This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/B6B7C8107519DEE2DC60235DD84006DC63EB80FE.mft
File:                     B6B7C8107519DEE2DC60235DD84006DC63EB80FE.mft (raw, json)
Hash identifier:          zOBZlyamLBe2stRXKbm+0OEAoFRijBTyX6GorQ+1hYM=
Subject key identifier:   44:CA:57:68:23:D1:5C:9B:C4:9A:D8:99:CB:43:F4:0E:F9:22:B2:3E
Authority key identifier: B6:B7:C8:10:75:19:DE:E2:DC:60:23:5D:D8:40:06:DC:63:EB:80:FE
Certificate issuer:       /CN=B6B7C8107519DEE2DC60235DD84006DC63EB80FE
Certificate serial:       5FE4F9DF05A2421B8B913017A63057C33FE357F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6B7C8107519DEE2DC60235DD84006DC63EB80FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/B6B7C8107519DEE2DC60235DD84006DC63EB80FE.mft
Manifest number:          0138
Signing time:             Sun 21 Dec 2025 21:24:09 +0000
Manifest this update:     Sun 21 Dec 2025 21:19:09 +0000
Manifest next update:     Mon 22 Dec 2025 23:01:09 +0000
Files and hashes:         1: 3137392e34322e3133372e302f32342d3234203d3e20323731323037.roa (hash: qZy9fPd4Vu9sl76+cmOuqkV1ZcaSruTCEskq7mXpea0=)
                          2: B6B7C8107519DEE2DC60235DD84006DC63EB80FE.crl (hash: 60yUnnse+IIJF5q1rsIPLTd0ogOKR+CPn6eIR9kO1wk=)
                          3: 3137392e34322e3133382e302f32342d3234203d3e20323731323037.roa (hash: 2brJBnes/aNN4gGEEKn27KIYpXwEU2YrF746hAs5lmE=)
                          4: 3137392e34322e3133362e302f32342d3234203d3e20323731323037.roa (hash: aa9SjDvs0oU+22XKSGehnMNSTBwMcsmXfyLku5gCZJw=)
                          5: 3137392e34322e3133392e302f32342d3234203d3e20323731323037.roa (hash: GYoPaDmB4gm7nzw0SyKeXRhd0aS5slZ2aSkrAiB3csE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/B6B7C8107519DEE2DC60235DD84006DC63EB80FE.crl
                          rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/B6B7C8107519DEE2DC60235DD84006DC63EB80FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6B7C8107519DEE2DC60235DD84006DC63EB80FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 23:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e4:f9:df:05:a2:42:1b:8b:91:30:17:a6:30:57:c3:3f:e3:57:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6B7C8107519DEE2DC60235DD84006DC63EB80FE
        Validity
            Not Before: Dec 21 21:19:09 2025 GMT
            Not After : Dec 22 23:01:09 2025 GMT
        Subject: CN=44CA576823D15C9BC49AD899CB43F40EF922B23E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:08:8d:a8:16:65:b6:07:b2:ef:d9:c2:c2:9f:
                    23:10:cb:97:51:5e:70:42:09:81:7f:d4:5e:9a:f2:
                    b0:06:0f:e5:a0:ff:5b:a9:f9:0b:b5:7e:fd:fa:d1:
                    1a:00:38:cc:ca:7c:26:ef:df:b9:c0:e6:82:c8:ef:
                    e8:d9:63:e9:d8:29:e2:e5:3a:b8:2f:8b:7d:49:72:
                    9a:b7:d5:79:da:14:04:43:5b:d7:ce:f9:20:72:89:
                    65:45:a0:fd:07:f4:19:0a:e1:98:aa:5c:e8:3e:92:
                    13:bf:5f:df:cd:74:69:65:5f:02:ff:1f:f2:2a:85:
                    d5:bf:cc:50:5f:08:6f:3d:81:03:8a:71:ac:49:b0:
                    97:b9:8b:58:3f:3e:7f:1e:dd:77:a0:a0:2c:6a:94:
                    d5:38:7f:d5:e4:9c:d5:de:47:04:67:96:8a:02:41:
                    82:4e:99:af:67:08:a1:c7:2c:a7:44:c4:09:f1:3f:
                    7b:09:9a:c9:21:f7:9b:e5:d8:d2:06:c5:72:c0:5d:
                    2e:ba:cc:28:16:46:70:5c:69:da:9e:93:51:18:61:
                    03:a5:53:ba:06:43:0f:2c:79:9c:02:08:0f:62:a8:
                    68:ed:20:0b:a1:6c:e5:cd:92:bd:9f:27:a2:9c:d1:
                    e0:5a:62:38:e1:47:02:76:6e:a2:48:78:ca:63:eb:
                    5c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:CA:57:68:23:D1:5C:9B:C4:9A:D8:99:CB:43:F4:0E:F9:22:B2:3E
            X509v3 Authority Key Identifier:
                keyid:B6:B7:C8:10:75:19:DE:E2:DC:60:23:5D:D8:40:06:DC:63:EB:80:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/B6B7C8107519DEE2DC60235DD84006DC63EB80FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6B7C8107519DEE2DC60235DD84006DC63EB80FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/B6B7C8107519DEE2DC60235DD84006DC63EB80FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:0a:01:18:c2:9b:bc:11:12:8a:86:80:36:f0:46:db:77:05:
         03:ae:1e:cd:c6:3f:28:09:17:80:74:21:d9:ef:e3:93:00:e6:
         b9:f2:6c:00:15:22:6b:7f:f0:a5:d9:ea:f3:3c:28:16:d6:4a:
         fe:51:f3:e9:ff:72:d4:71:ab:9b:4b:be:a8:80:df:bc:3b:fa:
         07:f6:ee:91:6d:ce:33:0c:08:66:5c:f0:c6:fd:ad:60:53:87:
         1b:fe:c2:2f:b7:67:41:5e:f3:a4:fe:8b:74:a7:77:dd:7f:17:
         04:d4:04:4f:ff:13:46:87:db:5f:ee:12:b8:ff:a9:71:d4:ee:
         ec:ac:79:c0:a1:21:19:5c:c7:f7:1c:c7:e3:30:d3:92:dd:36:
         a8:9d:f5:68:fe:4f:2e:e2:d8:21:75:d2:5d:ad:6a:25:0c:17:
         39:ee:4f:fc:93:ba:d3:ed:5b:da:32:25:b4:07:76:a7:c4:1e:
         c5:7d:92:8a:be:96:85:ba:56:d6:06:6e:a0:fb:bc:99:0d:d7:
         16:fe:9b:27:1c:fb:2f:41:39:76:03:8e:ca:58:ac:72:8a:0a:
         ec:3f:3f:75:22:c2:40:04:30:e9:8e:69:10:8c:11:8c:e0:64:
         be:79:0f:0f:81:c8:1d:38:a0:62:24:16:79:28:9e:fe:5c:69:
         ab:ed:ef:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 02:34:21 2025 by rpki-client