This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.mft
File:                     B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.mft (raw, json)
Hash identifier:          puub2nD8ijVw1qPRAq1K+IV4thW2kjShFSem1OnszTk=
Subject key identifier:   11:60:E6:AE:C7:F0:DF:27:56:10:E3:04:FC:BB:FD:EA:3C:17:DE:E2
Authority key identifier: B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE
Certificate issuer:       /CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
Certificate serial:       5B8E85A0E24FDC783383C248BC98C30B3FF4A7C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.mft
Manifest number:          028D
Signing time:             Sun 21 Dec 2025 11:03:29 +0000
Manifest this update:     Sun 21 Dec 2025 10:58:29 +0000
Manifest next update:     Mon 22 Dec 2025 14:31:29 +0000
Files and hashes:         1: 3137302e38332e3130342e302f32322d3234203d3e203238313538.roa (hash: wZAnMUtXHTBSijDvsOhgBk5W9SUqQtOsH7OuOARQJgo=)
                          2: 323830343a3361343a3a2f33322d3438203d3e203238313538.roa (hash: XYfXP9f2DXk6uD5N2ssNnsePCrWZaeAJLaEUM/uJhKg=)
                          3: 34352e3233382e36382e302f32322d3234203d3e203238313538.roa (hash: wvw2a/HDEgp3Dtf7xhrdvhSyRRY6uJr8txIuqmLi4Wg=)
                          4: 3137372e3132392e3132332e302f32342d3234203d3e203238313538.roa (hash: 9FZY4YSJIARhESDPd/kakYV6Pm51QlKYSbSSWAM8HpM=)
                          5: 3138372e36302e3231322e302f32322d3234203d3e203238313538.roa (hash: BhYH3Ms8XUMKJ3p94zEqpUSf+t/Xkhr36WIfCJv0t/A=)
                          6: 3138372e3132302e3233322e302f32322d3234203d3e203238313538.roa (hash: bve5O5x4o/BwjTYYesB9FnFLbbk2dZhmNOL5LUj0AAM=)
                          7: 3138372e3130392e39362e302f32302d3234203d3e203238313538.roa (hash: anlTf9tz6sbB2NAzzJgeuKDI7WJVrMzG/84/qDYTdSo=)
                          8: 34352e3138392e3134342e302f32322d3234203d3e20323639353936.roa (hash: cT/YqFKWorF7ylx8zG4HyEhFEYcnrW4coUpI/5YuwoQ=)
                          9: 34352e3138392e3134342e302f32322d3234203d3e203238313538.roa (hash: 6lp88p/5BVrvMxZZSrY5m7TsC6brNPLadCcKKbcjm7s=)
                          10: 3137372e3132392e3132302e302f32342d3234203d3e203238313538.roa (hash: 0935yZkpDap+dD3tu1tOfJpwQpbTbB7WE1C6q/xeajA=)
                          11: 34352e3136322e34302e302f32322d3234203d3e203238313538.roa (hash: Y1kHT6iUSVhdFkW3LyAsWJDo6EXjp4PXBcpfsZR+B+4=)
                          12: 323830343a363666633a3a2f33322d3438203d3e203238313538.roa (hash: /VEh3KrjoTUp6Kfjc30HuDWO4QlrzQ5XQX0SRkEK6XE=)
                          13: 3230302e3139322e39362e302f32312d3234203d3e203133333537.roa (hash: lAp7W6P14X33ArHsfUCB0iSDiJX2ZRlV6WeDx5+TlfY=)
                          14: 3133382e39372e382e302f32322d3234203d3e203238313538.roa (hash: aBXdcqHQef5p+zCNo4Yuyx0IlNDd9TDek3BDvOuilQM=)
                          15: 3137372e3132392e3132312e302f32342d3234203d3e20323734343633.roa (hash: hWa//pusa62AFD8q4nUf+3Dtwtgj+wjx1Z4IK0OgCZo=)
                          16: 3138372e36302e3230382e302f32322d3234203d3e203238313538.roa (hash: R0pVpm+SMNTm+UqVOXphu/pUkmmHwkI53/X783LYKgM=)
                          17: 3137302e38342e3136302e302f32322d3234203d3e203238313538.roa (hash: 2aEkvE+RLOIijWGcxPieLGbaJianYYvYZY9bmaaBga8=)
                          18: 3138372e36302e3231362e302f32322d3234203d3e203238313538.roa (hash: FfO5o/cXhTmyoELUtgE+xwpZSlhU9tv+lgYksxVV7EU=)
                          19: 323830343a3666633a3a2f33322d3438203d3e203238313538.roa (hash: tZMIqzZLZo/OXKzL3uMNM7new4k8nN5l7En24qoXle4=)
                          20: 3137372e3130312e3132382e302f32302d3234203d3e203238313538.roa (hash: wJjHQSbhzM7dohNBOHQA2kBZm5NmguS8fgLqmgc5HH0=)
                          21: 3137372e3132392e3132322e302f32342d3234203d3e203238313538.roa (hash: OitqsmQsY21pTBfu/FtB4MtZAt8EDGKuhze3ZViz/Co=)
