This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/572C561E62C5EFD228CC467E38D0D738D3613283.mft
File:                     572C561E62C5EFD228CC467E38D0D738D3613283.mft (raw, json)
Hash identifier:          QfQmFGGYGSMc0ZmXFwVVgL39fXfl0i8zLVFOI+jqKHc=
Subject key identifier:   4A:EF:9F:40:6D:5E:BC:BA:81:8F:0A:F9:27:8E:11:9A:4D:21:69:CD
Authority key identifier: 57:2C:56:1E:62:C5:EF:D2:28:CC:46:7E:38:D0:D7:38:D3:61:32:83
Certificate issuer:       /CN=572C561E62C5EFD228CC467E38D0D738D3613283
Certificate serial:       5C075B828A5DFDFBDF07E6DFD66E9F0701F44608
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/572C561E62C5EFD228CC467E38D0D738D3613283.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/572C561E62C5EFD228CC467E38D0D738D3613283.mft
Manifest number:          3E
Signing time:             Fri 19 Dec 2025 03:00:44 +0000
Manifest this update:     Fri 19 Dec 2025 02:55:44 +0000
Manifest next update:     Sat 20 Dec 2025 04:38:44 +0000
Files and hashes:         1: 34352e362e33372e302f32342d3234203d3e20323636313532.roa (hash: xSUYFfa2bRcVnJYieMZdn3C0ZUAeH8tcLrfC+ELXGWw=)
                          2: 34352e362e33382e302f32342d3234203d3e20323636313532.roa (hash: OObIvdEw0io9QIrzvM/i5aJp7hf8eRQB6dqteivPgqY=)
                          3: 34352e362e33362e302f32332d3233203d3e20323636313532.roa (hash: ok78c5lt+14kqPJ+pgTjbP+/OmX6G8YI4gwA5txeaEU=)
                          4: 34352e362e33362e302f32342d3234203d3e20323636313532.roa (hash: Y9J2uTHmkLABizv8KtDXTHau75upCpcQFFEmqnDLFqo=)
                          5: 34352e362e33382e302f32332d3233203d3e20323636313532.roa (hash: 3gXEz6Q4TlQycud/lKAVUOgpoxIV7p5fTHaDhpDVrqg=)
                          6: 34352e362e33392e302f32342d3234203d3e20323636313532.roa (hash: QbGHoiqyhLvUz9zbvY1Nd71zwRctp6eTUdmtYa2J/+k=)
                          7: 323830343a336237633a3a2f33322d3438203d3e20323636313532.roa (hash: b6KfwJOEDzxI++79JJ+rHBDVosJpfkudCS7Bq20Yte0=)
                          8: 34352e362e33362e302f32322d3232203d3e20323636313532.roa (hash: 9j4+RIpIQodmWAHMz4gT4h6AYmSl/rzsyiIZhp3V7z0=)
                          9: 572C561E62C5EFD228CC467E38D0D738D3613283.crl (hash: +IOlkRBGS1bUAB3ClGQo/ZphY2M5f27JBq+YUf0QVBg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/572C561E62C5EFD228CC467E38D0D738D3613283.crl
                          rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/572C561E62C5EFD228CC467E38D0D738D3613283.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/572C561E62C5EFD228CC467E38D0D738D3613283.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 04:38:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:07:5b:82:8a:5d:fd:fb:df:07:e6:df:d6:6e:9f:07:01:f4:46:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=572C561E62C5EFD228CC467E38D0D738D3613283
        Validity
            Not Before: Dec 19 02:55:44 2025 GMT
            Not After : Dec 20 04:38:44 2025 GMT
        Subject: CN=4AEF9F406D5EBCBA818F0AF9278E119A4D2169CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:98:00:9f:ea:a4:2c:ce:ad:d7:93:c3:38:ca:
                    6a:d8:2a:1c:cb:ca:d8:e0:8d:e3:21:a5:b4:92:6f:
                    ee:e0:f5:30:42:a6:05:a5:ec:0c:56:ee:65:ec:61:
                    4f:21:85:6f:6a:01:ac:2d:b5:e9:ac:c4:6b:aa:f4:
                    40:da:97:1a:fe:82:c4:93:7d:6c:0c:e0:85:50:62:
                    b1:60:dc:8e:a7:55:c9:40:83:c7:27:5e:37:1d:26:
                    69:19:48:72:47:49:b8:3e:68:8b:5e:44:5b:d4:ea:
                    13:4e:6e:c0:ed:d4:d5:50:a8:d7:3a:72:88:72:b2:
                    b8:ee:30:34:c5:9a:4f:b7:10:a5:6c:59:34:7c:ff:
                    61:b1:89:d8:7c:f2:32:90:f1:bf:fc:b5:6e:70:ab:
                    87:85:6b:7a:0c:ac:fe:ae:f7:da:97:69:9b:44:e7:
                    9c:d4:93:ad:a6:80:92:3b:aa:6a:c1:b8:ca:46:3e:
                    c6:de:ad:65:91:2b:56:71:2f:5e:75:6e:ef:64:84:
                    ed:6c:db:06:f1:69:78:d4:09:b4:d8:37:f8:85:f5:
                    10:09:a0:98:ad:6e:38:0b:8e:ad:71:d3:b4:7e:ec:
                    e4:2b:37:79:3f:3d:84:a0:9b:cd:49:07:b5:88:b8:
                    d1:af:fc:d5:18:25:dc:96:5e:8f:a2:f0:33:c4:73:
                    40:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:EF:9F:40:6D:5E:BC:BA:81:8F:0A:F9:27:8E:11:9A:4D:21:69:CD
            X509v3 Authority Key Identifier:
                keyid:57:2C:56:1E:62:C5:EF:D2:28:CC:46:7E:38:D0:D7:38:D3:61:32:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/572C561E62C5EFD228CC467E38D0D738D3613283.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/572C561E62C5EFD228CC467E38D0D738D3613283.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/572C561E62C5EFD228CC467E38D0D738D3613283.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:99:48:f9:57:5a:c4:e0:cb:9c:eb:9b:37:5b:12:5d:a0:a3:
         63:66:41:bc:3a:f5:b9:92:b4:29:8c:15:37:65:e3:09:af:8f:
         6e:b3:87:8c:66:49:62:c0:44:28:10:d8:02:98:8d:b1:a5:15:
         98:32:2a:6a:6a:5e:04:0c:cb:2c:db:fe:5a:83:07:32:91:c9:
         e6:70:c9:65:35:4b:c9:a7:2f:2b:5a:9d:ed:55:3d:a9:16:e7:
         f0:0d:48:16:3b:08:33:dc:c9:5a:14:57:50:f4:30:fd:e2:f6:
         e9:e4:50:57:17:71:fc:0b:d0:01:30:fa:a7:05:92:77:7d:2a:
         e7:55:4d:d9:32:f0:c2:b7:4d:33:09:63:fe:03:a4:b9:38:d0:
         e2:ed:81:6e:d7:eb:8a:a7:0a:18:07:b3:89:f7:9e:38:cf:37:
         4c:d6:de:ba:ad:45:9b:09:a1:24:64:0c:63:ee:5a:43:4e:32:
         60:fa:ca:cb:c0:85:cc:a8:c6:8b:cc:fa:23:63:ba:49:56:23:
         d5:fb:35:16:4a:59:c2:b4:66:71:22:ff:65:d6:38:0e:34:9b:
         db:2d:86:44:ee:7c:c9:a2:48:67:c9:a4:d0:a3:43:e4:e5:25:
         71:e1:4b:fc:ed:f9:6b:86:03:8d:ed:fd:40:ef:27:54:11:a6:
         22:ed:9e:91
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXAdbgopd/fvfB+bf1m6fBwH0RggwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTcyQzU2MUU2MkM1RUZEMjI4Q0M0NjdFMzhEMEQ3MzhE
MzYxMzI4MzAeFw0yNTEyMTkwMjU1NDRaFw0yNTEyMjAwNDM4NDRaMDMxMTAvBgNV
BAMTKDRBRUY5RjQwNkQ1RUJDQkE4MThGMEFGOTI3OEUxMTlBNEQyMTY5Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpmACf6qQszq3Xk8M4ymrYKhzL
ytjgjeMhpbSSb+7g9TBCpgWl7AxW7mXsYU8hhW9qAawttemsxGuq9EDalxr+gsST
fWwM4IVQYrFg3I6nVclAg8cnXjcdJmkZSHJHSbg+aIteRFvU6hNObsDt1NVQqNc6
cohysrjuMDTFmk+3EKVsWTR8/2Gxidh88jKQ8b/8tW5wq4eFa3oMrP6u99qXaZtE
55zUk62mgJI7qmrBuMpGPsberWWRK1ZxL151bu9khO1s2wbxaXjUCbTYN/iF9RAJ
oJitbjgLjq1x07R+7OQrN3k/PYSgm81JB7WIuNGv/NUYJdyWXo+i8DPEc0DTAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUSu+fQG1evLqBjwr5J44Rmk0hac0wHwYDVR0j
BBgwFoAUVyxWHmLF79IozEZ+ONDXONNhMoMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVhDc0htSkc0YXRhTkhYblMzWENYTWhqbnZHTEdBZ1pGaGlRdUd3QlZY
RmYvMC81NzJDNTYxRTYyQzVFRkQyMjhDQzQ2N0UzOEQwRDczOEQzNjEzMjgzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU3MkM1NjFFNjJDNUVGRDIy
OENDNDY3RTM4RDBENzM4RDM2MTMyODMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QVhDc0htSkc0YXRhTkhYblMzWENYTWhqbnZHTEdBZ1pGaGlRdUd3QlZYRmYvMC81
NzJDNTYxRTYyQzVFRkQyMjhDQzQ2N0UzOEQwRDczOEQzNjEzMjgzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAl5lI+VdaxODLnOubN1sSXaCjY2ZBvDr1uZK0KYwVN2XjCa+PbrOHjGZJYsBE
KBDYApiNsaUVmDIqampeBAzLLNv+WoMHMpHJ5nDJZTVLyacvK1qd7VU9qRbn8A1I
FjsIM9zJWhRXUPQw/eL26eRQVxdx/AvQATD6pwWSd30q51VN2TLwwrdNMwlj/gOk
uTjQ4u2BbtfriqcKGAezifeeOM83TNbeuq1FmwmhJGQMY+5aQ04yYPrKy8CFzKjG
i8z6I2O6SVYj1fs1FkpZwrRmcSL/ZdY4DjSb2y2GRO58yaJIZ8mk0KND5OUlceFL
/O35a4YDje39QO8nVBGmIu2ekQ==
-----END CERTIFICATE-----
Generated at Fri Dec 19 11:32:44 2025 by rpki-client