This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/1/5BE4378A5E0B1629852BDD255130076ED843FD31.mft
File:                     5BE4378A5E0B1629852BDD255130076ED843FD31.mft (raw, json)
Hash identifier:          pkpFS9E6nNkTyJbYpdC38hPLCJKde18LVxrvbHxtHIU=
Subject key identifier:   05:FC:A8:24:FA:84:A9:8D:53:CC:2C:EB:53:C2:E4:F4:D9:0E:28:34
Authority key identifier: 5B:E4:37:8A:5E:0B:16:29:85:2B:DD:25:51:30:07:6E:D8:43:FD:31
Certificate issuer:       /CN=5BE4378A5E0B1629852BDD255130076ED843FD31
Certificate serial:       41E28D17F6AB1A000E4DAF2D09B918077E96F064
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE4378A5E0B1629852BDD255130076ED843FD31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/1/5BE4378A5E0B1629852BDD255130076ED843FD31.mft
Manifest number:          0201
Signing time:             Wed 31 Dec 2025 02:41:03 +0000
Manifest this update:     Wed 31 Dec 2025 02:36:03 +0000
Manifest next update:     Thu 01 Jan 2026 03:02:03 +0000
Files and hashes:         1: 323830343a346564383a3a2f33322d3438203d3e20323638323836.roa (hash: DMca/RXiFrkqlQwBo0KlXsXg4OMfcZpgtGYiL5B71Ic=)
                          2: 5BE4378A5E0B1629852BDD255130076ED843FD31.crl (hash: 52CH7UtDupxoLsVqRp+WGF3lccQjj+s3KPwUGoaYiEQ=)
                          3: 34352e3233372e3135362e302f32322d3234203d3e20323638323836.roa (hash: c5DPDHYizjL8ayvPf3pB18y+bErYdSs7Q67aszofGaM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/1/5BE4378A5E0B1629852BDD255130076ED843FD31.crl
                          rsync://rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/1/5BE4378A5E0B1629852BDD255130076ED843FD31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE4378A5E0B1629852BDD255130076ED843FD31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 Jan 2026 03:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e2:8d:17:f6:ab:1a:00:0e:4d:af:2d:09:b9:18:07:7e:96:f0:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BE4378A5E0B1629852BDD255130076ED843FD31
        Validity
            Not Before: Dec 31 02:36:03 2025 GMT
            Not After : Jan  1 03:02:03 2026 GMT
        Subject: CN=05FCA824FA84A98D53CC2CEB53C2E4F4D90E2834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dc:24:9e:46:ea:53:47:73:16:eb:73:55:04:
                    3a:b7:c8:0f:ad:09:59:aa:bf:ea:11:a0:13:6b:4a:
                    a2:80:01:0b:47:3a:09:33:7b:6a:44:d4:3b:31:b8:
                    24:12:e8:3e:aa:9e:55:92:55:96:36:0a:de:bd:fa:
                    f5:6d:26:5e:0a:b8:d7:28:a0:8e:ca:b0:46:0f:39:
                    01:b6:bc:37:10:c5:3c:5b:d5:73:c7:c0:29:5b:f0:
                    21:36:cb:cd:b0:09:dc:42:da:5a:66:33:87:a7:03:
                    8a:85:c5:0d:d7:00:b2:2b:25:62:ac:34:b1:be:4f:
                    92:1e:a4:8a:8f:e1:2c:6f:52:b5:98:94:04:51:00:
                    32:34:fe:07:fc:4f:a7:68:70:a5:92:c3:9e:a9:e1:
                    08:ca:95:24:47:40:e3:fb:aa:ee:15:89:4c:e9:3e:
                    3a:4f:61:ac:b3:00:66:09:d3:a2:72:09:33:fa:11:
                    ee:7a:8b:a6:c8:ab:f6:c5:4a:d6:87:1e:c5:f2:92:
                    2f:2f:b7:8c:f5:8d:25:87:a7:e9:5d:38:fc:82:89:
                    a5:72:77:f6:dc:f4:75:70:b7:74:da:16:ef:f1:02:
                    6a:9f:be:c8:19:45:f8:1d:9b:ca:61:6c:31:35:a5:
                    19:fb:d6:61:8d:2b:da:92:e4:29:4e:a5:cb:c4:d3:
                    c9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:FC:A8:24:FA:84:A9:8D:53:CC:2C:EB:53:C2:E4:F4:D9:0E:28:34
            X509v3 Authority Key Identifier:
                keyid:5B:E4:37:8A:5E:0B:16:29:85:2B:DD:25:51:30:07:6E:D8:43:FD:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/1/5BE4378A5E0B1629852BDD255130076ED843FD31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE4378A5E0B1629852BDD255130076ED843FD31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/1/5BE4378A5E0B1629852BDD255130076ED843FD31.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:b6:a4:ee:76:57:68:40:8d:af:7b:6b:89:e5:fb:3f:1f:c1:
         49:7c:7a:cb:87:1b:7a:92:34:57:bb:dc:a0:e6:ef:ad:e9:1f:
         31:7d:6c:d4:64:0b:ea:e5:20:50:ef:ac:a4:9e:49:8a:95:79:
         38:a1:39:0b:ba:05:96:e6:6d:c3:b9:6a:32:52:65:62:df:c1:
         24:d9:8d:7d:6e:7a:1b:24:92:3d:c1:57:d0:8b:cb:01:cb:a7:
         c2:ce:c9:cb:a8:2d:e0:31:15:e4:41:f7:23:2f:43:66:ae:54:
         94:e3:55:6d:12:de:17:67:dd:4e:60:7f:c0:69:01:56:64:8f:
         ae:ef:fd:1e:e6:7c:9b:da:84:76:df:f7:17:58:73:56:c8:21:
         ed:1e:b5:58:5d:4f:a5:d0:c7:6c:84:5c:1f:be:03:fb:69:fd:
         47:2e:c8:12:44:12:db:f1:74:84:49:ae:88:61:eb:a7:c8:4c:
         cd:9e:ef:dd:54:0a:66:dc:65:cc:06:67:73:e1:46:a9:cf:a0:
         09:ee:80:4d:f1:ea:c5:22:1a:fb:c4:7a:91:7b:31:9c:d6:79:
         88:2a:db:7b:5f:3c:b1:c5:26:1b:13:18:ae:94:74:81:27:9b:
         7c:cf:8f:08:5f:81:bd:4c:81:b4:67:fd:c2:ba:85:ae:80:2e:
         55:09:e0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 09:24:28 2025 by rpki-client