This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GBRK9pHuBPJrBUUoo4U2hs1QYtJuMS7GZTNYimSLXYiL/0/87DB2D42F6AA2757F3821F45CED8747B0B68A929.mft
File:                     87DB2D42F6AA2757F3821F45CED8747B0B68A929.mft (raw, json)
Hash identifier:          i7PP21kJh1+TOOsA6SQaIWHXb0zApV6qS5OMkfMu/lc=
Subject key identifier:   50:5C:E1:6B:84:85:05:14:6F:73:68:D6:11:CD:AC:B9:6A:C7:42:68
Authority key identifier: 87:DB:2D:42:F6:AA:27:57:F3:82:1F:45:CE:D8:74:7B:0B:68:A9:29
Certificate issuer:       /CN=87DB2D42F6AA2757F3821F45CED8747B0B68A929
Certificate serial:       4B294301E865BB5B0BD4965ACB5498A97795FD29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87DB2D42F6AA2757F3821F45CED8747B0B68A929.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBRK9pHuBPJrBUUoo4U2hs1QYtJuMS7GZTNYimSLXYiL/0/87DB2D42F6AA2757F3821F45CED8747B0B68A929.mft
Manifest number:          033A
Signing time:             Wed 24 Dec 2025 08:21:18 +0000
Manifest this update:     Wed 24 Dec 2025 08:16:18 +0000
Manifest next update:     Thu 25 Dec 2025 08:22:18 +0000
Files and hashes:         1: 87DB2D42F6AA2757F3821F45CED8747B0B68A929.crl (hash: 9XWMVjntH4LDL+FjVKLnHE3DNHAdzpp1ERlSbONsFYs=)
                          2: 323830343a386639343a3a2f33322d3430203d3e20323733343939.roa (hash: dRrkcU6DKtPX/khP0O/WGga3UHvPMwxgO8xn/K1yGVk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBRK9pHuBPJrBUUoo4U2hs1QYtJuMS7GZTNYimSLXYiL/0/87DB2D42F6AA2757F3821F45CED8747B0B68A929.crl
                          rsync://rpki-repo.registro.br/repo/GBRK9pHuBPJrBUUoo4U2hs1QYtJuMS7GZTNYimSLXYiL/0/87DB2D42F6AA2757F3821F45CED8747B0B68A929.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87DB2D42F6AA2757F3821F45CED8747B0B68A929.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 08:22:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:29:43:01:e8:65:bb:5b:0b:d4:96:5a:cb:54:98:a9:77:95:fd:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87DB2D42F6AA2757F3821F45CED8747B0B68A929
        Validity
            Not Before: Dec 24 08:16:18 2025 GMT
            Not After : Dec 25 08:22:18 2025 GMT
        Subject: CN=505CE16B848505146F7368D611CDACB96AC74268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dc:37:8d:66:c4:97:ce:bd:f5:ac:a6:f7:4a:
                    c6:86:5b:b7:77:e3:0a:d7:1f:62:be:48:ac:d6:b4:
                    62:00:7d:ab:84:1e:f6:88:f8:bf:df:49:33:9d:70:
                    d3:6f:45:9a:17:0d:70:81:98:d4:6e:c3:43:1a:3a:
                    df:b8:7e:3f:07:ed:05:9a:4c:19:b8:74:ae:42:62:
                    90:a4:01:fd:7f:f8:d9:f6:27:30:49:b0:dd:a0:1a:
                    c0:5c:04:b5:18:3f:3d:71:6f:8a:0c:f7:ae:d7:5b:
                    f5:40:03:2f:a9:1b:94:ec:73:cb:a1:b8:1a:6e:da:
                    10:72:0e:a8:58:d4:6a:ef:6a:67:6d:4c:34:c1:7b:
                    6b:fb:d9:e3:f7:78:9f:5a:10:63:b0:cb:1c:70:ad:
                    9a:f7:a8:3c:51:7f:24:7c:a3:9d:05:01:4f:8f:4c:
                    57:1c:08:81:9c:0f:bc:01:1e:ef:44:d0:f3:1b:2a:
                    41:48:83:95:85:b6:8f:dc:d3:2b:0e:db:12:d9:48:
                    90:34:ec:d8:ae:d7:44:e1:4c:72:c4:12:b1:ee:4c:
                    44:7a:e0:50:6a:0b:fc:3c:25:11:d5:17:2d:b1:5f:
                    8d:2f:8e:2a:70:d0:25:42:ea:12:f3:a1:ab:4e:f3:
                    5c:46:ab:3b:16:17:39:e9:05:1b:e5:9a:be:4c:00:
                    ae:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5C:E1:6B:84:85:05:14:6F:73:68:D6:11:CD:AC:B9:6A:C7:42:68
            X509v3 Authority Key Identifier:
                keyid:87:DB:2D:42:F6:AA:27:57:F3:82:1F:45:CE:D8:74:7B:0B:68:A9:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBRK9pHuBPJrBUUoo4U2hs1QYtJuMS7GZTNYimSLXYiL/0/87DB2D42F6AA2757F3821F45CED8747B0B68A929.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87DB2D42F6AA2757F3821F45CED8747B0B68A929.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBRK9pHuBPJrBUUoo4U2hs1QYtJuMS7GZTNYimSLXYiL/0/87DB2D42F6AA2757F3821F45CED8747B0B68A929.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:3f:5b:44:50:8d:f0:cf:b2:75:3d:ca:bf:e3:f9:83:46:77:
         69:43:d3:15:a9:a8:db:20:2b:71:c6:11:cc:bc:f3:3f:01:77:
         b2:29:80:70:52:a7:24:0e:c3:39:cc:2f:21:ad:b6:6e:bc:a4:
         06:4f:3a:f6:92:5d:40:e5:c0:24:9c:6a:3a:c7:53:81:fb:ee:
         44:0e:5e:ca:bc:f3:fd:c6:b6:53:87:9c:00:a4:24:fd:35:ac:
         7e:9b:1c:9c:6e:e5:67:6d:42:98:4c:db:2b:3c:74:e1:29:90:
         b1:65:d0:b8:b7:13:d1:c0:9f:4d:97:28:ac:02:cb:b8:cb:cb:
         e1:7d:45:34:37:83:10:97:b6:4f:a1:bd:7d:7a:b7:b0:90:44:
         01:19:86:d3:92:fe:92:56:4f:be:71:eb:1b:8d:9c:91:1d:89:
         ee:cb:55:b3:d3:a0:63:9b:6f:7e:80:30:95:2e:4d:bc:33:68:
         cd:54:25:58:0b:96:6f:aa:e2:74:6e:ec:da:c3:aa:13:b9:92:
         8b:29:85:22:7d:4c:a0:ae:6b:5b:d4:48:68:fe:3e:fc:ae:c9:
         9a:d2:10:ec:05:40:9c:05:c4:da:fe:e1:ef:2a:bc:b2:cd:a9:
         85:dc:7c:1e:2e:61:b6:ff:b1:20:3b:98:78:87:45:a1:88:f6:
         79:32:11:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----