This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft
File:                     D2991FF0EF094685597EA5146C4730F0270A9201.mft (raw, json)
Hash identifier:          uAClI3qzH0v6vReg/hgE9JfzHcTVzy1jcFk6GHfxGL4=
Subject key identifier:   2A:01:DA:AB:8A:4A:32:E5:E1:C3:38:89:FB:33:DB:B4:A1:0A:A8:B1
Authority key identifier: D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01
Certificate issuer:       /CN=D2991FF0EF094685597EA5146C4730F0270A9201
Certificate serial:       52A23CEC91149090B43A2F20266A0EBC3EDA24FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft
Manifest number:          0218
Signing time:             Sat 20 Dec 2025 07:22:21 +0000
Manifest this update:     Sat 20 Dec 2025 07:17:21 +0000
Manifest next update:     Sun 21 Dec 2025 10:29:21 +0000
Files and hashes:         1: D2991FF0EF094685597EA5146C4730F0270A9201.crl (hash: T5QNt2MLeTXQ/Lcr+fcIbaGJcVwFOcXIvWtGcqivxqA=)
                          2: 3137372e38342e32342e302f32322d3332203d3e20323632353737.roa (hash: C0u1aT3LDMhL5SLNpfi4dKOK4v/xmo0BwWf2GUw/OvQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl
                          rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 10:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:a2:3c:ec:91:14:90:90:b4:3a:2f:20:26:6a:0e:bc:3e:da:24:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2991FF0EF094685597EA5146C4730F0270A9201
        Validity
            Not Before: Dec 20 07:17:21 2025 GMT
            Not After : Dec 21 10:29:21 2025 GMT
        Subject: CN=2A01DAAB8A4A32E5E1C33889FB33DBB4A10AA8B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:00:a5:7b:a2:b8:09:54:03:1e:7a:03:77:7f:
                    e6:4d:04:1d:51:5c:c7:df:57:89:f6:f4:2f:f0:23:
                    71:e2:77:12:35:96:38:50:d2:70:49:2e:c7:b7:13:
                    3f:21:99:8d:8a:96:dc:3a:11:ff:e2:41:f2:a3:7d:
                    f2:81:f3:2f:5c:13:5a:fc:a4:13:a4:89:2d:29:4a:
                    31:fa:dd:ca:84:bd:8f:18:7e:f5:34:9c:f2:94:ef:
                    75:97:b5:38:a0:4b:50:5f:b8:a1:2d:ac:2f:5f:6e:
                    f4:34:8b:80:98:d7:51:69:fa:27:a2:67:65:af:48:
                    f6:09:88:95:86:0f:a2:c4:cf:cc:d2:f9:35:89:5a:
                    8e:e7:0f:51:fc:56:36:2d:da:a7:8d:38:91:78:ba:
                    c7:01:1b:12:cb:6b:21:de:3b:f5:96:36:db:e3:8c:
                    30:84:70:11:e5:6c:5e:73:19:ba:b0:13:ee:f5:17:
                    07:6c:48:1e:ae:83:a5:d9:9d:dd:ba:75:40:5e:78:
                    7c:0a:2f:55:a8:eb:da:b9:9b:b6:f9:23:ac:34:65:
                    ac:0a:10:9e:f6:c8:5e:86:6e:d6:4d:a5:93:60:9c:
                    cf:73:4e:49:c1:eb:ed:ef:5a:78:63:c3:d0:1b:f1:
                    69:9b:59:85:a9:84:71:08:4d:5a:cd:3f:74:41:dd:
                    ab:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:01:DA:AB:8A:4A:32:E5:E1:C3:38:89:FB:33:DB:B4:A1:0A:A8:B1
            X509v3 Authority Key Identifier:
                keyid:D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:eb:41:bd:57:09:e1:7c:2f:7b:94:24:a0:f1:d6:41:64:02:
         12:7e:3c:26:c4:91:53:5e:88:26:ac:e7:2a:45:af:14:3b:f9:
         51:50:4f:81:61:eb:cc:7d:ce:b2:96:3b:5a:4e:02:01:55:9f:
         c1:cf:d8:81:72:76:08:84:d9:5d:46:a5:40:b7:73:ce:08:9b:
         94:4d:45:1b:23:d4:84:85:17:47:ba:e6:b7:bf:56:a3:03:36:
         a0:2e:5e:91:73:da:f2:60:b1:cb:5a:fa:7c:56:ed:52:cf:75:
         b7:36:cd:04:19:f3:f7:fb:c1:bf:21:02:dd:b6:f8:0d:81:e9:
         b2:ba:8e:cc:c9:85:d4:66:43:38:4a:b6:9f:a0:d5:44:8e:61:
         de:e4:1a:09:76:30:34:84:d5:83:53:d8:14:50:bb:64:05:c4:
         9d:20:a9:ac:27:c2:c2:80:99:34:30:1b:93:b0:65:a0:c3:da:
         36:a5:3d:cd:f6:a5:be:b4:66:14:17:49:df:f2:84:11:4f:13:
         03:dd:fc:08:b4:c7:30:83:78:6b:f4:e6:fb:b8:dd:b3:8f:a1:
         66:f5:e6:ac:29:5d:51:6d:2b:c4:7f:68:4b:39:ce:ce:f5:48:
         1f:06:09:a2:50:ae:3d:86:24:ea:23:3a:1d:0a:c6:1b:71:c5:
         0a:ba:8f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----