This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BppQecXz9U4o5RaDfLzuHttNBboGd3xrP3gRj8NTwX55/0/20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.mft
File:                     20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.mft (raw, json)
Hash identifier:          +MBurd4/8l4btPMm6MM4/LZhy2hOLccrHXJ/g3JnI28=
Subject key identifier:   A5:9F:36:5A:F0:BF:6C:A3:5E:18:C4:64:E2:42:0C:39:0B:ED:0B:54
Authority key identifier: 20:E5:AB:E1:C1:0D:0B:4C:AF:5B:8A:8B:FD:0E:B5:59:D1:59:8D:5C
Certificate issuer:       /CN=20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C
Certificate serial:       4EE96A4B7C2E218B1664FCEFBA0E4AF5174BDA16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BppQecXz9U4o5RaDfLzuHttNBboGd3xrP3gRj8NTwX55/0/20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.mft
Manifest number:          F5
Signing time:             Thu 25 Dec 2025 01:40:24 +0000
Manifest this update:     Thu 25 Dec 2025 01:35:24 +0000
Manifest next update:     Fri 26 Dec 2025 04:00:24 +0000
Files and hashes:         1: 323830343a313538383a3a2f33322d3336203d3e20323633333933.roa (hash: RkMXKecvmW5kgrux+ScsWloo6oerwyF9YYoG25+10TE=)
                          2: 20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.crl (hash: 6/xG3auUZrB6wYQWsvhbklIy2+dFmB2qwUGMQh0ADL0=)
                          3: 3137372e3232322e3230302e302f32312d3234203d3e20323633333933.roa (hash: pZZmxcSR9EAlttKYSeDpPeTr6SVaV3Klh3SCSp08wZk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BppQecXz9U4o5RaDfLzuHttNBboGd3xrP3gRj8NTwX55/0/20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.crl
                          rsync://rpki-repo.registro.br/repo/BppQecXz9U4o5RaDfLzuHttNBboGd3xrP3gRj8NTwX55/0/20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 26 Dec 2025 04:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e9:6a:4b:7c:2e:21:8b:16:64:fc:ef:ba:0e:4a:f5:17:4b:da:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C
        Validity
            Not Before: Dec 25 01:35:24 2025 GMT
            Not After : Dec 26 04:00:24 2025 GMT
        Subject: CN=A59F365AF0BF6CA35E18C464E2420C390BED0B54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8f:85:12:37:fb:d5:76:0b:87:ee:03:c1:74:
                    e5:16:e6:e5:6c:a5:50:86:e8:38:98:df:e0:42:53:
                    32:72:78:2a:0b:34:06:cc:0c:82:12:de:30:ec:a1:
                    a1:08:6d:21:24:cf:cb:ce:cd:6c:f6:89:d9:30:73:
                    77:26:67:5b:60:38:b4:bf:9a:23:4f:ef:2c:86:4c:
                    1b:32:2d:06:f5:bb:30:46:91:7e:b5:18:c8:97:67:
                    bf:f4:48:26:c9:1d:aa:c8:a3:5f:95:e7:a9:99:80:
                    99:7d:d1:b9:03:da:e0:3f:39:23:ec:c8:65:0d:31:
                    03:18:cb:66:40:19:d4:66:0e:c2:82:05:3f:8c:4b:
                    54:12:fe:2c:25:7c:81:43:e7:07:04:1e:f5:d9:c6:
                    32:83:12:76:79:04:5b:62:58:69:d2:75:ce:af:37:
                    fb:10:9f:a2:72:58:1a:31:f5:1e:74:77:fa:18:a7:
                    9f:d1:10:ec:d7:86:09:08:8c:bc:b0:59:81:4a:95:
                    8c:b3:dc:64:24:94:e0:32:7c:bc:de:ae:8d:b9:08:
                    a9:5c:92:a3:05:9f:64:f5:84:33:5e:8b:63:8f:b7:
                    dc:79:bf:46:42:49:ec:c7:79:c0:88:c8:52:4e:e8:
                    f8:26:c8:ec:52:6c:b9:9e:76:be:01:6e:57:4d:56:
                    00:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:9F:36:5A:F0:BF:6C:A3:5E:18:C4:64:E2:42:0C:39:0B:ED:0B:54
            X509v3 Authority Key Identifier:
                keyid:20:E5:AB:E1:C1:0D:0B:4C:AF:5B:8A:8B:FD:0E:B5:59:D1:59:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BppQecXz9U4o5RaDfLzuHttNBboGd3xrP3gRj8NTwX55/0/20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BppQecXz9U4o5RaDfLzuHttNBboGd3xrP3gRj8NTwX55/0/20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:dc:a3:62:0e:6a:a0:cd:fb:56:e8:77:10:e3:41:43:55:71:
         dd:04:14:e0:0e:8b:91:54:72:bb:2e:c3:ff:60:43:cd:e9:b2:
         8a:0d:d9:fe:01:1c:22:52:be:ca:13:7d:ed:c3:b9:55:03:c3:
         ea:0d:56:ba:52:7b:9f:18:73:61:c6:ea:4b:89:6a:81:2f:58:
         72:96:96:24:64:b5:0d:c4:29:e3:b2:e3:e8:a4:e1:1f:63:ae:
         90:af:69:17:3a:a3:4c:e6:5f:99:8b:73:b6:e4:ca:30:09:76:
         0f:0d:be:cd:ec:13:f5:3f:25:7e:5b:6a:c8:b0:02:6d:e9:f1:
         bf:df:fd:65:ee:3d:b3:1d:c0:2a:f0:2e:05:fa:11:b9:40:07:
         fb:e1:b5:be:7d:aa:9a:4e:22:02:29:60:ca:a8:53:69:ea:09:
         55:d0:b8:b4:b0:c5:0f:80:da:e0:44:c5:43:e9:7b:49:73:88:
         c1:7d:b1:a0:f3:ad:0a:47:46:bc:ba:63:80:d3:2a:6a:63:e6:
         b5:5c:e4:a2:fb:25:d8:ca:44:55:99:d0:f0:5c:e0:90:26:b2:
         4b:25:5f:c9:09:1a:76:b2:3e:d0:8f:8f:59:76:da:1b:92:03:
         34:a2:0f:4a:30:47:18:e7:2a:ab:6c:80:2a:66:ca:21:ec:e0:
         54:1d:74:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 11:05:17 2025 by rpki-client