This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft
File:                     5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft (raw, json)
Hash identifier:          XfDQx4DU5wEdythUdQCqOkwdQ/i1dwj1HHPIHFb4Ol4=
Subject key identifier:   80:62:E5:AA:D8:82:3C:94:B6:61:8F:64:FE:EC:34:9D:1A:B1:E1:16
Authority key identifier: 5D:BF:38:9D:E8:4A:80:68:D7:2B:A7:A5:E0:30:F9:0D:8F:67:0D:31
Certificate issuer:       /CN=5DBF389DE84A8068D72BA7A5E030F90D8F670D31
Certificate serial:       27F04BFE7405B599DE4908AA7BEE32CD97AC84C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft
Manifest number:          02D9
Signing time:             Mon 22 Dec 2025 12:18:20 +0000
Manifest this update:     Mon 22 Dec 2025 12:13:20 +0000
Manifest next update:     Tue 23 Dec 2025 14:41:20 +0000
Files and hashes:         1: 323830343a333435343a3a2f33322d3334203d3e20323635343531.roa (hash: r3bCeQ3Va1xBObYctOhmI8el+yMJ561eA1zNaJrdc6A=)
                          2: 5DBF389DE84A8068D72BA7A5E030F90D8F670D31.crl (hash: fIfx6ZT+6x+SZCxpGhxkPLcx8Vh0IRXFmC5m0Va+VUo=)
                          3: 3136382e3139362e3130342e302f32322d3234203d3e20323635343531.roa (hash: bm12g2NtqddE/K8ln3akRM5TUAz6D/tgPeBexY7J5sY=)
                          4: 323830343a333435343a323030303a3a2f33352d3335203d3e20323635343531.roa (hash: lWPWAMy2NkMXHq4ex2mIrGhd7zdCsxdT6sdhk5ThXO0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.crl
                          rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 14:41:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:f0:4b:fe:74:05:b5:99:de:49:08:aa:7b:ee:32:cd:97:ac:84:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DBF389DE84A8068D72BA7A5E030F90D8F670D31
        Validity
            Not Before: Dec 22 12:13:20 2025 GMT
            Not After : Dec 23 14:41:20 2025 GMT
        Subject: CN=8062E5AAD8823C94B6618F64FEEC349D1AB1E116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ad:a3:02:5d:ab:3f:0d:3f:d5:34:66:83:08:
                    1b:56:88:4c:56:fe:76:41:7e:1b:ac:a8:b9:16:10:
                    64:96:8d:17:1e:8c:5d:1e:12:ae:2b:1c:bd:c5:e1:
                    b1:62:64:01:43:75:4d:62:7d:60:d9:16:f6:11:fd:
                    e8:c1:52:36:fd:90:8b:e6:ac:c3:89:d8:a3:38:0d:
                    29:03:70:4a:86:2f:4e:98:ae:65:a7:88:8d:57:a3:
                    d3:22:15:63:87:26:96:f5:6f:0f:5d:45:71:32:ed:
                    4d:bd:48:eb:90:27:bd:86:52:3f:08:26:a3:04:5f:
                    e3:28:71:9b:3a:92:a9:38:db:67:0f:b2:71:27:52:
                    e6:a1:12:f8:4b:a0:67:39:d2:5a:4a:42:b6:0a:e1:
                    bf:ac:45:3a:d3:33:79:67:6e:50:77:2f:db:71:12:
                    a3:30:62:61:06:19:99:53:c5:53:ed:49:59:a8:53:
                    80:0d:3a:ee:97:29:b9:ec:f9:91:9c:89:05:94:a8:
                    27:a3:9d:11:34:c9:e5:28:04:4b:a3:53:cd:27:70:
                    e6:9f:3a:ae:3c:61:a7:89:02:ad:59:c9:3a:01:19:
                    43:12:e6:15:52:84:75:94:f8:c8:b2:8c:06:46:dd:
                    83:81:09:a3:f0:37:f1:8e:3a:9d:9b:35:de:d8:07:
