This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.mft
File:                     FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.mft (raw, json)
Hash identifier:          bKYj7PeIwTLxWTSXFTj9J6s3sIBA7ZYosRCrojum7U4=
Subject key identifier:   16:6E:77:65:B2:12:A8:E7:15:6C:C2:16:A7:19:68:C0:8E:3D:00:1F
Authority key identifier: FD:CF:6A:6B:F7:DB:13:21:6C:1A:A8:AD:94:05:9A:DD:9B:00:58:AB
Certificate issuer:       /CN=FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB
Certificate serial:       29F4F24EC175B1EB791CFD4954EA1A9ECC3F90FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.mft
Manifest number:          5E
Signing time:             Sat 20 Dec 2025 04:11:35 +0000
Manifest this update:     Sat 20 Dec 2025 04:06:35 +0000
Manifest next update:     Sun 21 Dec 2025 04:18:35 +0000
Files and hashes:         1: 3137302e3233312e35362e302f32322d3234203d3e20323635303631.roa (hash: UTVJfypfok615iRWk1ayEw/rK8U4eAbDusVkYJUItSA=)
                          2: FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.crl (hash: LIuz/f+2fyIi7fBxqX4Ooytg9HuXJnpoxnH+8e65/o8=)
                          3: 323830343a333233303a3a2f33322d3438203d3e20323635303631.roa (hash: BFiGML4qKgrDNllHxX9UFDMYcUOmP4sHHRK0xqQ3GS4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.crl
                          rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 04:18:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f4:f2:4e:c1:75:b1:eb:79:1c:fd:49:54:ea:1a:9e:cc:3f:90:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB
        Validity
            Not Before: Dec 20 04:06:35 2025 GMT
            Not After : Dec 21 04:18:35 2025 GMT
        Subject: CN=166E7765B212A8E7156CC216A71968C08E3D001F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:53:d5:f6:01:ba:c7:b1:bf:e6:f5:38:c2:04:
                    6a:73:a6:e8:fa:ec:29:13:98:c1:95:43:e4:27:bb:
                    af:73:7c:ca:9a:c0:1a:9d:ec:80:32:5c:1d:d3:84:
                    cb:1f:6f:00:5b:0e:b3:42:6e:e6:43:40:ca:a3:8a:
                    6f:3a:b3:b2:d5:ce:3d:c9:7b:8c:94:e4:2f:65:d0:
                    7a:b7:ed:c5:a9:0b:c1:5b:17:ab:65:6b:c4:64:93:
                    c9:f4:59:b3:c6:50:16:42:33:41:33:ed:41:5b:54:
                    bd:d1:96:3f:fb:39:1a:4d:43:0c:8d:f4:42:a1:72:
                    38:cd:8e:b2:e5:1f:8f:88:01:6f:10:86:d8:99:5d:
                    a6:80:fd:83:7b:33:63:5a:f8:4f:9a:69:ad:76:02:
                    43:2a:86:5d:9d:dc:69:a6:a9:87:14:71:0a:63:5e:
                    06:12:e2:18:12:31:09:3c:c2:9e:7c:09:b9:bc:37:
                    8a:e3:0f:23:f8:e4:b5:40:5a:82:64:b8:2b:57:30:
                    de:9e:a5:1a:be:b0:01:db:c0:22:56:83:ae:3c:25:
                    b0:d3:0b:2d:37:40:c6:38:ce:87:2b:7c:30:54:d2:
                    51:3a:ee:68:89:68:cc:73:09:76:ae:93:a6:3e:8c:
                    28:76:a0:fc:94:b3:07:19:c0:98:50:40:83:ed:4e:
                    7c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:6E:77:65:B2:12:A8:E7:15:6C:C2:16:A7:19:68:C0:8E:3D:00:1F
            X509v3 Authority Key Identifier:
                keyid:FD:CF:6A:6B:F7:DB:13:21:6C:1A:A8:AD:94:05:9A:DD:9B:00:58:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:2d:37:69:6b:3e:97:7f:5a:3a:96:56:d8:f9:de:93:b5:a8:
         c5:60:11:cc:87:91:85:0e:1b:92:2a:48:da:d9:69:93:c7:f4:
         c4:38:f2:0f:23:6e:8c:5d:34:9b:c2:cd:f6:b4:f4:74:1b:c8:
         87:58:b4:48:b8:63:44:f3:90:43:06:ad:c5:7b:c6:f0:65:a2:
         e2:cd:ea:53:3f:e5:8a:59:d1:ed:e5:b7:f5:c4:ff:19:92:41:
         b0:40:15:62:85:61:0a:0d:9b:36:5b:c7:d7:6d:11:72:97:49:
         62:0d:30:dd:96:63:4e:6b:a3:99:94:48:80:66:d7:1f:f1:59:
         5b:41:1b:ee:aa:0e:02:ea:7b:de:c8:43:1c:e9:34:91:bc:eb:
         15:1c:6e:88:b5:3d:a0:25:1c:33:89:45:cb:11:0d:7f:65:8b:
         b1:f0:d4:dd:37:ca:c7:e2:6b:e5:96:b0:3b:b9:d0:e8:f5:47:
         4e:63:b1:d8:e6:e7:27:c9:c9:d1:f7:56:5f:25:92:67:67:76:
         9d:7c:92:8d:ef:d8:2c:eb:1e:49:10:81:64:c9:5d:18:8a:67:
         a3:c6:2e:13:7a:2a:2a:9f:12:08:f7:cf:92:78:aa:5b:9d:71:
         a0:b5:03:44:7a:74:c2:e9:e1:fe:e5:ec:44:26:42:82:fc:98:
         24:30:7e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----