This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.mft
File:                     901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.mft (raw, json)
Hash identifier:          O6kBx6P0URa29iOzxYggYTC8Hyo0YZhzEZwbf80wHYU=
Subject key identifier:   1B:C2:BF:2D:FD:EE:90:C7:BC:44:4F:28:46:3D:81:14:15:00:A7:0E
Authority key identifier: 90:1A:65:E3:E0:FE:6E:92:2A:42:C5:C9:7F:BA:18:CA:D6:A0:AF:4F
Certificate issuer:       /CN=901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F
Certificate serial:       1D1F5BAC382EA62EA0E45532515DA04C5872954C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.mft
Manifest number:          0352
Signing time:             Wed 31 Dec 2025 12:20:43 +0000
Manifest this update:     Wed 31 Dec 2025 12:15:43 +0000
Manifest next update:     Thu 01 Jan 2026 16:01:43 +0000
Files and hashes:         1: 323830343a6566383a3a2f33322d313238203d3e20323632333032.roa (hash: d9TiLfPFGCaU1Z2AIBNzkdz7jXn3buSzxxFil3as2+c=)
                          2: 901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.crl (hash: +VCck5Zmvx+pXcmX/UlOp9nLpmfeZKKCbak1MS5dw0s=)
                          3: 3137372e38372e3132382e302f32322d3332203d3e20323632333032.roa (hash: 7kgaaTH8I9272TqXqvm9uJZFGNVlZ3gRXBFXlOixjtM=)
                          4: 3137372e38372e3133322e302f32322d3332203d3e20323632333032.roa (hash: o4g5XU20jdFu4J/XwxAVfr4F1cH7vUffEOyIh7mNHUg=)
                          5: 3137372e31302e3230342e302f32322d3332203d3e20323632333032.roa (hash: zXZVmG0BvN5Qp80Uihq7QXyG1HoNMssDmv/MIwdlRT4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.crl
                          rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 Jan 2026 16:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:1f:5b:ac:38:2e:a6:2e:a0:e4:55:32:51:5d:a0:4c:58:72:95:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F
        Validity
            Not Before: Dec 31 12:15:43 2025 GMT
            Not After : Jan  1 16:01:43 2026 GMT
        Subject: CN=1BC2BF2DFDEE90C7BC444F28463D81141500A70E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:b7:60:2a:85:60:6a:49:5e:39:1c:bf:9a:26:
                    10:ad:7f:9e:d7:ab:ee:25:6c:3e:2a:b8:a8:6f:ef:
                    6a:a6:e2:cb:83:53:e1:23:b4:ff:67:93:f4:65:83:
                    bc:b7:a2:d2:2f:69:c6:bc:b4:e6:25:73:af:83:c8:
                    e9:16:ec:3f:f3:87:19:9a:9e:08:ce:36:36:43:af:
                    8a:52:c8:94:e8:1d:33:8a:0b:66:09:27:c1:53:29:
                    80:43:6e:10:63:fb:e2:b5:2c:26:01:9f:17:45:a0:
                    62:e9:ec:60:0a:3b:a1:9b:e4:9f:4a:cb:a7:ae:43:
                    48:25:9d:95:c4:4d:bf:52:29:ff:10:44:32:99:d6:
                    e1:cc:fd:a4:f7:92:b9:60:18:1f:d8:3f:2b:8d:9f:
                    58:1e:4a:38:cd:ee:ee:64:c8:64:03:1c:87:6f:60:
                    e8:67:77:57:9b:cf:3d:45:22:24:f9:f9:40:10:e6:
                    88:07:6c:b8:2f:51:34:06:0c:d0:56:0f:a1:41:cf:
                    49:39:ef:ed:a8:8d:72:f9:3b:e8:40:d7:97:90:5f:
                    f3:3d:15:04:d4:7b:31:4a:5b:57:62:e9:47:09:95:
                    9c:17:26:05:d1:dd:28:c3:43:1b:bd:ee:20:8d:8e:
                    73:9d:95:98:a7:53:4d:51:71:1b:53:71:6a:11:d1:
                    9b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C2:BF:2D:FD:EE:90:C7:BC:44:4F:28:46:3D:81:14:15:00:A7:0E
            X509v3 Authority Key Identifier:
                keyid:90:1A:65:E3:E0:FE:6E:92:2A:42:C5:C9:7F:BA:18:CA:D6:A0:AF:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:03:8f:b3:ea:e2:e7:d7:47:84:35:3e:bc:95:58:26:40:fb:
         d6:c2:88:ad:cd:1c:a7:a0:9a:95:c7:09:5e:69:2c:0e:fb:e0:
         81:92:58:19:87:db:27:b6:8e:69:65:8d:d3:dc:86:a0:98:cd:
         a0:11:c4:86:4e:bb:30:33:d9:54:3c:ee:4e:82:6c:2e:c3:7c:
         1f:ed:ea:32:27:91:09:45:93:1c:ca:8c:3c:cd:f9:1d:44:f2:
         db:ae:6d:0e:d2:cd:69:85:34:8d:78:f6:69:4c:60:72:d9:18:
         50:b6:7d:0d:23:fe:67:ee:be:42:ee:63:68:3d:5c:95:cb:90:
         00:e3:cb:47:47:a3:81:04:b1:d0:f5:d7:58:f2:10:0f:1a:f7:
         62:1d:2d:04:bd:ad:26:f7:7a:6e:20:36:bb:3b:5d:76:6e:df:
         c9:18:af:a7:6c:1a:d0:9c:d3:f9:84:dc:7c:06:69:09:fb:01:
         2c:8d:a3:13:b1:9b:50:7f:e8:64:2e:0b:9e:23:a9:3e:20:4a:
         a8:e4:bd:5d:10:4e:a5:45:f8:91:a7:68:6a:52:2b:45:5d:7b:
         5c:bc:54:6e:de:51:ee:75:38:c3:34:cb:5f:25:fc:3b:14:92:
         89:21:ae:22:91:fb:03:5c:5f:cd:8d:50:6f:33:56:d8:70:91:
         92:8e:be:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 06:30:13 2026 by rpki-client