This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/1A57F0046A898E6B7D56895412B21D8FB1DEF705.mft
File:                     1A57F0046A898E6B7D56895412B21D8FB1DEF705.mft (raw, json)
Hash identifier:          fNjAaidTW56r0e10KkGZ/yRa4xyxhz6pUJd8CbpVZt8=
Subject key identifier:   F7:EA:0D:54:A6:3D:C8:C5:24:C1:34:E1:20:60:42:3C:4E:94:E2:85
Authority key identifier: 1A:57:F0:04:6A:89:8E:6B:7D:56:89:54:12:B2:1D:8F:B1:DE:F7:05
Certificate issuer:       /CN=1A57F0046A898E6B7D56895412B21D8FB1DEF705
Certificate serial:       4F5D9CF5B3866BE651DB038F3C22272A3EA9C734
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A57F0046A898E6B7D56895412B21D8FB1DEF705.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/1A57F0046A898E6B7D56895412B21D8FB1DEF705.mft
Manifest number:          0143
Signing time:             Sun 21 Dec 2025 03:49:10 +0000
Manifest this update:     Sun 21 Dec 2025 03:44:10 +0000
Manifest next update:     Mon 22 Dec 2025 06:49:10 +0000
Files and hashes:         1: 1A57F0046A898E6B7D56895412B21D8FB1DEF705.crl (hash: 0bjxstgt3DTkec8AtiLomd539SPy6z39tFShaLfIZbQ=)
                          2: 323830343a326162633a3a2f33322d3333203d3e20323634303931.roa (hash: bd1myaX9qsRuhiThNa0t26+D3I4D+6iNl0U2rAFWNoA=)
                          3: 3134332e3230382e3132382e302f32322d3332203d3e20323634303931.roa (hash: CRqkkf2w5VjzwQgAR4y5rNFUkhYqHkxPd+dK1wg49MU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/1A57F0046A898E6B7D56895412B21D8FB1DEF705.crl
                          rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/1A57F0046A898E6B7D56895412B21D8FB1DEF705.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A57F0046A898E6B7D56895412B21D8FB1DEF705.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 06:26:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:5d:9c:f5:b3:86:6b:e6:51:db:03:8f:3c:22:27:2a:3e:a9:c7:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A57F0046A898E6B7D56895412B21D8FB1DEF705
        Validity
            Not Before: Dec 21 03:44:10 2025 GMT
            Not After : Dec 22 06:49:10 2025 GMT
        Subject: CN=F7EA0D54A63DC8C524C134E12060423C4E94E285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5d:94:c6:7b:ef:be:bb:62:3a:9c:84:72:93:
                    e8:89:01:7c:47:a2:6d:88:a0:89:e0:74:f6:09:84:
                    2e:ce:aa:aa:d9:87:c7:6e:90:f0:1a:a3:90:35:62:
                    d6:25:77:e7:16:a3:d8:ea:38:23:86:c9:f6:48:68:
                    28:94:7d:ce:7a:89:ec:88:fe:8f:01:2e:69:d2:f1:
                    ad:16:78:93:b5:f5:81:56:5f:43:ea:3a:6a:6c:90:
                    11:5d:82:f9:41:ad:3a:bd:00:7c:f0:13:fd:25:27:
                    c6:0e:4e:53:24:95:b9:aa:ef:b8:6a:e8:d0:e4:4b:
                    9e:8b:04:6a:00:89:8c:f4:ac:ab:12:31:df:d3:19:
                    15:47:7a:c7:4e:e6:07:df:58:64:1d:5c:69:45:eb:
                    5e:9e:39:9b:8b:56:55:35:8e:67:cf:12:09:d6:c2:
                    5d:fa:8e:29:da:81:f8:33:7e:ef:7c:37:cd:51:68:
                    1f:79:5e:0f:0f:5a:e2:19:84:99:e1:a4:84:45:e8:
                    24:c0:38:b3:2e:33:e8:b2:e9:5d:f7:82:48:06:47:
                    fd:fe:04:ee:66:c5:b3:7f:45:74:55:f3:a6:58:3e:
                    53:24:df:58:4d:d0:6a:72:c2:fd:0b:0e:f7:b6:58:
                    c3:80:ca:62:31:96:6f:b9:05:2d:34:af:ba:06:9d:
                    5d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:EA:0D:54:A6:3D:C8:C5:24:C1:34:E1:20:60:42:3C:4E:94:E2:85
            X509v3 Authority Key Identifier:
                keyid:1A:57:F0:04:6A:89:8E:6B:7D:56:89:54:12:B2:1D:8F:B1:DE:F7:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/1A57F0046A898E6B7D56895412B21D8FB1DEF705.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A57F0046A898E6B7D56895412B21D8FB1DEF705.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/1A57F0046A898E6B7D56895412B21D8FB1DEF705.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:6f:89:c8:f3:63:9f:50:37:61:4c:48:4f:ee:54:39:5c:40:
         e0:b8:d7:eb:ff:d1:68:4e:c4:93:94:c0:3c:2f:22:59:80:30:
         76:0a:5a:46:04:32:2b:94:ac:d0:a9:39:93:6a:e2:ec:a7:a4:
         c9:e9:ad:cf:58:b3:5d:88:a7:21:3b:59:02:45:ee:ea:df:0f:
         87:2c:f4:45:56:f7:0e:66:c5:22:91:de:5b:bc:d3:f9:4b:95:
         0f:e0:4e:75:b9:1d:53:bf:ab:4b:2f:b6:65:16:69:43:aa:3a:
         d0:e0:f0:c1:c2:ab:f4:36:3b:c1:2d:1f:75:90:da:76:47:34:
         03:8a:3d:c7:9f:37:b3:69:b9:f5:34:6c:7e:dd:7f:5d:da:52:
         d7:3f:1b:20:62:70:83:f6:ea:01:2e:12:3a:36:c0:06:0d:ff:
         25:50:35:35:f5:90:89:90:71:48:31:d8:4d:4c:d9:6e:eb:73:
         9b:ff:6b:84:3e:2c:f6:51:1d:ef:02:ed:aa:5a:2d:f5:2b:76:
         ef:a9:cc:36:b2:5d:14:59:3b:e2:a5:36:5e:de:c6:0e:a5:50:
         c0:b8:8e:3d:21:e8:a1:b6:6d:d2:93:72:88:43:27:43:d1:3b:
         3c:fb:4a:50:73:4d:f5:36:9a:7c:4b:17:96:4a:85:bb:d6:75:
         51:73:0d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:45:01 2025 by rpki-client