This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G1e15FKgwd2L2LhsLhWW6vuogK66qzYUbfMdE3K7kZ7R/0/5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0.mft
File:                     5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0.mft (raw, json)
Hash identifier:          VoXm7K7g2j9rwcP1g3mtTABQMC4ibpU0uKUTqlptKOo=
Subject key identifier:   D4:E0:D8:CE:43:1F:E4:4A:1C:63:C7:F3:E1:5A:13:AF:B3:F4:A7:7F
Authority key identifier: 5C:8C:B7:59:D4:36:C5:E8:9C:5D:AA:EB:62:8D:27:A2:EA:CA:72:C0
Certificate issuer:       /CN=5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0
Certificate serial:       18C52A7E55B2C4A55701AA225E1511491EBE9894
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G1e15FKgwd2L2LhsLhWW6vuogK66qzYUbfMdE3K7kZ7R/0/5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0.mft
Manifest number:          23
Signing time:             Sat 20 Dec 2025 01:51:50 +0000
Manifest this update:     Sat 20 Dec 2025 01:46:50 +0000
Manifest next update:     Sun 21 Dec 2025 03:53:50 +0000
Files and hashes:         1: 3137372e31322e3133362e302f32342d3234203d3e20323637343634.roa (hash: +L9XZMn8px0gbUZyNoGlgceC3Tu/773VgKePzQH/pas=)
                          2: 3137372e31322e3133352e302f32342d3234203d3e20323637343634.roa (hash: hAmV26TM20L8FrAarxvnW4pCIcqsq+K8+y2ocxLtGzM=)
                          3: 3139322e3134312e3130382e302f32322d3332203d3e20323637343634.roa (hash: z2s6cCfXDuOJlpvIh26UN4InQxcdZUSZePChcg94yZA=)
                          4: 5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0.crl (hash: Mpzsw5bWHsXUeVaxnVrtZzegtTxV+F+iiZngjg0CiSc=)
                          5: 323830343a343165383a3a2f33322d313238203d3e20323637343634.roa (hash: 7d8GMm+/p7YDkmnvROFd6jkWM10bxjqxccU2roVGRDI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G1e15FKgwd2L2LhsLhWW6vuogK66qzYUbfMdE3K7kZ7R/0/5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0.crl
                          rsync://rpki-repo.registro.br/repo/G1e15FKgwd2L2LhsLhWW6vuogK66qzYUbfMdE3K7kZ7R/0/5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 03:53:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c5:2a:7e:55:b2:c4:a5:57:01:aa:22:5e:15:11:49:1e:be:98:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0
        Validity
            Not Before: Dec 20 01:46:50 2025 GMT
            Not After : Dec 21 03:53:50 2025 GMT
        Subject: CN=D4E0D8CE431FE44A1C63C7F3E15A13AFB3F4A77F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d2:d8:b5:79:54:be:39:f7:ff:25:e5:c6:03:
                    24:91:0d:b0:d7:35:0c:26:16:3a:f7:34:b9:a8:79:
                    80:7d:b9:10:42:f4:3e:30:29:a4:5f:b4:ef:d0:b1:
                    8a:d8:01:ae:ad:9a:7d:f6:96:21:7e:79:6e:cd:de:
                    f2:92:78:0d:b7:16:2d:d5:f6:7a:7f:78:36:0b:69:
                    21:04:af:1b:7f:eb:21:0a:65:9d:58:d6:d9:fd:c6:
                    e6:f1:33:89:ea:09:37:0d:89:0b:84:fb:85:1a:2c:
                    11:26:24:95:48:43:4c:0b:1f:57:23:84:81:09:fe:
                    eb:a2:07:73:66:08:b0:f4:4c:59:6a:7e:c4:2f:27:
                    51:de:68:22:33:3d:7c:90:9b:a6:82:78:ec:78:d0:
                    d2:f0:fc:16:68:1b:3d:53:99:3a:71:7c:37:c9:9e:
                    04:9a:20:cc:91:ec:26:59:ba:79:82:c8:54:6c:53:
                    85:83:a2:ed:0d:ee:62:59:24:15:4d:48:91:9c:ce:
                    d4:50:f4:08:17:48:ee:2e:73:0f:12:20:f1:1f:6c:
                    e5:1c:24:3a:fd:62:a9:af:97:70:4d:1f:fe:3a:81:
                    43:ee:4f:c2:56:e1:7f:5d:62:06:aa:81:0a:eb:57:
                    f5:b2:92:6f:c8:48:c6:cb:6c:f1:54:61:c1:d8:22:
                    78:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E0:D8:CE:43:1F:E4:4A:1C:63:C7:F3:E1:5A:13:AF:B3:F4:A7:7F
            X509v3 Authority Key Identifier:
                keyid:5C:8C:B7:59:D4:36:C5:E8:9C:5D:AA:EB:62:8D:27:A2:EA:CA:72:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G1e15FKgwd2L2LhsLhWW6vuogK66qzYUbfMdE3K7kZ7R/0/5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G1e15FKgwd2L2LhsLhWW6vuogK66qzYUbfMdE3K7kZ7R/0/5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:df:72:ae:e1:69:7d:86:b5:7b:25:a2:03:55:98:07:60:61:
         e7:72:62:69:aa:f1:d2:39:79:cc:f6:8c:cf:b1:b4:91:de:d2:
         6c:9c:9f:2d:59:a9:27:fc:49:39:89:7f:4d:43:cb:e6:53:41:
         b9:11:84:fc:25:e6:d5:3e:8e:81:4a:e1:7a:a2:ea:e5:1c:7c:
         f1:77:d6:65:92:e9:60:b2:07:20:8f:51:e3:7f:de:00:fc:88:
         44:98:b6:65:2e:30:c5:93:7f:29:ec:8b:3a:da:39:51:4c:d2:
         de:8b:7d:78:17:28:6e:f5:da:6b:71:3c:91:30:38:11:2f:ad:
         8b:cc:0b:c8:6e:3f:85:e2:88:bb:b9:ba:18:60:d4:55:2f:fa:
         c8:d9:99:21:5f:5a:9b:63:b9:02:52:ef:c4:80:41:7f:c9:88:
         a9:12:b5:ae:26:35:6d:d3:30:ec:d7:43:7e:4f:b4:8e:1f:50:
         9e:d7:f5:4c:41:fa:e3:e1:97:7f:4d:af:70:ab:4a:94:e5:d4:
         a6:87:1f:ff:8b:ec:a8:97:03:73:95:9d:4d:2c:c7:42:01:2d:
         a4:a1:08:ac:f0:52:e6:8b:83:75:46:b3:22:37:f7:16:d1:01:
         2c:21:cc:54:67:65:2b:1f:45:bf:e7:51:91:b1:76:b2:78:de:
         54:5b:23:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----