This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.mft
File:                     BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.mft (raw, json)
Hash identifier:          Rv6MtqIlCWleHHEK2Do3EsRmVsT9HBR4+BIb3/VAiLg=
Subject key identifier:   35:43:E8:40:57:7D:3B:4B:C9:40:95:70:8B:C7:A6:D7:05:06:5C:51
Authority key identifier: BE:A5:95:98:3F:C6:8C:8E:F9:A5:46:D7:E9:A4:A4:8D:FE:2A:88:D1
Certificate issuer:       /CN=BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1
Certificate serial:       53FE31B9919F488614C148BB0700E29622E39E81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.mft
Manifest number:          0340
Signing time:             Sat 20 Dec 2025 10:47:07 +0000
Manifest this update:     Sat 20 Dec 2025 10:42:07 +0000
Manifest next update:     Sun 21 Dec 2025 12:24:07 +0000
Files and hashes:         1: BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.crl (hash: nHHm9HKDOo6/TTpVVUpSksZkjvNHY7Smw6lYfXzIUEk=)
                          2: 34352e3137332e38382e302f32322d3234203d3e20323638383139.roa (hash: f61UtWClOyp6Kh10ULsTV0tVHLCtuW2TgahnSxPC6co=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.crl
                          rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 12:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:fe:31:b9:91:9f:48:86:14:c1:48:bb:07:00:e2:96:22:e3:9e:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1
        Validity
            Not Before: Dec 20 10:42:07 2025 GMT
            Not After : Dec 21 12:24:07 2025 GMT
        Subject: CN=3543E840577D3B4BC94095708BC7A6D705065C51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:61:55:a1:6f:6e:4a:9f:76:2a:a4:5b:a8:12:
                    13:0d:eb:f3:0c:aa:21:66:e3:94:1a:c4:a5:dc:9e:
                    8e:ab:0e:09:e8:de:d8:2a:32:28:6e:e0:13:35:a4:
                    d4:d6:2a:3c:cf:1e:0d:54:87:c4:9b:e5:6e:74:28:
                    c5:2b:a7:18:5e:00:d6:1e:e5:b4:f7:7a:5f:26:3f:
                    e2:e5:aa:72:df:d0:89:c0:17:24:d0:93:b2:5a:06:
                    0e:08:23:59:33:bd:59:25:67:3b:29:b7:ea:d7:a8:
                    4e:79:24:81:96:4d:7f:2c:79:88:14:1e:ed:23:9e:
                    e9:66:b7:fd:73:da:82:6f:af:f4:28:5d:f7:2f:50:
                    39:da:96:e5:17:fd:21:b3:55:61:3a:53:1b:94:31:
                    1b:43:79:3f:e6:87:a3:b3:5f:23:da:86:90:b3:66:
                    c9:cf:a9:2c:55:5d:80:63:15:eb:c5:63:88:84:2d:
                    c8:6f:52:ab:10:c6:ba:a0:e1:e3:f2:f4:84:6f:7a:
                    96:66:a7:a6:fb:3d:73:c6:6a:6d:bc:fe:8d:60:a9:
                    48:53:8c:d7:54:bb:63:66:7d:f6:f7:46:31:1d:61:
                    39:0c:4b:99:1e:d2:72:1d:25:d2:fe:1a:65:56:e0:
                    f8:eb:13:da:59:12:d9:74:f1:ac:4b:c4:2e:c3:f7:
                    c7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:43:E8:40:57:7D:3B:4B:C9:40:95:70:8B:C7:A6:D7:05:06:5C:51
            X509v3 Authority Key Identifier:
                keyid:BE:A5:95:98:3F:C6:8C:8E:F9:A5:46:D7:E9:A4:A4:8D:FE:2A:88:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:10:60:ae:55:1d:1f:de:b0:28:27:49:e5:22:eb:4f:4f:aa:
         46:e2:10:b9:7a:69:cb:c2:ee:08:57:fc:0e:fe:13:8a:56:57:
         a2:cd:2e:d2:32:65:67:59:e9:ec:3c:18:0b:b4:b6:df:32:f2:
         24:b4:51:8c:11:84:9f:bc:fa:2f:78:4e:f2:f5:68:f2:2f:63:
         99:a6:ae:d6:cd:80:53:f0:a4:58:2f:ee:37:c6:fb:ac:c8:d4:
         fe:8d:69:ab:8f:16:e7:6a:59:e9:00:66:10:59:1f:a9:c7:20:
         23:ec:86:f2:65:d3:1a:bb:44:de:55:b5:13:65:73:04:67:41:
         e8:29:10:e9:7f:b6:1a:61:e8:fd:9f:a8:b6:7c:84:3d:4f:1d:
         7b:cf:7d:85:8b:54:fc:f5:25:dc:5e:c9:12:0c:cf:e1:8d:e9:
         d1:70:79:7f:38:fa:63:5c:f1:80:ae:fe:5c:be:88:a8:7c:a4:
         cd:2c:5b:24:01:42:2e:b2:14:55:86:ac:fc:21:a2:3c:c6:65:
         05:8c:4c:f1:34:19:ae:93:a8:17:7a:51:20:be:98:c4:dc:97:
         98:da:15:78:c1:ae:a8:17:4b:01:1d:d9:d9:a4:ae:39:30:c9:
         99:f2:0a:98:99:1f:79:1b:6f:16:f6:a5:87:3d:5a:0f:4a:65:
         31:d5:4f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----