This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/UB4wBhtiqddoLnXwp4byW51JUK4ypn3TppvizN1SU97/0/593735A2ABA6B3848108C26014737D33DED5064B.mft
File:                     593735A2ABA6B3848108C26014737D33DED5064B.mft (raw, json)
Hash identifier:          V036wOyqsmlXcLO5zOIfCBmZ7wHCM9b9ptVvuXRUp7g=
Subject key identifier:   C5:8F:DF:D4:AB:B1:01:10:E9:E7:74:19:62:0F:06:6C:D8:45:E3:F1
Authority key identifier: 59:37:35:A2:AB:A6:B3:84:81:08:C2:60:14:73:7D:33:DE:D5:06:4B
Certificate issuer:       /CN=593735A2ABA6B3848108C26014737D33DED5064B
Certificate serial:       21B4DCC96C57525916CEA1BE7C077B3039F929A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/593735A2ABA6B3848108C26014737D33DED5064B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/UB4wBhtiqddoLnXwp4byW51JUK4ypn3TppvizN1SU97/0/593735A2ABA6B3848108C26014737D33DED5064B.mft
Manifest number:          01D0
Signing time:             Fri 19 Dec 2025 17:22:26 +0000
Manifest this update:     Fri 19 Dec 2025 17:17:26 +0000
Manifest next update:     Sat 20 Dec 2025 19:13:26 +0000
Files and hashes:         1: 323830343a313331343a3a2f33322d3333203d3e20323633353134.roa (hash: 8LgMQh0Rz2cr3k6bZII8kFihncseaBxTj6AJhvmVtZY=)
                          2: 593735A2ABA6B3848108C26014737D33DED5064B.crl (hash: pA4EvV2FdnYfeZdhsdqrC4cfD14M+fogNkMdiouOwik=)
                          3: 3137372e38342e34342e302f32322d3234203d3e20323633353134.roa (hash: n4Aj1l71hruFw8PFNUjFr0duWsG8PNBo3C3N3kaYQPI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/UB4wBhtiqddoLnXwp4byW51JUK4ypn3TppvizN1SU97/0/593735A2ABA6B3848108C26014737D33DED5064B.crl
                          rsync://rpki-repo.registro.br/repo/UB4wBhtiqddoLnXwp4byW51JUK4ypn3TppvizN1SU97/0/593735A2ABA6B3848108C26014737D33DED5064B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/593735A2ABA6B3848108C26014737D33DED5064B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 19:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b4:dc:c9:6c:57:52:59:16:ce:a1:be:7c:07:7b:30:39:f9:29:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=593735A2ABA6B3848108C26014737D33DED5064B
        Validity
            Not Before: Dec 19 17:17:26 2025 GMT
            Not After : Dec 20 19:13:26 2025 GMT
        Subject: CN=C58FDFD4ABB10110E9E77419620F066CD845E3F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:32:14:55:66:38:bc:a6:7c:a5:8b:e4:7c:ad:
                    9b:d7:cb:ee:db:93:f0:13:7a:ed:2a:1e:4c:d3:70:
                    56:30:dc:66:ab:a8:0d:af:cb:59:89:0d:d8:3d:6e:
                    2d:b5:bb:fe:39:4e:b0:09:5a:d6:62:8f:03:0a:40:
                    30:58:80:b1:b0:bf:d6:4a:af:97:24:38:7d:c4:4e:
                    a6:96:d3:a3:40:1f:b7:59:67:7e:ea:0d:c4:be:33:
                    4b:53:7b:83:ba:8e:98:85:4b:a0:e5:66:c5:87:e0:
                    41:77:c4:e3:78:e6:8f:1e:e8:50:5e:48:ff:55:b5:
                    8c:04:3d:42:56:cc:22:55:95:7d:73:93:60:8a:83:
                    c0:d9:58:9c:fe:83:70:b7:61:52:14:16:36:57:be:
                    ea:76:25:95:3b:18:bc:be:9d:3e:c4:71:4a:91:45:
                    7f:9f:8f:69:26:d5:d6:12:f9:e3:a2:72:64:e0:d6:
                    0a:5d:05:63:dc:82:eb:fe:dd:8e:ad:6c:32:bd:3c:
                    2a:69:44:c5:3e:72:ba:27:50:99:a3:ef:6f:ef:b9:
                    ab:35:c3:91:f3:e5:dd:69:d9:83:02:0d:aa:2e:23:
                    18:56:68:ee:41:74:90:59:29:b4:61:e1:e5:ff:74:
                    b7:0e:05:d0:ff:1a:dd:fc:2b:09:75:7e:29:29:9c:
                    92:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:8F:DF:D4:AB:B1:01:10:E9:E7:74:19:62:0F:06:6C:D8:45:E3:F1
            X509v3 Authority Key Identifier:
                keyid:59:37:35:A2:AB:A6:B3:84:81:08:C2:60:14:73:7D:33:DE:D5:06:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/UB4wBhtiqddoLnXwp4byW51JUK4ypn3TppvizN1SU97/0/593735A2ABA6B3848108C26014737D33DED5064B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/593735A2ABA6B3848108C26014737D33DED5064B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/UB4wBhtiqddoLnXwp4byW51JUK4ypn3TppvizN1SU97/0/593735A2ABA6B3848108C26014737D33DED5064B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:f2:ca:c3:c1:1e:41:2d:d6:29:da:60:26:75:3b:a6:7e:0b:
         f3:40:c6:3f:90:cd:c3:58:d9:86:30:df:c3:95:7d:7b:c9:74:
         58:02:55:61:9a:e9:8b:d8:69:73:d7:93:8f:aa:3a:a3:3e:59:
         dd:30:51:f3:76:a8:bb:04:92:01:0c:f0:8e:d5:ed:c6:ba:45:
         b7:31:75:5e:2e:7d:84:0e:fd:1c:8f:b0:04:88:2b:a4:a4:01:
         19:16:fa:ed:98:e6:c3:4c:4d:b3:92:1a:a5:53:53:10:3d:9a:
         9f:66:49:ef:4e:5d:6e:db:a9:2c:dd:7f:f2:fd:61:a4:af:03:
         6f:db:86:36:f5:04:a3:f2:81:cf:0f:a8:ad:76:78:3e:7c:44:
         f1:04:3b:65:11:66:8a:5b:9f:bf:5d:37:3d:f6:9a:90:75:90:
         e0:bf:8b:3a:ab:bc:02:fa:ba:8e:4e:ac:99:ff:50:38:ab:ad:
         b4:ef:69:c6:b2:ae:e0:1d:71:6b:c1:f8:1e:8c:86:d4:31:b5:
         4a:dd:30:f6:51:4a:25:e7:6e:1d:1d:29:f9:df:cb:74:18:04:
         71:25:b0:e2:97:1e:cc:86:e7:73:4b:4c:23:eb:be:db:81:05:
         72:43:87:3d:a8:2c:a6:8f:08:68:d3:ff:a8:95:78:8f:f3:ec:
         25:f5:2e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----