 GMT
            Not After : Dec 31 00:39:20 2025 GMT
        Subject: CN=BDA931E58EB0B2D322FDC77B535975CA3B0D36FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8e:02:f1:46:d8:3d:7a:e5:7f:65:a2:0f:9a:
                    ef:a5:a8:90:86:a9:5e:0e:79:e6:28:59:80:bd:14:
                    30:4b:9b:dd:d4:94:81:b3:9e:8c:db:d7:45:4e:c0:
                    72:50:51:c7:7d:2f:f1:a6:4d:d5:0d:72:96:e0:0e:
                    1c:42:62:25:62:14:bf:e5:e4:3d:b8:6a:5b:a6:38:
                    ca:6f:7c:c1:9a:59:45:5a:d1:cc:39:19:4a:01:ee:
                    54:40:52:d5:6f:f1:3a:68:bd:e8:7f:a1:b8:ee:0f:
                    9a:94:cb:cb:ba:52:ec:c6:84:ab:8e:b8:9e:12:b6:
                    e1:de:7e:da:91:e2:3d:78:75:61:42:2d:75:bb:f1:
                    d3:7f:4e:1c:be:2a:1d:68:47:99:41:e5:7c:89:47:
                    78:1f:a9:ff:92:e0:41:22:9a:6c:34:73:59:b0:78:
                    ef:62:f6:65:64:3a:8e:f7:4f:67:bc:c3:75:00:ca:
                    d6:78:a0:b4:2d:75:21:da:3e:ae:ca:71:8a:d1:ae:
                    17:47:87:13:46:38:9a:d6:68:27:76:f5:78:d3:cd:
                    33:25:cb:e4:9c:3e:c5:cd:5c:08:5e:2b:43:14:ff:
                    79:0e:25:d0:9d:b1:d3:bc:20:74:0f:a3:d8:c3:bd:
                    98:9a:f4:e8:22:55:3b:2b:13:d6:7a:65:d5:81:0a:
                    c5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A9:31:E5:8E:B0:B2:D3:22:FD:C7:7B:53:59:75:CA:3B:0D:36:FE
            X509v3 Authority Key Identifier:
                keyid:BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:6f:f6:d1:89:81:40:4f:d9:8f:ee:53:b0:d2:b4:0c:06:7d:
         bd:28:df:ee:a6:50:36:9e:eb:69:07:48:98:a4:25:3d:3f:c5:
         50:38:c4:f2:d1:a9:10:20:2a:66:4d:09:41:74:5a:b6:f0:29:
         e5:42:60:4b:e0:4d:42:e0:fa:fa:13:92:f5:d4:da:f7:73:de:
         6f:52:33:0e:03:78:bc:5f:5e:85:2f:dc:36:5d:a1:1f:d9:a9:
         a3:91:88:90:01:08:d3:30:6f:ea:73:0a:ab:69:77:b2:c2:c5:
         99:6b:bd:66:af:ef:4d:80:7c:69:a7:d3:75:49:7a:fa:a1:4f:
         65:da:eb:2c:5d:2f:ce:34:28:23:89:f4:21:36:42:5c:e8:f0:
         e3:63:5d:db:ed:3b:29:9c:01:ed:6f:5b:2a:e7:8a:18:aa:c6:
         5f:83:92:44:8f:fb:db:8a:73:b3:47:c6:64:d5:dd:d7:80:66:
         ce:db:80:93:32:9a:a9:ec:c5:5b:27:44:de:a3:5b:24:9a:be:
         bf:63:81:e2:63:67:37:1a:c6:08:d3:b4:b0:10:a1:71:33:5e:
         e1:f2:4c:71:88:68:43:44:11:cb:f3:06:35:05:79:b9:71:9c:
         b0:87:1f:cf:76:90:b7:1b:30:f8:42:8e:1a:34:cd:e5:92:b1:
         09:01:74:2e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUMYHtROXvmrMhXPC7LCLgz1wntb8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkZCNTkwRkE3QTA0QzE1QTA3RTgwMjU5M0M0NDcyRDc3
RkFCNzgyMDAeFw0yNTEyMjkyMTI3MjBaFw0yNTEyMzEwMDM5MjBaMDMxMTAvBgNV
BAMTKEJEQTkzMUU1OEVCMEIyRDMyMkZEQzc3QjUzNTk3NUNBM0IwRDM2RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEjgLxRtg9euV/ZaIPmu+lqJCG
qV4OeeYoWYC9FDBLm93UlIGznozb10VOwHJQUcd9L/GmTdUNcpbgDhxCYiViFL/l
5D24alumOMpvfMGaWUVa0cw5GUoB7lRAUtVv8Tpoveh/objuD5qUy8u6UuzGhKuO
uJ4StuHeftqR4j14dWFCLXW78dN/Thy+Kh1oR5lB5XyJR3gfqf+S4EEimmw0c1mw
eO9i9mVkOo73T2e8w3UAytZ4oLQtdSHaPq7KcYrRrhdHhxNGOJrWaCd29XjTzTMl
y+ScPsXNXAheK0MU/3kOJdCdsdO8IHQPo9jDvZia9OgiVTsrE9Z6ZdWBCsVjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUvakx5Y6wstMi/cd7U1l1yjsNNv4wHwYDVR0j
BBgwFoAUv7WQ+noEwVoH6AJZPERy13+reCAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzlLNGlkbUxtNGVlczUyUHdZTUFKUUtXWGJjVlFUODU2OTNpa1J5enNr
Ym8vMC9CRkI1OTBGQTdBMDRDMTVBMDdFODAyNTkzQzQ0NzJENzdGQUI3ODIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGQjU5MEZBN0EwNEMxNUEw
N0U4MDI1OTNDNDQ3MkQ3N0ZBQjc4MjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NzlLNGlkbUxtNGVlczUyUHdZTUFKUUtXWGJjVlFUODU2OTNpa1J5enNrYm8vMC9C
RkI1OTBGQTdBMDRDMTVBMDdFODAyNTkzQzQ0NzJENzdGQUI3ODIwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALm/20YmBQE/Zj+5TsNK0DAZ9vSjf7qZQNp7raQdImKQlPT/FUDjE8tGpECAq
Zk0JQXRatvAp5UJgS+BNQuD6+hOS9dTa93Peb1IzDgN4vF9ehS/cNl2hH9mpo5GI
kAEI0zBv6nMKq2l3ssLFmWu9Zq/vTYB8aafTdUl6+qFPZdrrLF0vzjQoI4n0ITZC
XOjw42Nd2+07KZwB7W9bKueKGKrGX4OSRI/724pzs0fGZNXd14BmztuAkzKaqezF
WydE3qNbJJq+v2OB4mNnNxrGCNO0sBChcTNe4fJMcYhoQ0QRy/MGNQV5uXGcsIcf
z3aQtxsw+EKOGjTN5ZKxCQF0Lg==
-----END CERTIFICATE-----
Generated at Mon Dec 29 23:49:32 2025 by rpki-client