This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/1/BA632A9087D3F9A39D150D208B6706857AEB9D59.mft
File:                     BA632A9087D3F9A39D150D208B6706857AEB9D59.mft (raw, json)
Hash identifier:          AqwAe5MSNGTKMqTN6v/24D6XJgH5Rhn4ksnzVYJLDPI=
Subject key identifier:   60:32:4C:26:96:2A:D5:B0:6D:A6:EE:DB:29:88:4B:B2:82:1D:98:BE
Authority key identifier: BA:63:2A:90:87:D3:F9:A3:9D:15:0D:20:8B:67:06:85:7A:EB:9D:59
Certificate issuer:       /CN=BA632A9087D3F9A39D150D208B6706857AEB9D59
Certificate serial:       190FEE779FD1026BDEA6C011248D09608997AAD0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA632A9087D3F9A39D150D208B6706857AEB9D59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/1/BA632A9087D3F9A39D150D208B6706857AEB9D59.mft
Manifest number:          03B0
Signing time:             Wed 24 Dec 2025 04:08:00 +0000
Manifest this update:     Wed 24 Dec 2025 04:03:00 +0000
Manifest next update:     Thu 25 Dec 2025 04:08:00 +0000
Files and hashes:         1: BA632A9087D3F9A39D150D208B6706857AEB9D59.crl (hash: QELH60hPR4Pa6g03HONUO5ehbVMEfsiBVJe5MN+AvWY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/1/BA632A9087D3F9A39D150D208B6706857AEB9D59.crl
                          rsync://rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/1/BA632A9087D3F9A39D150D208B6706857AEB9D59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA632A9087D3F9A39D150D208B6706857AEB9D59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 04:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:0f:ee:77:9f:d1:02:6b:de:a6:c0:11:24:8d:09:60:89:97:aa:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA632A9087D3F9A39D150D208B6706857AEB9D59
        Validity
            Not Before: Dec 24 04:03:00 2025 GMT
            Not After : Dec 31 04:08:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:02:29:42:d3:28:96:e0:c0:64:ad:5d:db:8c:
                    a0:e1:1b:74:58:f1:cd:0e:64:55:e9:fc:36:6b:7d:
                    5d:9b:ae:a2:53:83:cd:e8:de:e4:a2:56:df:9c:1b:
                    f8:68:c6:22:27:d5:1d:72:14:3e:e7:5d:1a:3c:48:
                    86:3e:73:76:34:e7:3f:6b:f8:f7:29:b0:3e:ad:03:
                    a8:0c:0e:b9:ae:38:08:99:45:d4:3b:3a:4f:de:f1:
                    b5:c8:c9:d4:05:35:bd:7a:5d:77:21:eb:91:f0:e4:
                    ca:67:f0:54:98:0b:5a:4b:c0:bb:98:92:c3:8f:fd:
                    60:d5:f2:63:0b:18:89:03:d9:83:fa:4c:e7:59:19:
                    c7:80:f0:87:b3:91:63:ef:e0:6f:08:e1:3c:72:6b:
                    99:f9:fe:ce:3e:c0:02:b0:58:72:58:31:4c:e9:72:
                    ed:f8:a6:27:60:ac:9d:21:72:8c:8a:cf:1e:69:01:
                    d8:b6:46:f3:af:46:c8:90:d9:7a:b7:d9:14:29:1d:
                    9c:14:7a:79:03:d1:55:01:8e:0a:44:f1:aa:cc:84:
                    68:33:18:bc:2f:ce:4b:c3:4b:e9:50:72:52:e0:f7:
                    03:c3:ea:ad:fe:07:e9:1b:a9:42:2f:94:e7:d8:df:
                    b5:da:8d:48:bd:64:98:75:1c:87:7f:cb:d9:00:4d:
                    1d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:32:4C:26:96:2A:D5:B0:6D:A6:EE:DB:29:88:4B:B2:82:1D:98:BE
            X509v3 Authority Key Identifier:
                keyid:BA:63:2A:90:87:D3:F9:A3:9D:15:0D:20:8B:67:06:85:7A:EB:9D:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/1/BA632A9087D3F9A39D150D208B6706857AEB9D59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA632A9087D3F9A39D150D208B6706857AEB9D59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/1/BA632A9087D3F9A39D150D208B6706857AEB9D59.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ff:f4:a3:7b:b7:ac:39:aa:2a:3f:54:6c:66:05:8d:1d:91:
         22:79:51:24:1e:67:5a:e5:56:40:77:11:64:8a:78:f9:d3:b3:
         46:cd:ca:eb:ee:5b:42:cb:e7:d9:44:e4:7a:35:b8:9c:13:cb:
         3b:f5:25:b3:ab:6a:ba:bc:bb:9c:de:15:ed:17:76:bf:0a:74:
         75:80:a4:01:4f:72:98:5c:79:83:0d:08:4a:9c:04:9c:9b:67:
         32:6b:92:1b:83:a8:7f:57:d7:4e:0f:54:c1:3f:51:54:72:1d:
         0e:3d:29:9a:31:d8:ab:d8:c8:ed:79:fa:c4:a7:10:c3:3f:55:
         f4:b1:66:9a:47:e7:8c:4e:1c:32:8a:44:f2:4e:9a:c2:60:15:
         56:0b:0b:1e:f6:68:66:b5:12:87:4a:4f:af:dc:f1:04:a0:59:
         4d:42:59:6b:c7:e6:46:71:f2:58:b3:21:60:cc:6e:d3:59:49:
         dd:7a:0a:e4:b7:f5:a4:e1:59:14:4e:59:db:d9:33:fa:ef:01:
         5f:1e:49:0b:9a:2b:52:c7:ed:88:fa:ef:21:ad:37:8b:ba:c5:
         74:0c:7a:a4:04:05:b2:ea:13:44:c6:e9:5a:ba:e1:f1:a6:55:
         c9:c3:6c:1f:91:e7:e5:67:87:db:e0:24:e8:b7:e1:6a:4a:af:
         c5:4b:94:1a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----