This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.mft
File:                     B1A2287CEAA131778218645B379857543955CA06.mft (raw, json)
Hash identifier:          SOOu94Fa/CWFJ3qpG0Dfo0gogR15R9D/UgqhO53cmhA=
Subject key identifier:   40:13:04:3D:93:1B:2B:12:38:8C:8A:92:E6:4B:58:6E:15:E9:3F:79
Authority key identifier: B1:A2:28:7C:EA:A1:31:77:82:18:64:5B:37:98:57:54:39:55:CA:06
Certificate issuer:       /CN=B1A2287CEAA131778218645B379857543955CA06
Certificate serial:       0A1408B4E5F4324DB0F9BF20E0CBB5859E695E67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.mft
Manifest number:          036E
Signing time:             Sat 20 Dec 2025 09:40:48 +0000
Manifest this update:     Sat 20 Dec 2025 09:35:48 +0000
Manifest next update:     Sun 21 Dec 2025 13:21:48 +0000
Files and hashes:         1: 3137372e3132392e3132362e302f32342d3234203d3e203532353430.roa (hash: ZD8RnUTRApf/ieVM+6l67cmruPEUSNAKDK/s2Vdch84=)
                          2: B1A2287CEAA131778218645B379857543955CA06.crl (hash: ltBh13PPO7mv0WhDL8fV1HQMIFXvlqkRb1aKaK7fmhs=)
                          3: 3137372e3132392e3132342e302f32332d3233203d3e203532353430.roa (hash: awi6xeyQ/VfQ6agRkVAp09LUcgoEL5EfiHAGBjTVS+M=)
                          4: 323830343a6531303a343030303a3a2f33342d3334203d3e203532353430.roa (hash: soEXqztSqZcW3ue8ayVmBFdw/ylRMhWIBvGKMuk2cJY=)
                          5: 3133382e3138352e34342e302f32322d3233203d3e203532353430.roa (hash: akaFti3babgU3Quej8s+q2KTkl7K3agTlEASknubgMk=)
                          6: 3137372e3132392e3132372e302f32342d3234203d3e203532353430.roa (hash: GD3zaw2igr2XPaHhciyeNNKx6aGmyXf4RiAYOeLS0KQ=)
                          7: 323830343a6531303a383030303a3a2f33332d3333203d3e203532353430.roa (hash: dD+879hWvzUDJFsOSrXuEO67HQYkh2kZhuj4n7tsbcY=)
                          8: 323830343a6531303a3a2f33342d3334203d3e203532353430.roa (hash: P0UB8rxd+Tb4FWAVu4OuNHpfB2Y0puYXW3qOd2dWlvw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.crl
                          rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 13:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:14:08:b4:e5:f4:32:4d:b0:f9:bf:20:e0:cb:b5:85:9e:69:5e:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A2287CEAA131778218645B379857543955CA06
        Validity
            Not Before: Dec 20 09:35:48 2025 GMT
            Not After : Dec 21 13:21:48 2025 GMT
        Subject: CN=4013043D931B2B12388C8A92E64B586E15E93F79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:28:d3:ff:04:4e:6f:32:d2:7a:47:1b:ea:b8:
                    6c:69:17:c5:3f:7c:35:e2:70:61:93:af:ac:74:f3:
                    4b:58:36:19:21:df:e6:c4:95:c9:b0:ff:f1:46:c3:
                    ab:02:56:77:3f:07:2e:9b:a6:e8:28:8c:ab:b9:94:
                    d1:00:a9:0e:63:7c:85:09:fe:18:5d:14:7b:3f:27:
                    ae:c0:64:93:40:ff:ac:9d:1a:a1:83:3a:ad:da:4a:
                    5c:53:f5:90:56:0c:27:ae:8f:b5:10:70:da:85:7e:
                    eb:1d:58:d3:56:6f:98:6d:8b:cf:68:86:19:3a:19:
                    f3:57:d8:6b:13:73:d5:07:d3:99:61:72:5d:03:79:
                    74:03:8b:88:b2:65:d0:e4:17:e5:15:5e:7b:6d:c7:
                    80:1d:4c:89:a0:0c:96:cf:4a:87:8c:92:60:d2:f1:
                    57:7a:d6:eb:45:0e:2e:e5:85:29:1e:c0:54:f8:6d:
                    81:1a:7d:5d:1f:7a:2d:40:18:3c:78:9a:e8:b2:2f:
                    13:ce:ba:4e:99:38:91:c8:31:8e:fa:4b:cd:3d:69:
                    dc:a7:d7:9d:c5:ce:b8:b6:29:50:38:e8:24:ad:9c:
                    e4:4d:79:9e:e1:ed:ff:42:76:00:41:79:2c:0a:fc:
                    fd:36:4b:a5:59:6f:de:ca:4b:9e:09:e3:5e:4b:c2:
                    9f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:13:04:3D:93:1B:2B:12:38:8C:8A:92:E6:4B:58:6E:15:E9:3F:79
            X509v3 Authority Key Identifier:
                keyid:B1:A2:28:7C:EA:A1:31:77:82:18:64:5B:37:98:57:54:39:55:CA:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:ee:87:e8:3e:d3:0a:95:34:bf:2f:a5:89:f4:ff:e1:bc:b3:
         e1:f9:b4:16:47:fb:e9:69:68:19:cd:b7:3e:1d:a3:b0:d9:cf:
         8a:87:1b:bc:48:f3:ac:f3:2c:27:cd:f6:b0:7f:9d:8a:e2:f3:
         70:d0:72:eb:38:74:5c:ac:d6:98:c8:44:0c:54:4b:ad:f3:e2:
         18:b9:89:c7:2b:15:3d:1f:54:e7:49:90:7a:56:f5:9d:ca:ee:
         38:e1:95:56:6e:41:7e:42:60:25:34:0d:7b:96:c8:97:d8:d0:
         18:b0:21:c2:4d:96:c9:c3:d6:be:e3:b3:b0:ef:e9:22:b4:19:
         7e:92:0e:d9:23:fc:9c:24:c1:64:ba:63:4b:7f:37:0a:19:e7:
         0e:71:87:e4:60:1a:7d:b5:72:59:63:64:81:18:67:21:a0:22:
         b8:8b:9f:fc:69:b3:84:30:e4:b1:6e:00:4e:b7:4a:fb:ba:86:
         b8:cc:7d:03:e3:06:ed:23:aa:15:48:4c:0f:66:22:65:50:42:
         70:46:2f:f9:65:cd:d9:60:d0:02:b8:74:d6:8a:43:1d:09:03:
         51:e8:9c:02:13:2a:07:49:91:3c:09:3e:65:00:26:63:35:fe:
         c7:62:e0:f0:3e:c7:46:55:bc:c8:97:37:48:75:8d:9d:a0:ef:
         2f:e3:44:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:20:57 2025 by rpki-client