This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft
File:                     A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft (raw, json)
Hash identifier:          zVJhRpSJ5GRmwqaJ1yz/IuSx5uq8JXs0dWfvpk3839M=
Subject key identifier:   52:05:2A:A2:42:F3:A2:22:F4:D2:E3:E4:5E:88:97:F0:B9:8C:C0:F4
Authority key identifier: A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11
Certificate issuer:       /CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
Certificate serial:       5A1B50B162D1013995BB157BDD6D4151042696FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft
Manifest number:          010E
Signing time:             Mon 22 Dec 2025 17:02:07 +0000
Manifest this update:     Mon 22 Dec 2025 16:57:07 +0000
Manifest next update:     Tue 23 Dec 2025 19:25:07 +0000
Files and hashes:         1: 323830343a353837383a323030303a3a2f33362d3336203d3e20323638313331.roa (hash: YLRZFFurNnhOHIp+/ksNrdmT9wg1MccOCRFRPdpkpZE=)
                          2: 323830343a353837383a633030303a3a2f33342d3334203d3e20323638313331.roa (hash: 1JBlkGMIGxMWY7LQTFqU4rMW/3V4sS50t4cD7k2sodI=)
                          3: 323830343a353837383a3a2f33332d3333203d3e20323638313331.roa (hash: vstmsY9Bxo51pO/q7iKPVEPpP1nhCTQDRYXv4ff95ZU=)
                          4: 34352e3136392e3139302e302f32342d3234203d3e20323638313331.roa (hash: 1arKiTMmd2wiJhxrLN/csmN5OxeZEvisOYN30+Mb+zM=)
                          5: 34352e3136392e3138382e302f32322d3232203d3e20323638313331.roa (hash: 4ezrZSIPRM2pWqs0nvSc684pzx0RAIeuMtmRPXlLzec=)
                          6: 323830343a353837383a3a2f33342d3334203d3e20323638313331.roa (hash: pD7uON0MR1cx9vrRl3bnWsw8Pci3XbwtAVzSZrjF0nU=)
                          7: 34352e3136392e3138392e302f32342d3234203d3e20323638313331.roa (hash: 76v3PwoFqjIvYhNGggm0A6GKqZidjpsE3qEBiwvNcVI=)
                          8: 34352e3136392e3139312e302f32342d3234203d3e20323638313331.roa (hash: YMF1WGUqO/koid6qkm4eWU5+384jv5Woh3UeAEtElo0=)
                          9: 323830343a353837383a343030303a3a2f34382d3438203d3e20323638313331.roa (hash: ouhAyOcH2VayZfDA15PmGMIddBURZIqd8LmFxV/D8kg=)
                          10: 323830343a353837383a383030303a3a2f33342d3334203d3e20323638313331.roa (hash: m6476XY9hw1HT0KFo3xqMgTPgV2DyCBCaY7VP3otwhE=)
                          11: 323830343a353837383a343030303a3a2f33342d3334203d3e20323638313331.roa (hash: bec0x/Cqckg2a+aVdlOWK1zgbnr5jAeqZG2vSjYskV8=)
                          12: 323830343a353837383a3a2f33322d3332203d3e20323638313331.roa (hash: o712cBG4hVGA//PBX0FB/svdi3YsE7E/rUiUf67iUFs=)
                          13: 323830343a353837383a383030303a3a2f33332d3333203d3e20323638313331.roa (hash: p7Oa9YECuMMpX3lKf1BIHAgMsEdZxp1BAHLE2bpiWLI=)
                          14: 34352e3136392e3138382e302f32342d3234203d3e20323638313331.roa (hash: lQE0H5i+BmmRfKCVNDuwT4u8OEjW/9FHvTmmfwT2Nnk=)
                          15: A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl (hash: 7dq07GaBAa3WakFaoHyDRjZDT4Mqst2p/Rs4cRSCHkI=)
                          16: 34352e3136392e3139302e302f32332d3233203d3e20323638313331.roa (hash: gNfhoQu/TfDOi2RqItKVnvpLsxNGPBsfnb6MxhNe3qk=)
                          17: 34352e3136392e3138382e302f32332d3233203d3e20323638313331.roa (hash: VMtWnY/47+9VSdifVKXNAHzknKkgZcf9Z5+e1w7prrA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl
                          rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 19:25:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:1b:50:b1:62:d1:01:39:95:bb:15:7b:dd:6d:41:51:04:26:96:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
        Validity
            Not Before: Dec 22 16:57:07 2025 GMT
            Not After : Dec 23 19:25:07 2025 GMT
        Subject: CN=52052AA242F3A222F4D2E3E45E8897F0B98CC0F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a3:35:e6:6d:1d:9d:c1:66:7d:06:96:be:a0:
                    41:3b:c9:72:33:38:68:06:08:cd:46:f4:af:b5:d6:
                    f3:2c:c3:90:e2:82:f4:cd:70:c4:b4:79:16:9b:2e:
                    98:3f:66:5d:ca:dc:07:55:89:25:1c:e5:22:db:5c:
                    e4:b5:fa:2f:af:b1:d3:83:c7:56:20:ad:83:9a:ab:
                    93:69:b1:99:3b:23:26:97:e3:2d:a2:08:e1:fc:45:
                    aa:a3:59:aa:2b:ef:b7:4c:1c:32:70:33:eb:60:87:
                    cc:07:05:7a:19:bc:ad:5f:67:03:60:7f:a2:34:15:
                    2f:1f:87:eb:d1:a2:c1:25:cd:7c:5e:2a:be:30:e0:
                    cd:36:3b:27:2b:c7:24:c5:f3:be:1f:bf:6f:06:eb:
                    3b:89:e2:3c:56:7f:7f:62:94:58:04:02:56:0a:9a:
                    92:fb:c7:4d:f1:24:f8:a1:cb:86:92:93:07:9c:18:
                    88:3d:2e:bb:6a:2e:09:ef:cf:45:d2:ea:e0:56:48:
                    5b:37:67:8d:11:ae:56:08:e0:ff:8d:24:1c:19:4e:
                    1d:a1:0a:9f:c1:c3:fb:d3:2e:9c:d3:c0:b4:68:cb:
                    67:47:5c:42:7f:31:67:eb:a8:41:12:0c:1f:62:30:
                    57:6a:2b:0b:c4:a5:be:b9:2a:fa:15:1a:9c:ce:20:
                    19:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:05:2A:A2:42:F3:A2:22:F4:D2:E3:E4:5E:88:97:F0:B9:8C:C0:F4
            X509v3 Authority Key Identifier:
                keyid:A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:ec:44:2a:8c:22:88:6b:91:54:99:6b:c2:59:cd:1e:87:f1:
         c8:04:b2:a9:65:e2:51:65:c8:43:af:25:53:31:28:0e:33:7f:
         60:e8:9c:f3:e7:e6:ce:44:12:b6:71:c9:87:fb:1c:e9:c0:7e:
         33:47:d2:9f:89:af:cc:e8:54:38:d2:48:91:1a:84:da:e6:48:
         ed:f2:ef:4a:0a:cf:a0:78:00:2a:31:3c:88:cb:cd:12:93:33:
         2b:12:09:29:de:1b:a2:76:6b:87:c9:76:66:37:d9:8b:6b:87:
         42:0f:e9:80:86:34:67:16:62:26:55:11:5a:24:5e:44:ef:10:
         c7:64:3a:9d:82:dc:5a:87:cf:cb:ee:42:11:99:8d:d1:94:81:
         fc:48:90:13:6a:4f:08:9d:fe:d1:32:6a:52:e8:e4:fe:d8:6e:
         c2:84:e4:f8:7a:2b:ce:f2:ce:d3:60:3e:98:83:7e:d1:21:cb:
         3f:6f:15:ae:ca:4f:98:dc:2c:b4:93:32:5d:e0:36:c9:6c:ca:
         9e:4f:a7:43:10:ed:6c:14:84:9a:14:ac:1e:9e:01:f9:91:b5:
         0f:71:64:71:45:19:75:e8:54:7f:64:1b:3c:94:f2:fb:8b:c4:
         7d:9f:54:69:59:73:ff:c7:ee:6a:33:11:b9:63:39:89:13:10:
         f3:b2:d3:c6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWhtQsWLRATmVuxV73W1BUQQmlvwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBDREQyQ0Y1ODlERkM0QUI0ODJBQzAyRUMwNUVCQjVD
M0JFNUIxMTAeFw0yNTEyMjIxNjU3MDdaFw0yNTEyMjMxOTI1MDdaMDMxMTAvBgNV
BAMTKDUyMDUyQUEyNDJGM0EyMjJGNEQyRTNFNDVFODg5N0YwQjk4Q0MwRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuozXmbR2dwWZ9Bpa+oEE7yXIz
OGgGCM1G9K+11vMsw5DigvTNcMS0eRabLpg/Zl3K3AdViSUc5SLbXOS1+i+vsdOD
x1YgrYOaq5NpsZk7IyaX4y2iCOH8RaqjWaor77dMHDJwM+tgh8wHBXoZvK1fZwNg
f6I0FS8fh+vRosElzXxeKr4w4M02OycrxyTF874fv28G6zuJ4jxWf39ilFgEAlYK
mpL7x03xJPihy4aSkwecGIg9LrtqLgnvz0XS6uBWSFs3Z40RrlYI4P+NJBwZTh2h
Cp/Bw/vTLpzTwLRoy2dHXEJ/MWfrqEESDB9iMFdqKwvEpb65KvoVGpzOIBlVAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUUgUqokLzoiL00uPkXoiX8LmMwPQwHwYDVR0j
BBgwFoAUoM3Sz1id/Eq0gqwC7AXrtcO+WxEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2JlN0VQNGVneEJWYmM5NkgzV3ZCMUdNU2V3azlUN0pZMnRXR1Vack5G
QkcvMC9BMENERDJDRjU4OURGQzRBQjQ4MkFDMDJFQzA1RUJCNUMzQkU1QjExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwQ0REMkNGNTg5REZDNEFC
NDgyQUMwMkVDMDVFQkI1QzNCRTVCMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N2JlN0VQNGVneEJWYmM5NkgzV3ZCMUdNU2V3azlUN0pZMnRXR1Vack5GQkcvMC9B
MENERDJDRjU4OURGQzRBQjQ4MkFDMDJFQzA1RUJCNUMzQkU1QjExLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALexEKowiiGuRVJlrwlnNHofxyASyqWXiUWXIQ68lUzEoDjN/YOic8+fmzkQS
tnHJh/sc6cB+M0fSn4mvzOhUONJIkRqE2uZI7fLvSgrPoHgAKjE8iMvNEpMzKxIJ
Kd4bonZrh8l2ZjfZi2uHQg/pgIY0ZxZiJlURWiReRO8Qx2Q6nYLcWofPy+5CEZmN
0ZSB/EiQE2pPCJ3+0TJqUujk/thuwoTk+HorzvLO02A+mIN+0SHLP28VrspPmNws
tJMyXeA2yWzKnk+nQxDtbBSEmhSsHp4B+ZG1D3FkcUUZdehUf2QbPJTy+4vEfZ9U
aVlz/8fuajMRuWM5iRMQ87LTxg==
-----END CERTIFICATE-----
Generated at Tue Dec 23 07:57:02 2025 by rpki-client