This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/gcL3UEnqEBK9dBCJy2gP1zWXgM6J7zcxivCjwSzp3cj/0/6BE66036B7C76E29D8AFC65A1B85B9D15FCC974E.mft
File:                     6BE66036B7C76E29D8AFC65A1B85B9D15FCC974E.mft (raw, json)
Hash identifier:          W2/1rJAUQYowu//iDNWDwyp+Rript2CspHCBWJ/KDuI=
Subject key identifier:   55:39:6D:42:FB:40:01:36:AB:24:F2:B9:06:AB:21:A5:94:48:D7:2A
Authority key identifier: 6B:E6:60:36:B7:C7:6E:29:D8:AF:C6:5A:1B:85:B9:D1:5F:CC:97:4E
Certificate issuer:       /CN=6BE66036B7C76E29D8AFC65A1B85B9D15FCC974E
Certificate serial:       3E25A53F62ED2304D5902D6E26F4D0E2CE53F26D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BE66036B7C76E29D8AFC65A1B85B9D15FCC974E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/gcL3UEnqEBK9dBCJy2gP1zWXgM6J7zcxivCjwSzp3cj/0/6BE66036B7C76E29D8AFC65A1B85B9D15FCC974E.mft
Manifest number:          02BF
Signing time:             Wed 24 Dec 2025 03:07:59 +0000
Manifest this update:     Wed 24 Dec 2025 03:02:59 +0000
Manifest next update:     Thu 25 Dec 2025 03:20:59 +0000
Files and hashes:         1: 34352e3138312e3235322e302f32322d3234203d3e20323639323036.roa (hash: eF/jcrjcMT1tgm2BM/aKP4XsF8KNRmoUhM2IduUz0Pw=)
                          2: 323830343a363130343a3a2f33322d313238203d3e20323639323036.roa (hash: jmZMv7ETEsysGyfj10PqMRBDIpEcmD4pnmlgYQY/ra0=)
                          3: 6BE66036B7C76E29D8AFC65A1B85B9D15FCC974E.crl (hash: dhSr7edbf9ErCR1rkUfD0g4zvfuX4Vq/UYX59m5MlLg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/gcL3UEnqEBK9dBCJy2gP1zWXgM6J7zcxivCjwSzp3cj/0/6BE66036B7C76E29D8AFC65A1B85B9D15FCC974E.crl
                          rsync://rpki-repo.registro.br/repo/gcL3UEnqEBK9dBCJy2gP1zWXgM6J7zcxivCjwSzp3cj/0/6BE66036B7C76E29D8AFC65A1B85B9D15FCC974E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BE66036B7C76E29D8AFC65A1B85B9D15FCC974E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 03:20:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:25:a5:3f:62:ed:23:04:d5:90:2d:6e:26:f4:d0:e2:ce:53:f2:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BE66036B7C76E29D8AFC65A1B85B9D15FCC974E
        Validity
            Not Before: Dec 24 03:02:59 2025 GMT
            Not After : Dec 25 03:20:59 2025 GMT
        Subject: CN=55396D42FB400136AB24F2B906AB21A59448D72A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3c:f2:44:d0:f7:5e:79:60:d3:fc:e3:88:51:
                    b3:9e:e4:b5:7c:53:2d:17:8a:09:ae:5b:e9:01:d3:
                    91:08:47:bf:7e:25:5c:17:05:37:a1:93:d0:0d:6b:
                    2e:06:ac:1d:0c:70:44:5d:41:70:b5:2a:5c:a8:af:
                    9c:f6:a2:85:be:c2:8b:9c:2e:9e:f4:25:f7:e5:12:
                    e2:f2:32:47:94:ce:7d:5f:ef:c0:c0:06:51:93:ec:
                    0c:c8:0d:86:22:61:69:36:2d:c9:4b:19:ee:33:21:
                    51:89:de:1e:24:6c:d3:7f:3f:dd:a9:23:d8:56:66:
                    34:9f:46:b1:ed:9b:1a:52:f5:80:99:19:89:31:1e:
                    bc:a0:33:9e:9a:7e:46:75:22:fa:06:88:31:26:1e:
                    01:f1:78:40:dc:11:04:7c:14:88:fb:6b:64:ce:da:
                    80:88:d2:21:6d:23:dd:e7:b5:7e:fe:eb:41:3c:98:
                    fa:4c:d8:1d:2d:63:38:b8:00:c5:be:8e:2e:5a:d5:
                    ae:9b:34:e3:d5:4a:fc:69:c1:db:d9:29:56:fb:bc:
                    28:a9:78:fe:d4:f0:d1:fa:9b:2d:99:65:a8:d2:64:
                    08:7b:d8:97:19:35:b2:e3:55:e2:98:26:0b:4b:0a:
                    d3:6a:41:27:41:24:76:0f:fb:97:b3:3a:a1:f3:20:
                    a4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:39:6D:42:FB:40:01:36:AB:24:F2:B9:06:AB:21:A5:94:48:D7:2A
            X509v3 Authority Key Identifier:
                keyid:6B:E6:60:36:B7:C7:6E:29:D8:AF:C6:5A:1B:85:B9:D1:5F:CC:97:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/gcL3UEnqEBK9dBCJy2gP1zWXgM6J7zcxivCjwSzp3cj/0/6BE66036B7C76E29D8AFC65A1B85B9D15FCC974E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BE66036B7C76E29D8AFC65A1B85B9D15FCC974E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/gcL3UEnqEBK9dBCJy2gP1zWXgM6J7zcxivCjwSzp3cj/0/6BE66036B7C76E29D8AFC65A1B85B9D15FCC974E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:b1:ab:56:04:94:a3:8a:9c:ad:9d:13:1e:9b:27:3e:8e:fc:
         78:1c:be:d1:b3:8d:50:ca:83:63:a2:1b:8a:cd:8d:a4:01:fc:
         e1:3c:41:cd:aa:21:36:04:84:b5:b3:dc:4c:ef:c2:cf:57:ca:
         07:3d:45:5a:79:8b:6d:30:3a:d7:e3:17:cf:1a:5e:b0:af:59:
         7c:42:4b:13:de:a7:ec:fa:91:77:b0:15:89:8d:73:ba:d9:63:
         28:f6:cd:c2:ef:36:d9:14:70:68:e6:38:f5:bd:f3:6d:dd:12:
         31:8c:66:3d:de:6e:5b:90:e0:7b:0a:96:50:70:6b:f8:e0:31:
         ae:c9:66:53:26:29:e0:8e:93:79:19:66:90:f5:0b:db:93:2c:
         55:42:d3:3e:c3:4e:ee:23:f2:07:d5:4c:d9:f1:62:d7:76:91:
         74:98:48:c0:c0:26:86:65:18:f1:dd:f0:04:03:47:cf:2f:ca:
         83:37:23:8d:7f:0b:ca:a2:42:13:b4:d1:93:85:1a:09:71:a5:
         8e:4d:c3:70:67:d6:41:a4:50:0a:3d:92:f7:8f:10:b1:4e:82:
         b2:13:58:ee:2c:47:95:a5:a2:a3:90:d7:b2:4d:8d:7f:aa:6e:
         46:e2:b9:15:4c:15:2a:96:2b:8a:75:25:0f:94:7c:07:a9:25:
         db:2f:43:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 16:06:21 2025 by rpki-client