This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft
File:                     CA9298E26EC7D83F990DD29EFD395097A928590F.mft (raw, json)
Hash identifier:          XOzy3ud26/Ze3QJO4BditfGvtfF9EQEJBpUert4wjiU=
Subject key identifier:   92:CC:1D:26:1E:7F:E3:CD:27:49:27:22:94:B7:B3:F4:B3:92:21:BD
Authority key identifier: CA:92:98:E2:6E:C7:D8:3F:99:0D:D2:9E:FD:39:50:97:A9:28:59:0F
Certificate issuer:       /CN=CA9298E26EC7D83F990DD29EFD395097A928590F
Certificate serial:       7DCA0921B9123F15D96987B532D90E02C9F182F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft
Manifest number:          026D
Signing time:             Mon 22 Dec 2025 20:23:32 +0000
Manifest this update:     Mon 22 Dec 2025 20:18:32 +0000
Manifest next update:     Tue 23 Dec 2025 20:59:32 +0000
Files and hashes:         1: 323830343a316165633a3a2f33322d3438203d3e203631363938.roa (hash: IFrUYpuj0d1bgr14YmgI4By335jGYf5cwE1I2H0w90A=)
                          2: CA9298E26EC7D83F990DD29EFD395097A928590F.crl (hash: N4vfGCg0dLssIbt5BfooL99Yp15Bx7W0d2H6FM6Xf8I=)
                          3: 3136382e3232372e38302e302f32322d3234203d3e203631363938.roa (hash: S1X3FDjegEq67IqZtyansbQSwefFYc5W5CadNAvGNo4=)
                          4: 3133312e302e3136342e302f32322d3234203d3e203631363938.roa (hash: wtyTmXZbRgRsfoJNHLj8NWX0CbM90+xKZ4dA+uKkbSs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.crl
                          rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 20:59:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ca:09:21:b9:12:3f:15:d9:69:87:b5:32:d9:0e:02:c9:f1:82:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA9298E26EC7D83F990DD29EFD395097A928590F
        Validity
            Not Before: Dec 22 20:18:32 2025 GMT
            Not After : Dec 23 20:59:32 2025 GMT
        Subject: CN=92CC1D261E7FE3CD2749272294B7B3F4B39221BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:09:89:ee:16:fb:06:8d:c7:7f:82:1e:12:32:
                    a3:93:6c:81:6c:1c:83:10:bd:de:0e:d7:c6:a9:f6:
                    9f:5e:66:95:27:62:37:ee:74:c6:53:03:4f:5a:ec:
                    35:60:26:af:30:16:eb:d1:62:79:b7:36:e5:1e:4e:
                    0a:05:c0:d7:12:e1:02:63:1b:29:85:88:bc:19:90:
                    e0:35:d2:e5:b5:66:25:92:37:2c:73:fb:87:60:fd:
                    f0:a9:47:9b:36:cc:56:12:fe:2f:63:30:bc:54:12:
                    b3:c3:eb:ed:b6:db:c8:42:58:20:b7:54:91:16:eb:
                    e6:b1:71:15:16:26:d7:55:32:32:86:45:07:bc:b4:
                    66:02:ad:6a:17:4a:c7:10:a9:ff:6a:b8:5b:7e:d7:
                    35:68:1a:72:98:ac:4e:6b:cd:b9:59:f4:2e:b3:83:
                    a0:b8:c2:13:87:70:4c:6a:0e:33:45:14:cf:51:cf:
                    c7:50:99:39:b5:90:61:e0:9d:17:ca:dd:04:20:33:
                    59:1a:f1:a3:8e:35:d8:3c:b2:33:86:9f:d4:fc:63:
                    64:3f:83:76:ed:e7:fd:ee:2f:b2:4f:63:cb:4d:63:
                    c9:08:02:c9:45:f1:c1:22:47:d7:b9:e8:10:ff:a4:
                    b3:d1:73:45:28:cd:70:11:34:a4:f2:03:99:24:52:
                    79:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CC:1D:26:1E:7F:E3:CD:27:49:27:22:94:B7:B3:F4:B3:92:21:BD
            X509v3 Authority Key Identifier:
                keyid:CA:92:98:E2:6E:C7:D8:3F:99:0D:D2:9E:FD:39:50:97:A9:28:59:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:a2:c9:69:fa:96:dc:6f:f6:3c:97:74:dc:16:ab:de:53:09:
         8f:fe:a3:3a:c1:2e:f5:e4:7a:68:0f:af:18:be:d1:51:b3:03:
         56:99:3e:a7:9f:ea:72:6b:d7:4a:46:1a:38:96:a3:15:1c:d4:
         ae:c8:f3:07:f8:ec:45:d5:34:65:8d:d6:cb:42:d0:0c:6b:a8:
         a5:73:be:52:3d:fe:f1:01:d9:eb:16:95:25:f6:f7:51:62:81:
         c9:f6:55:f8:e7:33:10:cb:52:4c:d0:8f:d9:7d:cf:29:92:da:
         38:8a:b3:16:c2:50:e1:55:bf:31:7e:ed:e6:59:15:c4:30:e6:
         d2:32:2a:07:60:c4:45:47:dc:c4:33:82:b5:66:02:fb:39:95:
         62:7a:d2:58:15:d8:1b:5f:5c:16:2b:3d:d6:59:bd:69:0b:da:
         be:79:c0:ca:07:4a:5d:33:71:a2:be:01:ab:a0:7a:3c:4d:a7:
         56:7b:d4:fb:02:fb:df:c2:31:ac:5b:8d:4d:c7:7f:11:99:68:
         a1:98:31:4a:b2:c3:15:e5:e9:01:24:3e:fc:7e:a3:77:f2:96:
         e2:3d:c7:98:bc:32:19:79:78:7e:69:9b:7b:dd:8c:21:2d:e6:
         98:26:63:4c:82:7c:a8:a6:da:33:6f:c0:f8:6a:5b:2e:33:4c:
         65:2a:be:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 03:49:53 2025 by rpki-client