This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/B5EEB596E7AF02EFB172E48B357B396D9792EB2A.mft
File:                     B5EEB596E7AF02EFB172E48B357B396D9792EB2A.mft (raw, json)
Hash identifier:          MZpA7EeWjGxWjw1MUssWIaAL1esxD43T2AcbtRw/gzY=
Subject key identifier:   04:75:A8:05:82:00:4A:F0:45:B0:47:A1:5E:CB:2C:A7:37:15:CE:7A
Authority key identifier: B5:EE:B5:96:E7:AF:02:EF:B1:72:E4:8B:35:7B:39:6D:97:92:EB:2A
Certificate issuer:       /CN=B5EEB596E7AF02EFB172E48B357B396D9792EB2A
Certificate serial:       55E6A35E34C6FC94AF35EBBCE419FCBECE5ACA6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5EEB596E7AF02EFB172E48B357B396D9792EB2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/B5EEB596E7AF02EFB172E48B357B396D9792EB2A.mft
Manifest number:          01AF
Signing time:             Sat 20 Dec 2025 06:27:26 +0000
Manifest this update:     Sat 20 Dec 2025 06:22:26 +0000
Manifest next update:     Sun 21 Dec 2025 09:34:26 +0000
Files and hashes:         1: 34352e3137382e32382e302f32322d3332203d3e20323639303034.roa (hash: QFqR5IQGj5SGcKKmo5CeFf/nqJQtNMbujXQgd+yD1YE=)
                          2: B5EEB596E7AF02EFB172E48B357B396D9792EB2A.crl (hash: xajw3BDh3rf+mK7JM0o85P9PROUwnQ5BGzJ0AgoMXZM=)
                          3: 323830343a356466383a3a2f33322d313238203d3e20323639303034.roa (hash: a7uxKBKxZePdnsXDYrOskVd4/j5VTyR/302asIwumpg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/B5EEB596E7AF02EFB172E48B357B396D9792EB2A.crl
                          rsync://rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/B5EEB596E7AF02EFB172E48B357B396D9792EB2A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5EEB596E7AF02EFB172E48B357B396D9792EB2A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 09:34:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e6:a3:5e:34:c6:fc:94:af:35:eb:bc:e4:19:fc:be:ce:5a:ca:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EEB596E7AF02EFB172E48B357B396D9792EB2A
        Validity
            Not Before: Dec 20 06:22:26 2025 GMT
            Not After : Dec 21 09:34:26 2025 GMT
        Subject: CN=0475A80582004AF045B047A15ECB2CA73715CE7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3a:8e:6d:55:c3:f5:18:e1:2f:25:d8:49:e1:
                    31:0f:66:b6:24:bd:2a:3f:72:cd:3d:24:03:7a:77:
                    54:f4:88:08:a5:3a:a3:d8:b6:c3:b8:3d:2f:ed:21:
                    bd:79:68:c3:33:fa:f4:ed:2c:79:f0:4a:5f:19:b4:
                    ae:1a:85:87:ca:5c:40:62:2a:19:37:7a:38:02:14:
                    b4:47:ba:df:5d:d5:15:87:e4:29:50:ac:29:93:a4:
                    91:07:92:39:43:a1:1c:d0:1c:9a:64:d4:09:3a:fa:
                    af:75:bf:14:91:d4:2a:a5:e9:03:1b:59:93:2e:07:
                    e6:4f:bd:c5:74:14:2c:9c:1d:fe:b8:c7:b2:09:93:
                    e2:e1:88:b9:04:2f:d6:67:7f:cd:03:a7:e4:3f:20:
                    b3:29:51:ec:24:d6:b5:1f:75:1d:bf:df:67:99:da:
                    ff:c2:8b:8e:23:58:eb:01:86:31:aa:7e:e7:54:61:
                    53:ba:26:47:c8:20:b8:42:3b:2f:eb:4b:bf:db:b3:
                    c2:43:6f:e1:70:4b:44:78:41:dd:a2:41:e5:e3:ca:
                    ba:e5:49:cb:a5:ac:ef:31:e2:9a:51:c2:63:49:6a:
                    28:0e:79:06:b5:78:a9:b5:33:39:14:0f:a4:d8:ae:
                    24:43:05:01:ed:a3:87:84:c0:c7:05:4f:a5:52:56:
                    0b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:75:A8:05:82:00:4A:F0:45:B0:47:A1:5E:CB:2C:A7:37:15:CE:7A
            X509v3 Authority Key Identifier:
                keyid:B5:EE:B5:96:E7:AF:02:EF:B1:72:E4:8B:35:7B:39:6D:97:92:EB:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/B5EEB596E7AF02EFB172E48B357B396D9792EB2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5EEB596E7AF02EFB172E48B357B396D9792EB2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/B5EEB596E7AF02EFB172E48B357B396D9792EB2A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:d6:64:61:e7:13:66:cb:25:96:b3:74:f5:44:63:83:d5:43:
         82:93:c7:8f:ca:ea:9d:73:ff:1c:64:01:d3:70:1b:c8:ec:34:
         db:7d:0f:20:c5:31:fb:71:b3:10:df:43:55:f4:4b:30:6e:fd:
         d7:ca:5a:64:f6:31:ce:78:1b:76:23:bd:d9:df:4c:09:4f:25:
         1c:79:28:e0:06:12:61:f6:f4:ed:8d:0f:f5:3d:66:df:cf:f0:
         b3:72:38:a6:6b:5c:c6:a8:bb:89:a8:b8:77:44:f4:92:58:88:
         bb:95:ad:08:6c:df:64:e5:19:b7:0e:e5:b6:fb:7e:68:1b:dc:
         be:8d:47:60:24:2a:44:a7:ce:b6:8f:cb:6f:dc:17:92:14:a1:
         f8:44:02:a5:a0:a0:ed:44:ef:68:02:c4:20:ac:b3:69:5c:3e:
         f7:10:1e:c8:87:af:95:49:46:5b:d0:12:a1:e3:6d:8a:7d:05:
         dc:80:2b:59:5c:89:12:7a:ee:29:8e:b3:40:16:ee:f9:e5:77:
         59:d5:87:04:d4:e4:a3:3a:58:81:a1:7c:96:ed:5c:ad:6b:b5:
         29:c0:de:f5:ac:3f:52:76:32:cb:ed:a4:1d:6e:10:a7:25:06:
         a5:de:d7:e5:cf:86:0e:ed:e0:b5:a4:27:f3:c4:f4:88:ba:06:
         a2:67:93:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:59:34 2025 by rpki-client