This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AuSjmBqn9y87h6Gibd5zz3kfXNKWed9dqww769tPU8QU/0/651BB908DC925893C10634A004650501D017E848.mft
File:                     651BB908DC925893C10634A004650501D017E848.mft (raw, json)
Hash identifier:          BZtJN8Oop8+oT8Q5k5/nMOch+8Z+1AfKay/Hzf24qfM=
Subject key identifier:   70:21:45:72:B0:78:A4:A0:18:1A:01:6F:FA:72:E7:39:E0:B8:29:76
Authority key identifier: 65:1B:B9:08:DC:92:58:93:C1:06:34:A0:04:65:05:01:D0:17:E8:48
Certificate issuer:       /CN=651BB908DC925893C10634A004650501D017E848
Certificate serial:       6AAEE1D9C14BE9C79211D5BCEECBB59ED4353A29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/651BB908DC925893C10634A004650501D017E848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AuSjmBqn9y87h6Gibd5zz3kfXNKWed9dqww769tPU8QU/0/651BB908DC925893C10634A004650501D017E848.mft
Manifest number:          0328
Signing time:             Mon 22 Dec 2025 17:02:55 +0000
Manifest this update:     Mon 22 Dec 2025 16:57:55 +0000
Manifest next update:     Tue 23 Dec 2025 20:20:55 +0000
Files and hashes:         1: 323830343a383161343a3a2f33322d3438203d3e20323732343637.roa (hash: feKULO4bH2G7PxehIkEpSxDO0wXcdmR+rBhBb//J/NU=)
                          2: 651BB908DC925893C10634A004650501D017E848.crl (hash: 67M2ygpvf1ymGPFwUZVEVAyAXllitCpGfIDENuml+gI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AuSjmBqn9y87h6Gibd5zz3kfXNKWed9dqww769tPU8QU/0/651BB908DC925893C10634A004650501D017E848.crl
                          rsync://rpki-repo.registro.br/repo/AuSjmBqn9y87h6Gibd5zz3kfXNKWed9dqww769tPU8QU/0/651BB908DC925893C10634A004650501D017E848.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/651BB908DC925893C10634A004650501D017E848.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 20:20:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ae:e1:d9:c1:4b:e9:c7:92:11:d5:bc:ee:cb:b5:9e:d4:35:3a:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=651BB908DC925893C10634A004650501D017E848
        Validity
            Not Before: Dec 22 16:57:55 2025 GMT
            Not After : Dec 23 20:20:55 2025 GMT
        Subject: CN=70214572B078A4A0181A016FFA72E739E0B82976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4b:48:8d:f5:94:a6:d6:ee:73:ef:d3:25:05:
                    bb:15:63:7b:04:12:d1:c8:90:3e:6a:db:61:6f:b3:
                    19:bb:cc:26:c3:75:03:2c:91:b7:5d:fa:ca:4f:2e:
                    46:7a:97:26:02:78:fc:6a:1c:df:a4:f3:fa:26:11:
                    87:6c:2b:21:79:e3:84:8d:0b:6d:1c:a2:57:5c:8f:
                    99:f2:25:09:e2:7b:c5:07:4f:58:9b:b7:8a:05:3e:
                    56:82:d6:70:a3:bf:f6:77:ed:05:ee:ca:37:81:a8:
                    d9:2b:3d:5c:19:ea:e1:e7:0e:f9:32:78:f5:75:e7:
                    de:91:95:50:ed:0f:be:6b:7a:5a:93:c1:31:87:e6:
                    94:01:1e:52:80:38:9e:52:4d:a0:54:09:69:8f:44:
                    c8:99:58:51:74:00:88:65:4d:37:5c:64:38:75:7c:
                    41:0e:ef:11:28:a5:8e:6c:cf:1d:50:24:ad:66:84:
                    29:39:46:f1:6c:94:c5:49:ed:99:cf:ff:ff:a1:5f:
                    e9:08:ac:0b:af:2f:f5:0d:03:bd:95:02:07:b9:18:
                    b0:1a:e1:00:8a:ce:f8:b0:1b:14:8c:60:0b:be:39:
                    6e:d5:61:e6:58:31:ad:3b:bb:fa:24:61:ad:d5:db:
                    27:1f:f4:22:af:d8:b3:59:fc:66:af:80:3e:c4:33:
                    cd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:21:45:72:B0:78:A4:A0:18:1A:01:6F:FA:72:E7:39:E0:B8:29:76
            X509v3 Authority Key Identifier:
                keyid:65:1B:B9:08:DC:92:58:93:C1:06:34:A0:04:65:05:01:D0:17:E8:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AuSjmBqn9y87h6Gibd5zz3kfXNKWed9dqww769tPU8QU/0/651BB908DC925893C10634A004650501D017E848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/651BB908DC925893C10634A004650501D017E848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AuSjmBqn9y87h6Gibd5zz3kfXNKWed9dqww769tPU8QU/0/651BB908DC925893C10634A004650501D017E848.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:69:9d:cd:92:ea:59:ed:5a:fd:d5:a7:c5:a9:30:44:37:ae:
         e9:40:3a:c4:75:c9:70:bd:30:87:18:10:37:3a:db:2b:72:c6:
         25:dd:3a:f8:a1:3c:c2:cf:9a:43:b3:35:5a:5c:da:2c:ae:14:
         88:b0:b3:91:98:00:89:7a:43:79:c6:7f:56:31:5f:49:37:c5:
         01:3d:2d:9b:0e:2e:23:c5:ba:a7:51:92:3b:fe:91:67:5d:e8:
         0a:fd:49:f9:31:e8:ad:c9:e6:73:5b:cb:b1:65:1d:0b:e7:a1:
         36:f0:67:54:91:95:0e:d8:92:dd:2d:29:c4:d4:e7:d8:31:e4:
         f8:14:1b:c0:89:99:e2:b6:8c:f6:02:51:c8:1c:04:71:34:49:
         2b:26:9b:69:08:3b:9a:0d:a1:89:ce:fe:56:f1:5e:47:7e:85:
         1a:06:64:41:87:40:9e:47:d0:f4:03:f2:55:d1:44:ec:d4:5c:
         0a:c2:ba:7d:08:83:7f:c8:f1:88:52:b8:bd:61:58:06:eb:ff:
         ec:f3:48:6d:3b:1b:7a:d9:0b:0a:ec:da:8b:5b:0e:9a:c3:6f:
         21:5a:e0:20:38:28:14:f3:34:7a:c2:b8:5c:16:5a:4d:d5:fe:
         74:5b:45:87:25:8c:59:e3:80:dd:32:04:a1:2d:b4:f9:ed:92:
         bc:53:f2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 13:38:03 2025 by rpki-client