This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7xiPpnYEQa3DaQ3HnUYYW6V5YhSGZGuTP73CBw3Rwu7C/1/5CE610AAB980AB0F317FCD004D2D0A364DDBCC1A.mft
File:                     5CE610AAB980AB0F317FCD004D2D0A364DDBCC1A.mft (raw, json)
Hash identifier:          0IUl16uZ4afmLgiZef9CrxKhX0kQD3PpXVp+NO2ik24=
Subject key identifier:   27:85:8D:73:9F:FD:E3:9A:A0:6E:7B:B5:2B:83:0A:2E:26:26:BF:3C
Authority key identifier: 5C:E6:10:AA:B9:80:AB:0F:31:7F:CD:00:4D:2D:0A:36:4D:DB:CC:1A
Certificate issuer:       /CN=5CE610AAB980AB0F317FCD004D2D0A364DDBCC1A
Certificate serial:       08A6151A6D7540C532C113BA2AFF4C3A926A8464
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CE610AAB980AB0F317FCD004D2D0A364DDBCC1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xiPpnYEQa3DaQ3HnUYYW6V5YhSGZGuTP73CBw3Rwu7C/1/5CE610AAB980AB0F317FCD004D2D0A364DDBCC1A.mft
Manifest number:          034A
Signing time:             Wed 24 Dec 2025 23:14:14 +0000
Manifest this update:     Wed 24 Dec 2025 23:09:14 +0000
Manifest next update:     Thu 25 Dec 2025 23:56:14 +0000
Files and hashes:         1: 3137302e38302e3135362e302f32322d3234203d3e20323636333838.roa (hash: R6z/wPbqSsz+C83fzHUZ39TjQY9q9qp6tiOUrjuSIWQ=)
                          2: 5CE610AAB980AB0F317FCD004D2D0A364DDBCC1A.crl (hash: LSYETqzu3eIaSbzvHHwuMA4dCtQWXQ67iUNk/f1VkEs=)
                          3: 323830343a333731343a3a2f33322d3438203d3e20323636333838.roa (hash: K1e5OFvEf5b0oHfvM7+5DDWffxhJ5xgaxvdOc0QYOrg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xiPpnYEQa3DaQ3HnUYYW6V5YhSGZGuTP73CBw3Rwu7C/1/5CE610AAB980AB0F317FCD004D2D0A364DDBCC1A.crl
                          rsync://rpki-repo.registro.br/repo/7xiPpnYEQa3DaQ3HnUYYW6V5YhSGZGuTP73CBw3Rwu7C/1/5CE610AAB980AB0F317FCD004D2D0A364DDBCC1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CE610AAB980AB0F317FCD004D2D0A364DDBCC1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 23:56:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a6:15:1a:6d:75:40:c5:32:c1:13:ba:2a:ff:4c:3a:92:6a:84:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CE610AAB980AB0F317FCD004D2D0A364DDBCC1A
        Validity
            Not Before: Dec 24 23:09:14 2025 GMT
            Not After : Dec 25 23:56:14 2025 GMT
        Subject: CN=27858D739FFDE39AA06E7BB52B830A2E2626BF3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f9:1c:ef:e5:2a:37:07:eb:d5:53:37:cb:e7:
                    a1:b6:06:af:c8:3f:71:97:22:17:e3:1d:09:d5:5e:
                    ea:38:42:c5:16:ba:c2:23:2d:ec:ed:0d:b1:8e:3e:
                    e5:3a:db:fc:d2:8a:45:78:b1:b2:6c:6c:73:81:95:
                    9e:a1:31:44:17:41:df:e6:b3:f2:e6:15:67:2d:75:
                    70:84:e8:c4:9b:10:95:91:be:fa:34:b1:31:86:ba:
                    9b:af:78:65:a7:37:48:37:ec:39:0e:0a:33:c6:da:
                    14:75:81:7d:e6:fd:98:53:52:f7:b3:a3:db:57:b9:
                    37:c7:04:95:74:db:af:95:14:a6:4b:23:b1:ce:58:
                    eb:af:94:a8:ea:c0:13:f3:75:a7:d1:52:c2:52:af:
                    c7:de:5d:74:ed:bb:1a:c0:af:f6:73:96:22:4e:5e:
                    e4:e8:36:4c:3b:5a:5b:57:28:45:c7:2a:45:c1:53:
                    db:27:60:ee:62:8a:ba:c8:e1:8f:2b:48:b8:14:d0:
                    b4:8c:d1:e5:15:25:61:e0:14:41:0d:b8:c0:1b:4b:
                    0e:e2:bd:a6:22:b5:b6:ad:17:fc:54:b7:df:5a:a5:
                    0f:e8:d6:cc:33:47:56:36:96:f0:c9:73:ad:30:49:
                    ea:75:f2:bb:ce:9e:83:34:5c:ba:9e:e2:aa:4b:26:
                    28:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:85:8D:73:9F:FD:E3:9A:A0:6E:7B:B5:2B:83:0A:2E:26:26:BF:3C
            X509v3 Authority Key Identifier:
                keyid:5C:E6:10:AA:B9:80:AB:0F:31:7F:CD:00:4D:2D:0A:36:4D:DB:CC:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xiPpnYEQa3DaQ3HnUYYW6V5YhSGZGuTP73CBw3Rwu7C/1/5CE610AAB980AB0F317FCD004D2D0A364DDBCC1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CE610AAB980AB0F317FCD004D2D0A364DDBCC1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xiPpnYEQa3DaQ3HnUYYW6V5YhSGZGuTP73CBw3Rwu7C/1/5CE610AAB980AB0F317FCD004D2D0A364DDBCC1A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:db:dc:52:77:9c:e1:66:87:55:a6:3f:49:04:83:b8:43:df:
         6c:69:91:0b:fb:68:0a:55:48:d1:6e:06:cb:f0:eb:ca:40:79:
         c2:b9:ce:01:0a:e7:c9:de:c5:4f:12:71:88:6d:d2:70:45:7b:
         20:f3:97:c1:3e:8f:d6:d3:14:ee:9e:b6:a1:d0:14:88:cf:eb:
         8c:ae:6a:22:4a:ef:76:2c:a1:58:43:15:9b:c3:18:ea:04:aa:
         88:6f:98:14:2d:c8:e2:63:bc:21:fa:14:58:cc:37:95:0f:82:
         83:8b:60:52:76:20:5e:48:de:36:e1:d1:ed:b9:e2:ce:f1:14:
         a2:34:43:2b:5e:6a:84:2c:72:72:b3:ad:a8:0f:f0:db:da:4e:
         cf:0f:3a:95:72:06:64:02:37:31:8a:a0:e3:92:dc:67:8e:a4:
         f3:38:7c:2e:ec:b8:19:38:9b:7b:06:82:b2:8a:76:0d:96:24:
         e5:b2:ee:76:6a:2e:d7:17:61:ba:33:37:7d:58:e0:de:92:24:
         5a:cc:9b:17:ac:61:13:52:e4:ed:c9:9f:07:72:72:a7:6c:80:
         a0:3c:7a:b1:a1:03:16:35:70:07:c4:fa:59:97:4e:3c:fb:a2:
         89:09:40:db:33:d7:26:e6:09:cc:b9:d9:e7:4e:0a:ed:56:90:
         c9:5e:32:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 15:36:48 2025 by rpki-client