This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/7A10AE41CC64069168EAC24B26CCACDFEF6111CC.mft
File:                     7A10AE41CC64069168EAC24B26CCACDFEF6111CC.mft (raw, json)
Hash identifier:          9/kmne5k1tvGErfi9I3Qf9PnaTBMGS+RB3TEALks6Lc=
Subject key identifier:   90:4A:34:51:7B:7E:A2:99:25:9E:79:4D:2D:3E:BE:D0:B1:D6:00:9F
Authority key identifier: 7A:10:AE:41:CC:64:06:91:68:EA:C2:4B:26:CC:AC:DF:EF:61:11:CC
Certificate issuer:       /CN=7A10AE41CC64069168EAC24B26CCACDFEF6111CC
Certificate serial:       3B27A5F8C2252159B3E961C2A1ECBF382DA793D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A10AE41CC64069168EAC24B26CCACDFEF6111CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/7A10AE41CC64069168EAC24B26CCACDFEF6111CC.mft
Manifest number:          5F
Signing time:             Fri 19 Dec 2025 13:19:44 +0000
Manifest this update:     Fri 19 Dec 2025 13:14:44 +0000
Manifest next update:     Sat 20 Dec 2025 14:29:44 +0000
Files and hashes:         1: 323830343a373564343a3a2f33322d313238203d3e20323731303732.roa (hash: HjXIYZTTKS9e+wj4dljGSGxBMXQimgEGJ44wZSpYnxM=)
                          2: 3137392e34382e3130302e302f32322d3332203d3e20323731303732.roa (hash: 1moidtHyQdrmuuIbRLVpJAmoommd7dArQ8WspA6/T6o=)
                          3: 7A10AE41CC64069168EAC24B26CCACDFEF6111CC.crl (hash: PVdrK1kcsIkytd1tY2bhVtsn9ks60wnYuAtD7op4p0s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/7A10AE41CC64069168EAC24B26CCACDFEF6111CC.crl
                          rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/7A10AE41CC64069168EAC24B26CCACDFEF6111CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A10AE41CC64069168EAC24B26CCACDFEF6111CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 14:29:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:27:a5:f8:c2:25:21:59:b3:e9:61:c2:a1:ec:bf:38:2d:a7:93:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A10AE41CC64069168EAC24B26CCACDFEF6111CC
        Validity
            Not Before: Dec 19 13:14:44 2025 GMT
            Not After : Dec 20 14:29:44 2025 GMT
        Subject: CN=904A34517B7EA299259E794D2D3EBED0B1D6009F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3a:a6:38:b7:bf:53:1b:d2:b4:c9:4c:61:ca:
                    52:09:34:6b:ba:8b:68:e0:da:5b:e9:e1:40:7c:fe:
                    6a:62:56:d8:23:12:5e:b5:76:60:19:50:4c:ac:b2:
                    24:b2:c9:59:e7:1d:07:2f:43:bc:d7:f8:1b:52:61:
                    1f:0c:1f:31:d6:14:31:10:7b:e7:c6:8b:0b:2c:09:
                    6a:b2:9c:56:c5:41:6a:7b:f7:0f:c9:93:27:ac:61:
                    11:f6:5c:c6:a4:07:78:de:b1:cb:72:ae:73:0c:0b:
                    8d:f1:00:37:c4:8c:bd:0b:99:fb:12:c4:21:ef:6e:
                    f1:2b:d3:c9:be:f4:e5:3e:75:62:70:c8:10:e9:b7:
                    bb:7f:dc:6b:e7:21:b1:9d:e7:ff:3c:de:3e:ae:c7:
                    64:67:24:ea:b8:82:68:48:44:21:51:e8:5c:0f:ba:
                    aa:c1:e8:7d:47:15:57:a3:67:42:ca:5f:43:3b:0b:
                    6b:06:b0:fd:11:0c:8a:29:61:9a:d7:f5:f6:8f:b5:
                    18:25:55:46:4d:5a:fc:23:ff:7c:0c:e5:41:94:bc:
                    8d:9b:01:cc:3b:cb:c9:8b:27:de:e4:89:15:6c:1d:
                    6b:fb:06:e2:b1:20:f8:ef:80:dd:65:90:c8:aa:7c:
                    00:e8:31:15:6d:72:bd:fb:f2:a2:82:73:a6:85:e0:
