This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.mft
File:                     BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.mft (raw, json)
Hash identifier:          1Lb6ERidb8O8zPnx9MFbe1y4Gg4qwsHzIlXrQPQLlIw=
Subject key identifier:   FA:E6:CA:A0:B0:81:5A:F5:DD:E7:D1:F4:FD:11:5B:1F:F2:61:8E:9F
Authority key identifier: BE:C2:FF:1E:C8:AC:86:D3:B2:25:2C:93:7D:13:CB:8E:9D:51:FF:33
Certificate issuer:       /CN=BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33
Certificate serial:       3FEC249644CDC9CB493783A31C941321AB5611BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.mft
Manifest number:          0193
Signing time:             Sat 20 Dec 2025 15:26:02 +0000
Manifest this update:     Sat 20 Dec 2025 15:21:02 +0000
Manifest next update:     Sun 21 Dec 2025 19:01:02 +0000
Files and hashes:         1: 3139322e3134312e3231362e302f32322d3234203d3e20323634323231.roa (hash: sQMywHn8sBgDuSJdCgP3ZE8Dd7ypTbbu6Dlqz0Yno7k=)
                          2: 323830343a323436383a3a2f33322d3438203d3e20323634323231.roa (hash: QGDwcQEqCT7btwVyIGdgyY62zgT7pMJk3TEqaOeRqUI=)
                          3: 3133382e3131372e33362e302f32322d3234203d3e20323634323231.roa (hash: dc2zzkPt/FrTmrlMWfPw/bh9Y+qsTsLgI5TLRMS0UTM=)
                          4: 323830343a363363633a3a2f33322d3438203d3e20323639333834.roa (hash: AXHystB3eqZMIj2Yh1MFxyYntNHwew/Ipuy4kde4+ZQ=)
                          5: 34352e3138352e3135362e302f32322d3234203d3e20323634323231.roa (hash: fyjWBO/MWv6WWiZ2ttqDhCoXHXgNM5nEzN5rFhcHSsA=)
                          6: BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.crl (hash: AGUVYrGw8V6VtnTUSSshDaB37DRVrHEAL9I+CJ/qTjs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.crl
                          rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 19:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ec:24:96:44:cd:c9:cb:49:37:83:a3:1c:94:13:21:ab:56:11:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33
        Validity
            Not Before: Dec 20 15:21:02 2025 GMT
            Not After : Dec 21 19:01:02 2025 GMT
        Subject: CN=FAE6CAA0B0815AF5DDE7D1F4FD115B1FF2618E9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f4:89:3e:37:51:95:d2:e7:ea:cf:fa:08:df:
                    44:01:45:e5:2a:1b:21:03:c5:2c:31:a7:29:63:6e:
                    b1:69:a7:f5:0b:43:6b:7f:a9:08:7c:a4:c0:b9:e1:
                    6d:a5:8e:d2:8f:18:34:26:ad:74:60:1a:a3:52:2d:
                    25:43:ea:20:7c:eb:16:1d:6d:c8:28:df:ef:f9:27:
                    d8:a1:6e:76:b3:3a:0c:f5:a7:64:1c:1a:8b:2f:8d:
                    38:26:dd:35:2a:32:df:28:4a:a1:5b:b9:7e:06:f9:
                    32:89:75:11:a0:8e:11:98:b9:d0:7d:6e:4c:e0:a9:
                    e6:d5:6d:ab:e0:65:2b:c6:88:c2:e2:2e:01:60:0a:
                    11:ce:3d:7a:cc:44:7e:24:38:e3:50:92:3a:72:bf:
                    60:86:0d:7d:b7:4d:dd:28:fb:7c:2c:46:f1:1e:f4:
                    23:07:70:89:d7:f6:4a:c0:54:70:18:ca:28:60:9a:
                    1f:e1:d3:37:e8:e0:e0:0b:53:f2:d7:84:e7:8a:c3:
                    e0:d0:77:de:a5:42:a5:1e:dc:10:3e:d9:7e:28:b6:
                    8c:76:ba:2f:89:29:9d:a0:29:56:72:6c:51:09:eb:
                    27:52:92:71:1c:24:51:5d:05:ee:96:0c:88:20:dd:
                    c7:43:1d:d7:66:e6:73:ed:26:b3:fd:79:84:1c:6c:
                    a1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E6:CA:A0:B0:81:5A:F5:DD:E7:D1:F4:FD:11:5B:1F:F2:61:8E:9F
            X509v3 Authority Key Identifier:
                keyid:BE:C2:FF:1E:C8:AC:86:D3:B2:25:2C:93:7D:13:CB:8E:9D:51:FF:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:dd:a8:da:60:dd:1b:51:4f:fe:f9:44:b1:3c:6b:e0:27:6f:
         4c:05:1b:7f:6a:dd:dc:68:4e:81:96:50:41:e4:7b:91:3c:41:
         c4:a0:7d:a2:fa:ef:38:17:fd:47:28:c9:97:17:9b:f6:2e:5a:
         81:77:28:0f:dc:2a:cf:f1:44:b5:20:39:20:31:69:a6:e5:71:
         29:68:09:6f:c6:f3:8f:5b:2b:6f:25:1f:cd:65:3f:98:56:d2:
         c7:16:fc:2c:4a:e2:4a:69:67:51:81:23:e4:b7:39:24:9d:04:
         50:4f:f0:ab:be:0d:ac:b4:eb:b9:26:ec:d2:e1:09:c2:27:34:
         c9:19:6d:92:20:86:62:bf:94:b8:04:47:fe:58:41:02:3a:b6:
         37:2e:3c:b6:99:92:c3:95:93:ad:c2:2a:fb:d3:f9:f5:6f:f2:
         16:fc:1e:b5:f6:23:60:6e:bf:60:e5:99:6a:06:9b:66:5e:08:
         7a:e2:c5:e7:49:ae:25:de:b5:24:3e:91:8b:dd:5f:4a:40:68:
         ca:ec:4b:df:f8:e4:a8:d3:ab:ad:bc:73:8d:a3:a0:b9:f5:79:
         e2:08:9f:a8:04:00:16:47:f5:5a:4b:c4:0d:e9:99:69:b8:d9:
         72:9b:7c:08:61:97:9a:88:73:73:2a:b4:9c:50:b2:fb:6f:7b:
         2a:cc:20:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:12:53 2025 by rpki-client