This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.mft
File:                     B12447B85424C8CE3169B0E67CABACBC33124F16.mft (raw, json)
Hash identifier:          8YxKWxWiGulFiFzql/yQoNNmO16nasI+zSOH68KEJ50=
Subject key identifier:   CA:F3:63:4C:81:64:F5:07:C0:B0:6E:06:A3:B6:39:87:29:F4:3F:CA
Authority key identifier: B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16
Certificate issuer:       /CN=B12447B85424C8CE3169B0E67CABACBC33124F16
Certificate serial:       4F779EBC707FDF0FCB93B97B6F9A728673216316
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.mft
Manifest number:          037C
Signing time:             Sat 20 Dec 2025 02:00:34 +0000
Manifest this update:     Sat 20 Dec 2025 01:55:34 +0000
Manifest next update:     Sun 21 Dec 2025 03:40:34 +0000
Files and hashes:         1: 3136382e3232372e31362e302f32322d3332203d3e20323633393830.roa (hash: +qFMQw3bScbnjARVyXFjLBvIDB8kcVfpjBSDxRZ4QGc=)
                          2: 323830343a323863383a3a2f33322d313238203d3e20323633393830.roa (hash: ZwoJ9apGaavL9wI8wRAKnE+jyQbqTAT2rwfVVRZcQXY=)
                          3: 3137302e3234352e3132302e302f32322d3332203d3e20323633393830.roa (hash: xtC1daIopA6Kr9YfGdzYU/4MV0GbBtqoc6urKTH74oQ=)
                          4: 3139312e33372e362e302f32342d3332203d3e20323633393830.roa (hash: SuZROPpkAWZyochPStEXHubFvYNor7lxcJR+nEe09wA=)
                          5: 3139312e33372e322e302f32332d3332203d3e20323633393830.roa (hash: uC80NSAZBlZtKUSJfaJoVNSiK8NUVF7U+l+fsS49bU0=)
                          6: 3133382e3235352e3234342e302f32322d3332203d3e20323633393830.roa (hash: 5S+9Dtx7UpKxI0mcJvWZyDbsXvrlqoMhaB5vMfATcRU=)
                          7: 3137372e37322e3231362e302f32322d3332203d3e20323633393830.roa (hash: tSlMTYW5Dwz1JcHCX5B9kfXW21axfslNZ7oL1ux6nPc=)
                          8: 3139312e33372e372e302f32342d3332203d3e20323633393830.roa (hash: xmjCyI/if+E3TdA21g9NnBdWh5FAr2GapICkWlDZO+I=)
                          9: 34352e3233322e3230302e302f32322d3332203d3e20323633393830.roa (hash: EDwgP1aaaFsp1FZU4ejOSLhb6KBhxwjiwiLY64jjeAk=)
                          10: B12447B85424C8CE3169B0E67CABACBC33124F16.crl (hash: YiTSGqSvSIALGJlS5wlBAdi8UCBx/O8FqnhCtaWRXhs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.crl
                          rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 03:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:77:9e:bc:70:7f:df:0f:cb:93:b9:7b:6f:9a:72:86:73:21:63:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12447B85424C8CE3169B0E67CABACBC33124F16
        Validity
            Not Before: Dec 20 01:55:34 2025 GMT
            Not After : Dec 21 03:40:34 2025 GMT
        Subject: CN=CAF3634C8164F507C0B06E06A3B6398729F43FCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b9:c6:fb:f1:5c:99:b1:29:fd:21:3a:4f:88:
                    c9:d2:0f:46:43:d2:55:05:db:c2:d1:9e:92:14:db:
                    11:d4:e0:ea:00:93:94:23:a3:5b:c1:5b:c4:e9:25:
                    ce:8f:ba:4c:18:23:65:b7:6b:ed:8a:d3:59:67:88:
                    ea:b4:06:c7:56:bc:2d:81:50:0b:91:af:6f:d2:b9:
                    0f:7b:90:b6:59:b8:07:14:b9:95:56:21:0d:bf:07:
                    5b:31:da:ff:69:55:0d:54:ab:cf:e8:e1:5e:fd:fb:
                    ce:fb:25:77:af:02:54:c1:7f:ec:8b:ae:06:ee:f7:
                    dd:89:a0:cf:95:35:45:ff:8e:83:f7:d2:0a:08:30:
                    aa:09:5c:2c:81:83:ee:cf:2a:38:72:e3:b4:58:33:
                    4e:de:98:20:87:29:bb:35:70:06:82:3d:76:77:1f:
                    f9:fd:eb:4f:9f:2d:88:cc:c5:76:2f:13:22:ac:74:
                    40:db:36:6b:df:63:92:06:76:33:df:8e:ee:6c:c9:
                    b7:95:e4:77:cb:90:30:58:ab:ab:ed:71:0a:6c:a1:
                    dd:04:80:a3:04:f9:40:3d:0e:f6:47:e1:bc:68:7b:
                    0a:0d:0e:32:fa:05:21:5d:25:e2:10:33:83:62:05:
                    05:ac:49:5b:41:f7:56:50:2a:43:97:07:cc:51:f0:
                    74:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F3:63:4C:81:64:F5:07:C0:B0:6E:06:A3:B6:39:87:29:F4:3F:CA
            X509v3 Authority Key Identifier:
                keyid:B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:03:05:d8:c9:9c:f7:46:98:0b:77:c2:cd:08:4a:6e:b8:f3:
         d1:36:d6:b3:83:b9:18:22:30:3a:8c:2d:37:6d:34:96:ec:94:
         60:a4:08:2a:86:a6:99:89:4b:b4:9c:c1:40:33:be:20:5c:3f:
         fa:93:79:34:ca:d2:81:a0:44:0a:79:cd:fc:2b:04:b5:ce:9d:
         ec:5e:7a:07:34:8a:81:84:c4:40:15:eb:5c:b8:4b:05:de:a2:
         cc:d8:ea:59:a3:25:cd:99:16:89:08:a1:63:96:5f:fc:0c:a9:
         2a:5b:34:a7:0f:fa:67:35:82:f9:89:be:e4:08:40:5a:b4:e3:
         ad:41:54:16:e4:42:d7:6b:bc:73:97:a1:5f:0f:4f:27:f7:28:
         f5:b5:a0:00:fc:5a:7f:2e:bb:59:48:c1:16:6b:92:09:3a:5b:
         b0:60:ca:fd:ec:0e:cd:01:c6:e8:c0:ae:e0:38:a6:21:58:e9:
         b4:18:2e:10:08:ad:75:28:35:30:a0:27:d5:8b:6e:15:e9:00:
         01:13:a3:eb:2b:ae:0d:a3:0b:84:57:8a:1a:1e:be:b0:ca:32:
         82:5c:68:48:d3:3b:72:0d:e7:76:e6:86:a7:5e:41:c1:08:42:
         80:94:0f:b2:b7:91:aa:c5:ed:ed:81:15:ef:72:b4:7c:3d:2f:
         9b:1a:44:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:15:46 2025 by rpki-client