                    46:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:4A:34:51:7B:7E:A2:99:25:9E:79:4D:2D:3E:BE:D0:B1:D6:00:9F
            X509v3 Authority Key Identifier:
                keyid:7A:10:AE:41:CC:64:06:91:68:EA:C2:4B:26:CC:AC:DF:EF:61:11:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/7A10AE41CC64069168EAC24B26CCACDFEF6111CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A10AE41CC64069168EAC24B26CCACDFEF6111CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/7A10AE41CC64069168EAC24B26CCACDFEF6111CC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:89:f7:76:35:9a:c7:59:51:49:42:7f:35:48:3a:9a:71:98:
         e2:f8:1a:42:93:0f:64:7e:f3:01:6c:d1:20:cf:31:01:19:22:
         eb:2a:ad:e0:69:9f:c2:ed:c4:ac:1d:83:40:8d:6b:e4:89:2a:
         fb:f4:d4:6a:c8:a3:00:17:b1:18:98:33:ac:a9:f6:d4:33:6a:
         9f:70:19:1f:48:8f:50:85:5f:c0:43:57:b4:2d:8a:af:19:d2:
         be:0d:a1:2b:4d:f8:6b:ab:ac:a3:1d:9e:8f:66:98:fe:68:41:
         b0:55:63:66:54:00:54:7e:67:b6:50:47:fc:4b:df:cf:79:fa:
         74:a7:40:e4:45:53:70:2a:32:ab:08:ff:3a:6e:2f:a2:70:f7:
         54:52:fe:ea:7f:10:95:1f:cb:b1:51:aa:56:cb:8d:bf:ae:32:
         46:25:6a:25:ac:cc:76:93:25:b2:a5:5a:80:97:eb:d1:cf:96:
         70:dd:6b:43:da:7d:b3:02:cc:99:1c:65:fd:44:a9:b1:5b:50:
         a8:8c:e7:cd:b8:53:eb:76:a6:e5:96:2e:61:34:c6:45:1a:05:
         8c:cc:35:ed:e2:28:3e:65:21:8b:da:a4:e1:55:9a:b3:b8:b7:
         dd:a5:07:97:60:65:bd:3d:22:0f:b7:a6:95:39:c8:f7:be:7b:
         58:ef:57:a3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOyel+MIlIVmz6WHCoey/OC2nk9AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0ExMEFFNDFDQzY0MDY5MTY4RUFDMjRCMjZDQ0FDREZF
RjYxMTFDQzAeFw0yNTEyMTkxMzE0NDRaFw0yNTEyMjAxNDI5NDRaMDMxMTAvBgNV
BAMTKDkwNEEzNDUxN0I3RUEyOTkyNTlFNzk0RDJEM0VCRUQwQjFENjAwOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXOqY4t79TG9K0yUxhylIJNGu6
i2jg2lvp4UB8/mpiVtgjEl61dmAZUEyssiSyyVnnHQcvQ7zX+BtSYR8MHzHWFDEQ
e+fGiwssCWqynFbFQWp79w/JkyesYRH2XMakB3jesctyrnMMC43xADfEjL0LmfsS
xCHvbvEr08m+9OU+dWJwyBDpt7t/3GvnIbGd5/883j6ux2RnJOq4gmhIRCFR6FwP
uqrB6H1HFVejZ0LKX0M7C2sGsP0RDIopYZrX9faPtRglVUZNWvwj/3wM5UGUvI2b
Acw7y8mLJ97kiRVsHWv7BuKxIPjvgN1lkMiqfADoMRVtcr378qKCc6aF4EZHAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUkEo0UXt+opklnnlNLT6+0LHWAJ8wHwYDVR0j
BBgwFoAUehCuQcxkBpFo6sJLJsys3+9hEcwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmZERlFZUVRUekt0aGlqNjZ5V3FIM0tydnBQWWJ6ZXhUMWl4dGN4eDNK
THIvMC83QTEwQUU0MUNDNjQwNjkxNjhFQUMyNEIyNkNDQUNERkVGNjExMUNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdBMTBBRTQxQ0M2NDA2OTE2
OEVBQzI0QjI2Q0NBQ0RGRUY2MTExQ0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MmZERlFZUVRUekt0aGlqNjZ5V3FIM0tydnBQWWJ6ZXhUMWl4dGN4eDNKTHIvMC83
QTEwQUU0MUNDNjQwNjkxNjhFQUMyNEIyNkNDQUNERkVGNjExMUNDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWIn3djWax1lRSUJ/NUg6mnGY4vgaQpMPZH7zAWzRIM8xARki6yqt4Gmfwu3E
rB2DQI1r5Ikq+/TUasijABexGJgzrKn21DNqn3AZH0iPUIVfwENXtC2KrxnSvg2h
K034a6usox2ej2aY/mhBsFVjZlQAVH5ntlBH/Evfz3n6dKdA5EVTcCoyqwj/Om4v
onD3VFL+6n8QlR/LsVGqVsuNv64yRiVqJazMdpMlsqVagJfr0c+WcN1rQ9p9swLM
mRxl/USpsVtQqIznzbhT63am5ZYuYTTGRRoFjMw17eIoPmUhi9qk4VWas7i33aUH
l2BlvT0iD7emlTnI9757WO9Xow==
-----END CERTIFICATE-----
Generated at Sat Dec 20 05:00:28 2025 by rpki-client