This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/BE48F7A6CDBFE9B1691AFEA4B6AF7E6C5F5978CB.mft
File:                     BE48F7A6CDBFE9B1691AFEA4B6AF7E6C5F5978CB.mft (raw, json)
Hash identifier:          e6rkyqvShnLqYeaVCkMmwMz9wOcTLpA3+na0P5QZbjY=
Subject key identifier:   4F:5F:6C:C3:8F:A7:AC:C0:22:03:42:CF:F2:B6:4D:D9:3F:8D:99:2B
Authority key identifier: BE:48:F7:A6:CD:BF:E9:B1:69:1A:FE:A4:B6:AF:7E:6C:5F:59:78:CB
Certificate issuer:       /CN=BE48F7A6CDBFE9B1691AFEA4B6AF7E6C5F5978CB
Certificate serial:       68DF7ADBB0C5F3F71988A97ADD18AE5C26A06ECD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE48F7A6CDBFE9B1691AFEA4B6AF7E6C5F5978CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/BE48F7A6CDBFE9B1691AFEA4B6AF7E6C5F5978CB.mft
Manifest number:          46
Signing time:             Fri 19 Dec 2025 09:17:27 +0000
Manifest this update:     Fri 19 Dec 2025 09:12:27 +0000
Manifest next update:     Sat 20 Dec 2025 11:25:27 +0000
Files and hashes:         1: 323830343a333136343a3a2f33322d3438203d3e20323635303131.roa (hash: RCzrflLdtOpQnMCfppZfKTW2rChNBTChSblYUEK32Ok=)
                          2: BE48F7A6CDBFE9B1691AFEA4B6AF7E6C5F5978CB.crl (hash: 7e+FhTZED811iKx8d6NK+y8Gvl21rlqeppHkOj20zCg=)
                          3: 3137302e38342e3134382e302f32322d3234203d3e20323635303131.roa (hash: GNAj+FXfeJr1JRGMkcOGGS3tn9KceKRlP2aMi5jKxig=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/BE48F7A6CDBFE9B1691AFEA4B6AF7E6C5F5978CB.crl
                          rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/BE48F7A6CDBFE9B1691AFEA4B6AF7E6C5F5978CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE48F7A6CDBFE9B1691AFEA4B6AF7E6C5F5978CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 11:25:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:df:7a:db:b0:c5:f3:f7:19:88:a9:7a:dd:18:ae:5c:26:a0:6e:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE48F7A6CDBFE9B1691AFEA4B6AF7E6C5F5978CB
        Validity
            Not Before: Dec 19 09:12:27 2025 GMT
            Not After : Dec 20 11:25:27 2025 GMT
        Subject: CN=4F5F6CC38FA7ACC0220342CFF2B64DD93F8D992B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fd:af:86:b6:73:21:1b:0a:3e:8b:f4:3f:e0:
                    28:01:e1:52:51:18:57:6d:b1:59:fb:17:0f:75:f9:
                    0f:cd:22:85:af:c2:b6:b0:e6:44:a8:35:e4:8c:ca:
                    79:6e:ac:ec:37:f0:bb:4a:95:a3:77:3b:96:4f:02:
                    e0:a8:cb:18:54:89:ab:85:26:ae:fc:16:4e:5a:ca:
                    04:5c:6f:40:d7:c4:21:f6:f5:98:d5:ea:8a:d3:55:
                    e0:74:ab:02:de:8e:9c:bc:ab:d9:d1:28:6e:20:96:
                    84:1b:0a:d0:81:b9:8e:ce:a6:ee:bf:09:fb:0c:03:
                    2e:70:7a:ee:1a:cb:59:30:5c:6d:1c:00:f3:e8:21:
                    73:f8:77:22:79:81:19:24:dc:06:74:c9:23:29:b0:
                    80:74:f7:75:2d:4e:0e:54:31:43:74:c7:fc:76:21:
                    58:e6:b1:11:7f:f0:59:a9:8f:ec:4a:2f:89:83:d1:
                    15:9c:ab:ed:fc:04:c1:12:55:8c:7b:a5:20:b4:0d:
                    29:d0:19:8a:3e:9f:cd:91:62:b9:95:79:ab:42:5f:
                    28:44:16:8a:9f:35:d1:3c:da:3b:21:ae:73:b8:78:
                    8a:fb:d7:44:06:8c:fa:84:92:61:08:89:de:27:b4:
                    da:c6:c9:27:7d:8c:22:46:f6:41:9a:34:33:06:b6:
                    71:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5F:6C:C3:8F:A7:AC:C0:22:03:42:CF:F2:B6:4D:D9:3F:8D:99:2B
            X509v3 Authority Key Identifier:
                keyid:BE:48:F7:A6:CD:BF:E9:B1:69:1A:FE:A4:B6:AF:7E:6C:5F:59:78:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/BE48F7A6CDBFE9B1691AFEA4B6AF7E6C5F5978CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE48F7A6CDBFE9B1691AFEA4B6AF7E6C5F5978CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/BE48F7A6CDBFE9B1691AFEA4B6AF7E6C5F5978CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:56:ac:90:a0:61:c7:56:9a:dd:51:f5:a0:e3:f4:f1:52:f2:
         78:94:cb:0d:99:83:69:74:fd:e9:0b:cc:d3:a2:44:c4:de:70:
         c0:bf:4e:60:e1:d5:7e:8c:a2:9e:82:8e:44:3b:8f:6e:b3:88:
         4c:e2:a4:24:ed:05:b3:77:92:d3:f4:2d:cb:e0:09:5d:31:55:
         12:83:78:cf:8f:d2:52:5d:c5:93:9f:fa:58:08:40:0c:20:16:
         69:bb:7a:46:cb:17:a9:a7:79:aa:19:48:ea:fe:18:bb:dd:f2:
         15:4d:52:19:c9:62:31:55:2c:0b:9a:00:3c:7e:38:a3:60:1d:
         05:87:61:47:e2:46:b9:76:ed:99:30:f3:f8:eb:17:9a:5b:06:
         8c:84:f6:ad:96:37:0c:cb:ec:03:14:5f:e2:7e:32:4d:49:fd:
         74:e9:14:73:60:b5:58:9c:ca:14:c0:4d:11:b4:84:c3:2d:be:
         3c:dc:8f:4a:fd:0d:59:b6:4c:7b:bf:9a:5b:c2:e9:db:32:f3:
         2d:4d:0c:d0:10:c1:7b:2d:c2:03:00:ca:77:bd:13:55:00:1c:
         39:d9:a3:8e:43:f8:5f:f4:10:76:3f:a0:22:af:21:90:23:b1:
         63:e4:d6:be:2d:28:29:bf:f4:b0:22:f2:72:11:5f:55:4d:cd:
         08:09:cb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 13:50:37 2025 by rpki-client