This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.mft
File:                     F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.mft (raw, json)
Hash identifier:          ATuECi5QFKN+AM1qEjpQszR7thqAn/xXcD2EY7cT3fg=
Subject key identifier:   A8:EC:CE:36:A2:01:E8:36:33:01:0C:71:1D:D3:46:4E:71:17:D8:56
Authority key identifier: F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99
Certificate issuer:       /CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
Certificate serial:       5C69C4F930CA01D618B375E916BAFDE0BE221275
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.mft
Manifest number:          028E
Signing time:             Fri 19 Dec 2025 22:40:03 +0000
Manifest this update:     Fri 19 Dec 2025 22:35:03 +0000
Manifest next update:     Sun 21 Dec 2025 01:18:03 +0000
Files and hashes:         1: F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl (hash: qwzBXOPJv46cWd1mLxobZYhsHXpHYt6BAMjVfxBcm5k=)
                          2: 323830343a336463303a333830303a3a2f33372d3337203d3e20323636353531.roa (hash: mw2c0h2cHTp8RrM/QPENJDuY2uKjm1pLanzCTxhgJ1E=)
                          3: 323830343a336463303a613030303a3a2f33372d3337203d3e20323636353531.roa (hash: v/0YvE9Wl4kildt8WqiGLaSDklaNVca1E+K+OnCotoQ=)
                          4: 323830343a336463303a643030303a3a2f33372d3337203d3e20323636353531.roa (hash: ewJeuvwhuSmDoalh4718TAcNfu2ZtyQISU1OiCjrgWw=)
                          5: 3136302e3233382e3232362e302f32342d3234203d3e20323636353531.roa (hash: mEZROiTHNPxC/0Oa+plHpZL+5aGOBewVKt6/lvOLxBs=)
                          6: 323830343a336463303a613030303a3a2f33362d3336203d3e20323636353531.roa (hash: BK34PgWvKHXV22lsnbZ/t4ZAuOVIvr3imbqyYkVNThE=)
                          7: 323830343a336463303a643030303a3a2f33362d3336203d3e20323636353531.roa (hash: cNFza/TPEo+sZJycTXXXX0xPaIv8DZN6xC7VR9TCncI=)
                          8: 323830343a336463303a3a2f33322d3332203d3e20323636353531.roa (hash: lRpx3RfKSkaczPi/GNNaJ6H0ep+fHhbupNLyxSGoQvc=)
                          9: 3136302e3233382e3232342e302f32322d3232203d3e20323636353531.roa (hash: ig6hTxBa+mRv9Q1srxczmUq0uvBwGyk1GcfswaFZI3Y=)
                          10: 323830343a336463303a343830303a3a2f33372d3337203d3e20323636353531.roa (hash: 3zunjGyY8qp9ChHmA/x3IcmI2PHtFZGIbVBdqaqjoXw=)
                          11: 323830343a336463303a343030303a3a2f33372d3337203d3e20323636353531.roa (hash: eqz/7eau26A0Ha5CFYDNG3uuxx45k7zWDJVPJ45k570=)
                          12: 3136302e3233382e3232342e302f32332d3233203d3e20323636353531.roa (hash: /ni3hGFHN7/D9/xXYmTnalDw+LMUJrqdNMpLwpsxZjw=)
                          13: 323830343a336463303a643830303a3a2f33372d3337203d3e20323636353531.roa (hash: f31buA9r0bGYye1pS5gzUnDigiLpfJr0iOakQReEj5w=)
                          14: 323830343a336463303a333030303a3a2f33362d3336203d3e20323636353531.roa (hash: pDQBRQOlKrqknDWRZ0xzrCg9qQ7tYfIkqhp7MmikZO8=)
                          15: 323830343a336463303a613830303a3a2f33372d3337203d3e20323636353531.roa (hash: MlxMREhpn0jcdrSsRtRvshGPbKkMaRxAREfe17qoAKY=)
                          16: 323830343a336463303a343030303a3a2f33362d3336203d3e20323636353531.roa (hash: wS+CUmkffKFrDDqGmFPJYASQtcyEHZzHe/L2LpFfnew=)
