This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.mft
File:                     B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.mft (raw, json)
Hash identifier:          cA/9ftznFSRU82gafcD/vrl8JfXY8gA/Uuzrd0ZotXY=
Subject key identifier:   EE:D9:82:4C:88:15:4A:2B:37:64:2D:F2:57:C5:30:D3:1C:ED:25:2A
Authority key identifier: B0:CA:65:D9:C1:CC:96:DA:8D:04:D5:27:F2:AA:10:BA:40:DF:DF:F8
Certificate issuer:       /CN=B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8
Certificate serial:       5656AD4CC2E231B19FC1EDEFFE00BC247CA6EA3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.mft
Manifest number:          02B2
Signing time:             Thu 18 Dec 2025 08:10:38 +0000
Manifest this update:     Thu 18 Dec 2025 08:05:38 +0000
Manifest next update:     Fri 19 Dec 2025 09:58:38 +0000
Files and hashes:         1: 34352e3136332e3139322e302f32322d3234203d3e20323638353537.roa (hash: yJ+X8AmbopY8pA/sN7brL5heSlvBgv7wLK1XuUxSrYI=)
                          2: 323830343a353330343a3a2f33322d3438203d3e20323638353537.roa (hash: wqKlqVL7W+Kb2fvhbIalxcQZ7cEzpbHNTNi30laWQyU=)
                          3: B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.crl (hash: g3uMnsemFwX1z8aM/3VfBMz0Wbn4vpIJDSM4JwH+Mtw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.crl
                          rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 09:58:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:56:ad:4c:c2:e2:31:b1:9f:c1:ed:ef:fe:00:bc:24:7c:a6:ea:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8
        Validity
            Not Before: Dec 18 08:05:38 2025 GMT
            Not After : Dec 19 09:58:38 2025 GMT
        Subject: CN=EED9824C88154A2B37642DF257C530D31CED252A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:78:94:e5:96:a2:8d:6d:04:17:01:47:05:fd:
                    ba:11:c0:08:55:32:8f:aa:62:c5:3c:3f:2b:d9:e3:
                    ef:ec:9e:b1:76:40:07:10:20:fe:38:3a:a7:ee:b1:
                    eb:94:47:07:0a:ef:be:c1:9a:fd:4b:2b:26:95:71:
                    d2:97:2f:2f:da:68:ce:b8:a1:8a:9c:27:0f:0a:a5:
                    5c:5f:d9:cb:25:fe:dd:32:54:57:5e:31:a3:d3:1b:
                    bb:92:99:54:28:67:62:06:6f:43:c2:d8:7a:89:1c:
                    7d:37:6b:66:7c:75:36:8a:ce:f0:33:2f:fc:35:52:
                    aa:23:f6:a3:2c:89:dd:df:31:29:25:fc:5d:4b:30:
                    d9:5b:11:a5:f3:23:db:cb:5f:3c:ef:70:06:25:4a:
                    76:2f:a6:33:15:92:b0:c2:5e:f9:61:dc:03:b4:83:
                    89:4c:1c:ae:fa:7e:68:6b:e9:fb:39:44:eb:e5:7b:
                    ab:4b:59:c2:5f:54:43:09:08:f8:c7:a6:af:28:55:
                    90:35:86:13:26:55:c1:03:c8:43:5f:64:2d:85:b1:
                    d9:87:2b:dd:78:c9:fe:47:83:4a:58:d3:93:7d:33:
                    14:df:7a:8b:84:55:96:34:12:1f:00:e3:53:04:89:
                    db:94:77:27:99:bb:d0:01:9f:41:1a:70:ef:33:3d:
                    9a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D9:82:4C:88:15:4A:2B:37:64:2D:F2:57:C5:30:D3:1C:ED:25:2A
            X509v3 Authority Key Identifier:
                keyid:B0:CA:65:D9:C1:CC:96:DA:8D:04:D5:27:F2:AA:10:BA:40:DF:DF:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:7e:05:f9:bf:f6:0d:f3:a1:80:e8:04:d9:1c:f6:04:81:5e:
         b9:24:34:85:1a:5f:22:45:41:fc:d9:66:d9:39:a7:1c:af:c0:
         f3:37:4d:10:81:61:df:69:c3:ac:49:a5:3c:00:5d:05:4f:48:
         1d:46:1c:7d:2f:20:2d:d4:8e:01:93:38:a6:3f:77:4e:69:22:
         3b:e3:6e:d7:e1:82:ca:dc:58:16:5f:22:df:8a:57:c2:a2:a4:
         d8:01:ee:e3:82:c5:6a:8b:4c:1a:a0:e4:69:a6:9d:e1:31:1b:
         6a:28:bb:97:5c:89:ed:3c:71:5f:de:05:e3:9a:58:fd:66:83:
         f5:e7:49:3d:81:87:04:7d:ff:dd:8f:4a:63:a7:9c:05:1a:98:
         65:b9:3d:bd:9c:e9:cf:30:ec:3a:f7:ec:87:53:6d:ee:2b:b5:
         a5:a6:34:78:db:ca:b7:31:de:95:a2:48:9a:73:07:ca:5e:59:
         42:37:89:97:e7:04:a0:00:91:f3:48:2b:8d:f3:ef:bd:2d:26:
         a1:a7:03:7c:b8:a4:e0:34:e3:e7:48:ed:d7:bf:0c:6d:d0:d4:
         3a:d7:32:fd:52:46:94:21:64:e3:65:d0:81:cd:16:de:30:38:
         d7:6f:7d:8f:1e:b1:5d:91:99:e8:67:f4:74:63:76:d6:d5:af:
         c3:32:ad:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 18:02:05 2025 by rpki-client