This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GVFH1oZAfCo5WStkofuXW6XDNXzb5C9gWmbee97jJFrv/0/B171168B147A39B40BADE73A49290C2ACE3D34C9.mft
File:                     B171168B147A39B40BADE73A49290C2ACE3D34C9.mft (raw, json)
Hash identifier:          HyntQ/IZ+/n7v1agtD+1VZ87u/C0x+E7uicwfyHg72M=
Subject key identifier:   96:DB:5C:1C:48:E2:D7:B2:19:3C:23:A2:26:A4:FB:3E:90:78:79:80
Authority key identifier: B1:71:16:8B:14:7A:39:B4:0B:AD:E7:3A:49:29:0C:2A:CE:3D:34:C9
Certificate issuer:       /CN=B171168B147A39B40BADE73A49290C2ACE3D34C9
Certificate serial:       0C968C803DF1B082EB9212004F1259F942EC677D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B171168B147A39B40BADE73A49290C2ACE3D34C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVFH1oZAfCo5WStkofuXW6XDNXzb5C9gWmbee97jJFrv/0/B171168B147A39B40BADE73A49290C2ACE3D34C9.mft
Manifest number:          03
Signing time:             Tue 23 Dec 2025 20:55:12 +0000
Manifest this update:     Tue 23 Dec 2025 20:50:12 +0000
Manifest next update:     Wed 24 Dec 2025 23:50:12 +0000
Files and hashes:         1: 3137372e3138342e34382e302f32302d3234203d3e203532383936.roa (hash: B0kuXzZZjdbj6jb80sPkZS6tpb/pisRQ8jCld4qndLk=)
                          2: B171168B147A39B40BADE73A49290C2ACE3D34C9.crl (hash: 5oKqqLxpEc+cN4QnmXpqckso922vH+OJRqAuLet8Qaw=)
                          3: 323830343a6139383a3a2f33322d3334203d3e203532383936.roa (hash: VtD6hZOL35jC8V/BCtRc/pc8AjiZhL4UZT6KYVB/RGo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVFH1oZAfCo5WStkofuXW6XDNXzb5C9gWmbee97jJFrv/0/B171168B147A39B40BADE73A49290C2ACE3D34C9.crl
                          rsync://rpki-repo.registro.br/repo/GVFH1oZAfCo5WStkofuXW6XDNXzb5C9gWmbee97jJFrv/0/B171168B147A39B40BADE73A49290C2ACE3D34C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B171168B147A39B40BADE73A49290C2ACE3D34C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 23:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:96:8c:80:3d:f1:b0:82:eb:92:12:00:4f:12:59:f9:42:ec:67:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B171168B147A39B40BADE73A49290C2ACE3D34C9
        Validity
            Not Before: Dec 23 20:50:12 2025 GMT
            Not After : Dec 24 23:50:12 2025 GMT
        Subject: CN=96DB5C1C48E2D7B2193C23A226A4FB3E90787980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4b:b3:df:49:f3:44:8e:1b:5a:b0:b2:1c:1e:
                    b8:c0:3c:06:3c:48:83:24:3f:12:84:9e:82:e1:38:
                    f3:98:48:c5:ef:65:42:b7:dd:d4:f3:f9:d5:b7:6e:
                    71:cb:06:69:ed:0a:5b:b2:56:0f:e9:51:ef:65:5b:
                    0d:a1:1f:b3:c7:41:69:da:86:d2:64:f1:be:e6:f4:
                    2f:91:1d:42:cf:e5:b4:e5:f0:7e:c6:19:a3:16:e2:
                    c9:da:f3:1a:02:7e:58:f7:f7:bc:ff:a7:02:12:a2:
                    c6:e5:38:33:0f:69:57:91:18:0b:59:7e:4a:f0:f3:
                    4a:c6:68:3a:b3:fa:1a:a6:81:07:a2:c7:2f:da:c2:
                    ea:94:a5:1a:1f:cb:29:93:b6:80:17:56:49:ed:9d:
                    2a:17:6b:d0:52:87:fe:cb:87:e1:b9:9f:66:d8:96:
                    ae:48:59:e0:32:98:cd:0f:94:8f:1b:52:0d:ca:68:
                    d0:87:d5:b6:06:41:89:2c:1d:c5:28:9e:27:b1:ef:
                    55:ef:d2:c3:a5:92:df:ea:7a:36:bd:06:6a:cf:70:
                    67:54:40:8b:58:22:6b:dc:b4:3c:ae:60:f4:f5:a5:
                    02:97:de:20:00:30:c3:32:37:61:3e:a7:80:3d:73:
                    5c:07:f6:90:21:5f:e9:bb:57:12:87:f2:02:d6:3c:
                    b4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:DB:5C:1C:48:E2:D7:B2:19:3C:23:A2:26:A4:FB:3E:90:78:79:80
            X509v3 Authority Key Identifier:
                keyid:B1:71:16:8B:14:7A:39:B4:0B:AD:E7:3A:49:29:0C:2A:CE:3D:34:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVFH1oZAfCo5WStkofuXW6XDNXzb5C9gWmbee97jJFrv/0/B171168B147A39B40BADE73A49290C2ACE3D34C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B171168B147A39B40BADE73A49290C2ACE3D34C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVFH1oZAfCo5WStkofuXW6XDNXzb5C9gWmbee97jJFrv/0/B171168B147A39B40BADE73A49290C2ACE3D34C9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:d0:3c:b1:ee:6f:7a:81:c5:70:fa:f1:14:e1:90:79:9c:68:
         20:4a:ad:08:e6:96:e8:43:91:6f:55:e5:38:2a:de:21:e9:68:
         f3:db:a3:4b:75:57:b5:c6:55:7d:1a:29:c8:1e:5d:a7:c6:33:
         dc:3d:3d:f1:82:ae:aa:47:30:79:8f:9d:b6:cb:3e:c6:67:bf:
         2f:ab:45:b3:36:ee:84:40:c7:76:5c:20:0f:db:88:0d:e0:f8:
         9d:a6:7d:d7:98:ed:0e:47:33:2e:4e:6f:58:b3:ac:a8:2c:a8:
         44:6b:2b:a6:61:15:e8:de:20:a8:55:0c:71:09:e3:1e:44:6c:
         73:4e:50:ab:55:3f:70:d3:d4:40:b6:8a:26:86:84:47:f3:10:
         b3:41:00:a3:43:0c:87:ea:aa:64:03:ce:d3:20:69:09:de:c0:
         a5:d7:a8:8c:20:28:fa:00:ee:92:f0:2e:ee:5c:0b:39:74:69:
         8f:66:68:fb:e5:5f:82:c0:a8:5c:ba:97:a1:b3:2f:30:f4:48:
         86:3a:6d:42:3e:f2:d0:e7:10:8d:8c:71:1b:8f:a4:f5:a0:3f:
         ba:fe:b0:11:ff:77:80:dc:77:92:74:da:bd:bb:2b:8d:93:59:
         bb:ae:b1:32:7a:24:65:e7:78:64:47:ba:fa:b5:74:8a:2d:a7:
         cb:b4:7c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:05:28 2025 by rpki-client