This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.mft
File:                     2028B4F00526FFD4A6479245C26F87EECD0F5352.mft (raw, json)
Hash identifier:          +e3NSzw+z5gbjIyxQQ2hlBqaV1tZc+HN+q0hboR+pEc=
Subject key identifier:   8F:06:92:4A:C2:4E:CF:45:09:02:CF:9A:14:55:F5:2B:1E:78:4E:5F
Authority key identifier: 20:28:B4:F0:05:26:FF:D4:A6:47:92:45:C2:6F:87:EE:CD:0F:53:52
Certificate issuer:       /CN=2028B4F00526FFD4A6479245C26F87EECD0F5352
Certificate serial:       5AB848BD8421557516C963383E38F13BDBF112BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2028B4F00526FFD4A6479245C26F87EECD0F5352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.mft
Manifest number:          6E
Signing time:             Fri 19 Dec 2025 22:05:24 +0000
Manifest this update:     Fri 19 Dec 2025 22:00:24 +0000
Manifest next update:     Sat 20 Dec 2025 23:26:24 +0000
Files and hashes:         1: 3138362e3235302e3232302e302f32322d3235203d3e20323633353535.roa (hash: /pSGbcZQfzxrZjLlHHAawO1s5pR+V02yK59IB2ACSXE=)
                          2: 2028B4F00526FFD4A6479245C26F87EECD0F5352.crl (hash: mA+h/JeqdVyRfL4qUHObArz+aew2n2Y6/qae1Onarqo=)
                          3: 323830343a6565303a3a2f33322d3530203d3e20323633353535.roa (hash: 1TJDZrzjlcPZhvF7FpVcCzGHw819m8Ai/0Ml1jpR+gM=)
                          4: 3133312e302e3235322e302f32322d3235203d3e20323633353535.roa (hash: unb7feFenHIIwOwVCWy8s62+GYdR241xnz1H4IZGT1E=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.crl
                          rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2028B4F00526FFD4A6479245C26F87EECD0F5352.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 23:26:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:b8:48:bd:84:21:55:75:16:c9:63:38:3e:38:f1:3b:db:f1:12:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2028B4F00526FFD4A6479245C26F87EECD0F5352
        Validity
            Not Before: Dec 19 22:00:24 2025 GMT
            Not After : Dec 20 23:26:24 2025 GMT
        Subject: CN=8F06924AC24ECF450902CF9A1455F52B1E784E5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:49:f1:ac:39:58:53:ab:ef:33:1d:58:00:b5:
                    21:79:ac:e2:8f:1f:69:04:4f:d3:7b:31:dc:23:9f:
                    26:9d:9f:37:99:be:34:be:6d:08:62:4f:78:62:d6:
                    ac:d3:5e:11:9a:bf:bf:79:fa:10:f7:23:51:c0:fb:
                    71:0b:67:62:95:69:00:67:f4:a0:95:49:fa:8c:ce:
                    50:e4:9a:c9:c5:67:89:f8:12:4d:5c:42:14:3f:ef:
                    e9:10:f4:f2:86:0a:33:65:e5:15:90:a3:13:06:9f:
                    69:c3:6f:57:82:d6:4f:45:78:81:68:31:83:cf:5b:
                    c3:ea:54:d5:4f:ac:c2:a5:56:b6:7d:69:ee:68:c3:
                    11:31:0f:4c:96:4f:d2:c0:e5:7d:48:32:0a:6a:0e:
                    45:fb:a1:89:3e:50:2a:eb:78:d7:4e:d0:e7:98:d4:
                    db:37:a6:84:95:45:25:c0:13:a1:db:22:c8:ae:d1:
                    44:72:c4:1f:52:b5:bd:7f:5d:a6:75:dd:eb:b1:81:
                    19:cd:ae:b5:e3:89:cc:f4:ae:3b:79:c9:30:5e:61:
                    a3:4e:3b:a5:0e:12:26:74:14:9f:53:92:75:2c:6d:
                    79:f4:19:55:4e:0e:11:b7:40:83:7f:99:c8:d7:ed:
                    da:5d:23:da:7d:97:b4:94:f5:64:17:bf:b8:e0:04:
                    98:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:06:92:4A:C2:4E:CF:45:09:02:CF:9A:14:55:F5:2B:1E:78:4E:5F
            X509v3 Authority Key Identifier:
                keyid:20:28:B4:F0:05:26:FF:D4:A6:47:92:45:C2:6F:87:EE:CD:0F:53:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2028B4F00526FFD4A6479245C26F87EECD0F5352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:fb:9f:c6:ee:58:47:69:b0:8a:d5:9e:e1:38:7c:ac:ee:a0:
         4a:fa:55:ae:57:fa:e0:c7:7a:65:57:d6:fb:af:dc:8c:fb:1f:
         ae:8e:4e:42:18:f8:69:f8:df:7a:44:bf:31:4a:e6:9d:a5:61:
         b7:0e:15:ff:28:0c:3a:20:ed:3a:8e:b7:0e:ea:df:6c:04:42:
         72:a2:e7:db:29:11:73:5a:44:21:7b:e5:f1:6c:c1:90:26:93:
         e7:59:cd:35:e5:4e:41:fc:dc:b3:65:25:34:72:5c:f5:d3:9e:
         72:54:ef:11:84:a9:af:dd:12:3a:1e:28:18:04:57:4f:a6:ce:
         e0:59:24:cc:36:99:0b:c3:4f:7e:9f:de:73:71:a0:b8:b1:51:
         58:6a:0c:73:89:4b:17:9e:07:13:34:15:93:88:e2:4f:9b:fc:
         6d:ee:95:58:9c:a6:92:98:d5:f4:c2:f3:6d:25:a1:56:2a:d1:
         ac:26:f5:30:ba:43:05:9e:bb:d6:3b:ac:7f:5f:9e:28:4e:b5:
         09:c6:a2:99:f8:2e:8a:8e:1d:d4:4b:12:4e:8d:c7:b9:72:57:
         94:a6:d7:3e:80:10:f7:69:24:d0:ee:67:dd:e7:8a:4a:fd:d5:
         92:37:10:99:fe:0e:ae:cc:2a:99:3a:8c:07:a5:9b:82:04:25:
         5e:8b:70:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 06:20:24 2025 by rpki-client