This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/899188992E550CB7173DD65733F04F79CCF47641.mft
File:                     899188992E550CB7173DD65733F04F79CCF47641.mft (raw, json)
Hash identifier:          4+Ph8i/NrgiBB8LLWj1c+lDhLQuy1tuiRwoiPe3Hpxw=
Subject key identifier:   A0:28:B7:03:F3:5E:C3:E9:1E:73:8B:C3:BD:0A:BA:15:29:AA:08:A6
Authority key identifier: 89:91:88:99:2E:55:0C:B7:17:3D:D6:57:33:F0:4F:79:CC:F4:76:41
Certificate issuer:       /CN=899188992E550CB7173DD65733F04F79CCF47641
Certificate serial:       136F69D5CBF0C2AF925FABF579C427841ABB5FA7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/899188992E550CB7173DD65733F04F79CCF47641.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/899188992E550CB7173DD65733F04F79CCF47641.mft
Manifest number:          5F
Signing time:             Tue 23 Dec 2025 07:12:25 +0000
Manifest this update:     Tue 23 Dec 2025 07:07:25 +0000
Manifest next update:     Wed 24 Dec 2025 10:38:25 +0000
Files and hashes:         1: 323830343a363830633a3a2f33332d3333203d3e20323639363637.roa (hash: Ispl40Jf6ahYR0kWqggfL9ezMi/bsP/4WZs3YsyiTmg=)
                          2: 323830343a363830633a3a2f33322d3332203d3e20323639363637.roa (hash: Mt495mOB/W8EQUoPfWN24rBZVkC9Fo50TmuLtNcaFHg=)
                          3: 34352e3139312e36302e302f32322d3234203d3e20323639363637.roa (hash: P04VezsFeKBIgv3uWvB0meOX9OEy/hRAmOAJGShnbxI=)
                          4: 323830343a363830633a383030303a3a2f33332d3333203d3e20323639363637.roa (hash: ayjMIjkTBUXq+eb0j87CZNi5kJx7JC8kYWUS3R6Fyqc=)
                          5: 899188992E550CB7173DD65733F04F79CCF47641.crl (hash: yOSGrwyfwRMYIQkvskcb2H2/uvGr1OKtC9rh9Gl00wA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/899188992E550CB7173DD65733F04F79CCF47641.crl
                          rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/899188992E550CB7173DD65733F04F79CCF47641.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/899188992E550CB7173DD65733F04F79CCF47641.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 10:38:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:6f:69:d5:cb:f0:c2:af:92:5f:ab:f5:79:c4:27:84:1a:bb:5f:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=899188992E550CB7173DD65733F04F79CCF47641
        Validity
            Not Before: Dec 23 07:07:25 2025 GMT
            Not After : Dec 24 10:38:25 2025 GMT
        Subject: CN=A028B703F35EC3E91E738BC3BD0ABA1529AA08A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f3:b8:ac:70:41:cb:98:9d:ac:59:25:6c:83:
                    ee:0a:57:87:85:a5:98:25:87:2b:8b:51:43:ce:f6:
                    84:20:eb:c3:9c:7e:cf:12:92:6e:d8:1c:83:0f:13:
                    9e:79:17:23:bc:00:f3:e2:60:ed:1d:99:8f:60:db:
                    58:d2:b1:79:01:4d:2d:be:9f:f9:82:35:47:f0:cb:
                    73:63:ff:1c:15:22:e0:66:60:d2:4e:6e:48:1d:9b:
                    96:6f:50:7a:74:b7:e5:34:2c:2f:30:ab:88:74:9d:
                    82:0c:a1:0b:c9:ab:11:b7:90:c6:47:9f:aa:d9:8b:
                    9d:f7:84:4d:d5:df:9c:25:de:df:c9:cb:3a:ce:93:
                    a7:b7:bf:a3:df:de:d1:20:42:33:d4:56:82:75:89:
                    92:2c:05:f6:f4:fe:3a:b9:cf:2f:89:15:9c:96:5c:
                    f2:1c:a4:74:9d:28:dd:ac:a6:15:0f:12:00:ad:b7:
                    97:ef:e8:d1:4a:0a:d7:c3:8a:ec:61:1e:e6:ea:d6:
                    6a:ce:97:f4:33:a3:c8:6d:5f:2c:2a:b9:47:1b:fb:
                    9d:01:85:55:d1:e3:29:54:7d:3d:ba:46:6a:65:84:
