This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5huD5JRtggg4v1YZnZsskaZuJ3JBBRn9Euf9ZN85T17w/0/A6DFF8A177EF8CC0DC74245AC0C555AADDA153B2.mft
File:                     A6DFF8A177EF8CC0DC74245AC0C555AADDA153B2.mft (raw, json)
Hash identifier:          xGE52QTOLwT8oOJx30y1dLrsOJ8aJ5Ga9xceTolkxh4=
Subject key identifier:   1E:CA:2C:F3:4E:66:10:82:85:E2:A1:96:A1:1A:BA:66:69:D4:A0:3B
Authority key identifier: A6:DF:F8:A1:77:EF:8C:C0:DC:74:24:5A:C0:C5:55:AA:DD:A1:53:B2
Certificate issuer:       /CN=A6DFF8A177EF8CC0DC74245AC0C555AADDA153B2
Certificate serial:       60C29091F6DE730D029B3441C8B9D8CEEFA75790
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6DFF8A177EF8CC0DC74245AC0C555AADDA153B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5huD5JRtggg4v1YZnZsskaZuJ3JBBRn9Euf9ZN85T17w/0/A6DFF8A177EF8CC0DC74245AC0C555AADDA153B2.mft
Manifest number:          19
Signing time:             Sat 20 Dec 2025 01:04:14 +0000
Manifest this update:     Sat 20 Dec 2025 00:59:14 +0000
Manifest next update:     Sun 21 Dec 2025 03:12:14 +0000
Files and hashes:         1: 3139302e38392e39322e302f32322d3234203d3e20323730333634.roa (hash: fVuycDrXRo19hY3HgZ5Wkc8DeMFqWrs+Zswr3hrq5Wk=)
                          2: A6DFF8A177EF8CC0DC74245AC0C555AADDA153B2.crl (hash: J7CZRgu7QjCnm/1/51G8Jf+7E76G2cKKonPl3UQNFN8=)
                          3: 323830343a366165343a3a2f33322d3438203d3e20323730333634.roa (hash: 0CPCaNu9M6nROdEDI768V6uiHfOkf0WhE14dP31nTLw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5huD5JRtggg4v1YZnZsskaZuJ3JBBRn9Euf9ZN85T17w/0/A6DFF8A177EF8CC0DC74245AC0C555AADDA153B2.crl
                          rsync://rpki-repo.registro.br/repo/5huD5JRtggg4v1YZnZsskaZuJ3JBBRn9Euf9ZN85T17w/0/A6DFF8A177EF8CC0DC74245AC0C555AADDA153B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6DFF8A177EF8CC0DC74245AC0C555AADDA153B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 03:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c2:90:91:f6:de:73:0d:02:9b:34:41:c8:b9:d8:ce:ef:a7:57:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6DFF8A177EF8CC0DC74245AC0C555AADDA153B2
        Validity
            Not Before: Dec 20 00:59:14 2025 GMT
            Not After : Dec 21 03:12:14 2025 GMT
        Subject: CN=1ECA2CF34E66108285E2A196A11ABA6669D4A03B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:30:23:7c:8f:c6:0a:c7:8e:a2:7b:8f:2a:b7:
                    c4:44:da:0e:4d:b3:af:13:05:29:41:56:4c:62:82:
                    d5:7f:77:2b:f2:63:87:fa:a9:e1:39:41:66:ad:ab:
                    3e:f1:04:6b:a6:ed:ac:47:76:68:6a:91:80:61:b4:
                    a8:28:92:20:15:d7:f5:ce:33:58:e7:98:3a:b8:d0:
                    31:1f:ed:25:23:05:b6:5b:45:e7:e8:42:67:ce:ff:
                    ed:de:aa:5c:84:11:3a:fb:62:47:3a:0d:98:f1:5a:
                    1c:54:cc:85:b5:7b:bb:7a:59:61:ab:ad:a6:4d:18:
                    ca:cd:f0:a6:9f:b8:70:a2:f9:c0:72:2e:70:e0:f5:
                    13:da:e2:d9:37:a7:cb:b2:0e:a7:c4:82:08:79:5c:
                    5a:ef:57:9e:93:eb:c6:bd:4f:2f:fa:91:7b:d9:e7:
                    ea:b6:89:98:92:a6:a9:44:c4:2d:e7:46:ce:da:f0:
                    29:44:ac:69:b5:fe:68:41:97:ea:2a:ac:76:8b:c5:
                    f6:27:96:fb:f8:6c:ea:63:b8:f5:f8:e2:81:51:60:
                    ce:bb:8f:26:c1:36:0f:18:0b:de:b6:fe:2e:75:54:
                    cf:1e:62:ea:ea:e0:94:c1:60:96:db:43:d7:07:73:
                    c4:c9:45:eb:ed:55:93:51:74:63:18:49:79:f0:0b:
                    aa:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:CA:2C:F3:4E:66:10:82:85:E2:A1:96:A1:1A:BA:66:69:D4:A0:3B
            X509v3 Authority Key Identifier:
                keyid:A6:DF:F8:A1:77:EF:8C:C0:DC:74:24:5A:C0:C5:55:AA:DD:A1:53:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5huD5JRtggg4v1YZnZsskaZuJ3JBBRn9Euf9ZN85T17w/0/A6DFF8A177EF8CC0DC74245AC0C555AADDA153B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6DFF8A177EF8CC0DC74245AC0C555AADDA153B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5huD5JRtggg4v1YZnZsskaZuJ3JBBRn9Euf9ZN85T17w/0/A6DFF8A177EF8CC0DC74245AC0C555AADDA153B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:dd:c2:f7:0f:dc:f3:70:6b:5c:ee:c5:45:c2:ed:2d:db:7d:
         20:77:d5:7d:08:e1:c5:09:85:91:6e:f4:9e:77:6e:74:5b:71:
         e4:ea:da:8d:b8:51:4e:35:f8:21:b6:b6:c5:a9:e6:b4:bf:b3:
         8b:68:8e:00:4c:94:86:a9:51:d2:76:5b:cc:65:b1:8b:2d:2e:
         57:7f:45:6c:14:7e:ea:6c:d9:b2:68:fc:42:be:c4:be:ea:2f:
         04:4c:f2:9c:24:3c:5f:b2:5e:29:98:78:d8:75:a3:60:b2:0b:
         01:e2:af:e9:f7:54:e1:ed:29:a2:f0:b3:c4:ec:5a:6a:ed:b7:
         26:43:6f:89:ce:53:a9:cf:3f:e6:85:7d:4b:02:31:e2:f9:39:
         46:3a:53:d8:c8:e4:d9:79:44:d1:cf:6d:3e:7f:b7:3b:b7:c4:
         83:46:88:7d:d1:1f:a7:c1:27:34:da:32:64:40:d4:6f:10:5f:
         5a:a7:93:95:ae:72:b6:fe:b2:40:3e:e7:da:07:d7:b3:f1:43:
         83:2a:c7:38:9f:e7:a2:d3:5d:4f:cd:93:18:0e:66:a5:45:4a:
         b9:1e:19:49:3d:1a:14:4b:d4:f3:71:76:6e:3e:7f:53:4f:85:
         d5:28:24:c1:7b:ab:9e:0e:53:ba:ee:d7:f6:bb:d7:35:06:19:
         26:46:fc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:22:15 2025 by rpki-client