This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/A513E0E6DF2D0D0083E23203D95E86F9C8D340DF.mft
File:                     A513E0E6DF2D0D0083E23203D95E86F9C8D340DF.mft (raw, json)
Hash identifier:          k8QFwi40EVYXQw+4JWe5kMTCI8oaFDg8D0dHRCg1V1U=
Subject key identifier:   2D:83:CE:A2:B6:01:5E:34:9E:27:79:14:45:CC:F3:7C:CD:88:8F:82
Authority key identifier: A5:13:E0:E6:DF:2D:0D:00:83:E2:32:03:D9:5E:86:F9:C8:D3:40:DF
Certificate issuer:       /CN=A513E0E6DF2D0D0083E23203D95E86F9C8D340DF
Certificate serial:       414793B16B9EE0A3003885DC350A02542FA9C33F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A513E0E6DF2D0D0083E23203D95E86F9C8D340DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/A513E0E6DF2D0D0083E23203D95E86F9C8D340DF.mft
Manifest number:          DC
Signing time:             Tue 23 Dec 2025 10:41:19 +0000
Manifest this update:     Tue 23 Dec 2025 10:36:19 +0000
Manifest next update:     Wed 24 Dec 2025 11:15:19 +0000
Files and hashes:         1: 323830343a356631633a3a2f33322d313238203d3e20323639303737.roa (hash: Vhmc88CbMt6J/miZ2eNlp06ftPgDo7X8Sz+iVnlSoUw=)
                          2: A513E0E6DF2D0D0083E23203D95E86F9C8D340DF.crl (hash: Ppzc/ila6X6KXMJgPR6jIQL7P59KkODXl8FE8ASghzg=)
                          3: 34352e3137392e34342e302f32322d3332203d3e20323639303737.roa (hash: yI952IxGcVkZnhY4JbeSZIN38f9VmtMj6uRsNFPWkvU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/A513E0E6DF2D0D0083E23203D95E86F9C8D340DF.crl
                          rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/A513E0E6DF2D0D0083E23203D95E86F9C8D340DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A513E0E6DF2D0D0083E23203D95E86F9C8D340DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 11:15:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:47:93:b1:6b:9e:e0:a3:00:38:85:dc:35:0a:02:54:2f:a9:c3:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A513E0E6DF2D0D0083E23203D95E86F9C8D340DF
        Validity
            Not Before: Dec 23 10:36:19 2025 GMT
            Not After : Dec 24 11:15:19 2025 GMT
        Subject: CN=2D83CEA2B6015E349E27791445CCF37CCD888F82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:61:9c:f5:41:ec:37:b3:61:fe:16:58:47:34:
                    78:70:f1:a0:6d:39:39:79:d4:19:cb:8e:b8:77:af:
                    79:2a:7c:f3:88:3a:f0:4d:5b:9d:27:41:37:9e:70:
                    64:ae:72:4c:a6:ec:a1:ac:39:38:3b:67:19:f9:67:
                    44:c7:9f:eb:bb:f4:52:9b:1e:b6:3c:c1:1c:eb:88:
                    07:34:1c:37:ec:30:99:08:42:01:b9:b9:71:a8:08:
                    26:9b:b3:7d:06:fb:1a:cb:b0:38:ae:70:4e:1d:29:
                    8d:47:99:48:aa:3e:e7:39:55:0f:69:aa:92:43:c0:
                    b3:4d:d1:35:ee:0c:e3:ac:1a:61:34:ed:f3:7c:ec:
                    aa:f3:25:1e:24:30:11:62:f1:20:27:9a:1f:cb:58:
                    36:cf:da:4e:94:76:c8:0f:42:e1:d4:ff:6f:ad:8c:
                    b1:d1:04:fd:e3:3a:20:4a:50:bf:65:5f:d1:0d:04:
                    c3:91:97:70:3f:84:2c:17:1e:68:e9:10:c6:b1:90:
                    38:33:9a:4c:3c:d2:20:32:97:4c:60:d2:eb:e8:84:
                    4f:8d:24:a0:f3:74:89:26:fb:f7:b5:46:bf:6a:1e:
                    b1:cb:05:8c:b2:3e:7a:d8:bc:b2:09:e7:c1:a2:9b:
                    0e:d7:f2:16:db:e6:f6:75:64:0d:19:b8:c1:cd:b0:
