This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft
File:                     B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft (raw, json)
Hash identifier:          GiwYU38Kwbl+Rd1vhXsJAyI+uM9Vsv8+r7tGz7jBvE8=
Subject key identifier:   7A:9F:78:FF:80:82:18:D6:DD:8D:33:39:DC:EB:9F:17:F9:EC:05:AC
Authority key identifier: B5:FC:5F:08:B8:C4:86:40:13:DC:3A:4C:A4:7C:22:00:B3:C2:B8:19
Certificate issuer:       /CN=B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819
Certificate serial:       4D1D01150D4B3BF06645B83C41D77B02572DD74B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft
Manifest number:          0342
Signing time:             Sat 20 Dec 2025 11:00:02 +0000
Manifest this update:     Sat 20 Dec 2025 10:55:02 +0000
Manifest next update:     Sun 21 Dec 2025 13:04:02 +0000
Files and hashes:         1: 323830343a333264343a383030303a3a2f33332d3333203d3e20323635313030.roa (hash: nM938q4SN87BNGIJ3b3ggcn3PsaDtJUz1la3aiK7viU=)
                          2: 323830343a333264343a3a2f33322d3332203d3e20323635313030.roa (hash: oxHxONE9x52U+e5QcW3K1P/Di5t/pz6PYQ4GKPQ5jt0=)
                          3: B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl (hash: jHX1tmgTcc1QY3ryypoxopnSZfx0JwgiscbCOgUdpr8=)
                          4: 323830343a333264343a3a2f33332d3436203d3e20323635313030.roa (hash: 5JMhZ4cEqX3OysQlgCAgv6BovY6KpEJinhAlGzZkJNc=)
                          5: 3137302e3235342e38302e302f32322d3234203d3e20323635313030.roa (hash: 3cJ6i4eVfePj/znbhXPN+EEU/pcnQn4cPiUP8LWIC6M=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl
                          rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 13:04:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:1d:01:15:0d:4b:3b:f0:66:45:b8:3c:41:d7:7b:02:57:2d:d7:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819
        Validity
            Not Before: Dec 20 10:55:02 2025 GMT
            Not After : Dec 21 13:04:02 2025 GMT
        Subject: CN=7A9F78FF808218D6DD8D3339DCEB9F17F9EC05AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e5:c3:17:18:39:27:26:5b:c9:53:d4:15:ff:
                    a7:f7:b6:96:f7:e8:bd:69:28:60:dd:ab:e0:cd:9c:
                    0a:c7:96:c6:66:b5:aa:51:51:f6:4e:91:2c:86:c8:
                    23:71:3a:f5:e1:22:90:17:c6:33:37:85:5f:01:f5:
                    5a:00:ac:73:ce:e0:e4:5a:4e:6c:76:01:5c:a3:e8:
                    a8:b4:1c:66:23:ca:a4:2f:c7:fb:ec:4e:90:af:b7:
                    20:57:4a:da:9f:1a:e4:74:83:60:4e:79:ef:9f:31:
                    d5:1d:06:82:d2:d7:6f:87:b2:e5:9c:55:0e:1f:d4:
                    48:8f:bf:b8:93:6e:cd:f7:0f:a2:d5:be:db:ec:d7:
                    5b:97:1f:fb:43:8c:09:d2:a9:a8:7a:0f:f6:d2:fb:
                    0c:94:50:2c:b3:bc:fe:b1:4b:06:84:6e:ee:1b:15:
                    07:38:25:a3:37:e3:af:18:ed:b8:fd:9e:52:ea:15:
                    01:d7:fa:2c:9d:ca:8e:73:78:95:cf:2f:93:37:b3:
                    59:c4:48:62:5c:73:b5:0d:62:52:92:44:aa:e2:f5:
                    f7:64:d7:51:7d:71:d3:e3:29:6d:3e:86:70:0a:26:
                    4e:a7:bd:51:71:64:5e:22:f8:51:92:37:31:3b:5b:
                    68:d2:38:43:bc:8f:02:65:16:25:aa:c6:ab:51:a0:
                    31:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9F:78:FF:80:82:18:D6:DD:8D:33:39:DC:EB:9F:17:F9:EC:05:AC
            X509v3 Authority Key Identifier:
                keyid:B5:FC:5F:08:B8:C4:86:40:13:DC:3A:4C:A4:7C:22:00:B3:C2:B8:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:c2:85:35:f4:98:b3:1f:bd:78:be:13:d4:14:c4:34:76:f4:
         53:cc:7b:31:69:91:48:4a:e8:d2:72:fe:d3:a1:6f:ee:50:92:
         25:80:ed:58:8e:bb:58:ec:6a:ea:69:10:a2:1f:22:81:c9:d9:
         53:5b:56:d9:72:6c:1e:f0:16:62:24:de:ae:9a:b0:83:2f:bb:
         81:af:8e:a2:e7:f4:c5:95:53:b4:8b:f8:79:84:2c:fc:49:7c:
         f2:f0:8e:1c:18:12:6b:5f:8b:0d:98:2f:a6:c8:29:ef:ff:24:
         cb:0a:62:3c:2c:f2:29:ae:86:a3:44:e2:ff:d3:66:a8:88:1e:
         9a:5d:65:51:27:53:46:4e:dd:a7:39:8e:90:0e:0f:a3:3a:3d:
         ca:af:65:b1:95:fa:a6:07:7f:fc:c6:52:98:4d:e1:d1:be:59:
         0f:73:14:b1:2b:b4:b9:06:77:08:6a:d2:80:9e:98:2a:41:d3:
         c5:8b:4b:da:c3:a4:41:fc:74:08:8f:c4:39:d5:f5:bb:14:63:
         eb:ba:5f:55:66:08:51:9f:2b:ef:d1:8e:a8:0f:e4:28:7a:59:
         65:c4:0d:1c:7e:69:ae:49:ef:2b:41:6a:f3:07:1c:d4:ab:b1:
         a6:a9:e3:22:3a:2b:24:c2:e2:9d:33:cb:63:1f:6c:e6:d4:17:
         fc:ff:18:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:57:13 2025 by rpki-client