This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/BEA0689EB89924F618CAAD670C59C70B4D4DE538.mft
File:                     BEA0689EB89924F618CAAD670C59C70B4D4DE538.mft (raw, json)
Hash identifier:          h7Q9fQrXC5gb6/piHgK8Me+YMUKesF9IUYEveNy86WU=
Subject key identifier:   74:B5:C1:36:B3:53:60:B5:33:C5:20:47:C4:31:DB:B4:EE:2B:00:FC
Authority key identifier: BE:A0:68:9E:B8:99:24:F6:18:CA:AD:67:0C:59:C7:0B:4D:4D:E5:38
Certificate issuer:       /CN=BEA0689EB89924F618CAAD670C59C70B4D4DE538
Certificate serial:       35A8980B5B149EAC842551265F29011C002E5FC4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEA0689EB89924F618CAAD670C59C70B4D4DE538.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/BEA0689EB89924F618CAAD670C59C70B4D4DE538.mft
Manifest number:          01F9
Signing time:             Sun 21 Dec 2025 11:08:43 +0000
Manifest this update:     Sun 21 Dec 2025 11:03:43 +0000
Manifest next update:     Mon 22 Dec 2025 13:03:43 +0000
Files and hashes:         1: 323830343a353461303a3a2f33322d313238203d3e203237363838.roa (hash: g+TkY209qtHVgiy6VkexiUeoBoU++JFy740uQYUURh0=)
                          2: 3230302e3135392e3132382e302f31392d3332203d3e203237363838.roa (hash: n6M4c2MkwjyXptrieux/S6K1TvfFtz0oc3nV2sEdPMo=)
                          3: BEA0689EB89924F618CAAD670C59C70B4D4DE538.crl (hash: kqXjL4KVIFZMHU8KQjWI4Ra4zU7gtYm7eC3tBb+c4vM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/BEA0689EB89924F618CAAD670C59C70B4D4DE538.crl
                          rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/BEA0689EB89924F618CAAD670C59C70B4D4DE538.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEA0689EB89924F618CAAD670C59C70B4D4DE538.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 13:03:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a8:98:0b:5b:14:9e:ac:84:25:51:26:5f:29:01:1c:00:2e:5f:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEA0689EB89924F618CAAD670C59C70B4D4DE538
        Validity
            Not Before: Dec 21 11:03:43 2025 GMT
            Not After : Dec 22 13:03:43 2025 GMT
        Subject: CN=74B5C136B35360B533C52047C431DBB4EE2B00FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:af:7b:c5:77:ff:7b:6b:ed:28:01:19:3e:39:
                    fc:3e:3d:00:59:e7:4f:9a:b2:69:30:0a:1d:be:be:
                    74:22:ec:45:f8:37:91:53:5e:e6:4e:2b:96:c0:5e:
                    4c:21:6e:19:c4:73:b2:9a:b3:40:c5:d5:fb:f3:c0:
                    f4:d4:27:9e:33:4d:a2:b1:cd:ae:d2:02:85:c6:de:
                    18:c1:af:1c:26:a9:f3:03:12:b1:3b:01:67:86:81:
                    37:57:75:c3:1f:04:61:eb:1c:5c:e4:47:cc:7b:7b:
                    58:37:f4:3f:5d:24:c5:8a:a6:39:ff:23:53:b7:9a:
                    db:1c:8b:6a:af:7d:2f:77:28:1d:66:29:8c:3d:6f:
                    ae:e1:65:c8:62:e9:4c:a5:c5:49:ef:ba:88:09:e9:
                    0b:4f:b7:6a:85:82:34:80:3c:6a:15:b7:0d:05:fe:
                    ca:c6:2f:dc:51:e0:85:f0:69:a2:36:45:4b:6a:63:
                    44:f3:9d:c7:0b:fa:93:36:34:57:2c:74:74:bb:0a:
                    b6:36:b4:20:71:a2:fd:ef:c3:03:52:c3:c8:d0:f7:
                    9c:76:ff:be:24:55:10:f6:1d:69:f5:05:32:9a:6d:
                    bb:27:8e:9a:56:04:e8:dd:ec:cb:e2:26:db:94:16:
                    52:ec:6a:fe:d5:75:ca:20:60:af:5e:b8:71:79:73:
                    f1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B5:C1:36:B3:53:60:B5:33:C5:20:47:C4:31:DB:B4:EE:2B:00:FC
            X509v3 Authority Key Identifier:
                keyid:BE:A0:68:9E:B8:99:24:F6:18:CA:AD:67:0C:59:C7:0B:4D:4D:E5:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/BEA0689EB89924F618CAAD670C59C70B4D4DE538.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEA0689EB89924F618CAAD670C59C70B4D4DE538.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/BEA0689EB89924F618CAAD670C59C70B4D4DE538.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:c9:13:99:72:24:33:a6:4a:7f:11:36:6a:1b:fc:3d:bb:e1:
         4c:64:91:4c:8b:bc:47:e4:62:ab:c1:d3:03:c5:a9:82:bb:e7:
         4c:54:01:df:dc:20:75:b1:83:f7:d2:c7:35:e2:be:39:89:08:
         2a:16:f5:fe:44:4e:94:20:1e:ee:34:46:23:ad:c4:25:8a:db:
         b2:02:28:ee:09:59:3f:48:35:9e:b6:3d:bf:2e:d4:44:b0:f1:
         92:91:a2:7e:c7:59:2e:de:fc:f8:97:9a:e7:64:6d:91:1f:34:
         76:a8:88:8a:8d:21:91:3c:b3:ed:4c:09:43:19:d8:2a:d7:1e:
         6b:3d:d0:4d:e4:6d:61:b9:0e:62:cb:e1:ca:e8:75:9f:af:93:
         a0:2f:b5:a7:dd:6b:ad:c0:c4:6e:fe:9c:6b:8c:17:f7:8e:97:
         5f:99:7c:b0:f6:88:cd:4d:99:0b:3b:53:a4:34:61:9b:c4:93:
         cd:08:42:79:c4:e6:e8:c2:7e:43:94:e1:9f:72:3f:3d:6e:a1:
         1c:13:d8:aa:e0:15:6d:40:93:95:a8:fa:2a:08:92:7f:92:61:
         8b:ec:08:00:7b:7b:2b:ab:bd:f4:43:bb:96:be:66:20:e5:c1:
         01:f0:ba:be:7b:db:2c:bc:22:ff:62:d1:c5:02:40:2e:a8:48:
         2d:c3:54:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 05:35:34 2025 by rpki-client