This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/F9AA3F12A4FCF0B733F0FF95942F6F21D77D63B4.mft
File:                     F9AA3F12A4FCF0B733F0FF95942F6F21D77D63B4.mft (raw, json)
Hash identifier:          qq189bBbVRZgwgI7FIMZ1SToEIRO23WMqVESMWttvPo=
Subject key identifier:   CF:4B:B0:DD:61:15:96:77:DF:63:66:8E:5A:A4:1F:9C:DD:2A:C9:95
Authority key identifier: F9:AA:3F:12:A4:FC:F0:B7:33:F0:FF:95:94:2F:6F:21:D7:7D:63:B4
Certificate issuer:       /CN=F9AA3F12A4FCF0B733F0FF95942F6F21D77D63B4
Certificate serial:       3AF8FD69E55CA18C3D00765DDAE0936F5E738B8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9AA3F12A4FCF0B733F0FF95942F6F21D77D63B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/F9AA3F12A4FCF0B733F0FF95942F6F21D77D63B4.mft
Manifest number:          BD
Signing time:             Tue 23 Dec 2025 14:56:39 +0000
Manifest this update:     Tue 23 Dec 2025 14:51:39 +0000
Manifest next update:     Wed 24 Dec 2025 16:01:39 +0000
Files and hashes:         1: 34352e3233312e3234362e302f32342d3234203d3e20323637323239.roa (hash: k6YRYUPwXf9JsgyvA0BOV95n9gN9dfe4olTVvd+JT78=)
                          2: F9AA3F12A4FCF0B733F0FF95942F6F21D77D63B4.crl (hash: 6uRNI5Ijoe3KwNs/fHeFcuJRtHeCi9NeiNEnC0HRK7A=)
                          3: 34352e3233312e3234342e302f32342d3234203d3e20323637323239.roa (hash: 8iSB61ZR771yQ3r/TVJg5KGajTB4RXHLOQdUAy08E2c=)
                          4: 323830343a346134383a3a2f33322d3332203d3e20323637323239.roa (hash: iWAop7PqMBTZt1vsWHppS2OKWwlbPMPB2P6fXl/rbp8=)
                          5: 34352e3233312e3234342e302f32332d3233203d3e20323637323239.roa (hash: 5PwDzpoCs75/hqzb04kwFwd381djPaZ71AakxDFUlBg=)
                          6: 34352e3233312e3234352e302f32342d3234203d3e20323637323239.roa (hash: 8+ncv4PpM4DM301JN4ClDTHx5lTa0NPvqYuanlBEvDI=)
                          7: 34352e3233312e3234342e302f32322d3232203d3e20323637323239.roa (hash: P60bd7vynV184pYGMomwOOyjXMxtkwXf1QC3QcO9gko=)
                          8: 34352e3233312e3234362e302f32332d3233203d3e20323637323239.roa (hash: l2UDRq9oWYzdn2UNOWfdGkiGJ9A1VjOB4lKTxJ6P/LU=)
                          9: 34352e3233312e3234372e302f32342d3234203d3e20323637323239.roa (hash: VtGtEbSOGwxoAyiFbPhaoKbJ4BEib5EQYpmV1XkySS0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/F9AA3F12A4FCF0B733F0FF95942F6F21D77D63B4.crl
                          rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/F9AA3F12A4FCF0B733F0FF95942F6F21D77D63B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9AA3F12A4FCF0B733F0FF95942F6F21D77D63B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 16:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:f8:fd:69:e5:5c:a1:8c:3d:00:76:5d:da:e0:93:6f:5e:73:8b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9AA3F12A4FCF0B733F0FF95942F6F21D77D63B4
        Validity
            Not Before: Dec 23 14:51:39 2025 GMT
