This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6mTKQRNbbHFW4ybF8tbEMmNbhEsoMPb1D2vWhi1dXavm/0/BFD1B48163880A40D5FF0CE06FB607766AD48C79.mft
File:                     BFD1B48163880A40D5FF0CE06FB607766AD48C79.mft (raw, json)
Hash identifier:          zVcywTjorOcTpw1S1RG30QmakXJA4q1qtWC8b6XfWTQ=
Subject key identifier:   11:AC:9D:A5:76:E3:AE:1B:9F:BF:02:F3:C1:04:DE:12:9A:29:8B:34
Authority key identifier: BF:D1:B4:81:63:88:0A:40:D5:FF:0C:E0:6F:B6:07:76:6A:D4:8C:79
Certificate issuer:       /CN=BFD1B48163880A40D5FF0CE06FB607766AD48C79
Certificate serial:       525EC882CF149C78A3A067A4D8D4AD2AEC9E7AFA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFD1B48163880A40D5FF0CE06FB607766AD48C79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6mTKQRNbbHFW4ybF8tbEMmNbhEsoMPb1D2vWhi1dXavm/0/BFD1B48163880A40D5FF0CE06FB607766AD48C79.mft
Manifest number:          0D
Signing time:             Wed 24 Dec 2025 07:23:24 +0000
Manifest this update:     Wed 24 Dec 2025 07:18:24 +0000
Manifest next update:     Thu 25 Dec 2025 11:04:24 +0000
Files and hashes:         1: 34352e3233382e3138342e302f32322d3234203d3e20323638333336.roa (hash: m9ZQtpLmzrbbAJXfiu/oZeoNdShNN6F8QinPLpVrITk=)
                          2: 323830343a346639343a3a2f33322d313238203d3e20323638333336.roa (hash: TMA3o4WJSnSk90Hzu1OFnycac0AkI45z2y7Qb20xUcY=)
                          3: BFD1B48163880A40D5FF0CE06FB607766AD48C79.crl (hash: Tc0cJPLwPJPvuiU+EXuOS3MdZJsVfr78FZFjJsBzv1w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6mTKQRNbbHFW4ybF8tbEMmNbhEsoMPb1D2vWhi1dXavm/0/BFD1B48163880A40D5FF0CE06FB607766AD48C79.crl
                          rsync://rpki-repo.registro.br/repo/6mTKQRNbbHFW4ybF8tbEMmNbhEsoMPb1D2vWhi1dXavm/0/BFD1B48163880A40D5FF0CE06FB607766AD48C79.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFD1B48163880A40D5FF0CE06FB607766AD48C79.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 11:04:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:5e:c8:82:cf:14:9c:78:a3:a0:67:a4:d8:d4:ad:2a:ec:9e:7a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFD1B48163880A40D5FF0CE06FB607766AD48C79
        Validity
            Not Before: Dec 24 07:18:24 2025 GMT
            Not After : Dec 25 11:04:24 2025 GMT
        Subject: CN=11AC9DA576E3AE1B9FBF02F3C104DE129A298B34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f9:27:05:59:f0:75:f9:0b:f4:91:5d:51:cd:
                    15:f7:ca:c8:d6:d7:30:23:52:db:ab:32:a3:de:ca:
                    90:e1:80:1f:79:a3:c9:cd:e6:ce:93:34:37:19:21:
                    7c:4a:42:08:8e:2a:7b:24:0a:2f:5a:65:ce:1c:c4:
                    18:0e:da:68:69:36:f2:51:f1:10:c7:aa:cf:09:1a:
                    1f:ff:b4:d9:19:4d:a9:54:c5:c8:8b:74:80:11:a5:
                    f8:10:91:fb:ee:75:01:ac:8d:d6:2b:10:61:da:bd:
                    5d:68:92:53:35:10:73:28:35:4c:3d:5e:5f:8f:3b:
                    70:8f:4c:b1:71:15:80:bc:91:8e:da:66:49:1f:8c:
                    1b:ea:e4:00:6e:c6:4a:ad:92:52:e3:1a:f7:8a:b9:
                    69:57:cb:81:24:a9:1e:8b:d1:8f:eb:86:b1:8c:73:
                    dd:38:ce:f7:16:43:08:98:09:82:88:ed:1e:9c:95:
                    3b:12:3b:14:98:14:03:41:13:78:f1:c6:c7:2a:37:
                    9a:85:5c:5a:c2:d9:81:f4:57:69:ff:78:17:ec:96:
                    df:e3:d3:1e:b4:d8:d6:6d:b9:99:f9:34:43:c1:38:
                    e8:8f:53:84:73:6f:d1:5f:e7:43:1e:b2:06:53:ef:
                    8c:f8:e0:7c:6e:10:f1:66:d9:bf:86:81:92:bc:0c:
                    42:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AC:9D:A5:76:E3:AE:1B:9F:BF:02:F3:C1:04:DE:12:9A:29:8B:34
            X509v3 Authority Key Identifier:
                keyid:BF:D1:B4:81:63:88:0A:40:D5:FF:0C:E0:6F:B6:07:76:6A:D4:8C:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6mTKQRNbbHFW4ybF8tbEMmNbhEsoMPb1D2vWhi1dXavm/0/BFD1B48163880A40D5FF0CE06FB607766AD48C79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFD1B48163880A40D5FF0CE06FB607766AD48C79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6mTKQRNbbHFW4ybF8tbEMmNbhEsoMPb1D2vWhi1dXavm/0/BFD1B48163880A40D5FF0CE06FB607766AD48C79.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:05:4a:43:c9:d7:f4:8b:28:8f:7d:37:8f:af:83:37:49:f8:
         85:17:be:b0:e0:1b:e6:58:e7:91:70:99:c6:37:0f:d7:c2:d1:
         cd:15:5b:8d:ce:4c:6d:3d:cc:24:6e:20:7e:e9:65:98:7d:79:
         d8:83:e3:09:b4:83:35:83:34:46:2c:a8:d8:9d:78:ac:0d:10:
         6a:f1:a4:f5:4b:00:5b:2d:28:0b:f0:07:73:7f:38:a6:61:91:
         0e:2d:92:69:60:f5:b7:a6:6e:c1:3f:cf:71:e0:b9:d7:27:31:
         9a:9e:3d:84:1e:0c:12:7d:c3:27:a6:b3:f1:1b:6a:09:a1:f9:
         1d:25:04:7f:4d:14:c9:ba:6b:48:d0:b8:ac:26:a2:19:6b:a5:
         29:a9:65:f6:46:40:d7:56:25:1d:48:f2:cd:6e:68:e8:6a:93:
         bb:d5:3a:6b:3e:d1:d4:92:50:3d:9f:a7:5f:5c:87:72:48:90:
         7d:ef:bc:c5:39:36:5f:ef:9d:fa:dd:d6:d4:99:d2:a3:a0:a1:
         aa:8d:eb:aa:d9:59:b4:e8:a3:28:18:7b:91:cb:c1:20:03:4f:
         ef:3e:44:c3:44:06:63:c2:68:52:52:ad:33:72:97:06:42:0d:
         ed:80:aa:dd:5d:79:e2:a3:ce:dc:1a:65:a1:57:82:d6:3b:a5:
         d4:f7:5b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:48:03 2025 by rpki-client