This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3v2t2iJUXQcBGxWQrd99CK1n5Ef1ETFgvgdEQ1bhrZFh/0/56BBEEA856D90B5C770B424267CE0AA91446D34D.mft
File:                     56BBEEA856D90B5C770B424267CE0AA91446D34D.mft (raw, json)
Hash identifier:          8WmCk/mk4Nq2SLRXcM6jOnQ+6uirexadGRRE7eYzSDI=
Subject key identifier:   15:0F:0E:D7:59:A8:99:FF:AF:58:4E:0C:8B:B9:A1:13:39:D6:58:3A
Authority key identifier: 56:BB:EE:A8:56:D9:0B:5C:77:0B:42:42:67:CE:0A:A9:14:46:D3:4D
Certificate issuer:       /CN=56BBEEA856D90B5C770B424267CE0AA91446D34D
Certificate serial:       5E3E775A9A361F6CEFA24E8F89419B09DB334716
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56BBEEA856D90B5C770B424267CE0AA91446D34D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3v2t2iJUXQcBGxWQrd99CK1n5Ef1ETFgvgdEQ1bhrZFh/0/56BBEEA856D90B5C770B424267CE0AA91446D34D.mft
Manifest number:          29
Signing time:             Wed 17 Dec 2025 10:52:27 +0000
Manifest this update:     Wed 17 Dec 2025 10:47:27 +0000
Manifest next update:     Thu 18 Dec 2025 11:43:27 +0000
Files and hashes:         1: 3137302e3234372e3139362e302f32322d3332203d3e203533303134.roa (hash: 6/8mEP2el5WIC+VAubKyVPYp0gD2fOxvb0hkYXRlDGk=)
                          2: 56BBEEA856D90B5C770B424267CE0AA91446D34D.crl (hash: WMPaJ90ahnlvK80gvBzqxne4JJuBaDh1aU2KGxPvYBE=)
                          3: 323830343a3538383a3a2f33322d3334203d3e203533303134.roa (hash: Qpz4e+XZuc0iRzWc8fXETnov5R8ZjVwOf4yNjJLGq/8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3v2t2iJUXQcBGxWQrd99CK1n5Ef1ETFgvgdEQ1bhrZFh/0/56BBEEA856D90B5C770B424267CE0AA91446D34D.crl
                          rsync://rpki-repo.registro.br/repo/3v2t2iJUXQcBGxWQrd99CK1n5Ef1ETFgvgdEQ1bhrZFh/0/56BBEEA856D90B5C770B424267CE0AA91446D34D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56BBEEA856D90B5C770B424267CE0AA91446D34D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Dec 2025 11:43:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:3e:77:5a:9a:36:1f:6c:ef:a2:4e:8f:89:41:9b:09:db:33:47:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56BBEEA856D90B5C770B424267CE0AA91446D34D
        Validity
            Not Before: Dec 17 10:47:27 2025 GMT
            Not After : Dec 18 11:43:27 2025 GMT
        Subject: CN=150F0ED759A899FFAF584E0C8BB9A11339D6583A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8f:b9:41:66:ab:c9:c3:55:b3:f9:2d:59:b6:
                    e9:a6:05:c2:ba:95:1c:f4:68:03:90:5d:23:cb:29:
                    50:e9:9d:8c:2c:f2:38:46:a1:ff:ab:8e:5e:ff:4c:
                    10:78:98:83:84:0b:8f:55:df:e0:79:83:8a:99:2b:
                    0e:ea:80:a4:2b:0f:eb:0b:50:2b:a7:69:3d:b1:0e:
                    20:b2:56:6b:ab:81:07:e8:a3:d9:59:5d:64:7c:64:
                    1d:d3:0d:dd:19:a2:d4:ab:f9:78:d2:98:88:4d:76:
                    22:8a:53:38:6b:a6:d8:51:d9:f7:b2:fa:62:93:39:
                    80:22:ec:73:a9:25:d3:02:ee:ba:a3:0d:6f:72:29:
                    7e:6f:03:f9:3a:a3:89:44:01:14:ee:c2:18:aa:d7:
                    12:d4:79:46:8e:ec:28:32:ba:53:39:21:e3:e8:b6:
                    7d:af:19:ae:7e:68:9d:a1:d7:f1:fe:d6:c4:a5:03:
                    08:c8:23:12:d3:a9:35:77:8e:25:49:79:72:8f:0e:
                    65:4e:81:68:20:17:0d:b0:e9:72:a9:24:d0:43:73:
                    e7:fe:74:37:ca:da:53:d3:00:50:d2:e5:27:52:8a:
                    72:c4:e7:b5:f6:22:c3:93:d4:e9:f7:2b:41:02:5f:
                    7d:f7:2a:f6:8a:29:c7:29:f0:ca:69:42:1b:8b:0f:
                    8d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0F:0E:D7:59:A8:99:FF:AF:58:4E:0C:8B:B9:A1:13:39:D6:58:3A
            X509v3 Authority Key Identifier:
                keyid:56:BB:EE:A8:56:D9:0B:5C:77:0B:42:42:67:CE:0A:A9:14:46:D3:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3v2t2iJUXQcBGxWQrd99CK1n5Ef1ETFgvgdEQ1bhrZFh/0/56BBEEA856D90B5C770B424267CE0AA91446D34D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56BBEEA856D90B5C770B424267CE0AA91446D34D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3v2t2iJUXQcBGxWQrd99CK1n5Ef1ETFgvgdEQ1bhrZFh/0/56BBEEA856D90B5C770B424267CE0AA91446D34D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:b8:a3:5c:16:5b:c9:7c:e2:ed:cf:33:04:61:ea:13:90:10:
         38:f6:6e:62:b5:27:d2:65:ef:8c:31:08:4d:da:39:28:7b:83:
         be:bb:e2:7b:1a:18:4e:d6:79:57:0b:6f:5d:13:f4:71:be:ca:
         c9:0b:cf:57:52:a3:f6:38:86:4d:cf:ee:6c:1b:c8:7b:5b:94:
         55:c6:b8:29:1a:3f:bf:48:95:7e:0e:cb:03:84:51:c1:b6:ad:
         2f:5b:59:e7:93:9b:34:d8:be:dd:a8:77:70:bb:e9:66:ca:d2:
         90:ef:aa:12:01:5f:7a:89:55:58:47:e6:9f:e7:63:ac:8a:b0:
         a8:a5:0b:91:82:6a:d6:52:4e:7c:9f:98:b9:41:81:e3:dd:16:
         2a:57:80:2f:0a:ed:f9:cd:ae:d3:e6:59:82:a9:1a:a3:ff:ee:
         5e:88:04:05:d4:9d:7a:d1:d1:d8:6b:ca:9b:85:26:94:58:43:
         e7:bb:23:0a:f3:8e:3d:59:46:30:cc:85:c3:4b:ce:ed:54:50:
         27:04:11:00:0d:21:74:6c:27:83:ee:71:c4:7e:0f:96:2c:f1:
         70:23:ac:9e:19:48:5a:17:27:10:3f:4e:0f:bf:c9:9b:d0:0a:
         ff:14:bb:89:68:9b:cd:bf:ee:d4:7e:9c:6d:3c:6e:14:2c:d6:
         e5:52:0e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 01:11:08 2025 by rpki-client