This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft
File:                     50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft (raw, json)
Hash identifier:          vA9JXQ7/OaDmXF1gmp3mheaAyMuQb2C6T/UsbYfhXOQ=
Subject key identifier:   A1:8E:3A:FE:74:A5:FC:FD:35:D6:D7:E0:78:0D:5D:45:09:22:86:F1
Authority key identifier: 50:C3:3A:7F:B5:FF:DC:CE:C9:9E:EF:8A:69:CA:F9:1D:57:91:A9:A3
Certificate issuer:       /CN=50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3
Certificate serial:       22B96D0B2B046D96CF2A986E913F366D0B28978B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft
Manifest number:          02AA
Signing time:             Mon 22 Dec 2025 01:30:01 +0000
Manifest this update:     Mon 22 Dec 2025 01:25:01 +0000
Manifest next update:     Tue 23 Dec 2025 04:02:01 +0000
Files and hashes:         1: 50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.crl (hash: eFJq9kvuMzcsIpqvZvK7avB4aAeyJeQCBERkYihF0rI=)
                          2: 3138312e3138392e34302e302f32322d3332203d3e20323731343136.roa (hash: ieRIrM8Ny5p80dT7b969zuXi0G0le+0zXn+sMeziFnU=)
                          3: 323830343a376233303a3a2f33322d313238203d3e20323731343136.roa (hash: G4iDjim9ZP2mcYoqhTWD71U7yEb2XLo3UK/gaEO33kY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.crl
                          rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 04:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b9:6d:0b:2b:04:6d:96:cf:2a:98:6e:91:3f:36:6d:0b:28:97:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3
        Validity
            Not Before: Dec 22 01:25:01 2025 GMT
            Not After : Dec 23 04:02:01 2025 GMT
        Subject: CN=A18E3AFE74A5FCFD35D6D7E0780D5D45092286F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d2:bb:5f:24:ad:a9:fe:fa:b9:b4:1c:83:b0:
                    dc:63:59:97:5c:ef:6e:05:75:59:08:02:6b:8e:17:
                    7f:49:e0:7a:88:1b:58:d2:b8:98:d0:2c:08:e3:ac:
                    cc:38:37:19:14:3b:11:3f:1c:6d:1b:43:cf:1b:8e:
                    f5:7d:66:34:82:13:a4:28:bc:e2:73:5f:ef:0a:cb:
                    1d:cb:c1:8e:64:a6:4c:cb:9f:d9:69:96:5c:e7:89:
                    1d:0b:d4:90:a0:5d:d3:5f:09:fc:2b:7d:bd:d9:92:
                    80:2e:41:27:8c:c9:a9:dc:e9:76:86:dd:ff:5c:51:
                    17:3c:d5:f4:77:c3:f3:8a:9a:84:a0:e3:f7:58:c0:
                    fd:34:ef:af:27:58:93:e7:6a:0c:43:e0:b4:93:e1:
                    d4:69:3b:8b:13:58:01:13:b1:61:4f:86:2a:04:48:
                    fe:58:31:42:ee:cd:1b:06:e7:7e:ef:f5:c2:31:e2:
                    0a:f5:22:9c:16:f3:7f:8d:75:44:31:f4:55:dc:34:
                    f2:79:9e:0f:76:c5:be:84:6d:15:90:d7:19:97:73:
                    db:52:87:31:de:2e:00:16:08:1d:4f:1c:11:e2:88:
                    b2:6a:a0:0a:74:ab:71:7d:0c:c4:8c:ed:7c:84:72:
                    f5:31:41:11:59:a7:11:d2:cb:96:fc:e1:46:ea:f4:
                    ce:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8E:3A:FE:74:A5:FC:FD:35:D6:D7:E0:78:0D:5D:45:09:22:86:F1
            X509v3 Authority Key Identifier:
                keyid:50:C3:3A:7F:B5:FF:DC:CE:C9:9E:EF:8A:69:CA:F9:1D:57:91:A9:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:0b:3e:24:a9:63:10:47:41:44:4e:f6:64:98:ee:d8:d4:cb:
         e6:66:fa:15:e3:b7:88:25:ee:ee:33:3c:da:ee:74:17:d9:ca:
         1c:e9:84:f6:fb:c6:fa:5e:7c:e3:e5:ad:2b:12:07:7e:08:cd:
         39:15:6c:53:d2:d2:9c:2f:f7:9e:5c:30:de:70:c4:39:89:d3:
         3f:30:ed:b2:c9:33:b2:31:d3:f1:ab:5b:54:0c:e3:32:f5:97:
         bd:ed:49:3d:8f:dd:e8:ac:16:e5:c7:c8:b5:3c:1c:50:4b:d0:
         d9:6f:2f:ef:aa:a2:c9:2e:b8:91:ef:a8:17:b2:ea:00:87:7f:
         9f:ed:2a:ed:69:4d:f1:89:b6:58:a8:be:df:0b:f0:5b:77:54:
         4f:a8:20:7a:07:6f:a3:0e:a3:9a:0b:5e:b2:fa:76:06:d5:fc:
         5b:39:48:b2:00:5f:ab:a4:98:f8:89:84:f6:5f:67:f9:8b:74:
         89:89:8a:c0:64:cb:b5:a9:3f:55:e1:cb:5a:54:fe:c2:9d:04:
         3b:c9:e1:dc:4b:76:7e:5b:0c:58:8c:eb:5a:3e:1d:2c:e3:44:
         a6:50:21:28:69:54:bb:be:6f:4f:a6:be:0c:67:52:6c:82:5a:
         aa:b4:e4:8b:db:44:08:fa:23:14:ee:0c:02:5f:e4:d0:1d:2e:
         39:2b:e6:30
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIrltCysEbZbPKphukT82bQsol4swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTBDMzNBN0ZCNUZGRENDRUM5OUVFRjhBNjlDQUY5MUQ1
NzkxQTlBMzAeFw0yNTEyMjIwMTI1MDFaFw0yNTEyMjMwNDAyMDFaMDMxMTAvBgNV
BAMTKEExOEUzQUZFNzRBNUZDRkQzNUQ2RDdFMDc4MEQ1RDQ1MDkyMjg2RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC20rtfJK2p/vq5tByDsNxjWZdc
724FdVkIAmuOF39J4HqIG1jSuJjQLAjjrMw4NxkUOxE/HG0bQ88bjvV9ZjSCE6Qo
vOJzX+8Kyx3LwY5kpkzLn9lpllzniR0L1JCgXdNfCfwrfb3ZkoAuQSeMyanc6XaG
3f9cURc81fR3w/OKmoSg4/dYwP00768nWJPnagxD4LST4dRpO4sTWAETsWFPhioE
SP5YMULuzRsG537v9cIx4gr1IpwW83+NdUQx9FXcNPJ5ng92xb6EbRWQ1xmXc9tS
hzHeLgAWCB1PHBHiiLJqoAp0q3F9DMSM7XyEcvUxQRFZpxHSy5b84Ubq9M4FAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUoY46/nSl/P011tfgeA1dRQkihvEwHwYDVR0j
BBgwFoAUUMM6f7X/3M7Jnu+Kacr5HVeRqaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3RybzR6MnBYbVl5Vkx3UFZQem9zd1NHdERidzJ4bTFla1BtaVpVTFJZ
S3EvMC81MEMzM0E3RkI1RkZEQ0NFQzk5RUVGOEE2OUNBRjkxRDU3OTFBOUEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUwQzMzQTdGQjVGRkRDQ0VD
OTlFRUY4QTY5Q0FGOTFENTc5MUE5QTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R3RybzR6MnBYbVl5Vkx3UFZQem9zd1NHdERidzJ4bTFla1BtaVpVTFJZS3EvMC81
MEMzM0E3RkI1RkZEQ0NFQzk5RUVGOEE2OUNBRjkxRDU3OTFBOUEzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWws+JKljEEdBRE72ZJju2NTL5mb6FeO3iCXu7jM82u50F9nKHOmE9vvG+l58
4+WtKxIHfgjNORVsU9LSnC/3nlww3nDEOYnTPzDtsskzsjHT8atbVAzjMvWXve1J
PY/d6KwW5cfItTwcUEvQ2W8v76qiyS64ke+oF7LqAId/n+0q7WlN8Ym2WKi+3wvw
W3dUT6ggegdvow6jmgtesvp2BtX8WzlIsgBfq6SY+ImE9l9n+Yt0iYmKwGTLtak/
VeHLWlT+wp0EO8nh3Et2flsMWIzrWj4dLONEplAhKGlUu75vT6a+DGdSbIJaqrTk
i9tECPojFO4MAl/k0B0uOSvmMA==
-----END CERTIFICATE-----
Generated at Mon Dec 22 13:57:42 2025 by rpki-client