This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.mft
File:                     01B0B0B59E86551343BE2FC7261AB5815A2454A4.mft (raw, json)
Hash identifier:          kqtlLjm3UocMk+nHWy66/jaJTeYfiDeHKPwsWf96E4A=
Subject key identifier:   8A:16:4B:93:9F:5B:74:B1:B6:16:88:FE:BF:2F:C7:ED:CC:00:FB:A9
Authority key identifier: 01:B0:B0:B5:9E:86:55:13:43:BE:2F:C7:26:1A:B5:81:5A:24:54:A4
Certificate issuer:       /CN=01B0B0B59E86551343BE2FC7261AB5815A2454A4
Certificate serial:       2D7169F78E21080F6D203D8D806B93BE09DD2456
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.mft
Manifest number:          3B
Signing time:             Thu 18 Dec 2025 15:51:18 +0000
Manifest this update:     Thu 18 Dec 2025 15:46:18 +0000
Manifest next update:     Fri 19 Dec 2025 18:36:18 +0000
Files and hashes:         1: 323830343a346261633a3a2f33322d3438203d3e20323637333233.roa (hash: bK7PGcHgX1HaW/F1Gj0KQEL/uAEuTpfC9DPIZsI1xVE=)
                          2: 34352e3233332e3132302e302f32322d3234203d3e20323637333233.roa (hash: ikLxmZRq9GA7l9gUwQ8KsYLPiZHYK560PCzWPT+AsQc=)
                          3: 01B0B0B59E86551343BE2FC7261AB5815A2454A4.crl (hash: mW12lnp7NURDApHmfvgN8YCItI4/IhWXoshMOm3Hei4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.crl
                          rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 18:36:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:71:69:f7:8e:21:08:0f:6d:20:3d:8d:80:6b:93:be:09:dd:24:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01B0B0B59E86551343BE2FC7261AB5815A2454A4
        Validity
            Not Before: Dec 18 15:46:18 2025 GMT
            Not After : Dec 19 18:36:18 2025 GMT
        Subject: CN=8A164B939F5B74B1B61688FEBF2FC7EDCC00FBA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5e:86:9c:04:17:4a:2a:e8:ac:1f:67:f3:78:
                    4a:ad:be:7c:2c:0c:49:ae:c6:be:e2:9f:59:eb:a0:
                    16:c5:34:1a:9e:9a:85:19:66:a9:c8:4e:c5:6f:02:
                    e1:45:79:57:e0:67:0f:f6:62:b1:2d:7a:1f:7b:f3:
                    a5:20:db:b9:cc:9c:72:a2:fb:5a:c3:f1:34:f7:57:
                    e7:f6:42:bc:3e:6e:57:5a:d3:36:ee:9f:18:47:fd:
                    05:d9:b0:72:b4:27:2c:11:4c:db:e4:20:b7:e2:8a:
                    42:86:a8:b4:bd:7e:cd:a9:f1:57:6c:df:74:f6:2a:
                    0e:57:45:e5:c7:9c:e1:94:8a:7a:2c:4d:26:11:84:
                    cc:ac:f1:e7:a6:73:ad:ad:f6:e3:e1:9c:bf:dc:77:
                    d9:c9:ad:9c:28:52:a9:47:76:a4:8f:90:e5:70:ce:
                    71:00:1a:91:76:31:0d:30:83:ea:6f:f4:8d:bb:ac:
                    98:e5:b4:c6:7d:5a:a0:b4:15:19:ff:95:cf:bf:a2:
                    8e:c1:07:2a:00:9f:6e:e3:c4:00:ad:8a:fd:64:ac:
                    b3:10:49:ea:1a:7a:2e:63:cf:2b:21:a3:bf:25:00:
                    c1:28:de:d5:56:77:3f:cc:ff:3b:6b:39:4b:3d:10:
                    f7:6d:cb:e8:0f:a6:36:0c:bb:fd:5a:5b:a0:56:bd:
