This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.mft
File:                     B48A181C2DC4482EF44411B66EBF4E215BD86B5F.mft (raw, json)
Hash identifier:          UPoZ9LxzF1mN1NtdGUH4jnkmOWjbkCs8G6jwWpTvy9E=
Subject key identifier:   2C:10:C6:70:01:85:A9:C5:1A:E5:B7:70:F4:02:8B:79:17:DB:E0:AE
Authority key identifier: B4:8A:18:1C:2D:C4:48:2E:F4:44:11:B6:6E:BF:4E:21:5B:D8:6B:5F
Certificate issuer:       /CN=B48A181C2DC4482EF44411B66EBF4E215BD86B5F
Certificate serial:       40A2D6EC927333BEF525163C457926230779DD21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.mft
Manifest number:          0356
Signing time:             Mon 29 Dec 2025 10:11:15 +0000
Manifest this update:     Mon 29 Dec 2025 10:06:15 +0000
Manifest next update:     Tue 30 Dec 2025 13:49:15 +0000
Files and hashes:         1: B48A181C2DC4482EF44411B66EBF4E215BD86B5F.crl (hash: +gYqsPT9edk89oUi9ImW4viFjXB0lpiPYQyj8t8p1n0=)
                          2: 3133382e3131382e3234342e302f32322d3235203d3e20323634323730.roa (hash: AtjRMQ21YZBBBjYWLsUhAfAchfB8scbe3NnlPcZkIc4=)
                          3: 3137302e38342e3233362e302f32322d3235203d3e20323634323730.roa (hash: yzT+NQqGX91mKcMCH68iZ8trlebofBkiOopDNLXVxUc=)
                          4: 3138392e33362e3234382e302f32322d3235203d3e20323634323730.roa (hash: NzyHHq1qAWt74UHK59agAbltMJ0sqf3M8nzX/IcRnkM=)
                          5: 34352e3233342e32342e302f32322d3235203d3e20323634323730.roa (hash: D750fpjRPSx81ZMkhd8htdJmP1vuKg0t+rL3E6Kj0V0=)
                          6: 323830343a323534383a3a2f33322d3634203d3e20323634323730.roa (hash: ACWzqfvlDKS0c+Ld9pB5lNpesBwlGUovMTJZ9ouq5+Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.crl
                          rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 30 Dec 2025 13:49:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a2:d6:ec:92:73:33:be:f5:25:16:3c:45:79:26:23:07:79:dd:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B48A181C2DC4482EF44411B66EBF4E215BD86B5F
        Validity
            Not Before: Dec 29 10:06:15 2025 GMT
            Not After : Dec 30 13:49:15 2025 GMT
        Subject: CN=2C10C6700185A9C51AE5B770F4028B7917DBE0AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2a:f5:27:e7:f7:5e:61:23:e4:95:8e:57:0d:
                    12:60:2e:a5:f7:8e:25:6a:e8:42:6a:36:bc:85:4d:
                    a9:87:13:a7:75:36:a5:8b:d9:c2:e6:02:b5:8f:0c:
                    50:06:c5:74:4f:d5:71:da:0e:6c:fc:83:51:20:a7:
                    3b:34:eb:d5:27:4b:f5:63:13:fc:6b:61:b5:2a:a1:
                    dd:b8:11:88:1b:c3:17:a3:28:33:fb:e2:31:9e:23:
                    c9:13:7c:7d:f7:13:d3:33:32:46:5b:34:8a:9c:e6:
                    02:9b:62:eb:45:3e:b3:92:1d:8f:84:cd:21:3d:6c:
                    6a:1d:ba:e6:2c:8c:7a:52:f2:db:32:1b:19:f4:64:
                    53:b6:09:03:71:c6:30:74:4a:31:74:e3:26:52:23:
                    d2:5a:c6:9f:17:11:85:7c:2d:bd:f1:9a:b1:25:6f:
                    d3:e4:de:94:d2:3b:52:59:ac:db:b2:92:a4:a2:6b:
                    f5:f7:c0:e4:7b:7f:49:76:5c:fe:e1:b5:bb:c5:df:
                    96:76:27:da:eb:ad:d9:0b:75:cf:9d:86:d2:c4:f5:
                    05:f0:28:0a:97:0f:93:38:24:0d:a5:d8:0b:fb:fd:
                    d1:49:ca:27:07:a0:52:47:45:26:2a:5d:3b:40:f4:
                    9b:d2:40:2b:fd:10:39:b2:05:6a:10:c2:95:9d:07:
                    bf:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:10:C6:70:01:85:A9:C5:1A:E5:B7:70:F4:02:8B:79:17:DB:E0:AE
            X509v3 Authority Key Identifier:
                keyid:B4:8A:18:1C:2D:C4:48:2E:F4:44:11:B6:6E:BF:4E:21:5B:D8:6B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:0d:ce:d9:5a:68:3c:5f:79:c2:d2:73:99:eb:e2:2e:e9:1f:
         8e:20:0b:69:ef:9e:b9:a6:f7:08:1a:bf:80:2b:e8:1a:9b:2e:
         47:64:0b:cd:3e:4d:86:a8:95:f5:74:91:c9:94:3c:4c:e5:10:
         38:e5:17:be:f4:bc:b1:17:d0:9d:a9:f8:34:52:74:58:b0:af:
         54:c4:17:31:3e:8f:3b:6d:50:12:f5:d8:be:68:30:80:ad:7d:
         7a:23:03:08:a3:8b:1c:77:50:aa:99:37:22:07:67:f3:06:64:
         ec:70:10:58:75:f5:5a:95:d7:1c:08:45:9d:c1:27:f0:8b:10:
         bc:7a:f3:47:0f:25:1f:79:9a:bd:76:24:61:19:bb:47:4c:d3:
         f9:b0:57:e3:c4:1e:7a:96:0d:55:cf:27:7a:79:ee:21:75:2c:
         dd:9d:23:dc:78:b9:56:ee:41:76:27:cd:cb:ab:4a:18:8a:f5:
         ec:27:a9:12:ff:ad:0e:01:43:a9:ae:0b:c9:5c:51:b4:b0:cb:
         2c:5e:b2:01:e0:f0:bb:97:86:56:a2:73:e3:95:6c:50:dc:de:
         10:df:41:80:5e:89:f9:fe:7a:7c:d5:54:30:05:09:44:bf:0a:
         ad:30:2e:33:2d:10:f7:86:73:7e:d6:6d:2f:d2:6b:22:55:0b:
         07:32:cc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 16:32:03 2025 by rpki-client