This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.mft
File:                     B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.mft (raw, json)
Hash identifier:          IauRfFgCB/u+6SYQJ350NMLBhgMeMmwkimRSELykd4A=
Subject key identifier:   3F:13:2F:91:88:4A:78:30:8D:C1:A9:55:85:D3:8B:BC:53:19:5B:A4
Authority key identifier: B5:D1:33:C4:C7:CD:B2:87:64:5E:4A:A0:27:A4:9A:E2:3A:77:B8:F4
Certificate issuer:       /CN=B5D133C4C7CDB287645E4AA027A49AE23A77B8F4
Certificate serial:       7A6E03F5B71D59E653D7D2BB0D2C56D2B220555B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.mft
Manifest number:          0334
Signing time:             Wed 24 Dec 2025 11:51:04 +0000
Manifest this update:     Wed 24 Dec 2025 11:46:04 +0000
Manifest next update:     Thu 25 Dec 2025 14:28:04 +0000
Files and hashes:         1: B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.crl (hash: Rh8WNRbDhU2bPK4SBrEn6M5NVkiTzSzJbjn6iYSAsAw=)
                          2: 323830343a386661383a3a2f33322d3438203d3e203631363137.roa (hash: lNIOdL2aKxnS8NlOzIaP7/ySJO/apvdxQI14jcwE3/0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.crl
                          rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 14:28:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:6e:03:f5:b7:1d:59:e6:53:d7:d2:bb:0d:2c:56:d2:b2:20:55:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D133C4C7CDB287645E4AA027A49AE23A77B8F4
        Validity
            Not Before: Dec 24 11:46:04 2025 GMT
            Not After : Dec 25 14:28:04 2025 GMT
        Subject: CN=3F132F91884A78308DC1A95585D38BBC53195BA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d0:89:f6:ca:85:bb:fd:35:46:bb:c8:8e:a7:
                    52:b4:ac:23:92:f2:60:dd:4b:a6:68:6f:89:2a:6e:
                    40:c3:ca:90:d8:b5:e9:ca:b3:ba:c2:7d:87:94:c2:
                    dd:64:e5:89:a9:58:ce:55:4a:93:2e:38:d9:de:bf:
                    a6:95:76:0b:4d:c8:92:65:31:01:9c:10:d9:12:f6:
                    26:88:2c:9d:5c:46:ca:eb:48:3a:cf:f8:20:17:4f:
                    3c:a7:c8:2f:b6:fa:92:67:cc:16:ae:02:7b:b2:26:
                    52:13:33:97:35:72:2d:31:cd:8b:3e:0f:8f:50:21:
                    fd:59:f8:c3:0a:5a:a9:08:75:a7:79:67:88:17:94:
                    41:3f:e3:a7:92:ee:5b:c0:02:67:4b:fe:90:e8:8a:
                    78:03:59:0f:79:cd:6c:f1:96:da:9d:8b:8d:26:17:
                    38:53:93:ce:8b:d4:ad:b8:5f:e1:f3:49:af:bc:75:
                    76:12:b8:e9:64:48:b5:81:79:ed:05:9c:99:4d:2a:
                    32:e6:b5:57:82:32:99:37:5e:d3:f4:1c:45:43:29:
                    47:c4:75:45:77:f6:e6:ef:3a:6d:87:5a:e6:17:8e:
                    e8:fc:23:e4:8b:b2:00:f4:fd:03:a5:92:8f:5e:a8:
                    c7:51:09:ad:b4:6a:e9:e8:0e:5f:3c:7d:7a:73:2f:
                    5d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:13:2F:91:88:4A:78:30:8D:C1:A9:55:85:D3:8B:BC:53:19:5B:A4
            X509v3 Authority Key Identifier:
                keyid:B5:D1:33:C4:C7:CD:B2:87:64:5E:4A:A0:27:A4:9A:E2:3A:77:B8:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:49:9a:5e:81:39:41:19:bb:c8:95:f9:ad:2c:2c:0d:ab:8e:
         2f:db:71:83:04:79:87:03:d6:8b:e4:37:1c:d3:c0:28:c2:df:
         1d:bb:3e:22:91:63:46:7f:0c:a7:b0:16:d7:66:74:47:74:b2:
         3e:6b:a9:21:62:1a:25:01:22:30:89:78:72:57:1b:4f:26:cc:
         9c:c4:78:b5:eb:69:06:1e:24:63:dd:e1:d9:77:62:f8:3d:c9:
         33:f4:45:0b:5e:8c:30:11:12:2e:18:e8:6f:97:7b:24:23:60:
         d1:c9:5d:7d:26:ac:52:41:71:19:6f:b5:22:0c:d6:ab:6a:26:
         9f:a4:3f:12:63:46:e9:4d:1e:57:ea:ea:ca:98:dc:36:7f:5a:
         41:7a:df:db:11:34:52:ca:98:cc:92:d9:92:1b:ef:31:00:c3:
         3e:57:a4:bf:71:f0:a7:cc:b1:d3:7a:5e:e8:f4:ee:c8:50:83:
         e0:d1:d3:45:32:45:9f:6e:53:0a:72:3f:28:b0:95:33:4d:26:
         6d:d1:a2:e8:1e:f3:cd:ab:2e:0a:04:6a:7a:e9:e5:81:c5:98:
         a4:c5:a1:e7:f1:f2:71:00:1b:0d:a2:b7:2b:e2:22:7d:f3:82:
         7a:37:6d:3b:98:f6:6f:c1:0b:43:1e:e0:91:27:f0:2e:a7:6d:
         1a:71:c7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:30:17 2025 by rpki-client