This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.mft
File:                     BF45F5442049793490E484E18AD1516C8FDC8087.mft (raw, json)
Hash identifier:          wKAH5g9bK8cMgBroaLG360MR/82UaYWFMrtdUOfgvDk=
Subject key identifier:   FE:64:BA:1C:DA:BB:92:53:1A:6A:16:7F:1A:35:31:8C:02:01:FC:8C
Authority key identifier: BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87
Certificate issuer:       /CN=BF45F5442049793490E484E18AD1516C8FDC8087
Certificate serial:       61A36B3F26A7658D2870F0B66F048DD2839769C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.mft
Manifest number:          02DD
Signing time:             Sat 20 Dec 2025 15:49:30 +0000
Manifest this update:     Sat 20 Dec 2025 15:44:30 +0000
Manifest next update:     Sun 21 Dec 2025 19:07:30 +0000
Files and hashes:         1: 3137392e34392e3134342e302f32322d3332203d3e20323033.roa (hash: NajPJTYaor1YGiZnIhc3UJqt4nLCSqgHA1CzFRJFVPs=)
                          2: 3137392e34392e3134342e302f32322d3332203d3e20323032.roa (hash: k9hrmQKGBDq+WEo/SvgYXye4i/mx6xP+PqUjiXA0a7Q=)
                          3: 323830343a373762303a3a2f33322d3634203d3e203532363339.roa (hash: o349UaGnmpYNa7t/kX8rmblh2WEubzLVjwP0Phpyigw=)
                          4: 323830343a373762303a3a2f33322d3634203d3e2033333536.roa (hash: 7Re3qdG6dAWlz6mGwKDbXAkaPCKgXMw0aU0aNT86r4U=)
                          5: 323830343a373762303a3a2f33322d3634203d3e20323033.roa (hash: TfhvZsVQPpPsqhjZSL944/an9xjOEkOdPioRPKsNvFI=)
                          6: BF45F5442049793490E484E18AD1516C8FDC8087.crl (hash: piV1NsdCZu686bEjuS7w84O9jfiI3BGEQlJJ5OPWFzk=)
                          7: 3137392e34392e3134342e302f32322d3234203d3e20323731313933.roa (hash: TwV6KgQp9Y2TEaBe16ajWEVXMaz5qHnGk2YCwzx4X3s=)
                          8: 323830343a373762303a3a2f33322d3634203d3e20323032.roa (hash: lpztG8IYHLW5Xw7gLF9CUEMiaC4h2NhnhN8a6iSJEmU=)
                          9: 3137392e34392e3134342e302f32322d3332203d3e2033333536.roa (hash: KFh+MEQB5sIOP22S9aGhwQy4nlxVnACJzz0CXnleD5A=)
                          10: 3137392e34392e3134342e302f32322d3332203d3e203532363339.roa (hash: NnuYACUqArTYq78D0d3XSs++1nj66wHpEhyHI7yEeZo=)
                          11: 323830343a373762303a3a2f33322d3438203d3e20323731313933.roa (hash: o0FHImv9LUH/T55C8f/BLhV4F+VJ673oDOT8yfUtLok=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.crl
                          rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 19:07:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a3:6b:3f:26:a7:65:8d:28:70:f0:b6:6f:04:8d:d2:83:97:69:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF45F5442049793490E484E18AD1516C8FDC8087
        Validity
            Not Before: Dec 20 15:44:30 2025 GMT
            Not After : Dec 21 19:07:30 2025 GMT
        Subject: CN=FE64BA1CDABB92531A6A167F1A35318C0201FC8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5c:11:5d:25:f7:e7:f9:bf:7a:e5:a5:03:1e:
                    e6:d3:51:7d:bc:ab:62:b3:8f:70:60:a0:01:25:da:
                    d1:06:01:24:2b:a7:16:56:53:7e:5f:65:ef:bf:ab:
                    d0:a1:bf:0e:8d:27:c4:1a:f7:60:83:22:b8:c4:99:
                    22:f8:9d:b6:bc:8e:eb:86:d3:8e:be:3b:87:77:02:
                    83:8b:4f:0e:2f:a1:98:5c:91:a0:92:89:5a:ab:ff:
                    49:df:4c:d8:fc:09:3d:ea:18:fd:40:30:97:8f:24:
                    50:8b:3d:fb:ad:6a:8b:2e:37:76:f9:2d:e9:d5:c9:
                    10:9f:4d:c4:11:91:2a:d9:7f:d8:6d:a5:8c:bd:91:
                    f5:4e:3c:56:ff:1f:66:08:a0:0a:6d:93:97:24:26:
                    b8:0b:75:6d:cd:ac:85:a5:4b:12:c6:59:42:1c:87:
                    ac:f6:68:3e:cd:40:5b:6e:e7:79:ad:4d:c7:3c:2d:
                    31:1e:45:6c:6b:cd:e4:db:9b:a4:d2:16:2d:7c:15:
                    63:f4:db:e3:10:6a:65:7f:f3:9e:a5:f7:14:87:45:
                    38:46:b0:df:8e:f7:1d:4a:03:41:0d:70:a0:41:08:
                    d6:18:a8:c6:db:1b:a9:a1:38:80:a6:8b:79:c2:b6:
                    21:98:f6:a0:99:06:eb:e9:b6:5a:3f:9a:0e:fb:83:
                    df:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:64:BA:1C:DA:BB:92:53:1A:6A:16:7F:1A:35:31:8C:02:01:FC:8C
            X509v3 Authority Key Identifier:
                keyid:BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:ec:e9:d8:4f:69:0e:3d:dd:4c:0a:86:2e:d7:95:02:1f:3a:
         2c:1b:81:59:4c:70:c7:20:f8:5c:d1:7d:18:11:39:d4:37:35:
         f4:68:34:5e:f2:63:a4:e6:6e:a6:8e:d2:b1:24:b9:fe:56:cd:
         2a:27:9e:3d:41:89:b5:6c:be:19:0a:27:40:8e:f5:d6:8b:aa:
         1a:84:b8:0c:b5:70:9a:b4:3c:1b:b8:57:5c:1f:93:69:90:9a:
         6d:17:7b:97:6b:6d:08:0a:5f:76:a0:2c:0c:ff:d3:22:c1:ea:
         8a:76:49:d9:bb:a6:44:23:58:18:c9:62:e3:43:31:81:f8:78:
         1e:bf:8f:14:cc:76:c4:1b:7c:e8:58:6e:8d:5e:e1:38:17:cc:
         9f:66:f8:88:5a:3c:48:c0:ff:ec:bd:33:1b:a2:7d:e4:84:e0:
         f7:4f:5d:95:68:0e:56:8d:de:60:b8:a4:60:ff:78:74:06:a1:
         af:3d:db:a2:95:f3:aa:c8:e7:c1:d2:c3:57:d1:64:a1:6d:49:
         d4:07:2a:4a:1d:15:2f:47:03:79:6e:bb:91:3f:09:72:d7:3f:
         28:21:71:e7:29:e5:9a:77:8b:27:eb:2a:49:0d:33:61:a9:6a:
         cf:1f:23:f4:d3:82:31:7c:8f:1d:a0:66:b3:5d:96:1c:48:2e:
         4f:df:0d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:09:44 2025 by rpki-client