This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/4F13601ED15DE77633F89012A7D2AD0E725C8891.mft
File:                     4F13601ED15DE77633F89012A7D2AD0E725C8891.mft (raw, json)
Hash identifier:          nkKQKpUeN0nRa1CLcSnTm1App+JVOf0HuJWIG/EPxzA=
Subject key identifier:   C9:04:32:19:26:53:AF:E1:A3:E9:F4:40:1C:28:67:73:57:5E:F9:D8
Authority key identifier: 4F:13:60:1E:D1:5D:E7:76:33:F8:90:12:A7:D2:AD:0E:72:5C:88:91
Certificate issuer:       /CN=4F13601ED15DE77633F89012A7D2AD0E725C8891
Certificate serial:       1F9D3948A5669B5CB86501978DA5AADA91608563
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F13601ED15DE77633F89012A7D2AD0E725C8891.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/4F13601ED15DE77633F89012A7D2AD0E725C8891.mft
Manifest number:          02DB
Signing time:             Mon 22 Dec 2025 18:19:11 +0000
Manifest this update:     Mon 22 Dec 2025 18:14:11 +0000
Manifest next update:     Tue 23 Dec 2025 21:25:11 +0000
Files and hashes:         1: 323830343a386662633a3a2f33322d313238203d3e20323733353038.roa (hash: PgnAjQjtCXsOdg7BLRWirXsf07CcpSkOYKeceD7ZWuo=)
                          2: 4F13601ED15DE77633F89012A7D2AD0E725C8891.crl (hash: Q8x3YouH7sTMHvypE1TDJ7SVHPjulD7r6aspjjelyfQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/4F13601ED15DE77633F89012A7D2AD0E725C8891.crl
                          rsync://rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/4F13601ED15DE77633F89012A7D2AD0E725C8891.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F13601ED15DE77633F89012A7D2AD0E725C8891.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 21:25:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:9d:39:48:a5:66:9b:5c:b8:65:01:97:8d:a5:aa:da:91:60:85:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F13601ED15DE77633F89012A7D2AD0E725C8891
        Validity
            Not Before: Dec 22 18:14:11 2025 GMT
            Not After : Dec 23 21:25:11 2025 GMT
        Subject: CN=C90432192653AFE1A3E9F4401C286773575EF9D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5c:1f:21:c1:a2:db:0b:c4:25:cb:12:88:58:
                    dc:33:09:91:a9:4d:74:64:f6:29:ba:00:9b:0b:f0:
                    5b:67:84:b9:3a:fd:12:fa:3f:77:d8:c5:0d:c7:a4:
                    04:c7:74:91:2c:8a:9a:26:1c:25:5f:d7:33:57:8f:
                    63:0f:03:d5:92:53:dd:07:8c:f1:8f:b4:a8:c7:9f:
                    62:9e:12:74:c5:e4:3b:a2:f9:db:4f:28:78:32:8f:
                    3b:80:dd:3a:a4:f5:4f:97:de:54:4d:3d:92:ef:ee:
                    39:e4:9f:fc:f3:2d:77:1a:b7:f6:76:85:42:aa:f2:
                    bd:37:ba:98:59:02:f9:bd:78:fe:6d:23:ab:17:33:
                    d4:56:ff:3b:30:52:8a:89:d1:d4:56:d6:8c:93:37:
                    9c:57:b1:98:57:9b:80:0f:9d:0f:13:40:e9:6a:14:
                    2b:b2:91:f9:91:ed:fa:2b:f7:e6:46:bf:96:d0:e2:
                    03:08:cc:17:66:f5:72:eb:9f:73:b4:0d:c8:76:38:
                    9c:47:87:2e:08:75:aa:75:0b:d6:56:cf:ed:df:6a:
                    bc:9a:89:fb:a9:53:2c:c9:cf:15:87:d5:71:da:34:
                    a0:18:fb:cb:c5:5c:78:68:2f:a6:f5:57:69:de:21:
                    2e:81:4e:44:d4:16:89:73:5b:f6:b3:42:db:a1:46:
                    cc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:04:32:19:26:53:AF:E1:A3:E9:F4:40:1C:28:67:73:57:5E:F9:D8
            X509v3 Authority Key Identifier:
                keyid:4F:13:60:1E:D1:5D:E7:76:33:F8:90:12:A7:D2:AD:0E:72:5C:88:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/4F13601ED15DE77633F89012A7D2AD0E725C8891.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F13601ED15DE77633F89012A7D2AD0E725C8891.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/4F13601ED15DE77633F89012A7D2AD0E725C8891.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:1c:d4:cf:39:8c:2b:d1:9e:0a:74:ee:f2:80:9a:5a:e8:09:
         f9:b5:9e:eb:ac:76:f0:5c:8e:12:cb:7f:23:6b:52:ff:48:61:
         7d:99:98:22:26:c4:41:bf:38:e1:46:03:44:d9:15:04:c1:ad:
         5e:76:e6:1f:5d:31:ea:b8:d9:e2:7a:05:b5:4f:6f:e6:17:a4:
         c6:28:d4:d1:ba:a1:9d:8b:d3:68:f7:dc:f8:ce:7a:55:f0:10:
         66:1f:19:92:f2:c0:69:08:53:ba:86:76:c5:25:72:ee:50:cb:
         18:6a:8e:cf:ba:70:a1:05:6e:75:5e:55:c5:4e:71:7d:e5:75:
         58:27:e5:df:ea:1c:e5:91:48:71:3b:89:d7:61:76:06:0c:81:
         42:ee:ee:88:85:af:01:79:f5:02:73:61:28:70:d6:48:c8:74:
         0a:e2:2f:a7:3d:cc:4a:28:00:2b:9c:32:11:de:4f:71:cc:c2:
         fa:68:f9:0a:de:d5:28:24:e0:8d:9a:09:9b:62:4a:0c:2a:fa:
         8c:5d:d3:ff:a7:e8:99:21:f1:0c:9c:46:cf:65:9a:59:b8:a5:
         4e:07:5e:1e:86:56:99:f0:8b:6f:d5:54:e1:01:a6:f0:50:24:
         7a:d9:46:8a:fa:18:73:3f:c3:0b:83:75:ec:bc:d4:a3:bb:d7:
         4d:a8:a4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 13:01:02 2025 by rpki-client