This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/542883AF217B55CA895036F0F5CDBCE406386E83.mft
File:                     542883AF217B55CA895036F0F5CDBCE406386E83.mft (raw, json)
Hash identifier:          ozJ9kGgkkQ15tGT117CUNDW6ky1hj7E6U6jzAr6ExGw=
Subject key identifier:   A0:47:69:02:06:E5:54:10:65:ED:F9:A1:73:B1:C4:58:B7:19:07:B7
Authority key identifier: 54:28:83:AF:21:7B:55:CA:89:50:36:F0:F5:CD:BC:E4:06:38:6E:83
Certificate issuer:       /CN=542883AF217B55CA895036F0F5CDBCE406386E83
Certificate serial:       402A52DCEC3BF4A955C55C81D4BB830DF219C770
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/542883AF217B55CA895036F0F5CDBCE406386E83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/542883AF217B55CA895036F0F5CDBCE406386E83.mft
Manifest number:          0221
Signing time:             Sat 20 Dec 2025 20:22:04 +0000
Manifest this update:     Sat 20 Dec 2025 20:17:04 +0000
Manifest next update:     Sun 21 Dec 2025 20:42:04 +0000
Files and hashes:         1: 542883AF217B55CA895036F0F5CDBCE406386E83.crl (hash: FQnOSA/T+xXjSW+/ijU4YIpgEdbbzhLx//9N2YT8Cmk=)
                          2: 3230302e3134322e3232342e302f32322d3234203d3e20323730393331.roa (hash: +k9SBA0b4hGy+gKwJZ70sOS+jRS1RXL4Gqj6hwBEfrE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/542883AF217B55CA895036F0F5CDBCE406386E83.crl
                          rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/542883AF217B55CA895036F0F5CDBCE406386E83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/542883AF217B55CA895036F0F5CDBCE406386E83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 20:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:2a:52:dc:ec:3b:f4:a9:55:c5:5c:81:d4:bb:83:0d:f2:19:c7:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=542883AF217B55CA895036F0F5CDBCE406386E83
        Validity
            Not Before: Dec 20 20:17:04 2025 GMT
            Not After : Dec 21 20:42:04 2025 GMT
        Subject: CN=A047690206E5541065EDF9A173B1C458B71907B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d3:5f:c8:82:59:bf:91:a6:2c:55:33:11:55:
                    65:6e:06:bf:22:a9:9b:a6:b6:cb:33:29:e2:dd:48:
                    76:2a:39:6c:d8:b1:f8:af:4e:32:8c:92:99:f6:51:
                    92:f3:3e:49:8e:dc:c4:5e:b3:a0:f7:e5:a1:c8:46:
                    14:e4:df:92:6d:8d:af:e3:c7:5a:68:63:d7:0a:4b:
                    20:40:df:7f:d7:dd:7d:21:71:66:4c:f3:3e:19:aa:
                    69:ac:51:6e:c5:3c:54:a5:07:ee:5d:cf:4d:f0:f8:
                    dc:24:51:44:f3:0e:6a:a5:47:e7:c3:f3:3b:39:72:
                    99:de:4c:dd:cb:a7:03:52:14:3d:90:a6:b4:17:a7:
                    37:08:da:20:b9:08:0c:0c:bc:27:54:0d:e0:00:e6:
                    c7:45:77:07:80:12:e4:63:3f:69:92:f4:69:7c:2c:
                    f2:3a:d6:eb:18:5c:b6:12:03:e1:fc:84:f8:c0:f3:
                    9b:fd:28:a8:0c:56:a8:0b:51:7f:85:5b:0a:aa:54:
                    47:49:9b:4a:01:57:86:db:48:d9:91:38:09:d1:96:
                    2e:df:15:b3:01:30:66:2c:1e:38:bd:20:87:34:a6:
                    db:3e:13:b1:ed:9c:80:ff:c2:eb:3a:6d:4e:bf:95:
                    1f:43:d7:36:0b:b2:a4:70:5b:04:2c:32:b7:88:d0:
                    95:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:47:69:02:06:E5:54:10:65:ED:F9:A1:73:B1:C4:58:B7:19:07:B7
            X509v3 Authority Key Identifier:
                keyid:54:28:83:AF:21:7B:55:CA:89:50:36:F0:F5:CD:BC:E4:06:38:6E:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/542883AF217B55CA895036F0F5CDBCE406386E83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/542883AF217B55CA895036F0F5CDBCE406386E83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/542883AF217B55CA895036F0F5CDBCE406386E83.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:2c:87:79:22:45:ce:b8:f2:d3:d0:60:19:52:55:7b:5c:68:
         b9:d7:73:a1:02:10:ed:62:5b:40:cc:a1:4b:b2:07:9d:28:9a:
         3d:94:2d:5d:60:7b:3f:3c:ab:85:c8:f6:64:10:58:52:0c:82:
         5e:a4:84:ef:05:b1:d8:18:b7:43:27:5a:1d:2c:5c:79:9f:a2:
         ac:69:79:e2:28:ee:f1:1e:b0:c4:94:2a:eb:d4:7a:18:54:a2:
         7c:8d:90:88:dc:6a:16:79:85:d7:98:13:39:9d:15:01:6b:e7:
         20:f2:b3:e1:5a:0f:37:0f:c6:73:d3:a7:b5:45:ac:22:68:b4:
         a3:70:d8:91:3c:34:76:5b:16:7c:a8:42:1c:36:b6:0a:c7:90:
         be:3f:24:e3:f8:9e:66:a9:1e:3f:0b:bc:ab:0a:a7:48:1e:c7:
         2c:29:1e:13:e9:2b:14:85:36:40:ce:c8:68:5b:ae:eb:1d:86:
         c8:dc:cb:1d:df:75:3b:12:d9:74:40:fe:aa:22:00:bb:a8:5b:
         85:0e:2d:bf:50:7c:1a:e6:7a:ec:62:95:b3:56:fd:0d:a4:f5:
         e0:cf:b0:7a:0f:4d:66:08:0f:2c:2e:30:c6:06:3d:74:a4:eb:
         d8:de:c1:32:da:ad:68:1a:0b:c6:b0:15:01:99:d2:f0:8e:0f:
         71:f0:ae:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQCpS3Ow79KlVxVyB1LuDDfIZx3AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQyODgzQUYyMTdCNTVDQTg5NTAzNkYwRjVDREJDRTQw
NjM4NkU4MzAeFw0yNTEyMjAyMDE3MDRaFw0yNTEyMjEyMDQyMDRaMDMxMTAvBgNV
BAMTKEEwNDc2OTAyMDZFNTU0MTA2NUVERjlBMTczQjFDNDU4QjcxOTA3QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC801/Iglm/kaYsVTMRVWVuBr8i
qZumtsszKeLdSHYqOWzYsfivTjKMkpn2UZLzPkmO3MRes6D35aHIRhTk35Jtja/j
x1poY9cKSyBA33/X3X0hcWZM8z4ZqmmsUW7FPFSlB+5dz03w+NwkUUTzDmqlR+fD
8zs5cpneTN3LpwNSFD2QprQXpzcI2iC5CAwMvCdUDeAA5sdFdweAEuRjP2mS9Gl8
LPI61usYXLYSA+H8hPjA85v9KKgMVqgLUX+FWwqqVEdJm0oBV4bbSNmROAnRli7f
FbMBMGYsHji9IIc0pts+E7HtnID/wus6bU6/lR9D1zYLsqRwWwQsMreI0JV/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUoEdpAgblVBBl7fmhc7HEWLcZB7cwHwYDVR0j
BBgwFoAUVCiDryF7VcqJUDbw9c285AY4boMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUpENXJUYUpBNDlqUVNmTGE4ZlhDZzZ2cm4yUmljTkdWdUNwOXRGenZl
WG4vMC81NDI4ODNBRjIxN0I1NUNBODk1MDM2RjBGNUNEQkNFNDA2Mzg2RTgzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0Mjg4M0FGMjE3QjU1Q0E4
OTUwMzZGMEY1Q0RCQ0U0MDYzODZFODMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NUpENXJUYUpBNDlqUVNmTGE4ZlhDZzZ2cm4yUmljTkdWdUNwOXRGenZlWG4vMC81
NDI4ODNBRjIxN0I1NUNBODk1MDM2RjBGNUNEQkNFNDA2Mzg2RTgzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAniyHeSJFzrjy09BgGVJVe1xouddzoQIQ7WJbQMyhS7IHnSiaPZQtXWB7Pzyr
hcj2ZBBYUgyCXqSE7wWx2Bi3QydaHSxceZ+irGl54iju8R6wxJQq69R6GFSifI2Q
iNxqFnmF15gTOZ0VAWvnIPKz4VoPNw/Gc9OntUWsImi0o3DYkTw0dlsWfKhCHDa2
CseQvj8k4/ieZqkePwu8qwqnSB7HLCkeE+krFIU2QM7IaFuu6x2GyNzLHd91OxLZ
dED+qiIAu6hbhQ4tv1B8GuZ67GKVs1b9DaT14M+weg9NZggPLC4wxgY9dKTr2N7B
MtqtaBoLxrAVAZnS8I4PcfCuzA==
-----END CERTIFICATE-----