This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GRr1jC7UaawCktMXXuGQTAD8rvRakKhtNmjEHVvr2Dcg/0/431AB4194AA9ED551263DE427F4F121C7979E894.mft
File:                     431AB4194AA9ED551263DE427F4F121C7979E894.mft (raw, json)
Hash identifier:          hAD6Oz9BQRf5aXEoswyGJJkrNE2dFn/FrpbXYlwQ8dU=
Subject key identifier:   09:1A:99:59:2D:C3:55:A4:39:41:D8:22:DB:C2:A7:0F:BF:4E:BB:62
Authority key identifier: 43:1A:B4:19:4A:A9:ED:55:12:63:DE:42:7F:4F:12:1C:79:79:E8:94
Certificate issuer:       /CN=431AB4194AA9ED551263DE427F4F121C7979E894
Certificate serial:       4DE1B0B7D4590B7D61387007CE271D0D27B57B62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/431AB4194AA9ED551263DE427F4F121C7979E894.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GRr1jC7UaawCktMXXuGQTAD8rvRakKhtNmjEHVvr2Dcg/0/431AB4194AA9ED551263DE427F4F121C7979E894.mft
Manifest number:          B3
Signing time:             Wed 24 Dec 2025 09:12:07 +0000
Manifest this update:     Wed 24 Dec 2025 09:07:07 +0000
Manifest next update:     Thu 25 Dec 2025 12:48:07 +0000
Files and hashes:         1: 323830343a393235383a3a2f33322d313238203d3e20323734373036.roa (hash: 5qfys5S0TBbigQIsdFA//QFeQpuuAuKFccvmGfy28xo=)
                          2: 431AB4194AA9ED551263DE427F4F121C7979E894.crl (hash: GSSWzW3ZdYQ9U+dkT12rR85GVZG3WzoYjETCl5aB69Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GRr1jC7UaawCktMXXuGQTAD8rvRakKhtNmjEHVvr2Dcg/0/431AB4194AA9ED551263DE427F4F121C7979E894.crl
                          rsync://rpki-repo.registro.br/repo/GRr1jC7UaawCktMXXuGQTAD8rvRakKhtNmjEHVvr2Dcg/0/431AB4194AA9ED551263DE427F4F121C7979E894.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/431AB4194AA9ED551263DE427F4F121C7979E894.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 12:48:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e1:b0:b7:d4:59:0b:7d:61:38:70:07:ce:27:1d:0d:27:b5:7b:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=431AB4194AA9ED551263DE427F4F121C7979E894
        Validity
            Not Before: Dec 24 09:07:07 2025 GMT
            Not After : Dec 25 12:48:07 2025 GMT
        Subject: CN=091A99592DC355A43941D822DBC2A70FBF4EBB62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b7:90:ca:36:51:1f:f0:ca:f9:72:bd:2f:13:
                    32:c4:4e:14:5d:f6:f1:f0:52:ea:a6:8a:9e:bb:35:
                    5d:21:a1:3f:59:8f:4e:a2:87:d6:d1:a5:da:db:06:
                    da:97:18:64:63:eb:4e:d2:15:fa:32:99:f0:ad:47:
                    79:c4:8c:86:52:6f:80:c0:40:3e:af:8b:e3:e4:73:
                    2e:f9:f1:2a:c2:9d:48:11:ae:37:a6:e3:0a:ba:1e:
                    a7:bb:ad:0d:fa:b0:fa:20:d4:02:c2:8b:1f:8f:7e:
                    b1:4a:01:82:42:32:25:ca:71:b0:46:c8:89:1d:50:
                    c8:4b:32:73:e2:d6:8c:cf:93:92:e2:58:8c:93:50:
                    4b:69:e2:5a:cf:bb:bd:65:f7:da:27:6c:04:9d:c8:
                    0f:f9:9a:29:3c:cc:95:fe:a3:06:77:ba:23:0e:56:
                    f7:47:fd:e5:6d:ba:5d:68:b0:b7:8f:bd:99:a0:36:
                    96:1b:e1:31:e9:1f:49:c1:b0:cf:ad:a8:1a:d9:63:
                    c0:26:48:d7:ce:43:bc:b5:bf:c2:9b:67:79:5a:e3:
                    c4:f3:69:b4:fc:7b:30:4c:fd:43:55:38:5b:02:85:
                    be:90:d7:de:71:aa:76:64:1a:04:94:ee:31:bf:00:
                    c1:87:44:02:e2:ec:22:e4:b5:7d:2e:87:26:9d:d0:
                    5b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1A:99:59:2D:C3:55:A4:39:41:D8:22:DB:C2:A7:0F:BF:4E:BB:62
            X509v3 Authority Key Identifier:
                keyid:43:1A:B4:19:4A:A9:ED:55:12:63:DE:42:7F:4F:12:1C:79:79:E8:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GRr1jC7UaawCktMXXuGQTAD8rvRakKhtNmjEHVvr2Dcg/0/431AB4194AA9ED551263DE427F4F121C7979E894.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/431AB4194AA9ED551263DE427F4F121C7979E894.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GRr1jC7UaawCktMXXuGQTAD8rvRakKhtNmjEHVvr2Dcg/0/431AB4194AA9ED551263DE427F4F121C7979E894.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:6e:f6:86:5e:be:5a:56:49:37:20:8a:a3:e1:f6:fe:e2:01:
         ad:90:12:78:ad:3d:b0:74:0f:08:e0:1d:2e:98:d1:51:1b:6b:
         1e:2f:2d:ab:4b:75:6e:e9:21:8a:13:0f:38:48:45:fe:ce:ed:
         69:bd:e4:12:58:e8:45:b8:24:f5:86:a0:12:5d:06:28:da:a2:
         4a:bd:a2:1b:7f:46:da:58:b2:e6:ec:8a:c5:38:7d:17:b6:94:
         bf:6b:75:89:02:18:45:c1:aa:33:43:7e:bf:54:88:68:c0:67:
         2a:7e:c9:da:0e:12:b5:37:b3:9f:1f:9c:93:0c:fa:64:e2:0a:
         61:66:6e:de:c3:eb:b5:ff:64:6f:2b:5d:fa:9a:85:9a:ec:06:
         08:d7:14:bf:1b:3c:54:c4:6e:99:43:63:1e:22:92:4c:1d:28:
         ea:a8:4d:94:37:7f:98:66:ec:f5:ad:0a:c4:e0:56:a3:5c:49:
         7e:bc:f9:2d:e6:5b:78:72:78:f4:7c:70:e0:1d:5b:f1:2f:aa:
         c5:9e:b5:27:0f:68:f4:22:39:2c:dc:7f:93:53:ba:54:d0:55:
         5f:d4:44:39:bd:fb:6f:17:43:dd:e8:6b:4c:a8:c4:79:17:5e:
         38:2b:15:90:af:85:6b:85:a4:47:5c:33:b8:e1:a1:2f:4c:17:
         e8:08:59:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----