This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GU4J52NhgRktwYN2aeknBJEkbvViNkKfZPy3QKo7f7iM/0/937191BB3754302E6B24A004833ECBB46456536C.mft
File:                     937191BB3754302E6B24A004833ECBB46456536C.mft (raw, json)
Hash identifier:          iAfzCJuCx/Ovm0FaE46nXCAkTlCbcepjtN2+UpQ5anY=
Subject key identifier:   2A:B3:26:A9:28:31:CC:BC:D2:F5:AD:B0:4F:4C:85:2E:87:A1:BB:0D
Authority key identifier: 93:71:91:BB:37:54:30:2E:6B:24:A0:04:83:3E:CB:B4:64:56:53:6C
Certificate issuer:       /CN=937191BB3754302E6B24A004833ECBB46456536C
Certificate serial:       4520B003B71FBD89051C985D4BED437E1B9F515D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/937191BB3754302E6B24A004833ECBB46456536C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GU4J52NhgRktwYN2aeknBJEkbvViNkKfZPy3QKo7f7iM/0/937191BB3754302E6B24A004833ECBB46456536C.mft
Manifest number:          1D
Signing time:             Mon 15 Dec 2025 19:33:38 +0000
Manifest this update:     Mon 15 Dec 2025 19:28:38 +0000
Manifest next update:     Tue 16 Dec 2025 23:31:38 +0000
Files and hashes:         1: 323830343a386634303a3a2f33322d3332203d3e20323733343739.roa (hash: x/N/pb7UHMaXCZqaJxWecJNJ345PqNUz6WQSmqWPCl8=)
                          2: 937191BB3754302E6B24A004833ECBB46456536C.crl (hash: fFxOpOdMSQr38B9KIJIwg+jrtF2ebRqFSKSpGjyI4/Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GU4J52NhgRktwYN2aeknBJEkbvViNkKfZPy3QKo7f7iM/0/937191BB3754302E6B24A004833ECBB46456536C.crl
                          rsync://rpki-repo.registro.br/repo/GU4J52NhgRktwYN2aeknBJEkbvViNkKfZPy3QKo7f7iM/0/937191BB3754302E6B24A004833ECBB46456536C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/937191BB3754302E6B24A004833ECBB46456536C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Dec 2025 23:31:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:20:b0:03:b7:1f:bd:89:05:1c:98:5d:4b:ed:43:7e:1b:9f:51:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937191BB3754302E6B24A004833ECBB46456536C
        Validity
            Not Before: Dec 15 19:28:38 2025 GMT
            Not After : Dec 16 23:31:38 2025 GMT
        Subject: CN=2AB326A92831CCBCD2F5ADB04F4C852E87A1BB0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cb:d0:dc:cd:fb:af:57:f7:ab:72:e2:5c:1b:
                    44:e9:05:bc:16:4a:9b:a0:08:b1:02:69:0d:7d:e4:
                    75:91:d3:8b:3e:25:07:ed:b5:54:47:d7:b1:c9:f5:
                    cb:3e:6e:6f:4a:6e:e8:fb:65:59:5b:c8:9f:31:9a:
                    34:7e:98:ca:62:cd:e9:2e:22:bc:38:ce:7c:92:0c:
                    06:42:25:d2:c9:f4:d0:9c:42:c6:ec:c2:cb:24:45:
                    e1:3e:2b:25:c7:67:bd:e3:9a:a3:07:a2:44:89:96:
                    6f:59:09:dc:42:1c:25:4d:70:e0:fa:d7:a7:fe:47:
                    8f:97:cd:37:db:c0:4d:51:ec:0c:96:21:c9:0f:74:
                    14:13:2f:e0:d9:97:98:82:a9:1d:b7:ab:7f:d5:a6:
                    c5:be:a7:c2:42:5e:46:c5:86:ab:19:4b:2d:82:ca:
                    64:a9:6c:d1:c7:cb:e0:eb:e7:e0:75:6a:50:95:e0:
                    28:92:5a:f1:13:2d:1a:b5:40:d0:08:19:36:7e:cb:
                    1f:20:1c:44:ed:ac:41:42:db:f8:fd:a0:66:23:8b:
                    a2:72:13:f0:f0:f4:6b:2a:c0:0b:92:2c:82:c3:15:
                    1f:1a:2c:1c:94:bc:be:bb:2b:8a:d1:21:f4:20:ae:
                    44:65:3d:bd:17:65:8f:22:5d:62:32:b2:92:9f:8d:
                    72:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B3:26:A9:28:31:CC:BC:D2:F5:AD:B0:4F:4C:85:2E:87:A1:BB:0D
            X509v3 Authority Key Identifier:
                keyid:93:71:91:BB:37:54:30:2E:6B:24:A0:04:83:3E:CB:B4:64:56:53:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GU4J52NhgRktwYN2aeknBJEkbvViNkKfZPy3QKo7f7iM/0/937191BB3754302E6B24A004833ECBB46456536C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/937191BB3754302E6B24A004833ECBB46456536C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GU4J52NhgRktwYN2aeknBJEkbvViNkKfZPy3QKo7f7iM/0/937191BB3754302E6B24A004833ECBB46456536C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:07:f1:b7:ca:33:97:d7:fe:4f:1c:df:d9:bb:ce:15:f8:1b:
         39:86:42:1e:be:a5:ca:50:b2:3d:6b:b3:47:9d:4d:5b:d0:98:
         64:c2:4b:73:e3:45:22:30:9d:de:1e:98:f4:cc:1d:d4:ab:3b:
         74:b7:41:4d:a3:44:43:54:2b:28:0a:1b:e7:d5:c3:91:f8:09:
         fd:fe:36:ad:ce:45:81:95:58:61:1d:26:2c:b2:85:75:7b:49:
         fa:a8:76:d9:39:d1:b8:64:8b:71:39:97:4c:71:7a:74:3b:59:
         68:77:26:35:35:09:2d:a2:7a:0b:f2:8f:e6:49:37:48:c3:de:
         32:b2:c2:fe:5a:cd:dc:94:64:6b:c0:2d:90:f1:b3:a3:bd:f6:
         8a:7e:de:67:f4:a9:89:c3:c1:62:a3:48:8f:a8:b2:bc:57:0d:
         a3:c5:3a:44:4a:87:69:18:72:8f:34:c5:9e:d7:a4:e0:d0:1e:
         5b:c0:0f:af:e6:91:fd:1f:2f:53:68:e5:28:27:0c:f8:6b:09:
         c0:06:60:85:36:d9:84:35:e2:ab:74:81:3f:c3:b5:24:30:af:
         11:53:c6:6f:3f:f0:bd:68:b7:b6:bb:69:57:fd:53:2a:ba:76:
         1d:78:46:ec:82:ba:94:8a:ce:05:ea:5c:98:db:90:b9:16:e6:
         b4:b4:f9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----