This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/B8B20C736B5DAA6320C2EE3AB5844784B25934B1.mft
File:                     B8B20C736B5DAA6320C2EE3AB5844784B25934B1.mft (raw, json)
Hash identifier:          SAy4LzFhf8Egyu4MIVNHWbyMQS70iWZxZs/cF0ScvzI=
Subject key identifier:   6A:DA:A1:CF:00:5E:5E:AA:5B:CB:8F:02:A7:07:9E:97:46:08:73:2E
Authority key identifier: B8:B2:0C:73:6B:5D:AA:63:20:C2:EE:3A:B5:84:47:84:B2:59:34:B1
Certificate issuer:       /CN=B8B20C736B5DAA6320C2EE3AB5844784B25934B1
Certificate serial:       2CE769FC4B1C9F0B1665DE9AEC267EE2EFFFA538
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8B20C736B5DAA6320C2EE3AB5844784B25934B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/B8B20C736B5DAA6320C2EE3AB5844784B25934B1.mft
Manifest number:          017D
Signing time:             Sun 21 Dec 2025 11:41:00 +0000
Manifest this update:     Sun 21 Dec 2025 11:36:00 +0000
Manifest next update:     Mon 22 Dec 2025 11:46:00 +0000
Files and hashes:         1: B8B20C736B5DAA6320C2EE3AB5844784B25934B1.crl (hash: eFGW1PeCZ5ziQskjlUrczp+rs67694GQqHNW++FIQ+s=)
                          2: 3139312e3234332e3133362e302f32322d3234203d3e20323633353037.roa (hash: Q5yrIvJXIrCbQV0arINt1JvJlC/x9ziPnV8RXJmZAQk=)
                          3: 323830343a313266383a3a2f33322d3333203d3e20323633353037.roa (hash: vwGgTlrrFyt5firMtrTQfALNMm92bVVZAG13ex2vb5Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/B8B20C736B5DAA6320C2EE3AB5844784B25934B1.crl
                          rsync://rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/B8B20C736B5DAA6320C2EE3AB5844784B25934B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8B20C736B5DAA6320C2EE3AB5844784B25934B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 11:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:e7:69:fc:4b:1c:9f:0b:16:65:de:9a:ec:26:7e:e2:ef:ff:a5:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8B20C736B5DAA6320C2EE3AB5844784B25934B1
        Validity
            Not Before: Dec 21 11:36:00 2025 GMT
            Not After : Dec 22 11:46:00 2025 GMT
        Subject: CN=6ADAA1CF005E5EAA5BCB8F02A7079E974608732E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7b:27:49:03:65:a3:ef:a7:a3:7b:41:16:af:
                    56:88:e7:91:cd:70:5d:ec:d0:40:c3:cc:44:09:16:
                    5f:6a:52:6a:4a:07:68:89:61:46:60:d8:63:f6:b0:
                    f0:69:1a:25:b1:88:e5:bc:4f:7b:d2:6b:a1:23:67:
                    03:7c:22:d9:d5:a8:dc:b5:64:9a:6a:61:27:bc:10:
                    c9:c8:43:bb:10:6b:34:45:ea:dc:e2:42:ce:ac:a9:
                    43:1e:d7:14:30:0d:ee:c5:67:5e:ed:09:5b:56:07:
                    1f:72:5c:54:ec:d5:da:7b:bf:5e:04:04:1b:f6:2f:
                    49:c1:b6:f1:64:87:a3:3b:85:9c:3d:01:ae:b0:f7:
                    a7:7d:86:74:fd:7f:9c:07:ee:00:64:81:ff:0f:6c:
                    72:52:24:cf:22:77:b7:5b:64:67:fb:bd:a8:42:35:
                    24:a1:8e:0a:81:24:85:c7:6c:9e:38:59:ce:6d:5c:
                    d7:2e:6b:f8:75:91:5c:28:9b:9b:9b:f9:88:99:9d:
                    3f:de:15:a3:44:9a:66:f5:df:74:0f:60:11:14:6a:
                    4f:e2:43:cd:35:37:21:38:d6:ad:50:b1:a7:e3:20:
                    d6:fc:07:cf:bd:78:52:5d:86:f7:29:7a:c9:66:79:
                    a7:37:51:86:0b:0b:2e:76:d4:2e:09:cc:85:10:fa:
                    64:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DA:A1:CF:00:5E:5E:AA:5B:CB:8F:02:A7:07:9E:97:46:08:73:2E
            X509v3 Authority Key Identifier:
                keyid:B8:B2:0C:73:6B:5D:AA:63:20:C2:EE:3A:B5:84:47:84:B2:59:34:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/B8B20C736B5DAA6320C2EE3AB5844784B25934B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8B20C736B5DAA6320C2EE3AB5844784B25934B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/B8B20C736B5DAA6320C2EE3AB5844784B25934B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:7f:32:a5:01:8f:b1:d9:6c:dc:cf:71:34:58:c6:ce:88:57:
         49:a7:ae:f5:ea:3c:d5:9a:16:cd:58:c8:48:1a:2d:ec:57:9c:
         85:d4:33:c3:ab:24:9f:41:58:83:39:3b:ef:b2:d0:a0:a9:71:
         b1:43:82:07:35:50:79:a7:5a:be:f3:ef:5a:0f:47:1f:0f:bd:
         59:fe:90:8a:9d:4d:e8:65:33:e7:db:d7:eb:b0:c9:4b:6b:ef:
         34:bb:b8:9a:7c:f0:31:db:63:05:01:aa:f6:03:61:61:f0:ec:
         2f:b9:26:66:97:00:b0:a6:19:52:0a:50:52:ad:8b:9d:f5:37:
         12:4f:0f:a3:8a:41:fd:d9:3a:82:3d:0f:76:32:01:cc:3a:b4:
         73:9d:c5:0a:a7:1a:7b:24:98:e4:a1:20:9c:c4:81:9d:67:11:
         d8:ae:8c:3a:03:fc:4c:d8:20:9a:f7:c3:85:f0:fe:e6:f8:04:
         a2:21:67:cd:96:21:cc:3e:a8:9c:05:3d:f0:1d:d8:c0:1e:74:
         59:5b:d5:85:cc:05:7a:af:4f:be:23:83:4a:bd:f4:39:33:1f:
         9b:44:d7:03:94:63:5b:4b:ff:5a:c9:b5:90:84:25:f7:18:7b:
         b3:57:7b:e6:04:fe:aa:fc:e5:27:a9:eb:0d:6d:dd:32:e4:4f:
         27:f8:21:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 07:04:31 2025 by rpki-client