This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.mft
File:                     B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.mft (raw, json)
Hash identifier:          syLNWGkfVKYR0XqOxqStKAbwukMgN11iX/A9OKckvrc=
Subject key identifier:   7B:45:F6:AE:2F:1F:90:08:F4:70:87:83:2F:DA:89:15:2C:5D:97:9A
Authority key identifier: B5:DD:83:CD:EC:C1:80:B0:CA:EF:BD:34:75:92:6B:F7:75:7A:4F:96
Certificate issuer:       /CN=B5DD83CDECC180B0CAEFBD3475926BF7757A4F96
Certificate serial:       346D97A833DEFA26C5EDA97B648C8BF024C6DAEA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.mft
Manifest number:          28
Signing time:             Sat 20 Dec 2025 01:41:58 +0000
Manifest this update:     Sat 20 Dec 2025 01:36:58 +0000
Manifest next update:     Sun 21 Dec 2025 03:29:58 +0000
Files and hashes:         1: 3137302e3135302e3230392e302f32342d3234203d3e20323633323930.roa (hash: QC6JlhziQzqcw2FGX9bdDV7NXilAbiiEzjpiF1xEM9Y=)
                          2: 323830343a313638383a393030303a3a2f33362d3336203d3e20323633323930.roa (hash: k0yN1/pevOY/1PLu5YAHaV/cvWMq84qkeJoMRhuBzB0=)
                          3: 3230312e372e3136372e302f32342d3234203d3e20323633323930.roa (hash: q0Zqsd7FOkcN51CcBECGobtdm+VApEAqCoNYSUSbfh4=)
                          4: 323830343a313638383a653230303a3a2f33392d3339203d3e20323633323930.roa (hash: dv4u/H0AY9llOSrsPLEScV4SswvliUTOeG+exJBbV1Q=)
                          5: 323830343a313638383a613030303a3a2f33352d3335203d3e20323633323930.roa (hash: FEM3Y2qAIgnUdyutfotyl4TUtrcYRahGo2lgFSh4nYQ=)
                          6: B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.crl (hash: idcSuZyTB93rxJl1J9JELbtUludnuBgRNCDSYr6dWPE=)
                          7: 3230312e372e3136352e302f32342d3234203d3e20323633323930.roa (hash: due5JjV9kIFCS75nyREdlJEqUfBN0cmFlUXfp6K8Wb4=)
                          8: 3137302e3135302e3231302e302f32342d3234203d3e20323633323930.roa (hash: LOPfL7/twMxQBkpiFR5bHaGIIJ5mSFHJQ/GCOQPc7CU=)
                          9: 3230312e372e3136342e302f32342d3234203d3e20323633323930.roa (hash: 8Ni92Q9fd+3yUjQzfUYk4QoaSUToi7qb83j0tTGw0Po=)
                          10: 323830343a313638383a383030303a3a2f33352d3335203d3e20323633323930.roa (hash: tUqjfhlxSAAyztlF/+Y/33beZfcd047OPzPrZrwT2Wg=)
                          11: 3230312e372e3136362e302f32342d3234203d3e20323633323930.roa (hash: phBcNonrhX6ZW7NND7fGkS9AVImKkw2bjLZwlMutawY=)
                          12: 323830343a313638383a653430303a3a2f33392d3339203d3e20323633323930.roa (hash: M6mzwrjz9nq35wkWZV/QnNVuiGRjCv7LSdNS6FLVRCc=)
                          13: 323830343a313638383a3a2f33352d3335203d3e20323633323930.roa (hash: 37uqMDsvIWIwqYG7E5iZAUdBYLrd5/c825crmuEdfcc=)
                          14: 323830343a313638383a363030303a3a2f33352d3335203d3e20323633353038.roa (hash: XSAAmlqyuEqDZy3kq18ALMnE9jI1jm3Slf93X/bcaRM=)
                          15: 323830343a313638383a383030303a3a2f33362d3336203d3e20323633323930.roa (hash: mpG6CjOvOgXDJJUzrxU57KdiVt5qcXezHsJUd6nAW5Q=)
                          16: 3137302e3135302e3231312e302f32342d3234203d3e20323633323930.roa (hash: LZj2mDsiJNpKzD1q1DVs60M7rf2YP0xYLmiLGBPtgtM=)