                          22: 3137372e3132392e3132322e302f32332d3233203d3e203238313538.roa (hash: Zj38qp83wEwiSXXHNaSlXUiLLvXqdJ2l9LSiE7hqIFY=)
                          23: 3138372e3132302e3233362e302f32322d3234203d3e203238313538.roa (hash: ybCfizrjfx7K21eEzD4HBj9ghNEQRlkqy6T1+Z7eQC8=)
                          24: 3137372e32332e3139322e302f32312d3234203d3e203238313538.roa (hash: wTBBuTuMwZO3d7GA/SKJ7USDqiEPzSpHXxASCeabKxc=)
                          25: 323830343a376163633a3a2f33322d3438203d3e203133333537.roa (hash: 0Uf+P7xRDWECM8M4HyCiBd+M4TmMyyxnYIvQfT2BEGU=)
                          26: 3138372e36302e3232302e302f32322d3234203d3e203238313538.roa (hash: QJI9z1DTgtawfNc2ekob0kcp3YL9zPfAJJiGi0QzV0M=)
                          27: 3137302e3234362e3139322e302f32322d3234203d3e203238313538.roa (hash: bDj0a6NIM1dl/KzH3Q5dtA/uHKbrM1Ckerr3OoIJN5I=)
                          28: B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl (hash: Ab54Agi4oTkB6yJziN/KtGH6ddEV90113EqfFUxbLCs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl
                          rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 13:36:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:8e:85:a0:e2:4f:dc:78:33:83:c2:48:bc:98:c3:0b:3f:f4:a7:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
        Validity
            Not Before: Dec 21 10:58:29 2025 GMT
            Not After : Dec 22 14:31:29 2025 GMT
        Subject: CN=1160E6AEC7F0DF275610E304FCBBFDEA3C17DEE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:59:11:88:7d:0a:f9:1b:d4:e3:c8:5b:e7:80:
                    a3:d5:59:28:33:38:12:52:f6:38:fb:9a:7c:19:fe:
                    1a:0c:a7:0a:8f:c0:d6:42:fe:94:3f:c9:67:88:b0:
                    5e:75:f0:58:48:38:e7:c7:cc:f7:5f:e3:d7:da:c0:
                    46:fc:8d:dd:62:75:2e:6c:0b:77:71:5e:e3:07:43:
                    53:21:96:c3:72:32:cb:83:7d:8f:ef:01:f7:cb:20:
                    16:25:41:5b:ac:d6:42:f6:d6:f0:c2:15:51:e8:42:
                    8f:46:9a:e5:32:52:7b:d6:86:e3:0d:14:41:f0:b5:
                    c3:ea:27:6c:5f:2a:fa:c5:90:73:96:97:36:55:28:
                    37:03:5f:44:75:cc:d4:f6:ef:95:3c:bf:0c:a0:ad:
                    51:24:f1:36:1d:36:d6:6d:e5:d9:ff:8e:6f:7d:1d:
                    e9:7b:6f:ac:d9:4e:68:a8:51:9e:92:50:05:d4:9c:
                    78:e3:6f:5c:e9:b7:72:81:86:62:b5:20:6e:93:e1:
                    63:7e:86:c9:c6:0f:35:c6:f4:09:59:9d:77:39:d4:
                    77:42:2c:2a:19:25:3e:12:95:09:2b:40:af:6c:cc:
                    c7:37:56:ef:20:4b:f2:c7:f9:b5:77:89:bf:64:8e:
                    df:2f:0c:1c:81:87:37:52:9e:a5:69:86:69:1b:cb:
                    95:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:60:E6:AE:C7:F0:DF:27:56:10:E3:04:FC:BB:FD:EA:3C:17:DE:E2
            X509v3 Authority Key Identifier:
                keyid:B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:26:b0:5f:df:05:37:bf:9e:eb:82:6f:44:93:43:da:a7:fb:
         f6:fa:a5:2b:0f:12:5c:19:b5:05:cf:ef:50:b3:f9:85:52:73:
         6c:e3:de:51:34:63:25:4a:74:2b:e7:4b:45:33:ab:40:e8:9b:
         33:df:bb:2e:d1:e3:98:eb:63:c5:21:5e:53:63:41:98:2a:57:
         54:f1:7a:42:6c:c1:e5:2e:73:90:2c:3f:41:1f:39:a5:4f:94:
         24:36:17:2a:79:a2:d7:d7:01:81:46:7f:09:50:d2:a0:9f:f4:
         44:43:d5:e3:51:c8:b5:9e:53:29:45:a9:e3:a4:06:85:db:29:
         1f:5f:97:45:5f:f2:4c:e2:1c:03:e0:53:b3:82:54:b0:69:28:
         c7:e1:c5:c1:85:65:fa:9e:19:1e:59:57:f1:bc:f5:2f:8b:4e:
         1d:bc:3a:c7:35:2c:80:36:4a:73:30:c8:33:c5:9f:ac:2e:fe:
         ff:4b:99:21:e4:14:b5:91:36:dc:22:1b:3c:31:65:db:db:0a:
         4e:9b:2a:f1:cb:96:fe:78:de:07:ba:32:ed:1c:58:21:8a:74:
         59:29:17:01:de:7d:87:ac:3b:a8:be:15:e9:50:a1:37:a8:e2:
         20:50:8f:47:e4:e3:70:80:50:d5:bf:5d:df:ef:7e:2e:cb:38:
         e7:3a:08:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 13:57:43 2025 by rpki-client