            Not After : Dec 24 16:01:39 2025 GMT
        Subject: CN=CF4BB0DD61159677DF63668E5AA41F9CDD2AC995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8c:0b:b9:b2:45:63:d4:75:06:ea:42:b1:40:
                    4f:54:dd:68:8b:77:cf:2f:9f:47:46:15:bc:cb:0c:
                    fb:ef:93:98:0d:7c:93:ab:b5:6f:bd:c7:95:f3:f1:
                    89:46:12:86:a3:a7:22:00:6e:85:6f:f6:9c:1f:49:
                    12:b1:b9:9e:94:bf:f2:e4:07:8e:55:b8:ab:9d:1c:
                    25:61:8d:f6:c4:21:28:5f:5d:d4:07:13:04:dd:56:
                    ba:fa:ce:f6:d2:c5:f9:25:8a:7d:a1:8e:bc:f1:d4:
                    21:d5:c7:32:00:20:2d:d4:e1:d3:38:1f:49:4c:97:
                    6b:4f:e5:5a:9e:04:b5:1e:93:a5:19:5e:b3:22:c8:
                    92:dd:2d:66:bd:b4:fb:92:8b:62:b4:76:d5:4e:cb:
                    6c:67:1b:77:6e:31:b2:23:c8:5a:cd:67:db:2e:7b:
                    bd:56:03:a8:ed:57:aa:bb:a8:eb:3d:34:bb:a1:c4:
                    cb:58:2e:f8:34:57:49:eb:5a:6e:2d:bf:3c:7b:4a:
                    fb:d2:58:cc:94:47:08:33:a3:1a:c0:59:33:11:c9:
                    d1:95:45:67:4d:7c:60:37:fc:86:6f:67:66:be:08:
                    fe:5d:54:c7:e3:70:27:40:6f:5c:77:52:e8:a9:75:
                    44:b5:63:7c:8b:ac:fb:c7:3d:e2:5a:26:b8:d2:15:
                    41:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:4B:B0:DD:61:15:96:77:DF:63:66:8E:5A:A4:1F:9C:DD:2A:C9:95
            X509v3 Authority Key Identifier:
                keyid:F9:AA:3F:12:A4:FC:F0:B7:33:F0:FF:95:94:2F:6F:21:D7:7D:63:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/F9AA3F12A4FCF0B733F0FF95942F6F21D77D63B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9AA3F12A4FCF0B733F0FF95942F6F21D77D63B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/F9AA3F12A4FCF0B733F0FF95942F6F21D77D63B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:b0:d8:00:de:26:5f:51:4a:bb:b2:82:95:c0:39:95:28:6c:
         19:06:31:57:b3:2c:eb:e7:ac:7a:bd:58:ce:8d:6b:bc:38:44:
         29:8e:06:a4:85:45:6e:78:39:64:3e:7e:5a:12:8e:b9:bf:a9:
         4b:5b:81:48:33:be:4d:5a:20:cb:22:09:44:d6:73:ac:67:23:
         5b:4a:27:e2:80:09:38:21:47:cf:45:88:23:36:b8:1b:c4:93:
         bc:65:32:fe:cf:03:70:c8:50:34:6e:fa:30:80:42:00:d0:70:
         95:b3:43:b3:15:5c:1b:0d:8d:dc:d4:b1:38:f9:f0:5c:02:ca:
         f7:ae:d7:8e:fc:29:38:38:54:4a:ca:af:7c:b9:33:65:9c:18:
         f1:66:9f:c8:71:a0:5d:2b:7a:a9:47:e4:c6:f0:6d:50:49:c4:
         a3:a1:30:31:20:dc:a8:14:a3:40:f9:f2:4c:e3:f2:c5:60:7a:
         3b:dc:10:af:9e:5b:5a:83:3d:15:fe:a4:65:c2:6b:b4:d3:b0:
         55:ac:e7:ce:d3:dc:00:0c:2f:14:5b:86:8d:df:1a:67:01:b6:
         16:f6:9e:28:90:ef:6a:39:ad:c5:94:a1:36:5f:7e:a8:0b:64:
         d4:4c:b3:85:93:60:70:af:71:ff:3f:cf:4f:71:db:bc:f0:a1:
         3f:53:f4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 18:06:05 2025 by rpki-client