                          17: 3137302e3135302e3230382e302f32342d3234203d3e20323633323930.roa (hash: C1K3a3eVj7iuOWZKlo48Gs3N9RZD6HCjjXEu5lqxK2M=)
                          18: 323830343a313638383a323030303a3a2f33352d3335203d3e20323633323930.roa (hash: hNUw7qs7hfOWQgh5+vVxnlvWYUU5U4wUC2cEOXazAxk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.crl
                          rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 03:29:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:6d:97:a8:33:de:fa:26:c5:ed:a9:7b:64:8c:8b:f0:24:c6:da:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5DD83CDECC180B0CAEFBD3475926BF7757A4F96
        Validity
            Not Before: Dec 20 01:36:58 2025 GMT
            Not After : Dec 21 03:29:58 2025 GMT
        Subject: CN=7B45F6AE2F1F9008F47087832FDA89152C5D979A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b2:f7:32:c1:a7:47:d3:97:d6:dc:09:9e:1b:
                    a9:db:31:72:a0:56:d2:76:e5:32:85:1c:b3:ed:62:
                    65:5b:fa:bb:db:3f:9e:e8:9f:96:b9:60:1d:27:76:
                    bc:f5:95:a9:bb:54:dc:e7:17:0f:e9:f3:cd:49:ef:
                    00:6e:60:b8:3a:e1:46:2b:85:55:40:14:76:8a:15:
                    12:d0:f7:87:02:52:d2:58:41:9a:5b:2f:7a:f4:3d:
                    99:62:a4:2f:1b:a4:1a:9e:cc:d7:dd:a7:9f:cb:fa:
                    b2:27:97:d1:69:d6:ef:cd:25:36:22:22:23:eb:b3:
                    bb:b8:e2:29:a2:6f:75:33:e9:84:a4:95:4f:7e:29:
                    28:06:1b:bc:d3:bc:54:ef:39:00:f4:52:9e:73:2f:
                    79:e2:dd:05:43:eb:bb:73:53:16:b4:fa:cf:1b:aa:
                    ea:66:24:a1:41:91:53:8a:04:15:fd:9b:f4:d1:94:
                    b8:85:38:e5:e6:3c:2e:a7:6a:87:38:98:8b:53:97:
                    a1:eb:1b:80:8f:b4:d2:ac:4c:e0:81:71:38:5d:3a:
                    9f:ab:29:d8:ac:1a:2f:5a:e0:90:b5:90:6b:74:16:
                    40:e4:6e:8d:a9:fe:6e:75:43:25:23:37:fa:5c:ab:
                    67:38:9d:9b:05:82:11:c1:e5:48:44:e1:89:b1:f0:
                    71:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:45:F6:AE:2F:1F:90:08:F4:70:87:83:2F:DA:89:15:2C:5D:97:9A
            X509v3 Authority Key Identifier:
                keyid:B5:DD:83:CD:EC:C1:80:B0:CA:EF:BD:34:75:92:6B:F7:75:7A:4F:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:2f:7d:c9:e7:e5:49:19:7f:99:e5:8c:ee:74:63:52:42:1e:
         b7:e0:80:89:80:52:86:37:ea:6d:7c:e8:5c:96:a9:2b:9e:e3:
         e5:64:dd:76:a5:f6:04:78:94:7b:9d:07:ef:7e:86:9c:b0:d7:
         fd:e5:02:39:9a:47:b5:51:ab:82:25:d0:e9:2d:f5:aa:b9:43:
         a2:43:4d:f9:e1:be:f0:87:ec:1e:71:a4:58:e7:bc:8a:d7:fc:
         42:0c:86:fb:65:4d:19:52:db:a4:3c:34:1b:b5:e0:0a:96:58:
         58:3d:cd:9d:3f:e2:3b:f6:98:72:49:c6:7a:5f:1e:e1:83:d2:
         77:63:b8:6b:0e:c8:06:5d:e4:84:02:43:97:3c:b6:f9:f6:ac:
         b8:27:e0:8c:59:b4:d9:0b:9f:36:7b:d8:f6:ae:36:73:d8:bb:
         72:50:84:65:70:7b:ad:43:07:69:99:e4:39:e8:eb:ad:c6:29:
         a4:7e:67:d1:a3:2a:1e:b2:c0:09:25:ef:16:fc:77:a4:29:cd:
         b5:09:5c:95:4f:18:f7:20:04:5f:0b:c2:dc:9c:9d:67:58:42:
         54:eb:e5:28:36:83:ad:aa:16:64:ac:c6:0e:16:24:a0:06:63:
         c1:f4:b5:f4:1e:e7:39:2d:d7:69:95:ce:fa:3d:5a:bd:c5:2e:
         7a:6f:b8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:24:29 2025 by rpki-client