This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft
File:                     BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft (raw, json)
Hash identifier:          3+SDDbf+sWCIaCUsH+53LUc326Q58BRS+VAyeg+Rr2s=
Subject key identifier:   FB:42:81:9F:73:32:2A:4F:BB:73:36:66:4B:75:BA:10:89:2A:C0:05
Authority key identifier: BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C
Certificate issuer:       /CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C
Certificate serial:       2C8A72100877F0B30B26A226A7A65360CDE64B32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft
Manifest number:          0342
Signing time:             Fri 19 Dec 2025 00:30:04 +0000
Manifest this update:     Fri 19 Dec 2025 00:25:04 +0000
Manifest next update:     Sat 20 Dec 2025 02:01:04 +0000
Files and hashes:         1: BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl (hash: qSsv3NsAleXsaAoAp3kqiyHIRIlQMEquBcZ9VweeB7Y=)
                          2: 323830343a353261633a343030303a3a2f33342d3334203d3e20323638353333.roa (hash: mqy8b9GeFOuJat8npSCtdNaMsEv+mc/f5yfeDuhXnYY=)
                          3: 34352e3136322e3232362e302f32332d3233203d3e20323638353333.roa (hash: I+Ww78nrqDFQJeSUCTyBI5VULHKBcS0W9+lh0BWLpDE=)
                          4: 323830343a353261633a3a2f33322d3332203d3e20323638353333.roa (hash: 2QGqbscxEv91g94RnqkqrOoDAGPsowqCHy2js+JYcQM=)
                          5: 323830343a353261633a3a2f33342d3334203d3e20323638353333.roa (hash: q4zgkyKtFDn2O0A5TEaDzEsRkWK7zaVWPz1XfL9ig6Q=)
                          6: 34352e3136322e3232342e302f32332d3233203d3e20323638353333.roa (hash: cOFomrq0u7uWaAdwHhxcYiXZVFUXmPTmjP3yNM2i3R4=)
                          7: 323830343a353261633a383030303a3a2f33342d3334203d3e20323638353333.roa (hash: G9Gop5zvToflO/2gpfor+zrNq42K6WPewb3L6fpm6hc=)
                          8: 323830343a353261633a633030303a3a2f33342d3334203d3e20323638353333.roa (hash: TDmWOgpLRKpDDiL9IkKzagHfIzq66JLQS5+JyHVQCVc=)
                          9: 34352e3136322e3232342e302f32322d3232203d3e20323638353333.roa (hash: JpCO4M6N05dDszkPP+IB3KMtveMRN/h0JLU2Pd3nWww=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl
                          rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 02:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:8a:72:10:08:77:f0:b3:0b:26:a2:26:a7:a6:53:60:cd:e6:4b:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C
        Validity
            Not Before: Dec 19 00:25:04 2025 GMT
            Not After : Dec 20 02:01:04 2025 GMT
        Subject: CN=FB42819F73322A4FBB7336664B75BA10892AC005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:94:92:d5:90:be:e3:76:4e:7e:40:0a:b8:80:
                    60:c2:4b:ec:5f:8c:c9:59:5c:26:77:d4:f1:58:3c:
                    1e:55:1b:b4:91:18:08:cc:99:26:e3:5d:3d:10:ef:
                    59:de:90:8d:f1:7d:3d:d7:a9:67:d4:bd:d8:bf:04:
                    08:82:e4:cf:21:b0:0c:83:07:a6:e8:e9:72:bc:a9:
                    1c:1c:b0:98:fa:1a:07:8a:ce:ed:cf:e6:57:8f:b6:
                    bb:15:a8:fc:24:fc:21:ec:42:66:e5:8a:24:25:40:
                    ac:86:36:a1:23:25:34:af:21:37:2c:98:90:bc:a6:
                    84:80:0d:34:61:5b:ec:29:cc:f7:96:bf:47:88:bc:
                    cf:17:a8:6e:bd:80:5e:b5:1b:0e:f8:aa:a1:7d:74:
                    2b:8f:ce:1f:96:50:72:f2:67:81:b7:be:09:d0:33:
