This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.mft
File:                     AB13EC0D6D610051E770A7056856BDE9A8A2CA21.mft (raw, json)
Hash identifier:          VR9FEUzps0LsU8Bb2CPSUw+ezWtecMdnO1AcXpVJFws=
Subject key identifier:   96:95:82:72:EA:FB:85:29:DD:E8:E5:E9:08:01:57:8B:57:A5:D8:B3
Authority key identifier: AB:13:EC:0D:6D:61:00:51:E7:70:A7:05:68:56:BD:E9:A8:A2:CA:21
Certificate issuer:       /CN=AB13EC0D6D610051E770A7056856BDE9A8A2CA21
Certificate serial:       0C2A8C21997BC7B25F1239D59405030E47935CCF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.mft
Manifest number:          37
Signing time:             Thu 18 Dec 2025 18:40:17 +0000
Manifest this update:     Thu 18 Dec 2025 18:35:17 +0000
Manifest next update:     Fri 19 Dec 2025 20:20:17 +0000
Files and hashes:         1: 323830343a3931303a3a2f33362d3336203d3e203533303735.roa (hash: TVPIvHgnj9MEperEOSbbfmuq9+lKhbi1shuk92WtopQ=)
                          2: 3137372e39332e3139322e302f31392d3234203d3e203533303735.roa (hash: 4fKYJkrZS3uywmmky9aWmdvBmuF315YLAnVeKzhnVhQ=)
                          3: AB13EC0D6D610051E770A7056856BDE9A8A2CA21.crl (hash: 15m8+qUFZ///cGmqvQQdnv1SeyJflKEBLyNlhaOVfv8=)
                          4: 323830343a3931303a3a2f33322d3335203d3e203533303735.roa (hash: F8NKnO4OmgAkIY1j707Xhk5W/A6nO/BX69Vv2Pla2JI=)
                          5: 3138372e39342e31362e302f32302d3234203d3e203533303735.roa (hash: 9dKGnkS2UvFVnH7qVQ8UbttMXxWgGGagGS/zM4qJaNc=)
                          6: 3138362e3139342e31362e302f32302d3234203d3e203533303735.roa (hash: W66KoXbegkma37r3PcurCjdZOg0zwIZtSmP3oDilpaw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.crl
                          rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 20:20:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:2a:8c:21:99:7b:c7:b2:5f:12:39:d5:94:05:03:0e:47:93:5c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB13EC0D6D610051E770A7056856BDE9A8A2CA21
        Validity
            Not Before: Dec 18 18:35:17 2025 GMT
            Not After : Dec 19 20:20:17 2025 GMT
        Subject: CN=96958272EAFB8529DDE8E5E90801578B57A5D8B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1c:f8:47:79:7a:4e:8f:28:aa:3d:bc:c7:3e:
                    33:b6:02:3e:a8:c3:b6:99:3d:ab:59:43:47:65:24:
                    12:8e:b1:4f:64:54:6f:21:a4:25:a3:6b:08:95:88:
                    fc:7e:99:49:a2:ca:0d:11:8c:72:79:ab:87:69:ae:
                    c7:66:5e:c5:a9:c4:13:2c:20:2d:e6:b4:28:34:45:
                    b2:cd:eb:12:91:14:1b:5c:17:7d:d4:71:75:8a:71:
                    d4:f1:b2:19:7f:a1:7e:b4:b2:fa:80:22:09:1c:2e:
                    a3:6c:fe:d3:8e:ef:18:cd:9a:91:d3:00:ab:6b:67:
                    2f:d9:99:16:10:82:c3:e7:41:43:20:7c:1e:5e:5d:
                    49:2d:71:c6:8a:e0:cb:2a:0d:5c:c0:48:30:dd:2d:
                    fd:ce:4d:f5:4f:b4:39:80:fc:6b:ed:ee:4e:48:51:
                    2a:b8:12:b1:f4:a8:53:e9:5f:3b:4b:50:c2:e3:d0:
                    be:fa:2c:b0:86:c9:74:7b:86:1a:f9:82:e2:61:cb:
                    89:66:e5:90:a9:c1:09:54:1c:a4:f6:fd:00:62:b6:
                    15:82:d5:26:99:a7:c5:55:a2:9a:5f:e6:c0:43:b7:
                    94:16:4d:c0:d4:30:b6:9a:b7:2a:3c:3e:6e:20:eb:
                    bd:62:ea:8d:52:5c:ae:cf:db:fc:dd:45:3d:2a:ef:
                    25:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:95:82:72:EA:FB:85:29:DD:E8:E5:E9:08:01:57:8B:57:A5:D8:B3
            X509v3 Authority Key Identifier:
                keyid:AB:13:EC:0D:6D:61:00:51:E7:70:A7:05:68:56:BD:E9:A8:A2:CA:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:32:81:7e:c5:64:6e:c4:03:4f:7f:23:a9:c4:43:a5:71:ee:
         69:86:f7:12:55:69:c6:05:d2:d2:28:90:c0:7c:51:84:ad:58:
         b4:49:60:28:09:10:ee:27:4b:4d:1b:1e:1c:bc:67:a6:f1:6d:
         3b:11:73:22:b2:27:82:8f:74:26:c5:c3:4b:69:fe:79:06:d2:
         a6:2e:6b:4a:18:c2:70:35:dc:49:35:33:fa:5b:82:8c:51:74:
         62:bd:2b:e2:f5:30:29:cd:d6:b7:bd:7f:b5:42:83:99:2f:ae:
         e7:eb:02:fc:6e:1a:0d:0f:ba:f0:cc:1e:9b:07:58:bc:87:35:
         50:cb:94:a7:7d:36:5f:9d:b9:4d:98:db:af:42:92:0b:2d:07:
         ff:12:ca:1c:af:f1:ba:35:f8:50:2b:11:ef:bb:4b:2b:12:74:
         eb:cc:ac:2e:9c:d7:f5:60:08:c2:b6:58:8e:f4:fa:5a:3b:51:
         35:04:52:f5:4a:5a:42:94:32:c4:69:86:71:c0:59:53:f0:0c:
         b0:b7:85:b9:4d:98:48:d0:24:a0:de:c4:a4:4e:91:b3:37:ec:
         64:e8:f3:92:be:5f:37:6d:7b:e1:30:6c:1c:b7:6c:6e:5e:18:
         0a:3a:08:f9:ae:e5:73:bb:80:05:5b:57:ed:cb:ed:6d:e7:83:
         18:66:04:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 13:45:49 2025 by rpki-client