                          17: 323830343a336463303a333030303a3a2f33372d3337203d3e20323636353531.roa (hash: XLAXjU4AHFVfMtHBnvAcodzQn1TzWRtTOOhbfLP3fZc=)
                          18: 3136302e3233382e3232362e302f32332d3233203d3e20323636353531.roa (hash: sgRt1cSLgVZAyizJeX5MXTxXo5tzp55WHEJLjwQncvs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl
                          rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 01:18:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:69:c4:f9:30:ca:01:d6:18:b3:75:e9:16:ba:fd:e0:be:22:12:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
        Validity
            Not Before: Dec 19 22:35:03 2025 GMT
            Not After : Dec 21 01:18:03 2025 GMT
        Subject: CN=A8ECCE36A201E83633010C711DD3464E7117D856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:aa:ed:e8:8c:15:c0:c4:7b:13:b2:e7:29:94:
                    ea:06:79:5b:e4:19:38:c3:49:d2:54:37:43:59:05:
                    7d:16:5e:31:d1:28:83:f1:8d:a1:df:6e:df:6e:d6:
                    6b:48:e3:15:12:52:2f:78:b7:73:09:8e:0f:8b:5b:
                    dd:91:b2:3b:57:f0:ed:7e:1a:7b:ba:b4:de:96:6d:
                    9a:c5:3b:27:22:0d:76:50:b8:97:a0:6f:80:0d:c4:
                    e6:07:f5:5e:59:d3:a6:34:a8:9d:ac:df:68:d6:46:
                    76:64:b3:88:a7:ce:80:cf:de:6c:f0:d2:b2:d1:37:
                    a2:b8:b0:6e:ba:a2:a1:aa:45:fd:f8:9c:e0:97:cb:
                    7a:12:a0:09:f9:2c:2f:b9:c3:f5:3a:d6:3c:5d:9b:
                    c6:79:c2:d1:33:81:4a:12:74:e7:8a:0d:8a:59:dc:
                    99:7b:ce:3b:2f:12:4a:95:6c:9d:c9:65:11:97:1a:
                    e3:9e:9c:4b:67:a9:6f:e3:0f:73:95:f2:f2:0e:98:
                    40:70:ec:62:cd:0c:2c:cc:35:0b:dd:36:9d:95:48:
                    1a:e9:3c:32:84:2d:0f:b4:2f:72:d4:a9:ae:c3:dc:
                    3f:37:30:eb:9f:7b:ad:aa:db:6f:67:be:f3:26:85:
                    43:4a:93:da:3d:0f:d8:c8:b4:73:43:7f:5b:d2:5f:
                    ae:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:EC:CE:36:A2:01:E8:36:33:01:0C:71:1D:D3:46:4E:71:17:D8:56
            X509v3 Authority Key Identifier:
                keyid:F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:0b:91:96:d3:e5:f3:d2:ea:ed:03:f6:8b:34:8e:35:ec:63:
         a8:ea:93:a6:90:fc:07:75:a0:60:0f:ae:38:17:9e:29:2e:af:
         8e:8d:14:1b:3f:40:3c:e4:7a:10:82:e5:08:90:a6:1d:4d:7f:
         73:50:b7:58:ad:4d:01:1d:ab:22:8b:18:b3:11:7f:76:a8:21:
         8b:e3:dd:f3:c1:ad:73:3a:39:bc:4d:7c:b5:f3:e4:4a:58:34:
         b1:cb:0d:8a:c8:c0:a8:5d:79:0d:25:f3:74:e8:6c:11:46:88:
         35:b9:4b:c8:31:5e:5e:d2:24:09:0c:69:01:5b:e9:68:e1:19:
         77:e6:09:00:f9:1e:03:3d:f0:14:79:db:ea:7c:1e:dd:4a:9d:
         e8:6c:47:2b:44:ef:35:b6:90:59:16:8c:06:e5:a9:d2:3f:e1:
         7d:ba:74:a4:f4:a0:80:05:df:4a:e8:f2:35:a5:02:8b:9f:b4:
         59:48:0c:06:6c:17:00:4e:7f:68:a8:e5:ac:95:3f:89:c9:ea:
         f3:c6:fd:c3:9a:6f:d5:56:31:93:90:1d:05:53:52:c5:64:74:
         a6:14:d5:21:7a:9b:f3:f8:a1:ba:0b:c9:5a:94:d5:62:22:24:
         75:76:22:e9:4b:98:68:90:6f:28:bd:29:eb:83:fc:e7:e1:f2:
         0f:fd:49:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:59:39 2025 by rpki-client