This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.mft
File:                     B7124651D19D132543E991B7A74DD4A680768A09.mft (raw, json)
Hash identifier:          bQMNlnhoPmLvwbzXmZwNhW/T+Hgoo5Rqiq4vo3uC+EE=
Subject key identifier:   5E:09:5F:DC:57:62:3E:AF:C7:A2:95:5F:EA:85:34:5F:E9:30:6C:93
Authority key identifier: B7:12:46:51:D1:9D:13:25:43:E9:91:B7:A7:4D:D4:A6:80:76:8A:09
Certificate issuer:       /CN=B7124651D19D132543E991B7A74DD4A680768A09
Certificate serial:       5D040FE743C61B7456A86B9C222479EC5C599D8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.mft
Manifest number:          0340
Signing time:             Fri 19 Dec 2025 10:40:00 +0000
Manifest this update:     Fri 19 Dec 2025 10:35:00 +0000
Manifest next update:     Sat 20 Dec 2025 12:31:00 +0000
Files and hashes:         1: 323830343a353965343a383030303a3a2f33332d3333203d3e20323638373332.roa (hash: GEkZ7UHNF9Q7WIxoupo9kTk0l6V1c8o7JMVWhEIS7+k=)
                          2: 323830343a353965343a343030303a3a2f33342d3334203d3e20323638373332.roa (hash: mM7Oawm0BCFeG6zLuQwN2ErtB7SYaRG5ch7NTQRd4uY=)
                          3: 323830343a353965343a3a2f33342d3334203d3e20323638373332.roa (hash: W9cs89X4WnCKWsu2cEcYdQrckQXLicezCEQVc++X/4w=)
                          4: 34352e3137312e3231392e302f32342d3234203d3e20323638373332.roa (hash: Fdq1w0781rYcVbIe7UQ6njhXnMUZkZOPjbWjqlltOPs=)
                          5: 34352e3137312e3231382e302f32342d3234203d3e20323638373332.roa (hash: pIrU1Fpj83xfKRVEmGTQCpCvT8ibqaHNxfLQyFdrB8s=)
                          6: 323830343a353965343a633030303a3a2f33342d3334203d3e20323638373332.roa (hash: zvhDt81FQYTap+RoMPihpElMwvWRSVlSrd5w/aEKudE=)
                          7: 34352e3137312e3231362e302f32332d3233203d3e20323638373332.roa (hash: t0cQ4pAASDWWvCaj06SDRNuxYzkv19LszMrFKHtOvR0=)
                          8: 34352e3137312e3231372e302f32342d3234203d3e20323638373332.roa (hash: JIloiYSSeaSAbUJyriSj1ifXZ6habt1Uf5Uti2XwOyk=)
                          9: 323830343a353965343a3a2f33322d3332203d3e20323638373332.roa (hash: SWyArsJsULqJeNaLc1kHUhsb2KGrqUP1bOVo5FLx/aM=)
                          10: B7124651D19D132543E991B7A74DD4A680768A09.crl (hash: Vj32AIbD3aZsGTz7uDXyp1085vxh9JaNHn1zvUZBiOU=)
                          11: 34352e3137312e3231362e302f32342d3234203d3e20323638373332.roa (hash: Ri5ArNaZM+1apTrR37HNmUfqx0ODzBlK9CE0iLZSug0=)
                          12: 323830343a353965343a3a2f33332d3333203d3e20323638373332.roa (hash: PoKm8qHQ/4YWPPIbtc2SdYw96JqZ7UCMDPWsng2N1cQ=)
                          13: 34352e3137312e3231382e302f32332d3233203d3e20323638373332.roa (hash: k5HFerNVrREghCkE8Wh2bZRfSC3dF+HTHFTn3W3NRaQ=)
                          14: 323830343a353965343a383030303a3a2f33342d3334203d3e20323638373332.roa (hash: 1pAz3i5ZYzcOi0486y/VF/aCYhXJ9TAw4aIlkgEBsNE=)
                          15: 34352e3137312e3231362e302f32322d3232203d3e20323638373332.roa (hash: cLoq/GcAPdzvJ1Sp20GWEmsWxD120b7gGT3NsEnTiWg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.crl
