This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.mft
File:                     AFB37E8982591B18DBDE9E8217274DFABCEAA945.mft (raw, json)
Hash identifier:          Z62JZAK13TRB5zaKQK/pkOEFwuvVVyOKWuiOWa7IcsM=
Subject key identifier:   02:74:DB:DC:18:C0:B1:8D:DA:C9:51:4E:72:B1:D9:D1:96:56:BF:EB
Authority key identifier: AF:B3:7E:89:82:59:1B:18:DB:DE:9E:82:17:27:4D:FA:BC:EA:A9:45
Certificate issuer:       /CN=AFB37E8982591B18DBDE9E8217274DFABCEAA945
Certificate serial:       5C7F0FFE9E169A19CF403E3A42F1D0954D54F682
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFB37E8982591B18DBDE9E8217274DFABCEAA945.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.mft
Manifest number:          01E5
Signing time:             Sat 20 Dec 2025 21:29:39 +0000
Manifest this update:     Sat 20 Dec 2025 21:24:39 +0000
Manifest next update:     Sun 21 Dec 2025 21:56:39 +0000
Files and hashes:         1: AFB37E8982591B18DBDE9E8217274DFABCEAA945.crl (hash: QZHtvvu44fScOyR5cPIaSWTeRBc8eJvebNwp8QAolWk=)
                          2: 323830343a333163303a3a2f33322d3438203d3e20323632343338.roa (hash: RuLwpb36Mc/aQP5+sXykZeAX0jgsnSK9Ur8mUN1VxfU=)
                          3: 3137372e35322e36342e302f32312d3234203d3e20323632343338.roa (hash: xMV1KnmnB0dc+YZcNBVuwyUSgtsFk+osNooK9idqivM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.crl
                          rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFB37E8982591B18DBDE9E8217274DFABCEAA945.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 21:56:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:7f:0f:fe:9e:16:9a:19:cf:40:3e:3a:42:f1:d0:95:4d:54:f6:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFB37E8982591B18DBDE9E8217274DFABCEAA945
        Validity
            Not Before: Dec 20 21:24:39 2025 GMT
            Not After : Dec 21 21:56:39 2025 GMT
        Subject: CN=0274DBDC18C0B18DDAC9514E72B1D9D19656BFEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:71:1f:cf:bb:e0:36:c3:7b:31:48:f9:27:49:
                    01:5b:60:b9:d2:28:29:09:17:b2:fe:67:50:f4:f6:
                    28:55:76:00:bd:7f:dd:4b:b1:b9:56:9b:a6:44:24:
                    19:38:15:f3:97:c2:09:01:13:68:13:fa:6a:71:a0:
                    d4:28:5d:55:d8:cc:48:f3:26:17:59:c0:fb:3f:fc:
                    a5:b5:9c:25:ac:b4:4d:8c:e1:82:a9:70:b3:d5:1f:
                    f8:58:2e:4c:43:9f:4e:0e:5e:50:58:56:ba:11:d3:
                    1f:a1:d2:bd:a8:be:8c:3a:57:ff:98:4a:84:8f:03:
                    8c:b9:99:95:af:2c:8d:d6:98:f7:d9:40:96:15:61:
                    61:bb:20:cc:b9:9b:fe:fb:89:15:d9:70:2d:7e:5c:
                    dc:56:fd:2a:f0:b2:14:50:53:e3:75:38:f8:5d:dd:
                    e4:5d:af:d7:2b:27:89:55:a0:ed:b1:13:66:15:d9:
                    ce:66:7f:9e:be:2e:4c:48:b3:c6:4d:66:64:9f:03:
                    e0:f6:b3:0f:31:1f:68:4d:82:56:49:2a:86:7c:5e:
                    ee:b8:cf:c2:2c:a4:f2:c5:30:3f:b9:08:52:98:3d:
                    e6:a2:72:8f:e7:f9:73:f3:30:13:c1:1e:b5:f1:ad:
                    af:f0:7c:8c:ec:d4:8f:6e:dd:b0:1c:56:97:96:df:
