This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.mft
File:                     BD40CEDDB8E6AC181C713C37060807D151D2B1AE.mft (raw, json)
Hash identifier:          HDMIxewhOtSYiY862vQD3JYct1DHW2XukfXakbd6Ru0=
Subject key identifier:   00:35:CB:BD:50:3B:93:CD:02:D2:A3:D5:FD:02:D7:CD:FD:00:80:5E
Authority key identifier: BD:40:CE:DD:B8:E6:AC:18:1C:71:3C:37:06:08:07:D1:51:D2:B1:AE
Certificate issuer:       /CN=BD40CEDDB8E6AC181C713C37060807D151D2B1AE
Certificate serial:       5A21723C1AA5247F3EDE64B0CEAC97C50AD00306
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.mft
Manifest number:          03AC
Signing time:             Sat 20 Dec 2025 07:10:01 +0000
Manifest this update:     Sat 20 Dec 2025 07:05:01 +0000
Manifest next update:     Sun 21 Dec 2025 07:10:01 +0000
Files and hashes:         1: 323830343a6438383a3a2f33322d3334203d3e203532363337.roa (hash: k3Bm0F1eBUvJv9DR8EcC67zGNW6MvG6HAqcmjidYFoI=)
                          2: BD40CEDDB8E6AC181C713C37060807D151D2B1AE.crl (hash: KQCq0GJw4Dc4MoK2o/1jVrwl5f1n7vG/I1sIgmKyPx0=)
                          3: 3133382e3132312e37322e302f32322d3234203d3e203532363337.roa (hash: s0ymFGwH1/jVPlM6SUJ4hKDT6XsFnyBDjc7H7gPckwk=)
                          4: 3137302e38342e3234302e302f32322d3234203d3e203532363337.roa (hash: dRynwq6+N2/eYsHPcgZGR88JKlLyV8dScUmNVmwDHbE=)
                          5: 3137392e39362e3136302e302f32312d3234203d3e203532363337.roa (hash: EBGyjPtIZv1szyE4ZK1m+CjXebtEwNS0wBqvHO2Brgg=)
                          6: 3137302e38312e38382e302f32322d3234203d3e203532363337.roa (hash: uD3/cdgK0gipxf+KAsBxd5wDpRyCNsrUJVbxauP9+EY=)
                          7: 323830343a6438383a3a2f33322d3438203d3e203532363337.roa (hash: vvdhDV78kqzy85F7pUt/V61rjRvKnfubu7Ub5NNCVUY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.crl
                          rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 07:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:21:72:3c:1a:a5:24:7f:3e:de:64:b0:ce:ac:97:c5:0a:d0:03:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD40CEDDB8E6AC181C713C37060807D151D2B1AE
        Validity
            Not Before: Dec 20 07:05:01 2025 GMT
            Not After : Dec 21 07:10:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7d:5a:fd:93:c9:5f:04:78:9c:6a:05:d8:e7:
                    a5:b9:40:c6:dc:4c:9e:d8:10:1a:a4:55:b0:3b:08:
                    8d:c1:40:ce:8b:a9:c5:2e:10:3a:26:3d:bb:d7:ae:
                    58:67:d5:32:99:98:6a:f6:87:92:88:85:25:42:8c:
                    e7:e9:dc:50:b9:b3:69:4b:4b:c4:e3:8b:38:bf:63:
                    05:e7:1f:4d:b3:cf:89:94:2d:42:66:9f:9e:3b:2c:
                    7c:c8:48:dd:9d:c2:8f:22:77:99:25:f1:30:fb:f0:
                    91:31:15:61:26:3d:cb:5d:3d:af:a9:6a:40:0e:84:
                    05:f9:bb:46:1c:08:82:84:fe:94:9d:d8:53:be:87:
                    ac:1f:06:81:bf:15:fd:2f:ef:a8:6b:08:c9:75:fb:
                    f5:fe:4d:ef:6f:b2:3d:56:01:24:56:10:42:fe:d7:
                    56:58:aa:09:e0:34:03:86:9a:25:e1:33:a7:70:29:
                    9c:65:32:f9:c4:4f:a5:e1:52:a9:02:e6:b8:32:c7:
                    e1:da:a4:e2:c6:4d:fe:f8:23:e2:f4:05:9c:0d:4a:
                    79:95:3f:64:df:a3:39:3e:2d:25:90:1d:6d:7e:d7:
                    73:e7:99:a8:af:82:11:59:7d:01:02:aa:5a:07:63:
                    57:5a:4f:43:ab:de:66:18:56:18:41:c4:23:c4:29:
                    e0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:35:CB:BD:50:3B:93:CD:02:D2:A3:D5:FD:02:D7:CD:FD:00:80:5E
            X509v3 Authority Key Identifier:
                keyid:BD:40:CE:DD:B8:E6:AC:18:1C:71:3C:37:06:08:07:D1:51:D2:B1:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:5f:b8:3c:e4:3c:9e:ae:03:e4:7f:db:89:3b:64:c7:11:8b:
         e1:67:b2:4e:c5:06:b1:fa:40:61:76:07:de:99:4c:ae:ee:c5:
         03:3c:9f:1f:81:5d:3e:ea:dc:88:d2:51:0f:a8:12:80:38:35:
         66:0c:cf:fd:e1:be:a4:2e:95:80:1a:14:f1:52:81:4e:b7:e0:
         fd:ff:50:40:b3:26:59:ce:eb:52:e9:57:42:3a:07:12:a4:8b:
         68:a2:4c:c9:7a:11:2b:cf:79:3f:f3:d8:3a:af:b9:74:9b:ab:
         fb:d0:8b:00:2d:dc:7d:b2:6a:53:6a:04:7b:d1:af:5d:ae:91:
         ff:94:7a:8d:19:07:7b:cd:63:05:6f:33:a7:fa:d1:7b:6f:d7:
         ea:c9:b1:ee:3c:f4:ef:71:27:c6:dd:2b:b0:39:0b:7f:e1:39:
         03:d2:4d:f3:c8:80:5f:5a:bc:e0:29:ec:5c:02:ff:fe:c4:c2:
         d1:54:27:0d:11:f3:1c:8a:9c:09:f3:ab:74:fd:d5:0f:aa:5c:
         cf:05:cb:82:20:8c:06:7d:ad:b0:94:56:9a:cd:1d:ea:10:26:
         be:03:bc:18:bc:75:16:a6:9f:65:d5:42:3e:a3:82:29:7a:96:
         66:a6:f5:e2:e7:64:1a:d8:c2:f6:ec:a8:cc:c9:02:32:6a:59:
         dd:3e:9f:eb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 20 23:41:37 2025 by rpki-client