This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.mft
File:                     C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.mft (raw, json)
Hash identifier:          /oz+VWpO0ioARBID0vZREAvSX/3zVSdufjiwDCchU4w=
Subject key identifier:   6F:EC:79:F4:DD:73:B3:71:29:07:A1:62:5C:39:F7:B7:32:67:9F:3D
Authority key identifier: C2:2F:D9:AD:C6:57:8F:0F:EE:0A:E6:3F:DD:E5:9F:BC:19:9F:98:9E
Certificate issuer:       /CN=C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E
Certificate serial:       5FAC8E127D4A40431A3639316C5BC7FA843AFA51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.mft
Manifest number:          5C
Signing time:             Sat 20 Dec 2025 05:33:32 +0000
Manifest this update:     Sat 20 Dec 2025 05:28:32 +0000
Manifest next update:     Sun 21 Dec 2025 08:48:32 +0000
Files and hashes:         1: 3230312e3134392e3131322e302f32322d3234203d3e203631383530.roa (hash: 0frBI2dIgpCDX/qFwaP8qZ1qNv9qMBMaetM+/AXzJz4=)
                          2: 323830343a316134383a3a2f33322d3430203d3e203631383530.roa (hash: hGp3W6CCDaRQVPbWgz13luBmF5rIMQM69JgWAiwIbVw=)
                          3: C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.crl (hash: XpHXWzDBvd3d/SmwGyq1WmsCsO1YCrH/CzIRmCjziCc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.crl
                          rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 08:48:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ac:8e:12:7d:4a:40:43:1a:36:39:31:6c:5b:c7:fa:84:3a:fa:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E
        Validity
            Not Before: Dec 20 05:28:32 2025 GMT
            Not After : Dec 21 08:48:32 2025 GMT
        Subject: CN=6FEC79F4DD73B3712907A1625C39F7B732679F3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:52:17:3d:3f:61:34:8a:eb:6b:cd:de:02:42:
                    91:cb:90:a1:6c:92:85:1a:c4:77:53:29:18:4e:56:
                    8a:67:d3:44:57:47:65:83:67:0e:1c:c0:28:0c:64:
                    3d:99:c2:5f:96:7a:37:bd:62:4c:15:64:c5:ba:fa:
                    11:39:98:1a:9c:2a:5a:05:d0:cd:09:f0:a2:84:55:
                    d5:d2:6f:43:3c:d8:e7:0e:a6:bc:73:7a:23:60:12:
                    94:af:0c:85:ff:62:9c:c9:9d:ff:65:36:15:b4:38:
                    30:34:bd:5f:5a:75:b9:7d:1b:39:a6:02:43:4e:21:
                    85:74:52:e1:27:e6:23:79:5b:67:dd:c2:dc:32:1d:
                    2e:03:a8:4f:89:b0:01:fc:49:88:54:6a:41:5a:3e:
                    e9:dd:af:8b:98:af:52:00:b4:82:c8:38:9c:82:8a:
                    70:dc:da:f5:1f:26:1d:a2:bb:d0:3a:b2:f5:11:13:
                    7f:f9:08:a6:f8:2c:fd:f8:c3:1b:a4:c0:40:38:d9:
                    7a:8d:63:1b:93:21:cc:1f:fb:0c:ee:97:44:79:04:
                    c7:27:aa:16:be:d4:e4:4f:b6:fd:40:00:73:70:aa:
                    ae:0b:9f:6a:ff:d7:84:30:4b:1d:e6:0a:a4:4c:71:
                    f6:89:26:98:8f:4e:83:8e:df:b9:8e:76:4a:cd:68:
                    c5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:EC:79:F4:DD:73:B3:71:29:07:A1:62:5C:39:F7:B7:32:67:9F:3D
            X509v3 Authority Key Identifier:
                keyid:C2:2F:D9:AD:C6:57:8F:0F:EE:0A:E6:3F:DD:E5:9F:BC:19:9F:98:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:ae:bb:cd:37:4c:4d:aa:c8:9e:9d:60:ac:6c:ac:46:f8:21:
         14:88:0e:87:5c:23:9c:53:76:31:57:98:ae:88:fc:75:f9:b3:
         de:17:a6:9d:a8:42:76:9e:c4:83:d3:67:d1:ef:0d:84:6b:b4:
         14:76:c8:61:cd:96:4e:ab:62:14:37:bc:42:76:fc:6d:a2:b8:
         e4:bc:cd:aa:28:66:de:ca:e8:f2:52:fe:d4:ca:30:ff:9a:68:
         91:96:cd:ce:01:db:37:a2:68:23:04:0f:fb:51:3a:c0:89:75:
         9a:4a:43:66:61:aa:7e:bb:2b:3b:92:7e:7e:1a:05:51:b7:e4:
         7f:a6:c3:d6:33:20:0f:41:75:2f:a2:65:08:3d:01:3f:3a:99:
         0e:14:1a:cc:01:3f:9c:89:0a:fc:bf:ff:bb:5c:87:00:ab:65:
         d7:d5:a4:d2:db:19:17:90:f9:5f:44:43:82:93:85:c1:39:97:
         04:b0:d6:c2:ae:5c:f4:82:6c:a2:f6:74:00:57:49:a8:21:2e:
         95:e8:6c:9d:54:6e:fc:ca:42:76:27:5b:f8:1c:3c:a5:37:61:
         d6:db:05:fb:87:a4:59:d6:76:ff:da:28:72:f0:57:e4:ce:9b:
         72:90:bf:93:6f:19:5d:ab:17:c9:ae:cc:8e:e2:54:61:21:0f:
         98:8e:e8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:28:18 2025 by rpki-client