This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/BC834F1ADC6997F0F8557889193E5B0D17827E29.mft
File:                     BC834F1ADC6997F0F8557889193E5B0D17827E29.mft (raw, json)
Hash identifier:          CVOdsZsGcEf3U0yoopaHsWR+kBnet1sFpR6/X5uJumo=
Subject key identifier:   6E:81:82:D6:32:80:A7:12:84:35:8D:1E:B8:E8:9B:9F:05:15:33:D0
Authority key identifier: BC:83:4F:1A:DC:69:97:F0:F8:55:78:89:19:3E:5B:0D:17:82:7E:29
Certificate issuer:       /CN=BC834F1ADC6997F0F8557889193E5B0D17827E29
Certificate serial:       4BBE9E4F4E370C4F49CEBD65E581E4169BC7A97B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC834F1ADC6997F0F8557889193E5B0D17827E29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/BC834F1ADC6997F0F8557889193E5B0D17827E29.mft
Manifest number:          0166
Signing time:             Sun 21 Dec 2025 19:03:45 +0000
Manifest this update:     Sun 21 Dec 2025 18:58:45 +0000
Manifest next update:     Mon 22 Dec 2025 20:38:45 +0000
Files and hashes:         1: BC834F1ADC6997F0F8557889193E5B0D17827E29.crl (hash: 2La2G6VYSVCMFCBO/lWjzxhgeuvVZHnnKoye2CbFT1c=)
                          2: 34352e3138382e3138342e302f32322d3332203d3e20323639353330.roa (hash: QcqAb0+DtgjszqLRzX2mepAq4Zax3JRnI7HvdGOdaug=)
                          3: 323830343a363630633a3a2f33322d313238203d3e20323639353330.roa (hash: /iaFLxHNFA2V3TjOBiv0XpcHZofInDeTZKuOoA3EzQg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/BC834F1ADC6997F0F8557889193E5B0D17827E29.crl
                          rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/BC834F1ADC6997F0F8557889193E5B0D17827E29.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC834F1ADC6997F0F8557889193E5B0D17827E29.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 20:38:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:be:9e:4f:4e:37:0c:4f:49:ce:bd:65:e5:81:e4:16:9b:c7:a9:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC834F1ADC6997F0F8557889193E5B0D17827E29
        Validity
            Not Before: Dec 21 18:58:45 2025 GMT
            Not After : Dec 22 20:38:45 2025 GMT
        Subject: CN=6E8182D63280A71284358D1EB8E89B9F051533D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:84:02:ac:35:5c:12:5f:03:85:4f:9b:0c:b2:
                    1b:ee:c2:cc:d4:dd:f3:d5:ab:bc:c6:77:2a:4c:cc:
                    04:4e:d9:50:be:50:3d:44:d4:82:e0:dc:71:b3:ea:
                    cd:ed:2a:34:97:72:6b:6e:ec:02:f3:9b:74:2f:f0:
                    53:fa:60:9e:35:dd:83:2a:70:7d:f8:8f:52:9b:5c:
                    02:68:05:43:90:0b:ca:84:c7:ee:b2:43:03:dc:e2:
                    bf:15:98:28:e6:9f:9d:e6:41:42:31:e1:67:7f:76:
                    8d:0e:8e:ed:ab:5a:46:af:5d:32:a1:8a:4b:81:d2:
                    ef:a8:6d:94:51:d9:8c:d5:e9:c6:05:19:08:d8:99:
                    5e:b4:50:c1:6e:a4:da:6b:e6:7b:38:49:b2:d1:ce:
                    72:1c:33:c5:3f:a0:43:76:99:bb:c7:d3:44:af:49:
                    bf:30:64:60:a8:fb:b8:6a:82:04:ac:2c:18:88:b1:
                    47:c0:d7:d7:be:1c:b8:7b:47:4b:28:4e:fd:01:c0:
                    39:a1:98:b4:30:95:56:51:34:f2:bd:3a:a8:89:f2:
                    33:12:ac:99:b3:e5:72:fc:a1:49:b7:56:bf:d9:38:
                    87:5c:5c:f1:00:25:5c:ec:29:99:4a:38:fc:82:f4:
                    83:e0:06:2a:0c:5e:31:5b:21:6c:95:0c:29:4b:4a:
                    18:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:81:82:D6:32:80:A7:12:84:35:8D:1E:B8:E8:9B:9F:05:15:33:D0
            X509v3 Authority Key Identifier:
                keyid:BC:83:4F:1A:DC:69:97:F0:F8:55:78:89:19:3E:5B:0D:17:82:7E:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/BC834F1ADC6997F0F8557889193E5B0D17827E29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC834F1ADC6997F0F8557889193E5B0D17827E29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/BC834F1ADC6997F0F8557889193E5B0D17827E29.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:59:b9:74:5e:11:28:37:39:98:d1:e7:25:34:f0:cb:96:c7:
         cd:56:fc:16:2c:c9:23:31:d3:aa:a7:26:09:93:73:7b:e4:82:
         0f:48:08:17:9e:02:9e:c1:90:12:0b:c3:80:76:b4:63:2f:71:
         5c:19:5a:6c:e9:62:e9:54:f3:94:9d:b6:1e:96:1a:a6:d1:97:
         91:77:f2:bc:08:46:b9:c4:58:22:98:33:b6:f9:2a:77:9b:57:
         9c:64:7d:17:5a:6e:a1:69:fc:8a:db:48:10:15:c3:53:8d:3b:
         bb:41:5b:cc:e4:9e:86:dc:52:bf:62:e6:1f:fa:4c:2a:0c:ab:
         df:e3:52:a9:98:e8:17:79:5c:0c:00:94:44:d3:b8:51:d2:65:
         a2:aa:8f:32:4d:f7:e5:e1:37:89:8a:40:24:f8:d9:64:a4:be:
         52:03:c5:aa:ae:72:10:47:68:23:25:14:e3:7d:ab:85:b6:f9:
         e3:8b:c7:27:1d:0c:22:3b:53:22:4f:d6:ff:8b:8a:67:e3:bc:
         58:87:76:53:b5:1e:02:b8:8c:83:b7:5b:33:37:22:2d:5a:d5:
         3b:3b:7d:c7:ec:00:19:4e:28:9b:34:1a:1b:30:8f:44:19:6a:
         d2:1e:07:e1:d1:08:e3:46:d8:7f:60:fe:1b:bc:49:a0:10:12:
         df:03:5c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 06:14:28 2025 by rpki-client