This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.mft
File:                     120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.mft (raw, json)
Hash identifier:          XAvl4wlLKeMRLUcwTEXqRO2UCEejwz9Tiscoln9evVU=
Subject key identifier:   CB:AB:BE:B4:F8:65:EC:B6:95:78:63:07:68:99:A7:25:EB:5C:95:EE
Authority key identifier: 12:0F:03:9C:87:2F:A2:AE:7F:DC:D1:D4:49:9C:40:11:CE:1A:5B:9E
Certificate issuer:       /CN=120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E
Certificate serial:       0E513AEFF67229D68C633D7350CE7D7C0F833C50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.mft
Manifest number:          01F0
Signing time:             Fri 19 Dec 2025 11:45:18 +0000
Manifest this update:     Fri 19 Dec 2025 11:40:18 +0000
Manifest next update:     Sat 20 Dec 2025 15:22:18 +0000
Files and hashes:         1: 3138372e3130392e3131322e302f32322d3234203d3e20323732373533.roa (hash: yBDPd1URATDxDAVxKaw8V064ULDla105pgZBa0AVjTE=)
                          2: 120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.crl (hash: Uuli9SX8WVj2WmqkaCqZrlfsczlngqil2v8qjxqKT+I=)
                          3: 323830343a383832343a3a2f33322d3332203d3e20323732373533.roa (hash: kFYvrnIt+Ker683Pal3jQOEHnIvEihdNejHmRz/bMkc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.crl
                          rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 15:22:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:51:3a:ef:f6:72:29:d6:8c:63:3d:73:50:ce:7d:7c:0f:83:3c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E
        Validity
            Not Before: Dec 19 11:40:18 2025 GMT
            Not After : Dec 20 15:22:18 2025 GMT
        Subject: CN=CBABBEB4F865ECB6957863076899A725EB5C95EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b8:1c:5f:9e:48:11:12:b0:c9:4f:3b:c9:20:
                    ee:7e:f7:d3:86:07:fc:22:aa:52:aa:45:31:a1:f4:
                    34:15:b7:fe:a0:6d:96:8c:1a:9a:96:1c:07:0e:00:
                    55:87:47:e6:42:a9:55:ab:73:e7:35:e4:c6:30:6a:
                    f5:20:30:82:c7:98:5f:23:98:97:c2:cc:9e:62:30:
                    23:47:41:2c:98:0e:96:5c:a6:08:de:ea:f8:f4:b7:
                    b2:8a:b0:f1:50:5c:eb:7b:37:5b:22:c4:06:d4:01:
                    af:8e:22:aa:58:ee:e2:56:29:9c:2f:f8:96:fb:0b:
                    a8:16:8d:3d:e3:e0:30:0a:72:0a:5a:56:59:6b:bc:
                    c3:c4:0b:dc:dd:bd:2c:cd:de:44:9d:4e:75:07:1a:
                    bb:60:18:a3:42:8e:d9:44:3a:47:51:6e:bc:6b:87:
                    6e:00:c1:00:e9:62:55:dd:70:95:fb:47:f0:e2:2e:
                    be:2b:58:d3:df:a7:22:27:4a:92:15:05:f2:1c:d4:
                    59:0d:a7:ff:f6:6a:8d:54:dd:c8:b9:d0:3b:af:48:
                    54:d6:a0:3f:c3:4b:fd:9c:8a:a5:d2:2c:29:eb:bb:
                    8e:41:c9:06:0c:fa:eb:70:c7:bd:a7:6e:a6:15:89:
                    fb:c1:2a:5b:57:56:83:9f:1a:bb:fc:89:95:e3:8a:
                    e1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:AB:BE:B4:F8:65:EC:B6:95:78:63:07:68:99:A7:25:EB:5C:95:EE
            X509v3 Authority Key Identifier:
                keyid:12:0F:03:9C:87:2F:A2:AE:7F:DC:D1:D4:49:9C:40:11:CE:1A:5B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:1a:03:be:7e:26:49:aa:ac:b4:f7:5e:81:cc:5e:b6:6e:50:
         4a:ad:32:0b:04:6e:34:a0:ff:2b:87:78:15:65:dc:8b:61:21:
         a4:a9:ee:85:67:5f:e3:d7:ef:4b:3d:c0:08:57:5a:8e:53:bc:
         60:58:68:c6:ba:40:d0:96:38:2e:61:1c:44:4a:01:4f:a3:e2:
         df:1e:a3:b3:06:e1:10:7b:9b:36:52:76:6a:18:23:8c:a9:80:
         b3:32:77:f9:a0:f3:8d:34:de:d6:37:a9:53:60:fb:96:20:4a:
         aa:93:d3:e6:39:1b:b0:bf:9a:73:78:ec:11:00:af:df:69:35:
         a2:06:a7:f6:22:3d:91:fc:4a:04:32:c3:a1:28:26:cc:f3:c1:
         71:64:f0:02:98:88:01:38:23:75:ce:7d:d8:3b:f5:23:bb:b2:
         b9:1b:c6:1d:a0:6e:f8:75:63:70:56:bb:24:e0:42:cb:79:10:
         77:67:79:c5:5a:a3:5a:c5:ab:11:9b:8f:97:7a:c5:ee:27:47:
         c0:19:5c:4d:59:c4:aa:8e:10:43:2e:e0:b3:d3:36:0f:fe:32:
         04:da:34:52:64:4f:34:05:f1:00:2d:ae:78:60:f1:17:40:6c:
         03:7f:9a:92:c8:7b:9b:ae:f2:ec:93:54:4f:e0:d7:fa:c5:6c:
         a2:47:8f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:46:38 2025 by rpki-client