This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft
File:                     5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft (raw, json)
Hash identifier:          q0oyTWWzFGVEaXsVkRW+V2/HMNoQ44yEiSMb2S+leeI=
Subject key identifier:   3D:CF:D7:91:FF:B3:74:E8:1E:7C:88:CD:DF:94:1B:45:2D:0E:2F:8E
Authority key identifier: 5D:BF:38:9D:E8:4A:80:68:D7:2B:A7:A5:E0:30:F9:0D:8F:67:0D:31
Certificate issuer:       /CN=5DBF389DE84A8068D72BA7A5E030F90D8F670D31
Certificate serial:       7C9E3A7971086492327445754EC9D443A24C29ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft
Manifest number:          02E3
Signing time:             Mon 29 Dec 2025 22:08:20 +0000
Manifest this update:     Mon 29 Dec 2025 22:03:20 +0000
Manifest next update:     Wed 31 Dec 2025 00:36:20 +0000
Files and hashes:         1: 3136382e3139362e3130342e302f32322d3234203d3e20323635343531.roa (hash: bm12g2NtqddE/K8ln3akRM5TUAz6D/tgPeBexY7J5sY=)
                          2: 323830343a333435343a3a2f33322d3334203d3e20323635343531.roa (hash: r3bCeQ3Va1xBObYctOhmI8el+yMJ561eA1zNaJrdc6A=)
                          3: 5DBF389DE84A8068D72BA7A5E030F90D8F670D31.crl (hash: 872gxamHr4SxSjuQaPm2CdYWq2EIg6u/VaPk1xYoUo8=)
                          4: 323830343a333435343a323030303a3a2f33352d3335203d3e20323635343531.roa (hash: lWPWAMy2NkMXHq4ex2mIrGhd7zdCsxdT6sdhk5ThXO0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.crl
                          rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 31 Dec 2025 00:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:9e:3a:79:71:08:64:92:32:74:45:75:4e:c9:d4:43:a2:4c:29:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DBF389DE84A8068D72BA7A5E030F90D8F670D31
        Validity
            Not Before: Dec 29 22:03:20 2025 GMT
            Not After : Dec 31 00:36:20 2025 GMT
        Subject: CN=3DCFD791FFB374E81E7C88CDDF941B452D0E2F8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d6:4f:0b:20:b3:b1:3c:a0:54:8a:e6:33:0e:
                    43:0b:36:6e:6e:b6:ac:e7:bf:02:57:2f:a9:25:a8:
                    3b:3e:80:58:84:25:d3:48:c2:e0:0a:42:e3:6d:28:
                    27:97:aa:c9:ab:0b:60:d9:b9:51:39:ea:49:f0:91:
                    57:6c:4d:ea:a7:3a:2a:a0:e5:ae:08:85:67:09:96:
                    d4:c6:31:68:79:1c:2e:69:97:03:d4:78:22:9c:09:
                    8d:3d:bf:46:92:a8:99:08:66:1f:7d:ef:37:c7:3b:
                    8f:50:cc:85:00:a7:e6:42:2a:ed:70:5a:31:fa:53:
                    38:c7:e8:be:98:29:e4:91:66:d7:95:ab:a0:b7:97:
                    dc:fa:2f:7c:6a:05:8a:fc:e9:8b:bc:66:4e:08:96:
                    3b:d5:ee:a8:5f:47:a3:43:f7:83:44:44:0d:03:84:
                    6f:c1:8e:83:23:da:f4:fa:dc:a8:40:04:9c:b2:a5:
                    00:7c:14:e2:33:ad:8b:e7:b8:4a:5d:2d:c8:ec:f1:
                    06:e7:af:20:56:c7:f0:f1:0b:1a:e4:f6:d6:b2:32:
                    71:01:b9:96:fe:d0:80:fe:0f:92:4f:2f:c2:48:c0:
                    48:c3:4d:05:c5:9a:1e:69:ff:71:71:55:90:5b:d4:
                    af:fb:6c:10:d5:9d:54:eb:27:7f:cf:4d:b2:cc:c9:
                    3e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:CF:D7:91:FF:B3:74:E8:1E:7C:88:CD:DF:94:1B:45:2D:0E:2F:8E
            X509v3 Authority Key Identifier:
                keyid:5D:BF:38:9D:E8:4A:80:68:D7:2B:A7:A5:E0:30:F9:0D:8F:67:0D:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:e1:e4:18:7f:31:ee:4b:c3:20:f2:6c:96:e0:bd:72:a3:76:
         12:3e:7a:ef:0e:fb:f4:5b:1b:0f:6b:40:9a:6b:4c:70:88:16:
         b9:43:90:48:e0:47:ee:b4:b6:82:ce:f5:0c:f9:f1:db:c4:ff:
         99:97:ea:d9:a8:83:3c:c9:23:94:03:2f:7f:93:f6:d5:e7:22:
         28:c6:08:9a:14:a4:58:04:4e:14:ed:35:27:35:22:7b:05:3f:
         49:5f:95:f7:84:89:7a:3e:f0:e7:15:c7:81:2b:a6:db:7c:fe:
         4d:80:67:56:df:1b:9e:90:cf:97:13:1d:45:ee:71:79:5e:21:
         50:6d:b0:36:af:be:d5:79:36:c5:a0:c7:3b:67:dd:db:6a:0d:
         6a:5f:7e:fa:aa:61:bc:a2:c2:58:51:d3:1b:68:1b:07:7f:db:
         54:2c:f5:60:a9:b6:fa:28:26:0d:70:9a:af:de:01:1f:b5:36:
         d6:03:12:10:e8:14:93:33:48:e8:68:2c:4b:cb:5a:a8:c4:a1:
         18:b1:a1:eb:ec:9e:49:e2:cf:d5:10:16:5c:93:29:11:65:10:
         9b:c1:44:43:1f:d5:d8:59:28:53:00:ec:8f:fe:e0:53:2a:8e:
         85:3c:4d:61:ef:a9:7c:b1:5d:24:b2:7d:69:de:17:c6:7f:73:
         f0:6d:76:51
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfJ46eXEIZJIydEV1TsnUQ6JMKe0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNURCRjM4OURFODRBODA2OEQ3MkJBN0E1RTAzMEY5MEQ4
RjY3MEQzMTAeFw0yNTEyMjkyMjAzMjBaFw0yNTEyMzEwMDM2MjBaMDMxMTAvBgNV
BAMTKDNEQ0ZENzkxRkZCMzc0RTgxRTdDODhDRERGOTQxQjQ1MkQwRTJGOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm1k8LILOxPKBUiuYzDkMLNm5u
tqznvwJXL6klqDs+gFiEJdNIwuAKQuNtKCeXqsmrC2DZuVE56knwkVdsTeqnOiqg
5a4IhWcJltTGMWh5HC5plwPUeCKcCY09v0aSqJkIZh997zfHO49QzIUAp+ZCKu1w
WjH6UzjH6L6YKeSRZteVq6C3l9z6L3xqBYr86Yu8Zk4IljvV7qhfR6ND94NERA0D
hG/BjoMj2vT63KhABJyypQB8FOIzrYvnuEpdLcjs8QbnryBWx/DxCxrk9tayMnEB
uZb+0ID+D5JPL8JIwEjDTQXFmh5p/3FxVZBb1K/7bBDVnVTrJ3/PTbLMyT4TAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUPc/Xkf+zdOgefIjN35QbRS0OL44wHwYDVR0j
BBgwFoAUXb84nehKgGjXK6el4DD5DY9nDTEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGs0VWlncXN2Q3BWZUY2b29SYk5tdHY2OW1YVkFWQXhNRlRCclVodEEz
R3YvMC81REJGMzg5REU4NEE4MDY4RDcyQkE3QTVFMDMwRjkwRDhGNjcwRDMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVEQkYzODlERTg0QTgwNjhE
NzJCQTdBNUUwMzBGOTBEOEY2NzBEMzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NGs0VWlncXN2Q3BWZUY2b29SYk5tdHY2OW1YVkFWQXhNRlRCclVodEEzR3YvMC81
REJGMzg5REU4NEE4MDY4RDcyQkE3QTVFMDMwRjkwRDhGNjcwRDMxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACeHkGH8x7kvDIPJsluC9cqN2Ej567w779FsbD2tAmmtMcIgWuUOQSOBH7rS2
gs71DPnx28T/mZfq2aiDPMkjlAMvf5P21eciKMYImhSkWAROFO01JzUiewU/SV+V
94SJej7w5xXHgSum23z+TYBnVt8bnpDPlxMdRe5xeV4hUG2wNq++1Xk2xaDHO2fd
22oNal9++qphvKLCWFHTG2gbB3/bVCz1YKm2+igmDXCar94BH7U21gMSEOgUkzNI
6GgsS8taqMShGLGh6+yeSeLP1RAWXJMpEWUQm8FEQx/V2FkoUwDsj/7gUyqOhTxN
Ye+pfLFdJLJ9ad4Xxn9z8G12UQ==
-----END CERTIFICATE-----
Generated at Tue Dec 30 16:10:33 2025 by rpki-client