This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/C5FAC883F52999ACF758B4E2B97F23641E0B1141.mft
File:                     C5FAC883F52999ACF758B4E2B97F23641E0B1141.mft (raw, json)
Hash identifier:          fSudbQGID2nkOAMht75WABKDniXhpscC9Lh9lDEuEmM=
Subject key identifier:   8E:96:E7:7F:B3:11:72:40:A3:BA:5A:55:A5:82:56:C0:38:52:3B:41
Authority key identifier: C5:FA:C8:83:F5:29:99:AC:F7:58:B4:E2:B9:7F:23:64:1E:0B:11:41
Certificate issuer:       /CN=C5FAC883F52999ACF758B4E2B97F23641E0B1141
Certificate serial:       6DF4D9E3606DEC32C7443EE3F71EEF94DA2F06C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5FAC883F52999ACF758B4E2B97F23641E0B1141.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/C5FAC883F52999ACF758B4E2B97F23641E0B1141.mft
Manifest number:          02E3
Signing time:             Mon 22 Dec 2025 10:27:18 +0000
Manifest this update:     Mon 22 Dec 2025 10:22:18 +0000
Manifest next update:     Tue 23 Dec 2025 12:52:18 +0000
Files and hashes:         1: 323830343a383030303a383030303a3a2f33332d3333203d3e20323731373233.roa (hash: h7Kv+zxSfT3tP9oYJdoUTulCa62bqCSpyNfGiBC+m9w=)
                          2: 323830343a383030303a3a2f33332d3333203d3e20323731373233.roa (hash: rjOzK9VSD9fq/SxJ+lECML6w865sYD3+8bpb9tcyUnY=)
                          3: C5FAC883F52999ACF758B4E2B97F23641E0B1141.crl (hash: I2fcvJO1BhVPdtaSA8Zp2OPxM4oC7cNHBopPbS1ygM0=)
                          4: 323830343a383030303a3a2f33322d3332203d3e20323731373233.roa (hash: LSu3GftnomNKTBnhOtUHqc0EyfeYBG14n6JK7jzTHtA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/C5FAC883F52999ACF758B4E2B97F23641E0B1141.crl
                          rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/C5FAC883F52999ACF758B4E2B97F23641E0B1141.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5FAC883F52999ACF758B4E2B97F23641E0B1141.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 12:52:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f4:d9:e3:60:6d:ec:32:c7:44:3e:e3:f7:1e:ef:94:da:2f:06:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5FAC883F52999ACF758B4E2B97F23641E0B1141
        Validity
            Not Before: Dec 22 10:22:18 2025 GMT
            Not After : Dec 23 12:52:18 2025 GMT
        Subject: CN=8E96E77FB3117240A3BA5A55A58256C038523B41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:44:21:66:7d:b4:85:78:fb:db:45:f2:f5:87:
                    47:cb:29:c2:5d:28:06:df:ad:3b:b2:ce:f9:e6:2a:
                    c9:a4:eb:50:23:40:b7:40:29:0f:e9:9d:de:8f:99:
                    b4:36:01:08:77:94:b2:63:2a:2d:41:e1:67:64:32:
                    b2:d9:dd:48:9b:ad:f0:c3:9f:f5:d0:6e:21:57:b6:
                    8a:85:7c:8f:41:4d:e8:57:ab:5c:ee:f0:f7:7b:4b:
                    91:33:d1:5d:26:26:b3:0d:76:19:a5:fa:47:1a:44:
                    50:7f:90:90:9f:9e:0e:f2:cd:13:17:c0:81:45:b2:
                    35:6b:d7:a9:01:cc:57:01:75:df:5f:99:9e:46:33:
                    dc:fa:77:0e:28:4c:64:39:9a:a1:4c:87:b0:5b:4c:
                    dd:d6:7e:06:ee:ec:5b:81:b0:76:8d:f0:d5:30:40:
                    ce:33:fa:a2:7e:8d:f8:ec:66:71:23:8e:c3:58:19:
                    87:02:f0:e8:f0:17:b2:83:38:2d:8a:4b:e4:fa:c0:
                    04:46:00:bc:11:7f:4d:11:6f:17:e6:12:9b:97:49:
                    ec:10:b7:61:f5:5f:24:6d:2c:f6:78:84:7d:0e:27:
                    1e:2d:34:8d:4a:d1:e8:ba:88:f3:45:35:fd:0c:c0:
                    b5:04:9c:c1:1c:97:fa:44:8c:75:40:6c:48:82:89:
                    40:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:96:E7:7F:B3:11:72:40:A3:BA:5A:55:A5:82:56:C0:38:52:3B:41
            X509v3 Authority Key Identifier:
                keyid:C5:FA:C8:83:F5:29:99:AC:F7:58:B4:E2:B9:7F:23:64:1E:0B:11:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/C5FAC883F52999ACF758B4E2B97F23641E0B1141.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5FAC883F52999ACF758B4E2B97F23641E0B1141.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/C5FAC883F52999ACF758B4E2B97F23641E0B1141.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:58:c0:b9:31:84:66:25:8f:78:89:5a:2b:44:fe:c7:7f:57:
         58:57:f4:a4:89:91:01:61:b3:62:bb:1a:a0:12:ee:34:76:9c:
         cb:9e:2c:c3:86:a3:6d:c4:5b:5e:ce:8f:17:9e:c3:bc:17:b0:
         21:d0:2a:d4:02:b1:3f:2a:32:db:f6:17:90:5f:1d:6a:fd:cf:
         79:1a:5d:28:0c:27:80:10:46:03:24:cb:c0:a8:ba:0b:25:06:
         ee:16:10:bb:be:52:79:f1:49:6a:d0:da:cd:dd:d2:46:b0:3b:
         2d:a2:65:6d:fd:bc:2b:91:b7:8e:16:8a:ee:59:8c:86:c1:34:
         15:df:20:98:b7:b2:f7:99:45:8a:e7:fd:7a:3b:2a:98:a9:1e:
         36:98:6b:72:b1:b5:04:35:f5:67:e5:6d:d3:86:d8:59:d1:4b:
         93:50:bb:e4:0b:63:f5:10:1f:2d:8c:3f:6d:66:d5:23:b8:10:
         78:06:99:c0:ba:be:6b:13:35:d0:77:3a:2a:8d:3b:7f:a5:f1:
         68:54:89:35:9e:63:a5:b1:b7:bb:ac:9f:6b:54:4a:7d:96:b8:
         8b:38:5d:bc:d5:7f:8c:5f:73:4f:fc:2b:d2:f8:7d:d2:31:6a:
         eb:fe:e1:d6:d7:fe:09:5a:47:46:71:23:16:af:08:0f:9c:17:
         a2:2a:d9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 15:16:42 2025 by rpki-client