                          rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 12:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:04:0f:e7:43:c6:1b:74:56:a8:6b:9c:22:24:79:ec:5c:59:9d:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7124651D19D132543E991B7A74DD4A680768A09
        Validity
            Not Before: Dec 19 10:35:00 2025 GMT
            Not After : Dec 20 12:31:00 2025 GMT
        Subject: CN=5E095FDC57623EAFC7A2955FEA85345FE9306C93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1e:72:d9:1e:62:c7:0b:20:42:42:18:9d:2b:
                    5f:d3:f2:a9:88:93:25:e9:59:e2:62:2c:6f:bc:f9:
                    0c:0c:f8:43:bf:e5:b0:17:c9:cc:8e:af:94:bb:30:
                    17:d6:19:dd:e6:72:07:13:96:84:14:df:92:b6:d7:
                    cd:ef:9e:c6:bb:52:b8:24:13:ee:bc:a0:7b:6e:5b:
                    c0:d5:ce:c7:48:29:3b:fc:4d:7d:9b:ad:ae:19:f2:
                    2e:17:0e:49:9b:ff:1a:8c:a0:09:e8:f0:4a:6b:70:
                    88:75:b6:01:89:35:5b:4d:ce:eb:3a:c7:a5:24:94:
                    d5:b7:da:5f:5f:ed:99:e8:9f:94:ec:d7:25:83:c2:
                    5b:13:ac:25:cb:9e:7a:82:67:13:9c:75:5e:c3:93:
                    0a:79:12:68:26:68:55:75:25:54:76:39:75:5f:2f:
                    dd:e7:f7:9d:42:fb:a5:59:12:eb:77:fc:e1:5f:10:
                    16:66:44:d4:1e:f0:32:a4:4e:5a:12:46:17:d0:31:
                    2e:cd:b2:55:ec:5c:7e:e2:d3:85:f0:19:0a:8a:9f:
                    2d:f0:6a:8e:89:38:ca:ca:b7:23:29:dc:39:5a:f4:
                    10:41:c7:e9:91:eb:a7:8c:a7:54:3b:62:40:f7:35:
                    58:da:cb:bd:ec:b4:03:14:ce:96:70:15:85:47:3a:
                    56:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:09:5F:DC:57:62:3E:AF:C7:A2:95:5F:EA:85:34:5F:E9:30:6C:93
            X509v3 Authority Key Identifier:
                keyid:B7:12:46:51:D1:9D:13:25:43:E9:91:B7:A7:4D:D4:A6:80:76:8A:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:de:fc:be:eb:d7:d1:7e:3d:55:d1:45:a3:3c:40:e6:d9:4d:
         5f:f3:8e:27:8a:2c:6a:03:84:6f:f8:5a:9c:8a:44:e7:16:90:
         af:a7:64:31:19:97:6f:a5:07:ec:31:08:f0:e6:2f:0a:fc:cb:
         5b:c9:7f:56:36:d3:d1:36:db:70:22:c2:a0:85:b2:a5:2d:57:
         31:76:eb:72:49:94:50:cc:cd:9f:66:0a:46:56:14:78:d2:39:
         25:57:5c:bb:37:1d:36:4a:7d:e9:8b:41:6b:96:7e:9a:a4:ad:
         e4:b6:c2:e6:3e:2a:ee:71:a5:bf:6b:d4:ae:0b:d8:ab:1f:77:
         41:bb:2f:e7:f3:23:dc:fe:28:36:1a:56:a0:fe:2a:51:3e:3f:
         a2:48:13:52:b7:d1:14:82:38:b7:b6:b8:f4:82:71:a3:06:5d:
         dc:5e:58:97:bd:a8:9d:5b:84:e3:23:03:8b:3b:3c:6d:9c:20:
         d3:45:43:bc:d5:8e:e8:d8:e7:03:b3:b0:3b:b6:8f:7f:bf:fc:
         9b:df:99:52:bc:7f:bc:7e:3d:12:85:37:d7:b1:06:52:34:c4:
         f2:0c:a6:d1:80:50:f4:c0:d1:1e:2d:e0:09:3b:02:19:65:e5:
         82:de:a5:6a:bc:e6:71:34:3b:7e:07:b8:81:18:d5:07:4b:1a:
         87:32:ac:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 13:51:52 2025 by rpki-client