This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.mft
File:                     5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.mft (raw, json)
Hash identifier:          +kfScqzoJqw3fS5jXOhOP2tpP76WZWN8flTbI7yJp2Q=
Subject key identifier:   0F:B4:2D:4E:9E:86:0D:C5:AC:28:39:36:29:C6:C1:AE:B4:5C:93:45
Authority key identifier: 5A:EE:39:E0:3A:3D:AE:A5:B7:81:8D:FE:7D:26:45:BC:EC:E4:DD:1C
Certificate issuer:       /CN=5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C
Certificate serial:       185D94225D9C929C909A38FBEDE82D9ED73E150E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.mft
Manifest number:          01CA
Signing time:             Fri 19 Dec 2025 15:43:32 +0000
Manifest this update:     Fri 19 Dec 2025 15:38:31 +0000
Manifest next update:     Sat 20 Dec 2025 15:59:31 +0000
Files and hashes:         1: 3137392e39372e35332e302f32342d3234203d3e203532393632.roa (hash: qnNVQQQhwrRVj61bNseCRn4y0Bt7K+ZpVFw8r9YXUyw=)
                          2: 3137392e39372e35342e302f32342d3234203d3e203532393632.roa (hash: Maix8WLlWC2YO+tz/1TMm0xSJjdhmVq5HBsHf/R4L4o=)
                          3: 3137372e31312e302e302f32312d3234203d3e203532393632.roa (hash: 8GnwsRQHdBNWaBbJvuKi1QqxiasbQ/ruYdGFprh9yuY=)
                          4: 3137392e39372e36312e302f32342d3234203d3e203532393632.roa (hash: T31Z58keaJ8qTRrS9lJMv7813UIoU2W2a7xK045NQuQ=)
                          5: 3137392e39372e34382e302f32302d3230203d3e203532393632.roa (hash: RNjdcMY4Dl5sHHlQuR0YNe+2FR7gWl0FV/TDiMDZkpM=)
                          6: 3137392e39372e35372e302f32342d3234203d3e203532393632.roa (hash: 73nABlZU2SYDKOUHI8uallz6bXuxdGYmVYSsFZOrJ0k=)
                          7: 3137392e39372e35322e302f32342d3234203d3e203532393632.roa (hash: d7e5o5b+wZ1NVpgfbxBsSZ31ykdK/E6OtldqceaLs/M=)
                          8: 3137392e39372e36322e302f32342d3234203d3e203532393632.roa (hash: t5FiezG9zSepFcELA6KPKWN9ptCvNmlDhvCOzrA5OSc=)
                          9: 3137392e39372e34392e302f32342d3234203d3e203532393632.roa (hash: pg2kZaiGAr2vq5r51ijIZrw1QrqVbquHpvd794IkYms=)
                          10: 3137392e39372e35382e302f32342d3234203d3e203532393632.roa (hash: vRJs5yQM6ZgE851oB0z6pQo171yGQDsdU7FFNu5Aju8=)
                          11: 3137392e39372e35362e302f32342d3234203d3e203532393632.roa (hash: zG25yiwcFV1mhMd27uGfWDTVD3bIBt4d7JCtjG0voIU=)
                          12: 3137392e39372e35392e302f32342d3234203d3e203532393632.roa (hash: j9SQIesgFJbT9Fe0Im6ADGLSyRhoCILg8aBZsGTWsCc=)
                          13: 323830343a3331633a3a2f33322d3332203d3e203532393632.roa (hash: GaY/KkDMesX4ecslQ2IyQkLXINIqloyzn4qsHySo8g8=)
                          14: 3137392e39372e36332e302f32342d3234203d3e203532393632.roa (hash: 7p9LGJYVt2fuEtFRV/kklx/o2P4zWFj2xgK8taIkQiA=)
                          15: 3137392e39372e35302e302f32342d3234203d3e203532393632.roa (hash: NyAfDVp7UebyUMuEkbbd3JpFbgatstCg++vt6yyUGSc=)
                          16: 3137392e39372e35352e302f32342d3234203d3e203532393632.roa (hash: HFT+CFVO93hSgn4WPBU90jsmRUg/m1IimO5sN5CsmYs=)
                          17: 3137392e39372e35312e302f32342d3234203d3e203532393632.roa (hash: edE5rKQ9NfdSlEL+P7HBHkSwJCV98aPR67dqAZOXnC0=)
                          18: 3137392e39372e36302e302f32342d3234203d3e203532393632.roa (hash: oObj0pPLNLyP9qAiw01WkCQzAbpQaUXdfZzN/yWvbBc=)
