This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
File:                     21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft (raw, json)
Hash identifier:          CblLYRI7AjpgOcbrscpdNCKfVS6JqyLaVN3qtOgho9U=
Subject key identifier:   CC:EF:B3:66:4F:4A:14:9E:01:0B:2D:BB:99:E6:FD:F3:6F:5C:2F:9A
Authority key identifier: 21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63
Certificate issuer:       /CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
Certificate serial:       09A47147FA77FA0420631C4945EC8AEF505D92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
Manifest number:          03B1
Signing time:             Mon 22 Dec 2025 20:50:00 +0000
Manifest this update:     Mon 22 Dec 2025 20:45:00 +0000
Manifest next update:     Tue 23 Dec 2025 20:50:00 +0000
Files and hashes:         1: 3137372e32332e3230382e302f32322d3234203d3e20323632393033.roa (hash: VXvyrrDD27zcLZmjQKfOsUN3PXhPsZFNh9LdYJ+iRB0=)
                          2: 3137372e32332e3231322e302f32322d3234203d3e20323632393033.roa (hash: mdcjEKvPG/B73ccAsX3C8Dr9E3qMPPXDvAsTZRqDvVA=)
                          3: 3137392e3130392e35362e302f32312d3234203d3e20323632393033.roa (hash: DHwUsbqimEDvWCPxswBV80NNXLzXD8vJVrGf7btegks=)
                          4: 323830343a313634343a3a2f33322d3438203d3e20323632393033.roa (hash: 0ZrcAy1yqfXbc6h7QM7Zk+vOIUxqyoSskLsVpTz96uY=)
                          5: 3138362e3235312e35362e302f32322d3234203d3e20323632393033.roa (hash: KUtjnXabsjb+dDIjc20jpdJyjoHMOFnDuF0ZbjlbQcI=)
                          6: 21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl (hash: qrPMtvBbPTMZ/uHfg8bVLsA3fUfQBIIP996oqCPBgY4=)
                          7: 3137372e38362e3130342e302f32312d3234203d3e20323632393033.roa (hash: iVVEAhV4rlgsfchJqSDQdETbnqllnK86AiHF/GlkkCo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl
                          rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 20:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a4:71:47:fa:77:fa:04:20:63:1c:49:45:ec:8a:ef:50:5d:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
        Validity
            Not Before: Dec 22 20:45:00 2025 GMT
            Not After : Dec 23 20:50:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:29:13:18:75:6a:36:12:34:89:08:be:15:dc:
                    d1:bb:71:24:05:00:3a:ef:07:cf:8c:18:06:b4:e6:
                    a8:54:1b:e6:f9:8c:f5:68:02:e9:e9:1a:03:be:23:
                    b2:3e:ed:15:1a:22:38:61:3d:4a:e8:6c:02:ab:3b:
                    2e:6b:35:9e:b0:7d:dd:51:1b:84:af:0c:5b:b3:0b:
                    37:76:12:50:82:57:ca:c3:22:5f:37:be:1a:23:8e:
                    51:65:5f:4d:b9:a8:a4:c2:7b:71:4e:ec:62:ba:86:
                    23:dc:0d:61:2c:11:1d:73:90:4b:78:64:00:a3:96:
                    d0:c2:2f:3c:ad:d5:2f:82:ed:bd:a5:4a:12:3e:15:
                    12:51:e6:6f:b7:27:ea:77:7b:26:fa:c2:d1:56:8d:
                    e4:c5:22:ce:ed:87:c0:57:5e:0e:4f:96:d7:ce:7f:
                    98:d6:e8:75:8c:89:0a:8c:24:b9:64:6c:a4:9d:f6:
                    ef:cc:9a:be:b1:d3:31:ed:c7:25:21:9b:54:66:08:
                    68:96:d9:a3:9d:82:55:e6:76:88:4f:2d:7f:54:d2:
                    ee:b2:a7:6d:df:de:d1:c5:d5:c6:83:59:16:0d:87:
                    d1:34:b9:a7:dc:94:7d:76:a1:e8:bc:0e:86:f8:42:
                    42:7b:18:d8:20:52:0d:3c:69:00:4f:2b:7a:f9:d9:
                    a7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:EF:B3:66:4F:4A:14:9E:01:0B:2D:BB:99:E6:FD:F3:6F:5C:2F:9A
            X509v3 Authority Key Identifier:
                keyid:21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:42:0d:21:f2:25:9b:c0:20:00:83:ad:2b:88:34:1b:f2:2d:
         ca:1c:7a:a7:d7:e2:1c:be:ae:db:cb:3a:00:bf:94:ae:51:68:
         60:6c:f4:a5:90:29:26:81:bd:fc:06:11:a7:87:8b:ef:cb:cd:
         12:c3:cb:45:74:d3:3d:01:26:ed:80:59:4b:3e:70:d6:52:e0:
         0d:ed:58:26:c3:61:09:95:57:c0:0b:66:47:e6:4f:8a:88:d5:
         20:68:88:37:58:f3:4d:7c:50:65:30:33:d5:67:55:55:d4:58:
         b7:52:df:53:f2:ea:34:71:36:df:9b:3a:bd:20:24:32:ab:72:
         df:74:53:20:9e:b0:e9:5b:19:35:82:93:72:bc:29:d7:56:d4:
         fb:40:c5:64:21:3b:9f:27:0e:e0:02:a2:b5:26:cc:24:37:54:
         80:ca:9e:ed:b8:99:a5:33:d5:90:b8:a7:b8:fc:0b:4e:8e:a5:
         6d:13:1c:d7:91:48:0d:4d:53:e8:93:b2:43:4a:b5:cc:c4:3a:
         5e:b7:8e:f5:f3:8a:e6:3c:7a:a8:f0:43:b0:0c:af:e3:ed:b6:
         4c:97:a3:37:21:27:f1:f9:87:8c:91:21:67:2e:f3:59:11:4d:
         28:b7:f7:e1:57:b8:a1:a1:cc:b0:39:b7:16:c5:47:ba:ae:75:
         c1:5a:8b:b0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Dec 23 12:39:35 2025 by rpki-client