This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FENcm2J1dgX8XdpwvSutzeiCVTXmkjPz2pEm3rBXfDub/0/54DF91EF68CE0001CACA48730953847B893152BE.mft
File:                     54DF91EF68CE0001CACA48730953847B893152BE.mft (raw, json)
Hash identifier:          cYDTDQXnDaDsimkqvy7C3rEwRmAC69LZxQJPX+a1tTE=
Subject key identifier:   75:86:AB:E0:02:E9:C7:C3:21:0D:FE:E2:86:72:80:70:39:4C:24:F8
Authority key identifier: 54:DF:91:EF:68:CE:00:01:CA:CA:48:73:09:53:84:7B:89:31:52:BE
Certificate issuer:       /CN=54DF91EF68CE0001CACA48730953847B893152BE
Certificate serial:       256554B04BC7F95B7A00B43B0AD7C597399CE7AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54DF91EF68CE0001CACA48730953847B893152BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FENcm2J1dgX8XdpwvSutzeiCVTXmkjPz2pEm3rBXfDub/0/54DF91EF68CE0001CACA48730953847B893152BE.mft
Manifest number:          9D
Signing time:             Fri 19 Dec 2025 12:51:57 +0000
Manifest this update:     Fri 19 Dec 2025 12:46:57 +0000
Manifest next update:     Sat 20 Dec 2025 15:23:57 +0000
Files and hashes:         1: 323830343a386438383a3a2f33322d3333203d3e20323733333633.roa (hash: bX3xiNMC04DNilp/plrdfGdAQ7mLfBevaOSlAqhHK4k=)
                          2: 54DF91EF68CE0001CACA48730953847B893152BE.crl (hash: /kNdoVQ5qxYpJ9NPmr81+ANZcOrwGNbTeGMdTKcrSy0=)
                          3: 3133382e3131372e34362e302f32332d3234203d3e20323733333633.roa (hash: mOrhDQesBXpDEAsapt3g8zn8TcgVbcJNiPm+vRDfw2U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FENcm2J1dgX8XdpwvSutzeiCVTXmkjPz2pEm3rBXfDub/0/54DF91EF68CE0001CACA48730953847B893152BE.crl
                          rsync://rpki-repo.registro.br/repo/FENcm2J1dgX8XdpwvSutzeiCVTXmkjPz2pEm3rBXfDub/0/54DF91EF68CE0001CACA48730953847B893152BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54DF91EF68CE0001CACA48730953847B893152BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 15:23:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:65:54:b0:4b:c7:f9:5b:7a:00:b4:3b:0a:d7:c5:97:39:9c:e7:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54DF91EF68CE0001CACA48730953847B893152BE
        Validity
            Not Before: Dec 19 12:46:57 2025 GMT
            Not After : Dec 20 15:23:57 2025 GMT
        Subject: CN=7586ABE002E9C7C3210DFEE286728070394C24F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:36:b3:24:c5:43:fa:86:3b:9d:96:e0:1c:07:
                    5a:88:56:5d:d2:ca:ce:33:1b:d3:ab:ba:2d:ff:b5:
                    8b:cd:a3:2b:1c:9b:0e:9b:8b:eb:ea:e7:93:82:02:
                    95:99:ba:79:13:f6:3e:3b:86:9a:5c:23:af:52:3e:
                    5e:ae:c1:30:8c:ba:3d:38:3e:a6:4c:05:d0:01:e1:
                    fb:3a:56:e8:58:8a:0d:ca:b6:f7:46:5b:60:70:c5:
                    0a:ff:15:1e:ff:2d:0e:ab:30:4a:d2:76:09:6f:50:
                    79:d1:ad:60:7b:81:32:1d:4d:d8:88:88:3f:fb:5c:
                    01:fe:18:41:5e:4d:e8:91:13:f5:e4:4d:ee:0d:03:
                    ca:b8:58:0a:4f:b5:1c:55:19:5e:17:77:27:54:af:
                    08:2c:99:c8:91:11:ae:f6:94:1d:cc:65:9e:cf:2d:
                    6b:55:71:9d:6f:3f:2c:ff:6d:08:76:5a:91:76:03:
                    fc:c2:37:bc:56:4f:c2:a2:24:12:db:c3:46:7d:d8:
                    a1:a2:8f:61:02:c9:11:82:09:5a:b1:f8:17:0f:85:
                    ab:8a:29:d3:1c:60:84:c6:72:f4:e8:5a:87:b5:1a:
                    2e:17:2f:43:ec:30:b6:6a:09:df:84:d2:74:58:90:
                    ea:d1:cb:bb:08:ad:01:09:35:fc:ca:62:79:d9:4c:
                    e8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:86:AB:E0:02:E9:C7:C3:21:0D:FE:E2:86:72:80:70:39:4C:24:F8
            X509v3 Authority Key Identifier:
                keyid:54:DF:91:EF:68:CE:00:01:CA:CA:48:73:09:53:84:7B:89:31:52:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FENcm2J1dgX8XdpwvSutzeiCVTXmkjPz2pEm3rBXfDub/0/54DF91EF68CE0001CACA48730953847B893152BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54DF91EF68CE0001CACA48730953847B893152BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FENcm2J1dgX8XdpwvSutzeiCVTXmkjPz2pEm3rBXfDub/0/54DF91EF68CE0001CACA48730953847B893152BE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:cf:18:3b:06:78:c2:65:ad:fb:e6:29:ae:c3:d0:07:26:a5:
         89:d3:56:01:79:56:23:ae:c3:54:f5:9d:16:e7:20:29:1d:70:
         86:0c:c1:ae:2a:aa:20:fc:3b:9d:d4:7c:de:7d:49:92:a0:21:
         94:a6:e7:d2:88:65:54:5e:ac:b8:95:57:52:7e:f8:d0:60:59:
         33:22:27:49:ab:69:d8:a9:82:c7:c7:a0:68:da:87:cb:25:32:
         4f:b8:38:94:9c:79:89:70:47:5f:23:7f:0d:91:1f:18:a0:7d:
         bf:78:96:50:ef:71:3c:08:81:83:c8:e7:e1:ae:42:00:a9:2b:
         ce:40:22:48:1f:93:d5:ab:4b:47:ab:fe:00:cb:9a:0c:fd:ef:
         ef:de:6a:4e:65:4e:38:13:6a:ba:91:41:8c:9d:92:5d:28:c1:
         21:13:40:27:a0:a0:ca:7c:66:cd:f8:99:2f:c6:11:09:43:26:
         bd:32:2c:6a:32:72:5a:ad:78:92:e3:7e:b1:9a:c1:a0:02:26:
         ee:ee:ed:e0:bd:d0:f8:2a:1c:64:b3:0f:da:5e:6e:9f:23:64:
         a7:8b:0a:8f:73:dd:2b:73:57:51:85:4f:04:5e:1e:bf:20:d3:
         b0:44:36:2d:30:0b:1f:26:75:99:3f:90:d8:15:10:de:c4:64:
         ba:14:a8:77
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJWVUsEvH+Vt6ALQ7CtfFlzmc568wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRERjkxRUY2OENFMDAwMUNBQ0E0ODczMDk1Mzg0N0I4
OTMxNTJCRTAeFw0yNTEyMTkxMjQ2NTdaFw0yNTEyMjAxNTIzNTdaMDMxMTAvBgNV
BAMTKDc1ODZBQkUwMDJFOUM3QzMyMTBERkVFMjg2NzI4MDcwMzk0QzI0RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2NrMkxUP6hjudluAcB1qIVl3S
ys4zG9Orui3/tYvNoyscmw6bi+vq55OCApWZunkT9j47hppcI69SPl6uwTCMuj04
PqZMBdAB4fs6VuhYig3KtvdGW2BwxQr/FR7/LQ6rMErSdglvUHnRrWB7gTIdTdiI
iD/7XAH+GEFeTeiRE/XkTe4NA8q4WApPtRxVGV4XdydUrwgsmciREa72lB3MZZ7P
LWtVcZ1vPyz/bQh2WpF2A/zCN7xWT8KiJBLbw0Z92KGij2ECyRGCCVqx+BcPhauK
KdMcYITGcvToWoe1Gi4XL0PsMLZqCd+E0nRYkOrRy7sIrQEJNfzKYnnZTOh/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUdYar4ALpx8MhDf7ihnKAcDlMJPgwHwYDVR0j
BBgwFoAUVN+R72jOAAHKykhzCVOEe4kxUr4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkVOY20ySjFkZ1g4WGRwd3ZTdXR6ZWlDVlRYbWtqUHoycEVtM3JCWGZE
dWIvMC81NERGOTFFRjY4Q0UwMDAxQ0FDQTQ4NzMwOTUzODQ3Qjg5MzE1MkJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0REY5MUVGNjhDRTAwMDFD
QUNBNDg3MzA5NTM4NDdCODkzMTUyQkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RkVOY20ySjFkZ1g4WGRwd3ZTdXR6ZWlDVlRYbWtqUHoycEVtM3JCWGZEdWIvMC81
NERGOTFFRjY4Q0UwMDAxQ0FDQTQ4NzMwOTUzODQ3Qjg5MzE1MkJFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADM8YOwZ4wmWt++YprsPQByalidNWAXlWI67DVPWdFucgKR1whgzBriqqIPw7
ndR83n1JkqAhlKbn0ohlVF6suJVXUn740GBZMyInSatp2KmCx8egaNqHyyUyT7g4
lJx5iXBHXyN/DZEfGKB9v3iWUO9xPAiBg8jn4a5CAKkrzkAiSB+T1atLR6v+AMua
DP3v795qTmVOOBNqupFBjJ2SXSjBIRNAJ6CgynxmzfiZL8YRCUMmvTIsajJyWq14
kuN+sZrBoAIm7u7t4L3Q+CocZLMP2l5unyNkp4sKj3PdK3NXUYVPBF4evyDTsEQ2
LTALHyZ1mT+Q2BUQ3sRkuhSodw==
-----END CERTIFICATE-----
Generated at Sat Dec 20 07:49:41 2025 by rpki-client