This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.mft
File:                     24C0BF59215339684BA80028158EEDE0FD534D91.mft (raw, json)
Hash identifier:          kSU/7ZzczxRG8XtmkeVvI+Uko3h3JBZDD4p/02XZHN4=
Subject key identifier:   C0:6F:91:00:0B:8E:06:CA:F7:CA:4A:A9:A0:02:0F:6D:08:08:8F:EB
Authority key identifier: 24:C0:BF:59:21:53:39:68:4B:A8:00:28:15:8E:ED:E0:FD:53:4D:91
Certificate issuer:       /CN=24C0BF59215339684BA80028158EEDE0FD534D91
Certificate serial:       74EDEDBBB96DCAE12278BAFCE9074EE56F0CCA85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0BF59215339684BA80028158EEDE0FD534D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.mft
Manifest number:          01BB
Signing time:             Tue 23 Dec 2025 23:16:46 +0000
Manifest this update:     Tue 23 Dec 2025 23:11:46 +0000
Manifest next update:     Thu 25 Dec 2025 00:08:46 +0000
Files and hashes:         1: 24C0BF59215339684BA80028158EEDE0FD534D91.crl (hash: oqkcvGS5IANLmZIp6HCqLudbjin8KsJknhGUlkxO9/M=)
                          2: 3138372e39342e31332e302f32342d3234203d3e20323730353737.roa (hash: IbbwJfvVHD7NWuSEOlKiZedgV+CkNrEUse8OowGtH+M=)
                          3: 3138372e39342e31322e302f32342d3234203d3e20323730353737.roa (hash: b67cK4a/rsVCTeyWhTLwvGRtbmz+Hxq6t70ISE4OC5U=)
                          4: 3138372e39342e31322e302f32332d3233203d3e20323730353737.roa (hash: Mzm6LEaGyjjyqpnZ6FeNic1af8TjOs4d2L3eGTSkHGI=)
                          5: 3138372e39342e31342e302f32342d3234203d3e20323730353737.roa (hash: eBYm42+1W1fGcFwuZmXMRlKyQCOL5aYpZefRvtpQWhA=)
                          6: 3138372e39342e31352e302f32342d3234203d3e20323730353737.roa (hash: b0tQygd01X8y9cU9NeVEUawK0KgmCDr/R/oGSGB9r3U=)
                          7: 3138372e39342e31322e302f32322d3232203d3e20323730353737.roa (hash: f0A0SW8C/83W4VceZCY58OSq5wvSOi5qTCw783wE0J8=)
                          8: 323830343a366532303a3a2f33322d3332203d3e20323730353737.roa (hash: PVq+hF7vsW69/LZUNpWq+A3qzKDzP7Q3cU3sANu0X9Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.crl
                          rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0BF59215339684BA80028158EEDE0FD534D91.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 00:08:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ed:ed:bb:b9:6d:ca:e1:22:78:ba:fc:e9:07:4e:e5:6f:0c:ca:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24C0BF59215339684BA80028158EEDE0FD534D91
        Validity
            Not Before: Dec 23 23:11:46 2025 GMT
            Not After : Dec 25 00:08:46 2025 GMT
        Subject: CN=C06F91000B8E06CAF7CA4AA9A0020F6D08088FEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ec:33:19:ca:04:f6:b9:41:a2:c8:de:53:31:
                    0c:db:56:ea:e4:29:1e:63:af:b1:34:6d:b8:3f:61:
                    38:b9:e8:3f:a0:de:19:63:7f:4b:73:2a:49:63:39:
                    28:b4:db:c1:2b:17:9c:7b:9b:41:48:42:eb:c7:53:
                    12:4f:b1:17:60:26:ca:7e:97:64:e5:7e:a9:81:cc:
                    30:b6:ca:d4:4f:fd:96:2f:9a:51:2f:d2:34:ff:d0:
                    7f:9c:5a:68:e5:91:04:b1:57:a9:7f:6d:35:3a:6c:
                    0f:ad:61:98:c6:33:3c:34:97:a7:e0:02:6a:7a:40:
                    ba:74:a9:fd:ae:79:2f:36:1b:0b:7c:91:4a:10:aa:
                    ba:3a:4e:22:cb:f4:5e:b2:32:48:bf:eb:81:f9:01:
                    93:46:d6:e3:54:48:20:9a:36:28:83:c9:a4:00:0e:
                    91:ae:34:c3:6a:bf:37:d3:85:25:fb:6c:79:f0:46:
                    49:86:f1:d8:94:ad:55:ee:2b:d3:c1:e7:ad:37:49:
                    7f:51:16:8f:a9:ee:93:aa:19:36:57:54:78:d4:a7:
                    f6:bb:53:75:92:80:95:70:df:e4:09:e0:c3:81:7d:
                    79:f7:b8:80:d6:96:a0:b9:23:c8:8f:2f:4a:fc:13:
                    36:8d:a9:36:44:7a:f6:b1:82:15:09:a4:89:1a:d8:
                    2a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:6F:91:00:0B:8E:06:CA:F7:CA:4A:A9:A0:02:0F:6D:08:08:8F:EB
            X509v3 Authority Key Identifier:
                keyid:24:C0:BF:59:21:53:39:68:4B:A8:00:28:15:8E:ED:E0:FD:53:4D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0BF59215339684BA80028158EEDE0FD534D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:fa:38:e4:01:79:b9:3b:b2:be:b6:1b:4f:90:37:02:d9:29:
         b7:71:2e:e7:d5:82:55:d1:85:15:7f:30:38:09:71:33:54:6a:
         b7:92:0c:a7:fa:3c:90:5c:9a:c4:de:43:81:fa:df:26:c5:15:
         f4:27:b2:a5:e5:27:11:c8:7b:42:81:c1:8e:2f:c4:57:1b:7f:
         7d:2a:5d:a5:9c:b6:f0:a4:46:54:74:d9:7a:f4:9d:14:2c:48:
         1b:3f:75:71:d2:c5:20:71:13:b0:45:6f:73:37:2c:91:71:33:
         a6:10:83:b6:4d:1a:6a:df:bc:60:16:5a:35:93:25:90:67:37:
         d3:6f:7e:ca:f5:3d:94:3e:ac:3c:a1:a2:71:6e:57:68:ea:4b:
         4a:04:5d:a6:ac:16:bb:a6:9a:b5:75:8a:71:b3:73:5d:4a:c9:
         26:59:ff:96:fc:9d:48:f4:a9:f8:d4:ae:a3:75:43:5e:4d:f5:
         73:39:07:b2:59:f4:08:ac:a7:48:85:b9:bb:3a:bb:55:57:5f:
         2a:fe:d2:10:8a:79:96:e6:04:c4:d9:d2:85:80:cc:a3:94:c1:
         29:ca:3a:9b:01:c4:f7:d1:64:e3:2c:b8:95:ca:38:1c:7c:46:
         57:d7:24:1a:65:ad:f5:ec:d4:07:7c:cb:21:6d:ec:bf:e0:b3:
         0a:4c:04:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:08:42 2025 by rpki-client