                    5a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:74:DB:DC:18:C0:B1:8D:DA:C9:51:4E:72:B1:D9:D1:96:56:BF:EB
            X509v3 Authority Key Identifier:
                keyid:AF:B3:7E:89:82:59:1B:18:DB:DE:9E:82:17:27:4D:FA:BC:EA:A9:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFB37E8982591B18DBDE9E8217274DFABCEAA945.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:88:1b:4b:f8:61:17:1e:b6:12:7a:5b:ed:dd:25:d9:d8:0f:
         be:91:19:10:32:6d:0e:52:e6:9c:b9:f7:e6:1f:e2:70:72:9b:
         70:5d:c9:53:82:c1:ea:1b:ef:70:83:6a:30:03:d9:40:3a:a3:
         0a:bf:cc:71:bf:9b:75:ad:92:64:12:7d:7e:0c:66:85:2c:72:
         a5:9e:42:ab:15:61:78:5a:dc:74:8a:72:0e:b9:91:cf:35:5d:
         49:85:2f:57:14:2e:8b:d9:52:e4:d1:e9:31:e6:a7:5a:20:61:
         33:2b:82:2b:cc:e1:b0:ad:6d:e3:90:df:25:e5:97:4f:fd:be:
         4c:8d:2c:57:89:5b:a6:c4:c1:9a:b2:f5:11:2b:97:2c:bb:17:
         78:3a:d7:cd:cd:02:6d:58:17:2f:59:88:ae:82:e1:a0:b0:6a:
         de:9c:c7:8e:c9:ea:cc:31:ef:f9:a8:99:ed:17:fb:0b:91:ac:
         a2:59:fc:6a:6a:e1:86:be:68:1e:1e:40:be:f7:dd:04:1e:00:
         72:89:8d:58:c1:1f:26:d0:4d:43:b9:2e:2a:b1:15:dc:c8:bd:
         c2:97:77:c2:de:3b:d7:1e:f0:11:dc:f4:75:f0:ce:5f:54:a0:
         b1:06:6a:b6:f5:68:dd:75:92:57:ea:2b:a4:1a:d3:e4:13:66:
         72:3c:6f:5a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXH8P/p4WmhnPQD46QvHQlU1U9oIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUZCMzdFODk4MjU5MUIxOERCREU5RTgyMTcyNzRERkFC
Q0VBQTk0NTAeFw0yNTEyMjAyMTI0MzlaFw0yNTEyMjEyMTU2MzlaMDMxMTAvBgNV
BAMTKDAyNzREQkRDMThDMEIxOEREQUM5NTE0RTcyQjFEOUQxOTY1NkJGRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMcR/Pu+A2w3sxSPknSQFbYLnS
KCkJF7L+Z1D09ihVdgC9f91LsblWm6ZEJBk4FfOXwgkBE2gT+mpxoNQoXVXYzEjz
JhdZwPs//KW1nCWstE2M4YKpcLPVH/hYLkxDn04OXlBYVroR0x+h0r2ovow6V/+Y
SoSPA4y5mZWvLI3WmPfZQJYVYWG7IMy5m/77iRXZcC1+XNxW/SrwshRQU+N1OPhd
3eRdr9crJ4lVoO2xE2YV2c5mf56+LkxIs8ZNZmSfA+D2sw8xH2hNglZJKoZ8Xu64
z8IspPLFMD+5CFKYPeaico/n+XPzMBPBHrXxra/wfIzs1I9u3bAcVpeW31qXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUAnTb3BjAsY3ayVFOcrHZ0ZZWv+swHwYDVR0j
BBgwFoAUr7N+iYJZGxjb3p6CFydN+rzqqUUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnVZU1NEbjJWMlRNNHFlZ1FNVkF5VkM5TWt2Q0JZb3lIaGJhUXJ4bUg1
ODcvMC9BRkIzN0U4OTgyNTkxQjE4REJERTlFODIxNzI3NERGQUJDRUFBOTQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGQjM3RTg5ODI1OTFCMThE
QkRFOUU4MjE3Mjc0REZBQkNFQUE5NDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MnVZU1NEbjJWMlRNNHFlZ1FNVkF5VkM5TWt2Q0JZb3lIaGJhUXJ4bUg1ODcvMC9B
RkIzN0U4OTgyNTkxQjE4REJERTlFODIxNzI3NERGQUJDRUFBOTQ1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaYgbS/hhFx62Enpb7d0l2dgPvpEZEDJtDlLmnLn35h/icHKbcF3JU4LB6hvv
cINqMAPZQDqjCr/Mcb+bda2SZBJ9fgxmhSxypZ5CqxVheFrcdIpyDrmRzzVdSYUv
VxQui9lS5NHpMeanWiBhMyuCK8zhsK1t45DfJeWXT/2+TI0sV4lbpsTBmrL1ESuX
LLsXeDrXzc0CbVgXL1mIroLhoLBq3pzHjsnqzDHv+aiZ7Rf7C5Gsoln8amrhhr5o
Hh5AvvfdBB4AcomNWMEfJtBNQ7kuKrEV3Mi9wpd3wt471x7wEdz0dfDOX1SgsQZq
tvVo3XWSV+orpBrT5BNmcjxvWg==
-----END CERTIFICATE-----
Generated at Sun Dec 21 00:58:54 2025 by rpki-client