This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.mft
File:                     5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.mft (raw, json)
Hash identifier:          5TvKFeK9JJD+1cijuQGX8xsE6sm/hN6BIQCWzAokUXY=
Subject key identifier:   CC:AF:03:B9:2A:14:72:45:CD:1B:D7:8F:9C:64:71:B7:A2:A7:31:E6
Authority key identifier: 5D:C0:8B:C2:E7:CA:BC:11:B8:39:5E:55:BD:1B:E9:CD:DA:57:49:39
Certificate issuer:       /CN=5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939
Certificate serial:       46354F36AD2907D2CBBFBC74DE7CC2AF983C273C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.mft
Manifest number:          82
Signing time:             Sat 20 Dec 2025 05:41:13 +0000
Manifest this update:     Sat 20 Dec 2025 05:36:13 +0000
Manifest next update:     Sun 21 Dec 2025 06:19:13 +0000
Files and hashes:         1: 323830343a386539383a3a2f33322d3438203d3e20323733343336.roa (hash: BxvAZqsINc17TFdRXILJwTm+FG+N9YG1areIiru28HI=)
                          2: 5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.crl (hash: Z/adZMDMYrZl1apeE1C41+eeXX3K8ZzJnTbVdpalW0c=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.crl
                          rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 06:19:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:35:4f:36:ad:29:07:d2:cb:bf:bc:74:de:7c:c2:af:98:3c:27:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939
        Validity
            Not Before: Dec 20 05:36:13 2025 GMT
            Not After : Dec 21 06:19:13 2025 GMT
        Subject: CN=CCAF03B92A147245CD1BD78F9C6471B7A2A731E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:dd:51:b9:9c:b5:0b:e3:0e:b0:3b:e5:46:95:
                    66:fb:45:4a:b2:61:24:19:28:75:8f:6e:69:1c:76:
                    d5:7d:c1:e8:61:c4:38:fe:21:ba:f1:0d:ab:9a:ae:
                    4b:31:21:da:4c:84:3e:1d:7e:ef:4f:e3:85:ad:11:
                    b9:db:cd:5e:b2:6d:6f:1c:ff:fe:4d:d3:75:48:05:
                    51:35:9c:1e:6e:3b:94:30:d5:f6:6b:b7:5e:0e:46:
                    3c:03:a9:36:4c:31:98:8a:d6:a9:17:14:90:25:70:
                    a7:88:0d:5c:fe:47:b7:c7:13:9f:47:df:f1:ef:9c:
                    c0:d3:3a:b0:a5:4e:92:72:93:c8:94:4c:3b:27:80:
                    dd:4f:88:5b:fb:1e:76:5e:39:5b:c8:95:94:a9:49:
                    3d:25:c2:fe:40:e0:94:63:81:28:31:1d:59:b5:63:
                    69:eb:b3:fc:5c:90:34:3f:69:4a:93:3c:71:21:93:
                    f5:fb:90:1f:da:4e:b5:3f:c6:83:40:50:16:d2:db:
                    c1:b9:94:1f:9b:d6:25:70:8d:c3:4b:9a:44:46:c8:
                    6a:71:a8:37:5d:2c:0c:20:08:03:00:d7:74:11:f0:
                    eb:93:66:bc:cf:54:a6:ea:06:fb:fd:fe:8b:ff:41:
                    2c:69:59:75:27:5f:51:e0:4c:5b:9d:d9:2b:c8:4f:
                    5a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:AF:03:B9:2A:14:72:45:CD:1B:D7:8F:9C:64:71:B7:A2:A7:31:E6
            X509v3 Authority Key Identifier:
                keyid:5D:C0:8B:C2:E7:CA:BC:11:B8:39:5E:55:BD:1B:E9:CD:DA:57:49:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:c0:4f:0e:20:b9:e7:27:04:b6:95:c7:5d:01:2e:4b:69:a4:
         5f:f2:ec:fe:6e:1d:86:83:26:a3:53:9a:db:82:51:a9:c1:b5:
         35:51:37:b1:29:07:4d:fa:07:09:f4:ce:a9:9b:0a:cc:c9:69:
         e8:3f:d0:1a:42:0c:43:7d:f2:38:f1:4d:37:45:a2:5e:92:41:
         71:6a:54:77:0a:eb:9d:1d:ab:97:f5:40:db:31:fb:a0:7b:29:
         28:87:ac:6e:f9:c5:a9:5a:fa:0e:44:6f:8e:db:81:26:90:e4:
         55:b8:3a:bf:7d:bc:1b:1b:22:c8:ae:d4:0a:10:21:9d:ed:75:
         7c:bc:bc:a8:b8:94:80:38:1d:e4:7b:ad:9a:50:e8:05:66:d0:
         c8:59:ac:80:3a:a4:f8:b4:f8:a6:04:5c:83:97:13:f4:7c:46:
         f6:0c:e1:b8:9d:b0:ff:be:c8:fd:83:aa:1d:f7:e1:60:39:af:
         a2:63:41:99:64:c0:b6:8d:62:7a:4d:b9:65:9c:db:fc:4a:ac:
         52:ca:81:bd:8f:f4:47:f6:b0:30:1d:ed:6d:57:a0:58:f2:79:
         4c:71:c1:2e:cd:2e:32:82:aa:ef:70:7d:09:d6:6d:48:cd:8f:
         c0:13:06:b4:7b:7b:b4:5a:6d:4f:fb:b4:1d:10:3a:1a:30:85:
         c4:ea:20:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:32:18 2025 by rpki-client