                    4c:93:27:85:89:88:9e:2b:15:c1:4b:07:16:a1:f9:
                    6f:b9:80:45:3f:63:c7:bb:91:94:98:d7:50:c7:74:
                    93:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:28:B7:03:F3:5E:C3:E9:1E:73:8B:C3:BD:0A:BA:15:29:AA:08:A6
            X509v3 Authority Key Identifier:
                keyid:89:91:88:99:2E:55:0C:B7:17:3D:D6:57:33:F0:4F:79:CC:F4:76:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/899188992E550CB7173DD65733F04F79CCF47641.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/899188992E550CB7173DD65733F04F79CCF47641.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/899188992E550CB7173DD65733F04F79CCF47641.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:a0:40:eb:10:cd:ed:e3:dd:6a:c9:b5:89:4a:fe:f8:43:7d:
         5b:cb:b2:8b:b4:51:0e:fa:b3:d5:67:d3:3c:7d:3b:0d:3d:3a:
         f3:a2:8a:71:6f:f4:44:8a:f7:05:d1:aa:98:fe:71:d9:76:e9:
         69:1c:17:98:f7:e3:11:07:2e:16:f5:0d:9d:6e:ef:02:33:65:
         6d:d3:5d:96:b0:3f:15:c7:10:13:ba:c5:2a:ca:5d:09:bb:5b:
         b2:1d:5f:9c:a4:bc:83:a7:35:6a:81:8b:e0:35:1b:a7:05:66:
         12:80:34:e2:8a:46:1e:df:c2:c2:5f:0d:2c:a1:71:6d:b5:c3:
         23:57:bd:02:7d:85:5a:28:04:e2:63:6d:6e:90:67:0a:e1:bd:
         de:d7:74:3f:66:07:bd:5e:38:a7:fa:a0:cb:0e:cb:3c:ca:a6:
         d0:83:00:b5:4c:f8:0c:3a:c4:82:f4:3c:0c:da:4c:1d:db:98:
         99:e4:0d:74:0f:9c:de:8e:9e:19:aa:69:3f:ea:2e:58:7b:01:
         c1:fd:26:fb:57:e6:b2:16:3f:6e:80:04:77:5b:3e:94:81:8e:
         5d:be:30:9f:08:cb:52:0b:75:dd:dd:c0:93:42:b2:eb:16:57:
         cd:08:00:d4:01:d4:1d:4a:3d:93:30:5d:0a:63:21:b5:37:2d:
         90:f9:81:85
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUE29p1cvwwq+SX6v1ecQnhBq7X6cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODk5MTg4OTkyRTU1MENCNzE3M0RENjU3MzNGMDRGNzlD
Q0Y0NzY0MTAeFw0yNTEyMjMwNzA3MjVaFw0yNTEyMjQxMDM4MjVaMDMxMTAvBgNV
BAMTKEEwMjhCNzAzRjM1RUMzRTkxRTczOEJDM0JEMEFCQTE1MjlBQTA4QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk87iscEHLmJ2sWSVsg+4KV4eF
pZglhyuLUUPO9oQg68Ocfs8Skm7YHIMPE555FyO8APPiYO0dmY9g21jSsXkBTS2+
n/mCNUfwy3Nj/xwVIuBmYNJObkgdm5ZvUHp0t+U0LC8wq4h0nYIMoQvJqxG3kMZH
n6rZi533hE3V35wl3t/JyzrOk6e3v6Pf3tEgQjPUVoJ1iZIsBfb0/jq5zy+JFZyW
XPIcpHSdKN2sphUPEgCtt5fv6NFKCtfDiuxhHubq1mrOl/Qzo8htXywquUcb+50B
hVXR4ylUfT26RmplhEyTJ4WJiJ4rFcFLBxah+W+5gEU/Y8e7kZSY11DHdJPvAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUoCi3A/New+kec4vDvQq6FSmqCKYwHwYDVR0j
BBgwFoAUiZGImS5VDLcXPdZXM/BPecz0dkEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2VYeW8xd1dkNUV4c0hXa1ZVNTI0NGE5dk1oM2QyWnhZY2pScnhnNTZv
TngvMC84OTkxODg5OTJFNTUwQ0I3MTczREQ2NTczM0YwNEY3OUNDRjQ3NjQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5OTE4ODk5MkU1NTBDQjcx
NzNERDY1NzMzRjA0Rjc5Q0NGNDc2NDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M2VYeW8xd1dkNUV4c0hXa1ZVNTI0NGE5dk1oM2QyWnhZY2pScnhnNTZvTngvMC84
OTkxODg5OTJFNTUwQ0I3MTczREQ2NTczM0YwNEY3OUNDRjQ3NjQxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWaBA6xDN7ePdasm1iUr++EN9W8uyi7RRDvqz1WfTPH07DT0686KKcW/0RIr3
BdGqmP5x2XbpaRwXmPfjEQcuFvUNnW7vAjNlbdNdlrA/FccQE7rFKspdCbtbsh1f
nKS8g6c1aoGL4DUbpwVmEoA04opGHt/Cwl8NLKFxbbXDI1e9An2FWigE4mNtbpBn
CuG93td0P2YHvV44p/qgyw7LPMqm0IMAtUz4DDrEgvQ8DNpMHduYmeQNdA+c3o6e
GappP+ouWHsBwf0m+1fmshY/boAEd1s+lIGOXb4wnwjLUgt13d3Ak0Ky6xZXzQgA
1AHUHUo9kzBdCmMhtTctkPmBhQ==
-----END CERTIFICATE-----
Generated at Wed Dec 24 02:04:01 2025 by rpki-client