                    c5:2a:04:fa:93:41:36:6f:e5:d1:9f:a7:9f:87:a1:
                    57:02:01:af:bc:cc:33:13:b7:bd:1a:b3:6f:79:6b:
                    05:2b:69:5f:5a:a6:0e:a8:93:db:08:61:31:58:9f:
                    17:cf:3f:59:6c:df:ad:a2:b6:81:87:a0:4a:8d:db:
                    67:33:9a:79:60:d4:e4:5e:62:00:54:c9:18:2c:d6:
                    88:6b:aa:23:6e:11:80:30:40:62:e4:ce:48:c6:34:
                    31:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:42:81:9F:73:32:2A:4F:BB:73:36:66:4B:75:BA:10:89:2A:C0:05
            X509v3 Authority Key Identifier:
                keyid:BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:1b:8a:32:44:0a:c6:0c:75:ab:ca:41:09:6a:d5:5d:26:fb:
         eb:38:24:d3:3b:27:f6:27:2f:aa:2f:b9:64:8c:75:46:1e:d5:
         a7:dd:b4:93:59:e2:58:39:4c:85:1e:20:a4:9f:b3:e4:95:3d:
         3c:e5:37:b3:73:0d:38:88:64:16:2a:fd:47:b3:e6:f6:d4:e4:
         72:f1:f6:9a:50:e4:1a:58:11:1b:d9:46:be:c4:50:b2:e3:3a:
         40:a4:7a:76:a7:92:c5:c2:a5:f2:d0:70:57:5f:5d:e4:80:d3:
         3a:f2:62:ec:51:cf:c6:e4:c9:38:ed:26:2b:fb:f6:ab:4a:48:
         1a:0c:5c:39:29:a4:7f:2e:12:9f:33:21:8e:25:eb:a2:3e:6c:
         50:92:8f:48:5e:83:a4:98:e8:e5:56:77:d9:a4:a2:e2:e9:ac:
         e9:18:37:b3:30:25:5e:d0:cb:1a:a1:23:cc:36:d5:2d:83:71:
         3a:42:e1:3f:c6:de:28:0c:e2:6e:9b:bf:e6:ba:76:80:4a:01:
         ad:89:3d:f8:5e:4b:3c:01:36:31:da:6b:c6:fa:33:f4:ba:bb:
         04:1c:f5:d9:34:d6:8f:3e:09:f4:2b:7a:1a:6f:29:7e:97:99:
         88:e3:7d:92:74:cf:a0:b0:7d:ff:4d:0b:45:45:b8:b1:be:84:
         dd:72:2a:9a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULIpyEAh38LMLJqImp6ZTYM3mSzIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkIxNThGMUY5ODNEOEYyMUNBRUI5M0M5MjhBQzZBQjUy
QjUxQ0IxQzAeFw0yNTEyMTkwMDI1MDRaFw0yNTEyMjAwMjAxMDRaMDMxMTAvBgNV
BAMTKEZCNDI4MTlGNzMzMjJBNEZCQjczMzY2NjRCNzVCQTEwODkyQUMwMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBlJLVkL7jdk5+QAq4gGDCS+xf
jMlZXCZ31PFYPB5VG7SRGAjMmSbjXT0Q71nekI3xfT3XqWfUvdi/BAiC5M8hsAyD
B6bo6XK8qRwcsJj6GgeKzu3P5lePtrsVqPwk/CHsQmbliiQlQKyGNqEjJTSvITcs
mJC8poSADTRhW+wpzPeWv0eIvM8XqG69gF61Gw74qqF9dCuPzh+WUHLyZ4G3vgnQ
M8UqBPqTQTZv5dGfp5+HoVcCAa+8zDMTt70as295awUraV9apg6ok9sIYTFYnxfP
P1ls362itoGHoEqN22czmnlg1OReYgBUyRgs1ohrqiNuEYAwQGLkzkjGNDFBAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU+0KBn3MyKk+7czZmS3W6EIkqwAUwHwYDVR0j
BBgwFoAUuxWPH5g9jyHK65PJKKxqtStRyxwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2RlaGU2OEsydWVSNGhXUTVVNWJwQ2daY1gyN3BSSlJKWVBGRG5BMmQ0
S1IvMS9CQjE1OEYxRjk4M0Q4RjIxQ0FFQjkzQzkyOEFDNkFCNTJCNTFDQjFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCMTU4RjFGOTgzRDhGMjFD
QUVCOTNDOTI4QUM2QUI1MkI1MUNCMUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R2RlaGU2OEsydWVSNGhXUTVVNWJwQ2daY1gyN3BSSlJKWVBGRG5BMmQ0S1IvMS9C
QjE1OEYxRjk4M0Q4RjIxQ0FFQjkzQzkyOEFDNkFCNTJCNTFDQjFDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAphuKMkQKxgx1q8pBCWrVXSb76zgk0zsn9icvqi+5ZIx1Rh7Vp920k1niWDlM
hR4gpJ+z5JU9POU3s3MNOIhkFir9R7Pm9tTkcvH2mlDkGlgRG9lGvsRQsuM6QKR6
dqeSxcKl8tBwV19d5IDTOvJi7FHPxuTJOO0mK/v2q0pIGgxcOSmkfy4SnzMhjiXr
oj5sUJKPSF6DpJjo5VZ32aSi4ums6Rg3szAlXtDLGqEjzDbVLYNxOkLhP8beKAzi
bpu/5rp2gEoBrYk9+F5LPAE2Mdprxvoz9Lq7BBz12TTWjz4J9Ct6Gm8pfpeZiON9
knTPoLB9/00LRUW4sb6E3XIqmg==
-----END CERTIFICATE-----
Generated at Fri Dec 19 09:17:26 2025 by rpki-client