This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft
File:                     8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft (raw, json)
Hash identifier:          YsJzjV0ud6G1rHLrzWFUpolQ/ftanpXrF81JSptWtXA=
Subject key identifier:   49:F2:A8:18:DD:6E:D3:BF:F3:82:FD:82:8D:A7:91:DA:32:5D:CC:16
Authority key identifier: 8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90
Certificate issuer:       /CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
Certificate serial:       6A1530B3368F7387446A8CD766E864A2B0036A35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft
Manifest number:          022B
Signing time:             Wed 17 Dec 2025 19:20:11 +0000
Manifest this update:     Wed 17 Dec 2025 19:15:11 +0000
Manifest next update:     Thu 18 Dec 2025 20:28:11 +0000
Files and hashes:         1: 3133382e39372e3134362e302f32342d3234203d3e20323636313738.roa (hash: sbJHPn3dWUwsi0qmFXwC/ratf8AVvbI/IF2heqXzNBc=)
                          2: 3133382e39372e3134372e302f32342d3234203d3e20323636313738.roa (hash: akSCKp8SsUrYcF+qebEjEWPIh4lrttT3OqJxyv5vkaM=)
                          3: 323830343a336265343a3a2f33322d3438203d3e20323636313738.roa (hash: efJfplOtXb/kewW5M0EnZm0tv7/C2wRazsh3UjKjPTY=)
                          4: 3139322e3134342e36362e302f32332d3233203d3e20323636313738.roa (hash: g19LYQXp6mzNXJgpiLJtMjT9m4+EvOZxxZn8tIle/bY=)
                          5: 3139322e3134342e36352e302f32342d3234203d3e20323636313738.roa (hash: tEXNEcR0bExFaJvTMGEgjkeXmCinKFhAPvS3B/zBS50=)
                          6: 3139322e3134342e36342e302f32322d3232203d3e20323636313738.roa (hash: iLF7XIWeMQGgHKMlS6NOBA8V4BCd6yee9E7gqnE/42k=)
                          7: 3133382e39372e3134342e302f32342d3234203d3e20323636313738.roa (hash: /9OJ+mF4Wp8Oq0nYxSjBeVHNSoaZV9OizbRzZKYK+qA=)
                          8: 8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl (hash: 9U3TptohPwIqV6ZvRQkU/cVv2hLyWkRPFRcxa/a9pl4=)
                          9: 3139322e3134342e36362e302f32342d3234203d3e20323636313738.roa (hash: vgYb9BAuf4bhVEH5mLObWdzqX7yKTdM1IZvXQBELeKw=)
                          10: 3139322e3134342e36342e302f32342d3234203d3e20323636313738.roa (hash: M6ER/d26ON15UtTOvFStLwb3bWS5QtDioUQFgvHKQfQ=)
                          11: 3133382e39372e3134352e302f32342d3234203d3e20323636313738.roa (hash: 9T/G3KuTkdiWlNuGai6zaRmf1aZny9qMUxrIqDzoBIY=)
                          12: 3139322e3134342e36342e302f32332d3233203d3e20323636313738.roa (hash: /fUvUxnGYQFT7TnAOHiefG6aMWu3Wxtz5KtYwMBbNy8=)
                          13: 3139322e3134342e36372e302f32342d3234203d3e20323636313738.roa (hash: KGmtYZg8uieHVYAYvE6AE33X7A1OtlUL7NsP+k1cb+4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl
                          rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Dec 2025 20:28:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:15:30:b3:36:8f:73:87:44:6a:8c:d7:66:e8:64:a2:b0:03:6a:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
        Validity
            Not Before: Dec 17 19:15:11 2025 GMT
            Not After : Dec 18 20:28:11 2025 GMT
        Subject: CN=49F2A818DD6ED3BFF382FD828DA791DA325DCC16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3b:09:1b:cf:75:cc:0b:8e:59:86:cc:51:b0:
                    8c:3a:fb:ec:60:55:d3:93:bf:ce:22:19:bc:70:47:
                    ed:a7:25:2a:4c:ab:0f:01:47:ee:e4:bb:65:73:0e:
                    9b:a7:50:f3:83:ec:25:af:5d:f0:63:b9:e1:28:30:
                    a8:cc:ea:96:00:8a:d0:93:99:f7:27:9e:49:4a:df:
                    34:2d:4e:ec:3d:33:bf:12:57:a7:d9:dd:f2:15:90:
                    e8:fa:d5:72:7d:76:eb:7b:bc:27:0a:24:57:77:33:
                    cc:0b:6e:c7:ef:6b:eb:6a:42:a3:95:d4:ee:e8:b2:
                    45:d2:93:63:b6:07:22:3b:ed:51:e6:91:be:0e:5a:
                    e8:ac:ee:4c:6b:75:d8:cb:0e:1c:d7:39:73:5c:04:
                    9d:94:0c:96:80:0f:99:0e:04:11:65:a0:4e:1a:09:
                    fc:c2:0d:82:7f:da:4f:1c:c1:7e:13:1b:37:5f:2e:
                    6b:5c:3e:c8:63:8a:82:01:08:75:f0:02:76:cb:9f:
                    8a:93:44:33:5f:ce:7f:84:b2:b0:49:da:2a:5e:69:
                    7d:35:e7:a4:ee:0c:d5:a1:06:98:a2:91:91:69:28:
                    2d:21:58:89:e3:5d:ca:b9:20:40:a5:fa:cf:b6:52:
                    08:f9:02:53:68:cf:45:b5:a2:3b:63:ad:66:d5:63:
                    33:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F2:A8:18:DD:6E:D3:BF:F3:82:FD:82:8D:A7:91:DA:32:5D:CC:16
            X509v3 Authority Key Identifier:
                keyid:8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:5c:5e:50:f7:4a:cd:e5:f4:1f:df:b7:08:8f:8c:74:4e:df:
         d7:a4:55:10:8b:db:06:ce:41:45:32:fa:a2:81:aa:ce:28:1f:
         87:92:71:9c:a1:8b:f7:59:83:94:6d:dd:45:70:62:35:fc:29:
         1a:de:cd:81:9a:4b:6a:12:75:32:27:47:a0:9f:43:a5:43:eb:
         04:ca:26:3d:2b:7a:ce:62:72:54:1d:1a:5e:02:34:50:dd:fc:
         4c:1d:7a:ec:4f:fc:99:25:5c:ce:79:7c:b5:41:c6:0d:20:84:
         af:41:90:d4:c8:97:a5:fa:c4:9c:3c:7b:34:4d:ef:7f:7d:ed:
         5c:5b:21:e7:25:74:41:fa:96:9d:81:ef:df:49:d1:6c:c7:bb:
         fc:53:7b:63:13:c0:da:96:ec:a2:9b:da:bb:ac:1b:d2:77:ae:
         f5:0a:6b:65:ba:64:9b:ce:db:83:fe:1c:b5:9b:ae:cf:96:29:
         c0:3f:52:ac:9d:70:3a:99:a2:46:05:df:3d:6f:72:0b:87:e7:
         ba:ae:61:e8:fa:15:fa:56:0b:90:fa:79:a7:d5:9d:76:67:df:
         c1:f8:0d:d8:ea:2d:4b:c2:01:62:4a:86:83:6a:2b:e4:53:6c:
         cd:cf:7e:9a:5b:7f:0c:4d:c0:ec:af:76:42:4a:32:42:53:3f:
         07:7c:e1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 11:04:05 2025 by rpki-client