                    28:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:62:E5:AA:D8:82:3C:94:B6:61:8F:64:FE:EC:34:9D:1A:B1:E1:16
            X509v3 Authority Key Identifier:
                keyid:5D:BF:38:9D:E8:4A:80:68:D7:2B:A7:A5:E0:30:F9:0D:8F:67:0D:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:bb:70:6a:90:f4:4d:c5:a9:66:04:d5:2e:7c:80:40:03:75:
         3b:35:e3:0c:65:5a:a6:8c:68:cf:43:ab:28:f5:9e:58:c4:ed:
         87:51:1f:0a:cb:61:ea:28:21:36:38:f1:34:2a:92:9f:14:4f:
         3e:96:e1:ea:e5:ba:a5:3a:af:8b:14:83:a9:cc:94:33:9b:3b:
         68:41:ae:cd:73:a5:0d:65:1e:c3:ea:69:31:26:ad:33:15:a7:
         0d:4a:05:c0:88:d6:ed:d1:43:6f:41:2b:a1:88:a8:03:42:b6:
         ef:51:38:05:dd:66:c7:0a:15:cb:9b:96:6a:32:d7:bc:02:46:
         c4:9c:36:6e:8d:a5:6c:81:0f:bd:d1:ba:62:ac:fe:4f:65:0e:
         70:d2:6c:32:d9:18:7e:db:0f:a2:23:30:c1:eb:a3:cc:ab:80:
         0a:88:90:36:65:46:41:95:c8:42:d5:45:0f:b8:42:94:a4:8d:
         a3:2a:32:a5:4c:ac:32:4e:25:63:ef:fc:b6:30:f7:74:a4:8d:
         94:0c:78:b5:68:b4:92:ac:88:81:3d:ee:08:71:30:f6:92:12:
         56:ed:f0:5c:e0:72:aa:df:c3:81:20:75:02:f0:d2:35:3c:28:
         0c:76:77:1b:42:d7:46:25:44:76:74:23:ae:03:0d:cd:31:12:
         0f:65:e0:e0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJ/BL/nQFtZneSQiqe+4yzZeshMQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNURCRjM4OURFODRBODA2OEQ3MkJBN0E1RTAzMEY5MEQ4
RjY3MEQzMTAeFw0yNTEyMjIxMjEzMjBaFw0yNTEyMjMxNDQxMjBaMDMxMTAvBgNV
BAMTKDgwNjJFNUFBRDg4MjNDOTRCNjYxOEY2NEZFRUMzNDlEMUFCMUUxMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4raMCXas/DT/VNGaDCBtWiExW
/nZBfhusqLkWEGSWjRcejF0eEq4rHL3F4bFiZAFDdU1ifWDZFvYR/ejBUjb9kIvm
rMOJ2KM4DSkDcEqGL06YrmWniI1Xo9MiFWOHJpb1bw9dRXEy7U29SOuQJ72GUj8I
JqMEX+MocZs6kqk422cPsnEnUuahEvhLoGc50lpKQrYK4b+sRTrTM3lnblB3L9tx
EqMwYmEGGZlTxVPtSVmoU4ANOu6XKbns+ZGciQWUqCejnRE0yeUoBEujU80ncOaf
Oq48YaeJAq1ZyToBGUMS5hVShHWU+MiyjAZG3YOBCaPwN/GOOp2bNd7YByiDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUgGLlqtiCPJS2YY9k/uw0nRqx4RYwHwYDVR0j
BBgwFoAUXb84nehKgGjXK6el4DD5DY9nDTEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGs0VWlncXN2Q3BWZUY2b29SYk5tdHY2OW1YVkFWQXhNRlRCclVodEEz
R3YvMC81REJGMzg5REU4NEE4MDY4RDcyQkE3QTVFMDMwRjkwRDhGNjcwRDMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVEQkYzODlERTg0QTgwNjhE
NzJCQTdBNUUwMzBGOTBEOEY2NzBEMzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NGs0VWlncXN2Q3BWZUY2b29SYk5tdHY2OW1YVkFWQXhNRlRCclVodEEzR3YvMC81
REJGMzg5REU4NEE4MDY4RDcyQkE3QTVFMDMwRjkwRDhGNjcwRDMxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmrtwapD0TcWpZgTVLnyAQAN1OzXjDGVapoxoz0OrKPWeWMTth1EfCsth6igh
NjjxNCqSnxRPPpbh6uW6pTqvixSDqcyUM5s7aEGuzXOlDWUew+ppMSatMxWnDUoF
wIjW7dFDb0EroYioA0K271E4Bd1mxwoVy5uWajLXvAJGxJw2bo2lbIEPvdG6Yqz+
T2UOcNJsMtkYftsPoiMwweujzKuACoiQNmVGQZXIQtVFD7hClKSNoyoypUysMk4l
Y+/8tjD3dKSNlAx4tWi0kqyIgT3uCHEw9pISVu3wXOByqt/DgSB1AvDSNTwoDHZ3
G0LXRiVEdnQjrgMNzTESD2Xg4A==
-----END CERTIFICATE-----
Generated at Tue Dec 23 05:02:58 2025 by rpki-client