This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.mft
File:                     F62FA540E59B857020C4B20954230E0C0AE8CA0E.mft (raw, json)
Hash identifier:          DxmJFSa0XQDwFvcAemjGjMfq3SDsrhnlrIpaRRjPVlU=
Subject key identifier:   EA:C3:52:BC:39:3C:33:A7:08:1E:B1:AB:85:B0:CC:69:05:AC:30:B7
Authority key identifier: F6:2F:A5:40:E5:9B:85:70:20:C4:B2:09:54:23:0E:0C:0A:E8:CA:0E
Certificate issuer:       /CN=F62FA540E59B857020C4B20954230E0C0AE8CA0E
Certificate serial:       4EA1208550237C75F10882842D68AAB1DF1689EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.mft
Manifest number:          0288
Signing time:             Sat 20 Dec 2025 23:21:51 +0000
Manifest this update:     Sat 20 Dec 2025 23:16:51 +0000
Manifest next update:     Sun 21 Dec 2025 23:40:51 +0000
Files and hashes:         1: AS53224.roa (hash: OJqA0lZpH+T3qq0CkGXdAQI1pCzajmI6h/xqXRgSt/Q=)
                          2: F62FA540E59B857020C4B20954230E0C0AE8CA0E.crl (hash: bGSpkoJO2wMbG2FvkBYuEEmv0LjG45iFzwX/KvzL+x8=)
                          3: AS65421.roa (hash: 7Vbeor9m6+dzt12Qpm3uCT7kahvrt4HBovBC5ZDDDd4=)
                          4: AS262726.roa (hash: qITL8Gn3VDSA6aoF+PRgXmMC9uKDklviECGzSSdOHrQ=)
                          5: AS264352.roa (hash: PNkz6krXGkO5/xDFMTb0JCPbyeLANaEk+g1yCS2a5oE=)
                          6: AS262493.roa (hash: ZhmzsiFfQgQjm4qOgTsB6Hacn5+bSGAoYc4dphEju5w=)
                          7: AS53054.roa (hash: tBVOE5N/dng+wg40JTvvEkVEVH+V6P707fgE4QZEmFA=)
                          8: AS28220.roa (hash: KOqAwMAkBcUkJijgOCDySGeaV/MKyiJbpj0XfSkCeJc=)
                          9: AS53059.roa (hash: s+LmQbhopeP1NjqUoYdepm9wJK8I7ZUZSHAnD+AnSHE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.crl
                          rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 23:40:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:a1:20:85:50:23:7c:75:f1:08:82:84:2d:68:aa:b1:df:16:89:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F62FA540E59B857020C4B20954230E0C0AE8CA0E
        Validity
            Not Before: Dec 20 23:16:51 2025 GMT
            Not After : Dec 21 23:40:51 2025 GMT
        Subject: CN=EAC352BC393C33A7081EB1AB85B0CC6905AC30B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:59:a6:8b:32:b3:50:2d:ed:e9:77:11:c6:85:
                    c6:aa:5c:43:56:bd:31:00:5a:dc:3d:47:ef:68:f1:
                    c7:c3:9e:7b:31:26:21:a5:5b:80:d8:5c:da:6b:14:
                    74:8d:9d:37:bb:a2:46:0e:d6:6a:ba:ad:2c:1f:f9:
                    6b:6d:af:83:72:16:bb:4f:09:e4:79:e6:88:41:cb:
                    11:9d:9e:51:63:dc:09:3f:7f:db:1d:4c:a5:19:a8:
                    43:f0:94:a7:62:30:d4:af:ac:57:f6:f4:7a:79:ad:
                    72:44:04:ef:a4:a8:f7:3c:38:b4:49:eb:27:0a:b9:
                    98:82:72:6e:95:57:8a:37:b7:91:3a:bb:0a:46:d8:
                    b3:09:48:2a:09:44:8f:7d:41:e3:d9:0b:4e:29:27:
                    a0:fa:8e:cd:a9:55:3d:cc:31:d7:9c:8c:97:85:7a:
                    31:84:a9:4a:05:e0:4b:ca:31:7f:25:98:d3:e4:ff:
                    a6:91:b9:8a:b9:67:a3:1c:f1:56:2b:e3:95:5a:bf:
                    d7:4c:f5:ac:46:f9:d8:76:82:5b:42:c3:9e:9e:df:
                    8c:cb:75:76:31:5c:e5:1c:37:9d:e0:c1:9b:14:de:
                    48:48:81:e4:26:2b:da:d4:d8:f4:41:d4:3c:9b:15:
                    aa:2b:0f:a4:54:12:1d:8e:49:7f:b1:7e:6d:fc:ce:
                    9b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C3:52:BC:39:3C:33:A7:08:1E:B1:AB:85:B0:CC:69:05:AC:30:B7
            X509v3 Authority Key Identifier:
                keyid:F6:2F:A5:40:E5:9B:85:70:20:C4:B2:09:54:23:0E:0C:0A:E8:CA:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:6c:e5:12:db:11:c1:b2:fc:b0:87:44:5c:a1:9a:15:b0:eb:
         ce:68:38:ca:9e:24:70:a5:d2:17:fa:71:eb:03:58:4b:02:64:
         61:48:cf:8f:04:0c:29:ea:c6:f1:c8:ad:30:29:97:e2:47:72:
         1e:b2:f9:ea:00:ce:f1:7b:e4:07:d8:1c:6c:43:58:e0:c1:b4:
         b2:af:03:1e:93:f3:8d:75:e9:2f:e7:52:14:8f:94:50:72:a6:
         1e:66:ba:d8:4e:2a:c5:e8:1f:05:2d:63:57:ec:d3:0d:20:55:
         ca:e4:af:0b:e4:98:47:a9:43:5f:1e:0f:f5:11:35:f5:3a:b3:
         59:f1:b5:6c:13:8d:a0:a3:d9:53:26:35:21:38:64:4a:d2:e0:
         7a:86:7f:99:81:3a:c2:b9:8f:88:32:0a:7e:e3:d1:d0:43:40:
         fc:3a:5d:fd:2b:1f:51:0c:55:7a:45:28:b3:72:49:0f:73:98:
         8b:2f:f9:93:55:83:88:5f:ae:59:b4:07:f5:61:cc:38:f8:a4:
         9d:cf:24:df:51:14:7c:c2:25:16:6f:a1:96:8d:33:46:58:b6:
         a4:2c:94:a1:20:01:c8:45:bc:b5:0b:44:fe:19:bc:c9:3a:62:
         94:1b:2a:87:76:94:cf:7c:ae:8b:cc:b6:e0:67:c8:62:be:62:
         03:91:57:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 10:20:30 2025 by rpki-client