                    98:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:83:CE:A2:B6:01:5E:34:9E:27:79:14:45:CC:F3:7C:CD:88:8F:82
            X509v3 Authority Key Identifier:
                keyid:A5:13:E0:E6:DF:2D:0D:00:83:E2:32:03:D9:5E:86:F9:C8:D3:40:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/A513E0E6DF2D0D0083E23203D95E86F9C8D340DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A513E0E6DF2D0D0083E23203D95E86F9C8D340DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/A513E0E6DF2D0D0083E23203D95E86F9C8D340DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:60:18:e7:eb:bd:ef:c0:46:5c:80:91:2a:b2:8b:de:38:86:
         33:4a:3c:ee:24:dd:bc:47:f0:5e:f1:83:bb:30:68:8b:ce:c5:
         34:9e:bf:89:4c:b2:e6:b2:3a:61:0d:82:3d:a8:63:c7:8f:1c:
         43:ca:0c:5f:0a:60:d7:2c:3e:f5:60:5d:b0:fa:cc:8c:a4:ae:
         29:f9:16:46:fb:da:3d:7a:00:bd:e0:d5:1a:b1:e8:17:ff:04:
         e1:6d:b7:84:23:95:1c:43:2a:55:bb:30:82:df:59:fe:9e:f1:
         2a:de:8b:40:d3:e5:a7:61:d5:2a:d4:49:cf:d3:90:c5:54:c7:
         db:d0:e2:4d:80:4a:d7:12:5f:5d:53:9f:5e:6e:cf:fe:fe:8d:
         59:b2:5c:01:4b:a6:47:39:34:53:3c:89:1d:67:bb:28:07:2b:
         62:52:eb:93:29:e6:7e:bb:9f:cf:ec:a0:f3:36:b2:6f:8a:74:
         a4:29:7d:8c:d4:db:8e:78:55:cb:43:81:8a:52:6a:2e:82:9a:
         fe:8f:4a:71:5d:82:75:7f:0a:bd:6c:07:91:92:af:c3:bd:c5:
         fc:c9:ba:fb:05:98:6a:2b:16:e5:3a:d5:d3:db:c8:3f:69:f9:
         08:a5:02:30:0c:28:f7:59:c2:5a:4b:2e:b6:9d:db:eb:49:3d:
         a9:62:f7:6e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQUeTsWue4KMAOIXcNQoCVC+pwz8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTUxM0UwRTZERjJEMEQwMDgzRTIzMjAzRDk1RTg2RjlD
OEQzNDBERjAeFw0yNTEyMjMxMDM2MTlaFw0yNTEyMjQxMTE1MTlaMDMxMTAvBgNV
BAMTKDJEODNDRUEyQjYwMTVFMzQ5RTI3NzkxNDQ1Q0NGMzdDQ0Q4ODhGODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOYZz1Qew3s2H+FlhHNHhw8aBt
OTl51BnLjrh3r3kqfPOIOvBNW50nQTeecGSuckym7KGsOTg7Zxn5Z0THn+u79FKb
HrY8wRzriAc0HDfsMJkIQgG5uXGoCCabs30G+xrLsDiucE4dKY1HmUiqPuc5VQ9p
qpJDwLNN0TXuDOOsGmE07fN87KrzJR4kMBFi8SAnmh/LWDbP2k6UdsgPQuHU/2+t
jLHRBP3jOiBKUL9lX9ENBMORl3A/hCwXHmjpEMaxkDgzmkw80iAyl0xg0uvohE+N
JKDzdIkm+/e1Rr9qHrHLBYyyPnrYvLIJ58Gimw7X8hbb5vZ1ZA0ZuMHNsJj7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQULYPOorYBXjSeJ3kURczzfM2Ij4IwHwYDVR0j
BBgwFoAUpRPg5t8tDQCD4jID2V6G+cjTQN8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmZualhaZUJNUHJXdWhRU2llOVFVTm03cDZ0TWlQWFJ6UEs3bUhGcjV4
Y2IvMC9BNTEzRTBFNkRGMkQwRDAwODNFMjMyMDNEOTVFODZGOUM4RDM0MERGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1MTNFMEU2REYyRDBEMDA4
M0UyMzIwM0Q5NUU4NkY5QzhEMzQwREYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NmZualhaZUJNUHJXdWhRU2llOVFVTm03cDZ0TWlQWFJ6UEs3bUhGcjV4Y2IvMC9B
NTEzRTBFNkRGMkQwRDAwODNFMjMyMDNEOTVFODZGOUM4RDM0MERGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAK2AY5+u978BGXICRKrKL3jiGM0o87iTdvEfwXvGDuzBoi87FNJ6/iUyy5rI6
YQ2CPahjx48cQ8oMXwpg1yw+9WBdsPrMjKSuKfkWRvvaPXoAveDVGrHoF/8E4W23
hCOVHEMqVbswgt9Z/p7xKt6LQNPlp2HVKtRJz9OQxVTH29DiTYBK1xJfXVOfXm7P
/v6NWbJcAUumRzk0UzyJHWe7KAcrYlLrkynmfrufz+yg8zayb4p0pCl9jNTbjnhV
y0OBilJqLoKa/o9KcV2CdX8KvWwHkZKvw73F/Mm6+wWYaisW5TrV09vIP2n5CKUC
MAwo91nCWksutp3b60k9qWL3bg==
-----END CERTIFICATE-----
Generated at Tue Dec 23 12:02:59 2025 by rpki-client