This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn3YhRekQgC4zYpRkXxwXw9qyHnGnLZ4Cq8gATvpCSfB/0/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.mft
File:                     BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.mft (raw, json)
Hash identifier:          m0PGj/1vF6VeGgKYJlvr1miXLpBZlzH130DE2I3XNEI=
Subject key identifier:   DA:46:CD:24:48:2A:F6:B8:26:33:81:01:44:90:AC:DE:2D:4F:25:93
Authority key identifier: BD:A4:8C:2C:C1:06:4B:F3:E6:05:3C:15:DD:28:16:FE:57:74:B3:CA
Certificate issuer:       /CN=BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA
Certificate serial:       2705BD711B69EA5A6F9A84B378F86A295A1ECEF3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn3YhRekQgC4zYpRkXxwXw9qyHnGnLZ4Cq8gATvpCSfB/0/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.mft
Manifest number:          42
Signing time:             Fri 19 Dec 2025 17:52:50 +0000
Manifest this update:     Fri 19 Dec 2025 17:47:50 +0000
Manifest next update:     Sat 20 Dec 2025 21:46:50 +0000
Files and hashes:         1: 323830343a383736633a3a2f33322d313238203d3e20323732373038.roa (hash: YWHryjSdFBEBKqKmB1KLsmWcfwbalA7VAy9fcp5yQ3o=)
                          2: BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.crl (hash: 27V/mORcCXaPbRYacu5fYvOEegWRDkFF3+M6MI7ZJPM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gn3YhRekQgC4zYpRkXxwXw9qyHnGnLZ4Cq8gATvpCSfB/0/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.crl
                          rsync://rpki-repo.registro.br/repo/Gn3YhRekQgC4zYpRkXxwXw9qyHnGnLZ4Cq8gATvpCSfB/0/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 21:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:05:bd:71:1b:69:ea:5a:6f:9a:84:b3:78:f8:6a:29:5a:1e:ce:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA
        Validity
            Not Before: Dec 19 17:47:50 2025 GMT
            Not After : Dec 20 21:46:50 2025 GMT
        Subject: CN=DA46CD24482AF6B8263381014490ACDE2D4F2593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c3:43:cc:4e:32:50:71:f7:05:67:3a:59:11:
                    61:05:47:35:7b:65:86:98:32:8b:68:16:2c:c5:5d:
                    ec:5f:3b:67:de:3b:ba:a2:07:6f:72:b9:9e:f7:03:
                    dc:5e:08:b1:56:d0:a2:25:60:27:a9:85:0d:ba:85:
                    c4:e3:34:4e:74:a7:d8:61:fe:c9:6f:40:6a:58:ef:
                    4a:a9:de:be:6d:21:c1:20:27:d7:bb:48:8e:ae:05:
                    88:8f:0d:61:f7:26:8a:10:0b:49:09:b9:15:97:0d:
                    df:f5:86:02:c4:21:46:43:82:2d:80:a5:50:7f:ad:
                    14:44:cd:97:f9:d9:14:09:9d:d1:45:af:73:63:22:
                    91:56:c3:8b:98:8b:d8:ec:a3:e9:a2:47:39:bb:3b:
                    ab:b1:23:ba:32:44:52:7e:00:2d:ce:6e:17:2c:21:
                    f7:eb:e3:a8:cd:73:86:31:07:16:c0:5e:6b:66:86:
                    62:d9:fb:32:cf:17:2b:bd:5c:db:51:ac:7e:e8:e6:
                    d3:af:91:30:da:c4:1e:26:fe:c8:70:f9:89:8c:e8:
                    f6:3e:96:96:a7:b7:75:a2:49:fd:d3:37:c3:da:b2:
                    2d:4b:22:d8:72:53:c6:0d:11:69:ca:01:57:c4:82:
                    d4:2e:54:b4:23:68:d1:7a:3e:2a:9a:f1:99:6e:13:
                    f9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:46:CD:24:48:2A:F6:B8:26:33:81:01:44:90:AC:DE:2D:4F:25:93
            X509v3 Authority Key Identifier:
                keyid:BD:A4:8C:2C:C1:06:4B:F3:E6:05:3C:15:DD:28:16:FE:57:74:B3:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn3YhRekQgC4zYpRkXxwXw9qyHnGnLZ4Cq8gATvpCSfB/0/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn3YhRekQgC4zYpRkXxwXw9qyHnGnLZ4Cq8gATvpCSfB/0/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:cd:4e:33:16:e9:33:d8:13:da:15:8b:e4:d1:7a:0f:ef:1a:
         71:2b:57:ad:fb:a9:12:65:9d:58:4c:50:69:d3:ad:de:50:11:
         05:bc:f9:74:7e:0e:27:e1:9b:ed:94:a9:7e:31:e6:2c:3d:98:
         dd:2d:8f:00:d0:d3:f5:de:89:ce:ce:4d:b1:d1:80:f0:0b:00:
         4b:9c:9c:e8:9e:6c:46:76:e1:0e:7c:8e:b8:27:df:a0:fd:a0:
         a1:13:92:85:7b:43:33:16:7a:e1:64:11:57:75:82:98:7f:0f:
         b9:47:20:ed:ba:c6:8e:d3:3b:aa:87:ae:7f:77:3e:d9:6e:67:
         a2:84:29:ce:fd:8e:c3:4d:a8:8a:f8:28:8e:57:ef:20:c4:fc:
         d3:c2:2b:58:e4:5e:2b:fb:8c:2b:fe:e6:77:2a:c8:58:2a:4a:
         c3:9b:05:c1:c4:d2:ec:15:01:a1:87:65:d2:2f:96:a4:7f:5d:
         12:1a:a5:5a:1a:70:44:f5:e2:9f:12:d9:5c:19:aa:19:af:b1:
         da:ba:94:ec:ce:b3:d1:99:a1:fd:65:2f:f2:f0:63:f2:27:d8:
         2c:67:30:2f:a7:bc:cf:f6:7a:12:2c:6c:7e:15:c5:cc:1e:ed:
         f3:d8:a8:05:06:63:53:0f:d9:e7:12:c9:f5:4d:9b:99:5b:42:
         1f:da:f9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----