This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/B6B7C8107519DEE2DC60235DD84006DC63EB80FE.mft
File:                     B6B7C8107519DEE2DC60235DD84006DC63EB80FE.mft (raw, json)
Hash identifier:          ZLSUCRZWwzngBn7CqGnzrAwNly4kTgSdpEVX8zL+/ZE=
Subject key identifier:   47:8D:4E:2E:01:63:3C:1A:90:5F:99:9E:EA:C7:DC:ED:C9:29:69:01
Authority key identifier: B6:B7:C8:10:75:19:DE:E2:DC:60:23:5D:D8:40:06:DC:63:EB:80:FE
Certificate issuer:       /CN=B6B7C8107519DEE2DC60235DD84006DC63EB80FE
Certificate serial:       251B23918B641CE8B806025EF5FFDDF3615B8CAD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6B7C8107519DEE2DC60235DD84006DC63EB80FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/B6B7C8107519DEE2DC60235DD84006DC63EB80FE.mft
Manifest number:          0137
Signing time:             Sun 21 Dec 2025 02:49:09 +0000
Manifest this update:     Sun 21 Dec 2025 02:44:09 +0000
Manifest next update:     Mon 22 Dec 2025 05:21:09 +0000
Files and hashes:         1: 3137392e34322e3133372e302f32342d3234203d3e20323731323037.roa (hash: qZy9fPd4Vu9sl76+cmOuqkV1ZcaSruTCEskq7mXpea0=)
                          2: 3137392e34322e3133392e302f32342d3234203d3e20323731323037.roa (hash: GYoPaDmB4gm7nzw0SyKeXRhd0aS5slZ2aSkrAiB3csE=)
                          3: 3137392e34322e3133382e302f32342d3234203d3e20323731323037.roa (hash: 2brJBnes/aNN4gGEEKn27KIYpXwEU2YrF746hAs5lmE=)
                          4: 3137392e34322e3133362e302f32342d3234203d3e20323731323037.roa (hash: aa9SjDvs0oU+22XKSGehnMNSTBwMcsmXfyLku5gCZJw=)
                          5: B6B7C8107519DEE2DC60235DD84006DC63EB80FE.crl (hash: SQeUIp9+lMeRz9AuCfRrjfXp6BJokGZjLhmBOp+kY1g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/B6B7C8107519DEE2DC60235DD84006DC63EB80FE.crl
                          rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/B6B7C8107519DEE2DC60235DD84006DC63EB80FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6B7C8107519DEE2DC60235DD84006DC63EB80FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 05:21:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:1b:23:91:8b:64:1c:e8:b8:06:02:5e:f5:ff:dd:f3:61:5b:8c:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6B7C8107519DEE2DC60235DD84006DC63EB80FE
        Validity
            Not Before: Dec 21 02:44:09 2025 GMT
            Not After : Dec 22 05:21:09 2025 GMT
        Subject: CN=478D4E2E01633C1A905F999EEAC7DCEDC9296901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:af:35:f1:10:a9:ae:c8:0b:1a:c6:88:29:0f:
                    52:bd:d5:8d:a7:d5:98:52:59:97:f2:e8:1d:a4:42:
                    0d:af:33:4c:8f:5a:08:65:70:a5:78:ff:19:f0:72:
                    4a:20:60:91:c9:d1:a9:96:d1:22:e8:30:d3:6c:4f:
                    c5:11:ea:52:73:83:da:57:52:06:6d:1a:76:d3:e9:
                    64:a6:70:fb:ca:16:d4:34:41:fa:28:c0:5e:03:2f:
                    c6:0c:7b:a7:57:db:6f:36:c9:dd:8c:9c:5a:82:3f:
                    12:b7:b0:64:f6:7c:a0:df:34:c9:45:25:6c:c6:cb:
                    62:fd:39:dc:cf:08:14:08:21:a1:3b:cb:3d:3c:1b:
                    b5:b2:ec:1f:f4:c1:d5:de:26:25:47:71:c2:15:cf:
                    1a:e0:9b:cd:99:4b:8c:ef:28:e2:30:15:55:e9:95:
                    57:43:69:f9:20:db:6b:58:1a:7d:24:2c:78:14:b6:
                    c9:76:8d:7d:e3:94:e7:77:ab:48:2e:a1:02:40:70:
                    a3:37:93:0d:72:52:fe:0c:c3:db:eb:e1:f8:72:c6:
                    b4:58:81:2b:dd:dd:02:f1:2f:bd:59:65:99:5f:ed:
                    ae:a3:56:89:2e:36:71:71:a2:69:cd:27:d0:73:3e:
                    b3:f2:b7:32:72:1a:15:4d:79:50:76:b4:e7:58:83:
                    01:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8D:4E:2E:01:63:3C:1A:90:5F:99:9E:EA:C7:DC:ED:C9:29:69:01
            X509v3 Authority Key Identifier:
                keyid:B6:B7:C8:10:75:19:DE:E2:DC:60:23:5D:D8:40:06:DC:63:EB:80:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/B6B7C8107519DEE2DC60235DD84006DC63EB80FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6B7C8107519DEE2DC60235DD84006DC63EB80FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/B6B7C8107519DEE2DC60235DD84006DC63EB80FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:fb:58:f4:7f:4c:ca:52:33:e3:16:2b:cb:fb:53:57:e2:7d:
         fe:b8:ae:a8:67:d4:82:d5:d5:bd:a5:92:3b:60:47:27:b4:c2:
         5d:51:39:10:dc:dc:2e:96:44:3b:15:4b:b3:5f:9a:5d:d5:57:
         ff:92:22:ac:22:89:a7:fe:b1:19:89:b8:e4:36:56:f1:06:aa:
         ff:bc:bf:95:08:68:86:05:d1:da:1c:ec:b9:5f:f3:48:85:a8:
         9a:d6:20:d9:c6:65:ea:46:b3:cd:22:b0:75:d3:f7:4e:3d:40:
         cd:94:cb:1b:18:d0:de:19:fb:9b:b7:b8:cf:b3:b8:e8:51:69:
         fb:6d:db:47:0f:64:15:12:33:78:e6:98:c4:71:24:b0:ad:8a:
         a9:b6:97:ac:ae:85:3e:f0:3b:c7:c5:f9:cc:9a:17:06:63:3e:
         cd:56:50:aa:74:42:b2:4a:be:88:c8:04:0e:d0:04:f4:b0:80:
         69:74:7c:98:b1:74:be:77:d8:45:82:6e:23:61:98:9f:57:1e:
         0d:9b:24:41:c3:eb:b9:86:ad:62:75:1e:f0:fe:ec:14:16:b7:
         25:b3:a3:d6:0d:8d:30:c0:c6:9b:bd:9a:2a:d6:c2:33:7d:9b:
         15:24:9e:07:4f:07:c7:19:eb:21:b9:69:4d:87:0b:4b:82:33:
         90:ac:7c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 18:03:17 2025 by rpki-client