This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/B0D355EE0547DDAE537C09F79964DF46C40DF90D.mft
File:                     B0D355EE0547DDAE537C09F79964DF46C40DF90D.mft (raw, json)
Hash identifier:          XgGeYN7mkw36glP9myGZiWi5zhe3DIOVQ1Qr3k2d4v0=
Subject key identifier:   40:E2:38:77:09:31:4E:F7:C2:99:FB:5D:A5:A8:EF:4E:15:AE:F6:81
Authority key identifier: B0:D3:55:EE:05:47:DD:AE:53:7C:09:F7:99:64:DF:46:C4:0D:F9:0D
Certificate issuer:       /CN=B0D355EE0547DDAE537C09F79964DF46C40DF90D
Certificate serial:       6A3ACEB4212734993C0647FA76670761DC2640B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D355EE0547DDAE537C09F79964DF46C40DF90D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/B0D355EE0547DDAE537C09F79964DF46C40DF90D.mft
Manifest number:          0249
Signing time:             Sat 20 Dec 2025 09:28:57 +0000
Manifest this update:     Sat 20 Dec 2025 09:23:57 +0000
Manifest next update:     Sun 21 Dec 2025 12:35:57 +0000
Files and hashes:         1: B0D355EE0547DDAE537C09F79964DF46C40DF90D.crl (hash: Dzf7TI3gpfuksnrAHFNHv1rT3Z1R/pOyRmLIliGNYHI=)
                          2: 323830343a383032343a3a2f33322d3336203d3e20323731373332.roa (hash: 6fQmapHqDfe/ZrGYHVkK+IqG3xMsCwZ2aCXtULTh6e8=)
                          3: 34352e362e3233362e302f32322d3234203d3e20323731373332.roa (hash: DJL6uHSI8f3GFKEsVs9sAv/vOkfrsy5MZ0PtNmXLOCs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/B0D355EE0547DDAE537C09F79964DF46C40DF90D.crl
                          rsync://rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/B0D355EE0547DDAE537C09F79964DF46C40DF90D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D355EE0547DDAE537C09F79964DF46C40DF90D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 12:35:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:3a:ce:b4:21:27:34:99:3c:06:47:fa:76:67:07:61:dc:26:40:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0D355EE0547DDAE537C09F79964DF46C40DF90D
        Validity
            Not Before: Dec 20 09:23:57 2025 GMT
            Not After : Dec 21 12:35:57 2025 GMT
        Subject: CN=40E2387709314EF7C299FB5DA5A8EF4E15AEF681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:77:62:51:11:73:60:ad:b8:0a:77:f8:df:1c:
                    c2:e1:3d:79:46:25:35:1a:d5:bd:06:3f:d0:0c:cd:
                    68:71:1a:4b:e9:ee:21:85:1e:26:04:85:22:2c:e9:
                    b8:79:bd:cd:3d:dc:32:fc:40:b4:57:5d:79:d0:8a:
                    47:80:07:b5:f8:5d:d3:2f:0d:76:a1:f6:5d:31:ed:
                    c1:ae:fe:ec:47:a2:df:ce:9d:43:15:cd:52:45:b7:
                    d5:8f:c9:09:e6:60:d1:1c:72:4a:8d:55:41:bc:95:
                    6c:fe:cc:a3:8d:ce:ed:4a:29:50:84:a5:d8:17:53:
                    cc:44:21:03:7f:99:48:bf:8e:b8:ed:b2:2f:25:a1:
                    51:8b:a3:a8:a9:a5:78:88:02:32:c0:b6:95:6f:29:
                    58:9d:05:52:4f:35:7b:45:98:52:67:8b:f7:0d:01:
                    8c:93:37:81:03:49:49:dd:1c:ef:1c:49:a7:65:c8:
                    0c:13:30:3e:4f:c9:2b:2c:95:77:d7:b0:2e:70:2d:
                    1a:ef:b3:02:2a:21:db:ca:5f:b3:48:1f:54:db:7d:
                    38:1c:49:ee:f5:b2:a1:1d:c8:88:7d:78:a8:9c:54:
                    d4:34:da:f0:d4:63:6a:0b:a4:2a:5f:bb:e1:76:62:
                    a7:76:7c:a2:6e:52:43:d0:15:d8:42:23:1c:14:74:
                    56:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E2:38:77:09:31:4E:F7:C2:99:FB:5D:A5:A8:EF:4E:15:AE:F6:81
            X509v3 Authority Key Identifier:
                keyid:B0:D3:55:EE:05:47:DD:AE:53:7C:09:F7:99:64:DF:46:C4:0D:F9:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/B0D355EE0547DDAE537C09F79964DF46C40DF90D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D355EE0547DDAE537C09F79964DF46C40DF90D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/B0D355EE0547DDAE537C09F79964DF46C40DF90D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:e1:d3:c2:e3:82:40:55:98:b5:e8:1c:5b:3b:03:a9:ee:f4:
         47:41:f4:c2:6b:6b:76:fa:9c:2e:76:af:3d:e8:ec:5e:74:d3:
         d1:5e:d7:76:b4:32:79:56:6f:f2:82:8f:ba:30:6f:c3:0d:a0:
         ba:e0:a5:8e:30:1f:ec:4d:2a:ca:7c:35:d5:ad:14:c7:3a:c4:
         a8:d6:59:a8:ae:3c:0a:56:ae:a0:25:6f:65:74:68:3c:e3:40:
         13:95:95:47:f2:85:08:69:66:6d:7d:b2:93:6b:dd:0c:4a:d9:
         ce:35:6a:55:9e:e4:bf:a1:d6:72:f7:80:46:8e:2d:a5:8d:17:
         ce:42:9f:4a:e3:7b:03:b7:19:d5:b1:a1:14:c7:52:2f:5b:1b:
         e5:22:60:a2:87:80:39:3e:8a:65:17:f6:56:77:0d:a4:86:8b:
         10:27:ea:d8:c8:4c:32:e2:8a:75:db:62:73:b4:76:ff:fc:cc:
         a3:d0:ef:83:3c:06:84:95:8d:29:ab:2b:3b:9b:c8:56:20:6f:
         5f:4f:bd:fd:86:11:2d:18:8e:94:de:7e:20:83:ec:18:85:24:
         df:bf:55:8e:17:6e:c1:9d:cb:10:ec:18:f7:3d:34:4e:f4:fd:
         1d:ea:d4:71:4c:55:88:24:cf:dd:c6:01:ea:5b:c3:fb:66:fa:
         28:e1:03:ff
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUajrOtCEnNJk8Bkf6dmcHYdwmQLkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBEMzU1RUUwNTQ3RERBRTUzN0MwOUY3OTk2NERGNDZD
NDBERjkwRDAeFw0yNTEyMjAwOTIzNTdaFw0yNTEyMjExMjM1NTdaMDMxMTAvBgNV
BAMTKDQwRTIzODc3MDkzMTRFRjdDMjk5RkI1REE1QThFRjRFMTVBRUY2ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjd2JREXNgrbgKd/jfHMLhPXlG
JTUa1b0GP9AMzWhxGkvp7iGFHiYEhSIs6bh5vc093DL8QLRXXXnQikeAB7X4XdMv
DXah9l0x7cGu/uxHot/OnUMVzVJFt9WPyQnmYNEcckqNVUG8lWz+zKONzu1KKVCE
pdgXU8xEIQN/mUi/jrjtsi8loVGLo6ippXiIAjLAtpVvKVidBVJPNXtFmFJni/cN
AYyTN4EDSUndHO8cSadlyAwTMD5PySsslXfXsC5wLRrvswIqIdvKX7NIH1TbfTgc
Se71sqEdyIh9eKicVNQ02vDUY2oLpCpfu+F2Yqd2fKJuUkPQFdhCIxwUdFYHAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUQOI4dwkxTvfCmftdpajvThWu9oEwHwYDVR0j
BBgwFoAUsNNV7gVH3a5TfAn3mWTfRsQN+Q0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRllrRmZ0Y1R4c0NoTWlZOW5zSFREY0F5eG1yS1VrbmU1aXo3MzhzeTJ0
UmEvMC9CMEQzNTVFRTA1NDdEREFFNTM3QzA5Rjc5OTY0REY0NkM0MERGOTBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwRDM1NUVFMDU0N0REQUU1
MzdDMDlGNzk5NjRERjQ2QzQwREY5MEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RllrRmZ0Y1R4c0NoTWlZOW5zSFREY0F5eG1yS1VrbmU1aXo3MzhzeTJ0UmEvMC9C
MEQzNTVFRTA1NDdEREFFNTM3QzA5Rjc5OTY0REY0NkM0MERGOTBELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAO+HTwuOCQFWYtegcWzsDqe70R0H0wmtrdvqcLnavPejsXnTT0V7XdrQyeVZv
8oKPujBvww2guuCljjAf7E0qynw11a0UxzrEqNZZqK48ClauoCVvZXRoPONAE5WV
R/KFCGlmbX2yk2vdDErZzjVqVZ7kv6HWcveARo4tpY0XzkKfSuN7A7cZ1bGhFMdS
L1sb5SJgooeAOT6KZRf2VncNpIaLECfq2MhMMuKKddtic7R2//zMo9DvgzwGhJWN
KasrO5vIViBvX0+9/YYRLRiOlN5+IIPsGIUk379VjhduwZ3LEOwY9z00TvT9HerU
cUxViCTP3cYB6lvD+2b6KOED/w==
-----END CERTIFICATE-----
Generated at Sat Dec 20 12:45:12 2025 by rpki-client