                    b4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:16:4B:93:9F:5B:74:B1:B6:16:88:FE:BF:2F:C7:ED:CC:00:FB:A9
            X509v3 Authority Key Identifier:
                keyid:01:B0:B0:B5:9E:86:55:13:43:BE:2F:C7:26:1A:B5:81:5A:24:54:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:31:0b:c8:2e:75:e9:6f:31:3d:b6:cc:ed:ee:f4:d0:ff:1e:
         ee:98:9a:c2:de:53:ed:57:89:d4:6f:75:b0:b3:e1:6e:b4:a0:
         30:a4:b7:e0:d2:f9:b8:ef:da:9f:b1:58:91:43:09:0b:d9:59:
         c8:e4:13:70:a0:91:f1:ce:b4:59:2a:ba:35:f9:50:2d:96:8f:
         47:e3:b5:03:a5:d3:c4:73:7f:90:02:b9:3d:e3:e5:7d:ef:fc:
         9f:aa:10:0d:ec:df:4b:2e:ea:57:c5:1c:06:11:d9:3c:f5:5d:
         c0:62:23:e1:b6:e7:8a:49:24:29:34:b3:cd:91:32:fd:0d:34:
         d6:49:22:42:eb:42:c3:ca:6a:ad:32:94:aa:fb:1a:e0:64:a9:
         8a:9e:11:86:e1:6d:3e:cf:d7:df:f5:2c:af:a0:cc:b1:18:c0:
         60:48:3a:b7:42:32:95:8a:59:ae:3a:55:0e:ab:c9:34:86:2e:
         55:f0:59:db:70:1e:12:3e:28:f6:08:b1:13:1a:b4:50:f8:18:
         2b:67:e2:93:5d:3e:f1:03:4e:15:02:7c:f6:15:ce:81:de:e4:
         05:6f:b8:13:10:ec:63:95:4d:a7:a0:a5:8f:a7:6b:f2:d7:82:
         6a:e3:3e:f4:69:36:73:df:46:6f:21:db:a3:a9:29:71:67:6b:
         58:8f:45:f8
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIULXFp944hCA9tID2NgGuTvgndJFYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFCMEIwQjU5RTg2NTUxMzQzQkUyRkM3MjYxQUI1ODE1
QTI0NTRBNDAeFw0yNTEyMTgxNTQ2MThaFw0yNTEyMTkxODM2MThaMDMxMTAvBgNV
BAMTKDhBMTY0QjkzOUY1Qjc0QjFCNjE2ODhGRUJGMkZDN0VEQ0MwMEZCQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwXoacBBdKKuisH2fzeEqtvnws
DEmuxr7in1nroBbFNBqemoUZZqnITsVvAuFFeVfgZw/2YrEteh9786Ug27nMnHKi
+1rD8TT3V+f2Qrw+blda0zbunxhH/QXZsHK0JywRTNvkILfiikKGqLS9fs2p8Vds
33T2Kg5XReXHnOGUinosTSYRhMys8eemc62t9uPhnL/cd9nJrZwoUqlHdqSPkOVw
znEAGpF2MQ0wg+pv9I27rJjltMZ9WqC0FRn/lc+/oo7BByoAn27jxACtiv1krLMQ
Seoaei5jzysho78lAMEo3tVWdz/M/ztrOUs9EPdty+gPpjYMu/1aW6BWvbS5AgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUihZLk59bdLG2Foj+vy/H7cwA+6kwHwYDVR0j
BBgwFoAUAbCwtZ6GVRNDvi/HJhq1gVokVKQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9ZYnVNNmk1R1FOTGk3QmJFRXFQUTFVNFRLRmJKWEt6Q1VTMnNiWGd4ZjdX
LzEvMDFCMEIwQjU5RTg2NTUxMzQzQkUyRkM3MjYxQUI1ODE1QTI0NTRBNC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8wMUIwQjBCNTlFODY1NTEzNDNC
RTJGQzcyNjFBQjU4MTVBMjQ1NEE0LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1li
dU02aTVHUU5MaTdCYkVFcVBRMVU0VEtGYkpYS3pDVVMyc2JYZ3hmN1cvMS8wMUIw
QjBCNTlFODY1NTEzNDNCRTJGQzcyNjFBQjU4MTVBMjQ1NEE0Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
ADELyC516W8xPbbM7e700P8e7piawt5T7VeJ1G91sLPhbrSgMKS34NL5uO/an7FY
kUMJC9lZyOQTcKCR8c60WSq6NflQLZaPR+O1A6XTxHN/kAK5PePlfe/8n6oQDezf
Sy7qV8UcBhHZPPVdwGIj4bbnikkkKTSzzZEy/Q001kkiQutCw8pqrTKUqvsa4GSp
ip4RhuFtPs/X3/Usr6DMsRjAYEg6t0IylYpZrjpVDqvJNIYuVfBZ23AeEj4o9gix
Exq0UPgYK2fik10+8QNOFQJ89hXOgd7kBW+4ExDsY5VNp6Clj6dr8teCauM+9Gk2
c99GbyHbo6kpcWdrWI9F+A==
-----END CERTIFICATE-----
Generated at Fri Dec 19 08:05:03 2025 by rpki-client