This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6WhVjMJ9E8rLxA5QnyjAuXBAnr7G1WBFdb1L6QNVNYFw/0/5F04F6392175EA3A8AE87CBDEEF476B0C72CC50D.mft
File:                     5F04F6392175EA3A8AE87CBDEEF476B0C72CC50D.mft (raw, json)
Hash identifier:          U7vLASXCVKwgReVIRtILD+gDAX3xwHiWVfGkMSf6Vcs=
Subject key identifier:   57:3C:6D:C5:B7:5B:3D:74:04:7D:99:C1:F5:F9:2E:FE:74:AB:25:C8
Authority key identifier: 5F:04:F6:39:21:75:EA:3A:8A:E8:7C:BD:EE:F4:76:B0:C7:2C:C5:0D
Certificate issuer:       /CN=5F04F6392175EA3A8AE87CBDEEF476B0C72CC50D
Certificate serial:       4F744D381A3DEC10424BC36BD6197A4190D703BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F04F6392175EA3A8AE87CBDEEF476B0C72CC50D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WhVjMJ9E8rLxA5QnyjAuXBAnr7G1WBFdb1L6QNVNYFw/0/5F04F6392175EA3A8AE87CBDEEF476B0C72CC50D.mft
Manifest number:          028F
Signing time:             Sat 20 Dec 2025 00:54:28 +0000
Manifest this update:     Sat 20 Dec 2025 00:49:28 +0000
Manifest next update:     Sun 21 Dec 2025 03:30:28 +0000
Files and hashes:         1: 323830343a356230343a3a2f33322d313238203d3e20323638383133.roa (hash: T39Kb6wXRAbrqYIxmXwEiyYczXsao/U2Vg2G7cI3bjU=)
                          2: 34352e3137332e3133362e302f32322d3332203d3e20323638383133.roa (hash: oP1DL1wZMba0cwL26cEsoY8+unNpalbpUAhLX0BEiEA=)
                          3: 5F04F6392175EA3A8AE87CBDEEF476B0C72CC50D.crl (hash: buKDGD7rGxPWsqsPF57XMD+LLmoPdcAVy4/nzb/aZtE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WhVjMJ9E8rLxA5QnyjAuXBAnr7G1WBFdb1L6QNVNYFw/0/5F04F6392175EA3A8AE87CBDEEF476B0C72CC50D.crl
                          rsync://rpki-repo.registro.br/repo/6WhVjMJ9E8rLxA5QnyjAuXBAnr7G1WBFdb1L6QNVNYFw/0/5F04F6392175EA3A8AE87CBDEEF476B0C72CC50D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F04F6392175EA3A8AE87CBDEEF476B0C72CC50D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 03:30:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:74:4d:38:1a:3d:ec:10:42:4b:c3:6b:d6:19:7a:41:90:d7:03:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F04F6392175EA3A8AE87CBDEEF476B0C72CC50D
        Validity
            Not Before: Dec 20 00:49:28 2025 GMT
            Not After : Dec 21 03:30:28 2025 GMT
        Subject: CN=573C6DC5B75B3D74047D99C1F5F92EFE74AB25C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:aa:dd:ad:d6:2a:07:11:fb:00:36:1a:eb:50:
                    43:01:fe:58:8e:2b:3d:b1:77:e9:ba:14:67:8c:76:
                    89:c6:dc:0b:a0:1b:24:5f:0c:49:9d:c4:cb:4b:6f:
                    45:1e:a7:72:b2:f7:1c:65:db:30:f0:84:be:e6:87:
                    ff:f9:ae:a0:9d:e0:e7:9c:04:73:c0:1c:3f:4b:c9:
                    81:b6:7d:fb:fe:9d:bd:89:b4:21:2f:ab:f3:de:b7:
                    1f:ab:e3:4e:01:bc:0e:84:fc:28:3a:ea:19:c9:00:
                    db:07:c3:99:6b:0a:98:47:9c:ab:fd:e2:40:f1:a6:
                    26:b7:65:da:3b:8d:7c:a4:02:a6:83:01:2f:97:12:
                    e2:8c:8e:bc:ec:df:10:ca:03:d4:2f:27:98:76:01:
                    a8:d4:0e:57:9e:b5:48:8b:18:26:a2:c5:ec:81:f8:
                    c3:8e:97:76:bd:62:2d:b0:4f:25:88:b5:8f:a9:a9:
                    dd:46:83:98:bb:bb:c9:d7:b3:5f:b5:7d:d9:6e:a3:
                    18:99:18:d0:5a:ef:5c:ae:cb:76:e6:46:40:b2:3e:
                    7d:82:cf:13:41:5c:e1:f9:7b:ee:40:d7:5e:29:24:
                    55:7d:6a:d6:22:30:39:41:7b:23:22:40:b1:cd:e3:
                    b8:16:fa:4e:65:95:c5:cb:da:f8:ee:53:c1:3f:54:
                    27:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3C:6D:C5:B7:5B:3D:74:04:7D:99:C1:F5:F9:2E:FE:74:AB:25:C8
            X509v3 Authority Key Identifier:
                keyid:5F:04:F6:39:21:75:EA:3A:8A:E8:7C:BD:EE:F4:76:B0:C7:2C:C5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WhVjMJ9E8rLxA5QnyjAuXBAnr7G1WBFdb1L6QNVNYFw/0/5F04F6392175EA3A8AE87CBDEEF476B0C72CC50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F04F6392175EA3A8AE87CBDEEF476B0C72CC50D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WhVjMJ9E8rLxA5QnyjAuXBAnr7G1WBFdb1L6QNVNYFw/0/5F04F6392175EA3A8AE87CBDEEF476B0C72CC50D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e7:c7:4c:02:87:b2:45:78:12:43:a7:50:7f:41:89:b6:7c:0f:
         df:b9:fa:35:b6:91:c9:19:3b:5f:2e:f7:2e:f4:4e:84:d8:aa:
         11:e2:77:b9:22:19:d3:e3:9f:84:6d:de:fb:0d:d4:b1:6a:07:
         96:6b:fa:ea:a8:f2:d5:70:7c:64:c9:24:7a:87:1b:2f:b9:3e:
         cd:de:d0:87:20:1c:d1:3c:7c:05:f4:1a:26:e9:50:28:a6:97:
         38:f1:95:b1:2b:b1:93:2b:7f:66:20:68:82:bc:08:dd:a9:4a:
         e9:17:25:78:44:eb:d1:d7:b8:ce:81:3f:d1:48:91:50:51:c7:
         b3:84:c1:a5:cb:6f:d5:1a:ed:6f:6d:38:7c:50:45:c4:2f:f1:
         71:1f:0f:03:64:7c:c0:1b:bf:56:44:06:93:58:15:8c:b3:a2:
         f7:4b:c8:47:e3:41:e0:65:71:63:66:66:b9:1e:6d:5d:89:29:
         2a:c0:86:46:d2:1b:77:5c:f2:27:f5:fd:2a:a4:d5:9d:88:1a:
         01:bf:2a:2a:9b:f3:b5:68:15:2c:24:b4:bc:ab:86:3a:a3:cd:
         f0:0b:37:17:6f:a7:64:20:b5:03:c7:4e:56:77:36:4d:2c:21:
         cc:25:2a:91:27:70:c5:f2:4b:ce:eb:cb:03:0a:8a:57:80:38:
         c8:c6:c4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:47:11 2025 by rpki-client