This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.mft
File:                     F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.mft (raw, json)
Hash identifier:          qGbl45o1TNeyU0w6iSF642ia1O2lP9eIhvn96HEQOdc=
Subject key identifier:   CC:5A:BF:05:FA:0D:F6:23:B5:B4:E0:86:26:7A:5A:E8:F1:C3:43:46
Authority key identifier: F9:D7:CA:B3:DB:B6:E8:36:A9:DA:11:24:EB:1C:0D:D2:E4:A3:AF:D2
Certificate issuer:       /CN=F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2
Certificate serial:       55E26D5DCB3EDD59027931AE32E18FD24B2D6796
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.mft
Manifest number:          5A
Signing time:             Mon 22 Dec 2025 21:08:52 +0000
Manifest this update:     Mon 22 Dec 2025 21:03:52 +0000
Manifest next update:     Tue 23 Dec 2025 23:22:52 +0000
Files and hashes:         1: 323830343a343735633a3a2f33322d313238203d3e20323637303438.roa (hash: jp3jh3cXGLRbte/PrsJ/rlc1qYfSMcCfJHgTskp8KeA=)
                          2: 34352e3232382e34342e302f32322d3332203d3e20323637303438.roa (hash: 7cDCdLU6VMbWBqB6t/edQ+r3L6KgzYWBki0xGa4vL0s=)
                          3: F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.crl (hash: 5d/zzeNlspK3knlQdzN5J4ipzNg/btFLmFEHDcH8uJ4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.crl
                          rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 23:22:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e2:6d:5d:cb:3e:dd:59:02:79:31:ae:32:e1:8f:d2:4b:2d:67:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2
        Validity
            Not Before: Dec 22 21:03:52 2025 GMT
            Not After : Dec 23 23:22:52 2025 GMT
        Subject: CN=CC5ABF05FA0DF623B5B4E086267A5AE8F1C34346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9e:c3:1f:7d:1f:6c:86:e1:b2:61:d7:1a:eb:
                    27:1d:83:2a:37:5a:45:03:06:c4:15:24:41:57:a0:
                    72:36:61:35:8a:10:67:f2:7b:f3:aa:62:ad:ee:ae:
                    57:4e:af:9c:70:ae:97:ab:77:9a:37:ba:18:48:ce:
                    c9:9a:97:39:98:3a:7e:fe:dd:df:35:04:4c:19:b8:
                    ae:e8:8f:18:41:12:92:2a:2c:73:b8:09:da:28:19:
                    ad:b8:3d:4f:84:02:e2:90:06:c0:f4:71:5c:4c:b1:
                    3f:8a:a4:8c:a0:a8:6d:e8:aa:3f:b1:98:d7:69:11:
                    0c:f9:3b:59:dc:7f:87:7e:4c:ce:af:de:73:1a:87:
                    fa:10:7f:52:d2:fe:69:01:a2:cb:cf:a3:e0:64:3e:
                    b8:b8:e9:8f:b1:a1:f3:df:20:53:50:45:f8:b9:5d:
                    a4:3b:db:92:69:93:98:ab:4b:07:6b:18:66:9d:62:
                    47:49:1b:fa:58:ec:ae:6d:7e:20:6b:52:f7:a6:b3:
                    18:fb:83:31:d6:4e:a8:44:13:51:ed:bc:dc:e0:a9:
                    76:7a:91:5a:38:a6:b5:57:67:83:df:e1:23:85:4e:
                    2d:4d:8a:b0:b2:05:94:1b:0f:ab:94:ea:62:e8:2c:
                    2e:e1:18:d8:fd:14:e0:43:d2:23:80:ae:59:a9:01:
                    c5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5A:BF:05:FA:0D:F6:23:B5:B4:E0:86:26:7A:5A:E8:F1:C3:43:46
            X509v3 Authority Key Identifier:
                keyid:F9:D7:CA:B3:DB:B6:E8:36:A9:DA:11:24:EB:1C:0D:D2:E4:A3:AF:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:f0:a0:a8:ae:fb:6a:82:3b:2d:d0:76:0c:e2:c0:91:05:d7:
         99:43:a5:16:b0:77:d4:56:a7:c6:da:83:56:63:4e:5c:1e:8b:
         ca:df:c6:85:b2:67:6e:cb:3d:a9:87:9e:51:00:09:fb:16:fe:
         1f:40:83:ba:f9:fc:5c:65:a0:76:9a:12:10:85:db:4a:3d:af:
         4c:69:7a:86:f4:c8:ed:92:f7:f5:32:f9:9c:01:aa:2a:fc:87:
         5c:fb:68:92:92:fe:18:8e:95:4e:54:97:8c:54:99:d2:1b:d0:
         68:6a:1c:d0:cc:f3:01:c5:33:48:5c:3e:1d:48:0b:37:ee:4b:
         cc:69:9f:05:b6:a3:c6:ea:d0:d1:43:77:9e:e8:40:62:cc:3f:
         02:91:53:ba:1a:37:fa:44:bc:01:b5:74:1b:17:bf:38:fe:ae:
         c4:c6:8f:ae:65:11:d9:93:18:34:85:b0:aa:ae:70:c0:74:74:
         46:45:08:af:ff:65:71:86:9b:37:e0:13:01:5f:5d:2c:13:b7:
         e3:86:76:70:a6:e6:58:5c:8a:67:eb:1e:a9:0b:e3:03:3d:1f:
         f9:35:af:b2:f2:49:24:03:15:cc:97:d5:d2:fc:35:fd:58:da:
         52:43:9b:e9:42:cc:da:a4:1c:6a:92:1c:b4:32:c3:62:38:8b:
         90:9f:f0:a9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUVeJtXcs+3VkCeTGuMuGP0kstZ5YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjlEN0NBQjNEQkI2RTgzNkE5REExMTI0RUIxQzBERDJF
NEEzQUZEMjAeFw0yNTEyMjIyMTAzNTJaFw0yNTEyMjMyMzIyNTJaMDMxMTAvBgNV
BAMTKENDNUFCRjA1RkEwREY2MjNCNUI0RTA4NjI2N0E1QUU4RjFDMzQzNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWnsMffR9shuGyYdca6ycdgyo3
WkUDBsQVJEFXoHI2YTWKEGfye/OqYq3urldOr5xwrperd5o3uhhIzsmalzmYOn7+
3d81BEwZuK7ojxhBEpIqLHO4CdooGa24PU+EAuKQBsD0cVxMsT+KpIygqG3oqj+x
mNdpEQz5O1ncf4d+TM6v3nMah/oQf1LS/mkBosvPo+BkPri46Y+xofPfIFNQRfi5
XaQ725Jpk5irSwdrGGadYkdJG/pY7K5tfiBrUvemsxj7gzHWTqhEE1HtvNzgqXZ6
kVo4prVXZ4Pf4SOFTi1NirCyBZQbD6uU6mLoLC7hGNj9FOBD0iOArlmpAcVnAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUzFq/BfoN9iO1tOCGJnpa6PHDQ0YwHwYDVR0j
BBgwFoAU+dfKs9u26Dap2hEk6xwN0uSjr9IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTJlOHBFb256N2lzc0ROWDU2WlBxSkFvdTh2RUFkdGhVVW5qdFFSdGtt
N1UvMC9GOUQ3Q0FCM0RCQjZFODM2QTlEQTExMjRFQjFDMEREMkU0QTNBRkQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5RDdDQUIzREJCNkU4MzZB
OURBMTEyNEVCMUMwREQyRTRBM0FGRDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NTJlOHBFb256N2lzc0ROWDU2WlBxSkFvdTh2RUFkdGhVVW5qdFFSdGttN1UvMC9G
OUQ3Q0FCM0RCQjZFODM2QTlEQTExMjRFQjFDMEREMkU0QTNBRkQyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKPCgqK77aoI7LdB2DOLAkQXXmUOlFrB31FanxtqDVmNOXB6Lyt/GhbJnbss9
qYeeUQAJ+xb+H0CDuvn8XGWgdpoSEIXbSj2vTGl6hvTI7ZL39TL5nAGqKvyHXPto
kpL+GI6VTlSXjFSZ0hvQaGoc0MzzAcUzSFw+HUgLN+5LzGmfBbajxurQ0UN3nuhA
Ysw/ApFTuho3+kS8AbV0Gxe/OP6uxMaPrmUR2ZMYNIWwqq5wwHR0RkUIr/9lcYab
N+ATAV9dLBO344Z2cKbmWFyKZ+seqQvjAz0f+TWvsvJJJAMVzJfV0vw1/VjaUkOb
6ULM2qQcapIctDLDYjiLkJ/wqQ==
-----END CERTIFICATE-----
Generated at Tue Dec 23 06:39:24 2025 by rpki-client