This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/1/BE24527D25EBA8FEB922396F011CC1B1F41282DF.mft
File:                     BE24527D25EBA8FEB922396F011CC1B1F41282DF.mft (raw, json)
Hash identifier:          85dhoj8r9B0SJTJVcRm6Ra07E+rWhYS852fH1bHfdgM=
Subject key identifier:   21:1C:08:4A:50:15:ED:5B:D0:82:F9:CF:F7:F7:E5:CD:04:1D:61:BF
Authority key identifier: BE:24:52:7D:25:EB:A8:FE:B9:22:39:6F:01:1C:C1:B1:F4:12:82:DF
Certificate issuer:       /CN=BE24527D25EBA8FEB922396F011CC1B1F41282DF
Certificate serial:       1CEC509180E17420B26A19F932AD5C79B23C8479
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE24527D25EBA8FEB922396F011CC1B1F41282DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/1/BE24527D25EBA8FEB922396F011CC1B1F41282DF.mft
Manifest number:          033A
Signing time:             Sat 20 Dec 2025 03:13:00 +0000
Manifest this update:     Sat 20 Dec 2025 03:08:00 +0000
Manifest next update:     Sun 21 Dec 2025 06:56:00 +0000
Files and hashes:         1: 3137302e3233392e3232342e302f32322d3234203d3e20323636333536.roa (hash: 5+MAJ5p9WBvXqhMf50cfVCkMCAMAZoj+LUAefOm+7yU=)
                          2: 3138372e3132312e3232342e302f32312d3234203d3e20323636333536.roa (hash: E26WxXezeRs4VixpexGuFdot9lmxivU92PPmT+nXOV4=)
                          3: 34352e3233342e3133362e302f32322d3234203d3e20323636333536.roa (hash: kr0gntCEwDSaWo6urO8Yhu5P3ZLTqXRitPa0At9JLuc=)
                          4: 323830343a333639303a3a2f33322d3438203d3e20323636333536.roa (hash: CbUhK5v4kboyh5I7hnUIrCWNHv/eyyi27LJZvc+VMFI=)
                          5: BE24527D25EBA8FEB922396F011CC1B1F41282DF.crl (hash: Rigq5pHYnsfJD5fZCMPTRsU7uo/+DERd1Avjx1uAtOI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/1/BE24527D25EBA8FEB922396F011CC1B1F41282DF.crl
                          rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/1/BE24527D25EBA8FEB922396F011CC1B1F41282DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE24527D25EBA8FEB922396F011CC1B1F41282DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 06:56:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ec:50:91:80:e1:74:20:b2:6a:19:f9:32:ad:5c:79:b2:3c:84:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE24527D25EBA8FEB922396F011CC1B1F41282DF
        Validity
            Not Before: Dec 20 03:08:00 2025 GMT
            Not After : Dec 21 06:56:00 2025 GMT
        Subject: CN=211C084A5015ED5BD082F9CFF7F7E5CD041D61BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:be:2a:77:c4:4f:15:bd:cc:3e:eb:7a:e1:e6:
                    02:a3:6d:5c:84:c0:28:4a:cd:8e:90:31:de:03:d7:
                    5b:cd:f1:07:af:ac:2f:f6:7c:0d:b1:91:25:4d:55:
                    70:d6:28:04:96:d7:b2:cb:3a:fc:e1:f8:78:55:e8:
                    ff:54:f5:7c:c7:44:ed:3b:d3:6c:e7:50:c5:aa:a2:
                    2e:da:d9:7b:99:2c:57:55:3d:b2:de:61:6a:74:02:
                    2d:f6:37:5c:b7:bb:68:7e:56:cd:16:02:eb:68:23:
                    c2:47:06:93:73:64:80:29:03:63:ec:5c:76:f7:d8:
                    1b:cb:65:d3:85:af:2e:f9:0e:da:aa:46:9c:e8:92:
                    fc:08:3a:e9:60:27:ab:21:92:ff:b2:34:0c:b4:43:
                    c8:dc:bd:a9:18:92:c0:38:64:72:01:e9:42:8f:99:
                    d2:f5:f2:ec:07:25:a9:ae:5b:f9:b3:b4:00:bd:6b:
                    76:f3:c5:58:29:e6:55:33:a9:0c:e4:c5:fd:4b:73:
                    86:0e:a3:51:c4:1d:5d:d9:a0:12:95:60:73:2f:63:
                    60:a4:ae:1d:85:37:78:01:d0:1f:c8:27:62:01:55:
                    8d:f7:be:73:21:bb:ba:9c:09:fc:15:e4:d4:ff:b4:
                    8d:dd:02:9d:ff:2a:f1:9c:c3:ce:a1:23:4e:c4:21:
                    a2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:1C:08:4A:50:15:ED:5B:D0:82:F9:CF:F7:F7:E5:CD:04:1D:61:BF
            X509v3 Authority Key Identifier:
                keyid:BE:24:52:7D:25:EB:A8:FE:B9:22:39:6F:01:1C:C1:B1:F4:12:82:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/1/BE24527D25EBA8FEB922396F011CC1B1F41282DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE24527D25EBA8FEB922396F011CC1B1F41282DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/1/BE24527D25EBA8FEB922396F011CC1B1F41282DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:ee:25:5a:49:74:a8:f3:c0:bd:96:25:15:e0:8c:9d:ac:18:
         a7:b8:95:ed:a5:ae:c5:84:65:1a:39:9a:ff:7d:7e:a5:ae:4b:
         c9:5f:e2:a7:96:7a:88:fd:a5:be:a7:88:61:0e:00:72:f1:90:
         d7:8a:d8:d6:ac:47:96:a8:06:ff:c8:00:58:b9:1f:6f:9c:a8:
         0a:52:3f:70:ee:68:1f:49:d4:9f:11:98:8a:01:4c:c7:c6:97:
         52:ac:f3:50:b3:7d:19:67:a8:9a:7f:28:8c:99:69:8d:e3:16:
         3b:ca:70:9d:98:18:72:ab:40:51:b1:fd:91:6c:d1:36:1c:43:
         a8:2d:2c:4a:c1:78:3a:2b:13:08:7e:2d:f8:15:84:41:1a:ee:
         6a:66:3c:47:4c:98:9d:13:c4:ce:c2:12:73:a0:2f:d6:ad:6b:
         f4:f2:b5:9d:7a:18:a4:db:3e:5e:58:df:83:b1:74:55:ae:c1:
         79:2f:ba:f1:6e:6b:83:b8:5e:48:7c:f0:82:8e:18:e6:72:40:
         21:21:7c:81:f7:c7:de:aa:06:d7:37:86:1e:4d:1b:06:20:ea:
         ef:3c:9a:c0:12:ea:5f:aa:f2:1a:0f:51:20:0d:2e:bf:95:87:
         8d:67:08:8f:84:30:c9:f6:6b:65:c7:77:27:96:43:ab:36:a4:
         ce:1d:c4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 15:15:55 2025 by rpki-client