This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/B882C1C7F7853B50794B0D38584713A2C1528F9D.mft
File:                     B882C1C7F7853B50794B0D38584713A2C1528F9D.mft (raw, json)
Hash identifier:          qf8YwZU6YQc2ZLxXU718BX1x2PbWrpPOhvioq5Mqysw=
Subject key identifier:   7B:D7:00:C5:BC:6E:45:79:61:CD:CD:10:C2:50:18:79:3A:C6:16:CB
Authority key identifier: B8:82:C1:C7:F7:85:3B:50:79:4B:0D:38:58:47:13:A2:C1:52:8F:9D
Certificate issuer:       /CN=B882C1C7F7853B50794B0D38584713A2C1528F9D
Certificate serial:       08824D0B9EB6CD62EBCB36C2EE4B0134AA0361E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B882C1C7F7853B50794B0D38584713A2C1528F9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/B882C1C7F7853B50794B0D38584713A2C1528F9D.mft
Manifest number:          0340
Signing time:             Tue 23 Dec 2025 02:21:00 +0000
Manifest this update:     Tue 23 Dec 2025 02:16:00 +0000
Manifest next update:     Wed 24 Dec 2025 03:08:00 +0000
Files and hashes:         1: B882C1C7F7853B50794B0D38584713A2C1528F9D.crl (hash: ipfEOEJitilKwlnJI36lbGWFP9+zHyIcEU7PMSmpr8s=)
                          2: 323830343a366335633a3a2f33322d3438203d3e20323730343633.roa (hash: ddsIbAZOJTh3+tjq6/SEWlRfbksO7q6EoJBCa4htuwg=)
                          3: 3230302e38312e34382e302f32322d3234203d3e20323730343633.roa (hash: AHLcZlyEnqbLe/LweuZGI3cnTPX/YBr3pom/98MGKt0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/B882C1C7F7853B50794B0D38584713A2C1528F9D.crl
                          rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/B882C1C7F7853B50794B0D38584713A2C1528F9D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B882C1C7F7853B50794B0D38584713A2C1528F9D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 03:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:82:4d:0b:9e:b6:cd:62:eb:cb:36:c2:ee:4b:01:34:aa:03:61:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B882C1C7F7853B50794B0D38584713A2C1528F9D
        Validity
            Not Before: Dec 23 02:16:00 2025 GMT
            Not After : Dec 24 03:08:00 2025 GMT
        Subject: CN=7BD700C5BC6E457961CDCD10C25018793AC616CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a5:f1:8f:25:62:2c:5d:05:34:1e:24:f4:9d:
                    65:47:f3:dd:b8:4a:c9:78:12:68:be:50:43:a1:31:
                    5e:6a:b4:fa:89:09:b9:4e:85:e0:22:1d:51:c2:49:
                    88:f2:be:7d:aa:09:38:8d:0a:7d:69:15:16:6f:4b:
                    3c:c8:15:81:16:8f:72:54:e5:42:c9:3b:0d:80:4f:
                    a8:e9:ac:10:a8:65:07:e5:d7:a1:7e:c3:ec:63:3f:
                    b2:44:ab:04:46:bf:d4:59:d3:06:5b:c4:68:1b:3a:
                    06:4f:cf:34:5e:0c:a1:23:39:fc:5e:fe:68:b1:dc:
                    e6:74:b0:63:de:0a:d1:9e:34:80:29:5a:21:47:69:
                    e4:09:0b:9d:bd:1d:12:15:b3:18:a0:8e:26:07:01:
                    ed:b3:7a:17:6f:41:4e:8f:5b:e6:b8:c8:83:d5:ea:
                    13:73:98:a1:97:55:a1:66:53:bf:9c:58:37:31:35:
                    8d:0d:15:86:7d:8e:8c:1e:15:c1:32:54:9f:08:d3:
                    85:b4:88:fe:f1:54:80:25:25:fa:11:13:d8:26:69:
                    37:12:c3:0b:21:87:eb:04:be:c8:3a:88:90:58:7c:
                    fb:bf:2a:15:18:c1:e1:95:81:86:47:67:e9:f3:f5:
                    0f:0c:e1:ae:9d:92:96:ea:99:79:91:65:62:78:93:
                    89:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D7:00:C5:BC:6E:45:79:61:CD:CD:10:C2:50:18:79:3A:C6:16:CB
            X509v3 Authority Key Identifier:
                keyid:B8:82:C1:C7:F7:85:3B:50:79:4B:0D:38:58:47:13:A2:C1:52:8F:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/B882C1C7F7853B50794B0D38584713A2C1528F9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B882C1C7F7853B50794B0D38584713A2C1528F9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/B882C1C7F7853B50794B0D38584713A2C1528F9D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:ba:67:38:82:7c:8a:1f:16:94:6a:83:4e:54:d9:be:5e:94:
         68:e6:8e:c9:9f:41:93:54:f9:4f:ec:05:c2:98:c5:e8:5c:69:
         ad:7c:6b:56:80:84:ac:67:77:cf:56:cf:8b:18:6f:da:59:18:
         f3:d5:fc:3b:04:e2:f3:c4:95:c5:a4:77:a0:93:ff:66:5a:97:
         76:2f:87:6d:80:57:bc:fd:f0:b2:88:a2:44:d0:58:46:2d:23:
         43:25:88:0f:b3:cb:92:55:b6:12:67:d2:1f:3d:a9:88:38:fe:
         c3:b1:da:26:1f:37:fb:84:08:b4:eb:4d:cd:7d:c9:47:11:55:
         e7:45:2d:49:be:7b:35:59:c4:4f:0c:97:f7:4b:43:76:ec:93:
         94:1d:61:24:ec:f5:f9:b5:29:e2:1b:57:ef:db:f8:4e:09:03:
         03:72:d0:88:83:d9:10:3a:e1:2b:fc:87:39:af:22:e5:5b:a8:
         54:99:cc:cb:6a:7d:71:6b:e5:92:50:1a:bc:32:c6:5e:de:d2:
         7b:d2:d1:2a:b8:01:93:bc:4e:3f:97:27:1f:63:aa:5c:a5:8c:
         9c:ec:1b:52:1a:f1:fb:0a:8a:04:e7:fd:d1:94:12:64:ad:1b:
         25:28:5c:f2:ed:b1:e3:14:d0:a8:3a:cf:80:85:fa:98:15:fe:
         e7:8c:67:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----