This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BwMSav18CtVDwsg3wLoTobp3wYWaaySuYSb4rZwa1kFC/0/E09FD0A1DA6E71F7B2C5969898273507D1941AE1.mft
File:                     E09FD0A1DA6E71F7B2C5969898273507D1941AE1.mft (raw, json)
Hash identifier:          zkyd+Ni7R1YgmOpbGr2Cc2gbKnyrVIOP/g0dDDAV7Yw=
Subject key identifier:   73:FA:06:42:EC:04:F4:38:1F:89:89:D3:BB:5C:B1:D4:5B:67:C8:B7
Authority key identifier: E0:9F:D0:A1:DA:6E:71:F7:B2:C5:96:98:98:27:35:07:D1:94:1A:E1
Certificate issuer:       /CN=E09FD0A1DA6E71F7B2C5969898273507D1941AE1
Certificate serial:       2C207F3F5A79DBA8398618306738EBA2A05EDEDB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E09FD0A1DA6E71F7B2C5969898273507D1941AE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwMSav18CtVDwsg3wLoTobp3wYWaaySuYSb4rZwa1kFC/0/E09FD0A1DA6E71F7B2C5969898273507D1941AE1.mft
Manifest number:          0285
Signing time:             Mon 22 Dec 2025 11:40:38 +0000
Manifest this update:     Mon 22 Dec 2025 11:35:38 +0000
Manifest next update:     Tue 23 Dec 2025 13:23:38 +0000
Files and hashes:         1: 323830343a393063383a3a2f33322d3438203d3e20323734353939.roa (hash: U7WPDR055WV2rJvy6++PHwuPgRagHAhRT2rjbIU13ZQ=)
                          2: E09FD0A1DA6E71F7B2C5969898273507D1941AE1.crl (hash: dUsAfBfL76quwlnSTR4Gzu7fCSGAqK3KvjI0j0iabc4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BwMSav18CtVDwsg3wLoTobp3wYWaaySuYSb4rZwa1kFC/0/E09FD0A1DA6E71F7B2C5969898273507D1941AE1.crl
                          rsync://rpki-repo.registro.br/repo/BwMSav18CtVDwsg3wLoTobp3wYWaaySuYSb4rZwa1kFC/0/E09FD0A1DA6E71F7B2C5969898273507D1941AE1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E09FD0A1DA6E71F7B2C5969898273507D1941AE1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 13:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:20:7f:3f:5a:79:db:a8:39:86:18:30:67:38:eb:a2:a0:5e:de:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E09FD0A1DA6E71F7B2C5969898273507D1941AE1
        Validity
            Not Before: Dec 22 11:35:38 2025 GMT
            Not After : Dec 23 13:23:38 2025 GMT
        Subject: CN=73FA0642EC04F4381F8989D3BB5CB1D45B67C8B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c3:9c:8d:40:35:52:f3:49:8b:ea:59:dd:e8:
                    94:02:22:1e:74:74:87:6c:2e:e2:ab:c5:96:26:67:
                    bf:6d:e4:31:a3:21:cd:eb:47:83:ef:bf:1d:af:0a:
                    fc:e7:01:ee:34:fb:4b:9d:b1:a1:49:1a:bd:0f:31:
                    45:cc:1a:36:b0:68:a7:03:09:aa:42:1a:42:8c:a3:
                    af:9a:88:19:04:4b:f0:f4:7e:b5:b0:89:51:42:51:
                    3b:3a:2f:7d:9e:42:b1:8b:bd:19:e8:92:f1:36:40:
                    ac:8f:0a:52:a6:d1:7b:5a:4e:4b:ba:99:ff:20:73:
                    9c:4d:c7:a2:ef:fa:6c:91:72:a3:76:41:03:32:0a:
                    95:0b:6c:77:dd:ab:05:db:87:68:be:b0:60:ca:dc:
                    13:d9:74:34:4a:46:e4:0d:95:ae:c6:25:b9:62:ce:
                    25:30:11:e2:fb:98:6c:68:ba:c7:92:b9:ad:f3:ed:
                    87:1b:d2:71:2b:9d:c7:65:1f:21:04:4e:60:48:81:
                    7f:77:b2:fe:9e:7e:bf:d6:4c:83:8b:19:7c:6e:ff:
                    97:8b:7e:e2:22:c8:d7:60:ea:d3:65:f4:d5:b0:2d:
                    37:78:ca:2a:84:2b:df:2f:21:21:c6:df:32:cb:da:
                    65:62:79:3a:27:ff:75:4c:9a:94:e7:82:df:fa:1a:
                    83:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FA:06:42:EC:04:F4:38:1F:89:89:D3:BB:5C:B1:D4:5B:67:C8:B7
            X509v3 Authority Key Identifier:
                keyid:E0:9F:D0:A1:DA:6E:71:F7:B2:C5:96:98:98:27:35:07:D1:94:1A:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwMSav18CtVDwsg3wLoTobp3wYWaaySuYSb4rZwa1kFC/0/E09FD0A1DA6E71F7B2C5969898273507D1941AE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E09FD0A1DA6E71F7B2C5969898273507D1941AE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwMSav18CtVDwsg3wLoTobp3wYWaaySuYSb4rZwa1kFC/0/E09FD0A1DA6E71F7B2C5969898273507D1941AE1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:8c:21:f1:53:4c:19:dc:40:06:8f:90:48:1c:a0:d7:ec:94:
         c8:00:e1:d5:b5:9c:21:2b:4e:c1:6d:9a:93:ce:9f:36:6a:b5:
         82:de:d4:fa:71:98:f9:ca:aa:ac:22:a0:4f:e9:f2:6b:7d:ba:
         94:0b:00:57:da:fe:06:ac:05:81:df:e0:14:1d:b2:21:6d:d1:
         ad:e2:8f:0f:4f:d7:6a:2c:81:00:6a:fc:96:23:0c:a1:35:6f:
         3e:20:31:a2:70:e7:24:39:fb:e9:7e:a5:0a:a1:6b:de:eb:b6:
         22:e1:79:4f:66:15:ef:eb:39:9d:1e:21:c6:e8:7e:3c:8f:92:
         ee:59:af:ec:01:45:fb:2c:9f:61:56:8e:e5:26:6c:27:80:a5:
         4e:ef:51:45:05:4f:87:6f:6a:48:f0:89:88:2d:a2:18:a4:ec:
         97:b8:de:3c:e4:16:08:52:ba:3d:65:35:56:e4:50:4e:28:db:
         66:a6:fa:b3:1e:3d:b5:39:33:f1:40:78:28:69:64:77:cd:d3:
         4d:6e:56:ae:94:cc:1b:e4:f9:47:32:86:20:f7:fb:18:de:6a:
         f8:9e:4e:33:67:6b:6b:5f:3d:69:b9:54:ad:3f:30:92:b1:8c:
         3a:da:54:2f:01:48:2f:3a:11:67:42:2d:81:2e:02:26:88:7b:
         78:81:9b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 20:47:47 2025 by rpki-client