This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft
File:                     BAA91B8729924B4E8155B81952688BEC004DD0B7.mft (raw, json)
Hash identifier:          UtYU603g5FDI46cGbl0GmuOrBuhIrIM2cJqN3RCu1ao=
Subject key identifier:   DC:AB:88:A5:52:7F:6B:07:A0:78:D1:EE:BF:D8:1D:6B:14:FC:15:2F
Authority key identifier: BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7
Certificate issuer:       /CN=BAA91B8729924B4E8155B81952688BEC004DD0B7
Certificate serial:       2D9FEA8585510CA6C7B54BB80BB142710D3F3526
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft
Manifest number:          035C
Signing time:             Wed 31 Dec 2025 20:11:45 +0000
Manifest this update:     Wed 31 Dec 2025 20:06:45 +0000
Manifest next update:     Thu 01 Jan 2026 20:23:45 +0000
Files and hashes:         1: 34352e3138372e3136382e302f32332d3233203d3e20323639343733.roa (hash: LU8Mv1K4W9NjY1Ph3Xc32UCFbzgnlyOyJCLoDeuE47s=)
                          2: 34352e3138372e3136382e302f32342d3234203d3e20323639343733.roa (hash: Aa284McDfTPmjic3mysbGGpbN5J63jS24v2FD6iYht0=)
                          3: 323830343a363532633a343030303a3a2f33342d3334203d3e20323639343733.roa (hash: cq+TY6RGuTPnXqe6GmwhfS349yibSTDnBR9W+e3J9uo=)
                          4: 323830343a363532633a633030303a3a2f33342d3334203d3e20323639343733.roa (hash: 1tj7f6UEdSuSX+xzAfE3glMzsuwy0R2doswMaI5qeZM=)
                          5: 323830343a363532633a3a2f33342d3334203d3e20323639343733.roa (hash: X5MXmZvX84QOjHDMm5hGtXTanpvg6jMd48H1sof9q60=)
                          6: BAA91B8729924B4E8155B81952688BEC004DD0B7.crl (hash: dVIIiCX9EX+nAgOvBcP+2kHP7GlRLKhrI/pk2NbZnGI=)
                          7: 323830343a363532633a383030303a3a2f33342d3334203d3e20323639343733.roa (hash: Jvk4BhtkTqCaEGOfHpRXl47mcoGZIB2qsIvobQVyGEY=)
                          8: 34352e3138372e3137302e302f32342d3234203d3e20323639343733.roa (hash: DoIheMfS2BngMQ+JdTJaqcKZM72QCyWpqlcxhcNcg/8=)
                          9: 34352e3138372e3137312e302f32342d3234203d3e20323639343733.roa (hash: E9plHt7RLLvmbvHaG4OTDwGPfwEIE4mC0sfU15Aoajs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.crl
                          rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 Jan 2026 20:23:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:9f:ea:85:85:51:0c:a6:c7:b5:4b:b8:0b:b1:42:71:0d:3f:35:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAA91B8729924B4E8155B81952688BEC004DD0B7
        Validity
            Not Before: Dec 31 20:06:45 2025 GMT
            Not After : Jan  1 20:23:45 2026 GMT
        Subject: CN=DCAB88A5527F6B07A078D1EEBFD81D6B14FC152F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:61:d7:7b:0e:a5:d7:8e:8f:49:ab:1b:77:30:
                    5c:bd:ee:50:4f:3e:35:4d:d7:40:01:48:b4:c5:e8:
                    99:00:fe:38:e8:a8:b2:10:67:03:2b:5d:35:4b:6e:
                    94:f6:fb:22:83:66:a2:ef:1f:60:8e:29:f6:73:d6:
                    6d:d9:e9:87:c3:0c:57:0c:81:40:62:10:c7:cc:ca:
                    31:be:50:c5:b8:7c:86:8c:27:a1:c0:af:57:5c:a2:
                    c6:f3:6c:6c:a0:69:e3:9c:0b:67:2f:49:db:a1:da:
                    53:85:a9:cc:22:92:94:b2:b6:30:12:cb:5c:ed:bb:
                    52:03:e8:05:6d:e7:74:a0:55:2f:b4:0b:bf:14:dc:
                    75:f9:8b:78:bc:ec:d4:ac:d4:5f:0d:85:81:90:2f:
                    78:f1:f0:b3:9e:f4:db:3f:98:78:87:b2:c0:e0:4b:
                    6d:f2:db:b6:38:34:ea:70:eb:f0:c5:8e:ad:5d:74:
                    02:d3:b9:31:e1:74:87:cd:ad:44:5c:c8:0d:99:7f:
                    6e:73:19:f2:21:98:35:14:17:27:03:7a:d2:19:e5:
                    6a:f2:30:ad:ba:02:49:11:f9:17:2d:6f:ae:83:01:
                    b9:24:3b:f3:07:7f:dc:4e:fc:f4:ea:e7:2d:64:40:
                    19:d9:9a:5f:ac:04:f3:52:40:00:09:94:8a:0e:12:
                    52:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:AB:88:A5:52:7F:6B:07:A0:78:D1:EE:BF:D8:1D:6B:14:FC:15:2F
            X509v3 Authority Key Identifier:
                keyid:BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:f7:33:56:9e:88:48:72:4a:ea:6d:1b:30:a8:d4:56:a6:b5:
         60:b5:33:22:1b:5c:bd:19:32:0a:4c:b8:8f:47:12:df:bf:78:
         6c:05:71:91:0a:59:d6:5c:e2:6c:08:01:7c:e8:7c:ef:66:a5:
         15:dd:4c:a5:6f:62:a6:85:0b:6d:ae:3d:b3:e8:c8:32:1d:30:
         c4:85:9a:f6:7e:81:23:d4:d2:74:06:4f:9c:8e:ca:53:b3:e0:
         bc:91:fd:1a:31:35:f2:36:1b:62:c4:d4:f0:43:7f:a1:de:81:
         32:c0:94:50:5a:b5:da:96:14:fe:1b:6c:b8:14:94:a3:52:53:
         a3:f3:09:5a:c2:a4:67:c8:3f:66:a1:89:26:5f:c1:74:0e:0b:
         30:ce:e2:ad:c6:b9:f3:5c:7e:78:59:74:c9:51:2b:60:04:71:
         80:b1:f2:f7:90:40:e8:78:89:d4:f4:27:ef:bc:c1:12:91:62:
         11:af:06:29:b1:ff:cb:86:94:ea:84:24:a5:70:25:8e:7e:c0:
         f2:6f:b7:09:ac:89:ef:32:96:28:7d:f1:ee:9e:96:9e:bc:2b:
         76:d3:7d:83:08:e2:f8:34:e7:16:19:6c:cd:b6:f0:3d:5d:a1:
         7e:a6:08:82:77:ef:19:06:fe:16:e4:64:2f:9a:ff:e5:1b:73:
         bb:69:c0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 12:37:59 2026 by rpki-client