                          19: 3137392e39372e34382e302f32342d3234203d3e203532393632.roa (hash: SGrvi6negrHR0PKHXqJxAhsgj3KivJ94paFMNk+8O3g=)
                          20: 5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.crl (hash: WXkYI/5rWbQEGQ8ZuVj5EqMeTphYsHmKp8jrjYRn8xM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.crl
                          rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 15:59:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:5d:94:22:5d:9c:92:9c:90:9a:38:fb:ed:e8:2d:9e:d7:3e:15:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C
        Validity
            Not Before: Dec 19 15:38:31 2025 GMT
            Not After : Dec 20 15:59:31 2025 GMT
        Subject: CN=0FB42D4E9E860DC5AC28393629C6C1AEB45C9345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:07:25:b3:3a:06:34:c0:85:3b:7e:46:09:25:
                    6e:e5:05:d4:64:6b:39:9b:56:b1:6b:dd:8a:1f:d2:
                    48:26:ae:24:a5:dd:2d:4a:43:59:df:d7:46:f4:25:
                    c1:06:d7:75:6e:fe:20:25:cd:ed:da:9b:43:43:3b:
                    2c:b1:09:8e:19:09:b3:fc:95:3b:72:71:c6:5f:3d:
                    63:e4:40:9c:eb:88:98:56:d0:0c:de:c1:03:47:a7:
                    44:32:73:a2:5f:5d:c2:31:27:ce:a0:dd:49:13:3c:
                    66:7c:ec:98:d1:e7:60:03:56:ad:88:ce:5c:ae:b3:
                    db:9b:0d:7a:1e:64:47:d5:ad:7c:e9:6e:f5:fc:9f:
                    37:31:9a:6a:24:c2:69:44:bf:40:52:a7:0f:57:46:
                    f1:48:c3:47:11:e8:6d:d1:c0:00:87:9a:3c:29:1d:
                    f1:de:87:84:23:3c:de:f4:1b:2f:f5:35:9b:f5:38:
                    73:59:bc:0a:79:a7:d6:c6:2f:1e:36:ea:31:44:f4:
                    dd:4a:09:3c:44:9c:00:b7:db:00:57:ca:03:42:ca:
                    6e:65:08:9c:1c:ee:5f:c4:f5:58:e6:f1:cc:5a:b2:
                    69:be:13:4f:3f:5b:02:47:39:3d:ae:99:0f:01:64:
                    8b:c1:95:8d:41:bb:08:78:83:5e:8e:ed:7b:b8:31:
                    d8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B4:2D:4E:9E:86:0D:C5:AC:28:39:36:29:C6:C1:AE:B4:5C:93:45
            X509v3 Authority Key Identifier:
                keyid:5A:EE:39:E0:3A:3D:AE:A5:B7:81:8D:FE:7D:26:45:BC:EC:E4:DD:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:d1:b8:27:b6:14:50:52:81:e6:84:57:f0:81:d8:d6:ea:53:
         9d:ec:dd:27:b7:a8:86:ec:38:32:39:d2:ec:38:2b:3f:41:15:
         42:02:af:a9:16:5a:0a:fe:16:d1:00:8b:24:6e:f7:bd:65:d1:
         5d:6a:17:79:cd:3a:42:d0:49:7f:95:ac:33:8d:37:d9:c5:71:
         76:2e:d8:22:61:e7:4e:3a:6a:f1:a0:b3:d7:0c:a9:a9:6f:cc:
         f5:66:1a:cb:d0:ce:91:b9:a9:89:79:45:d6:da:3a:71:5a:7b:
         43:cd:0c:af:47:a6:2f:e0:91:7c:f7:d4:8c:55:46:57:cf:e5:
         e4:f0:9d:62:4f:f3:fd:bd:c7:55:8d:09:34:a7:27:4e:9f:51:
         69:f3:85:5f:ea:0d:96:02:d8:38:f7:89:ec:4a:96:0d:56:c2:
         f9:00:f3:56:86:c0:7a:af:d8:59:3a:f1:60:17:1c:7a:c6:ce:
         dc:2f:3c:3f:e6:9e:2c:24:bc:c7:77:91:47:d9:e8:eb:85:86:
         01:ed:d5:c8:99:f5:2c:3e:fe:79:45:e5:03:cc:8f:31:b5:f1:
         3d:29:6b:a0:7d:22:d4:c4:fa:5f:40:2d:66:73:dc:82:1b:e6:
         57:25:3a:9c:80:5d:34:39:7c:51:21:59:09:dc:67:8f:6c:61:
         be:8a:8f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 08:13:36 2025 by rpki-client