This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.mft
File:                     695A28FC133EB5408B9BA126D9FFE20884EDECD2.mft (raw, json)
Hash identifier:          lAEejZgSkWNzqfgFa64L3AkrgeiTGt6JM3+f1gEdbCE=
Subject key identifier:   1A:44:40:1B:CC:2F:08:D7:3F:49:9C:73:6D:E0:E1:3B:25:FF:83:CB
Authority key identifier: 69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2
Certificate issuer:       /CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2
Certificate serial:       04D681E4A1ABDD6D894A89F5BF880C2D55C56302
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.mft
Manifest number:          017C
Signing time:             Mon 22 Dec 2025 15:43:06 +0000
Manifest this update:     Mon 22 Dec 2025 15:38:06 +0000
Manifest next update:     Tue 23 Dec 2025 19:11:06 +0000
Files and hashes:         1: 323830343a313139343a3a2f33322d313238203d3e20323633343234.roa (hash: qRpe3HMunOlDvbnsvh59LbRtj4Tl6ZLH4gik3VMaTCc=)
                          2: 3133382e3132312e3231362e302f32322d3332203d3e20323633343234.roa (hash: XqR77qLnVQPjvW+NdcPMVLhS20GCaBS3cER2/qIQpkE=)
                          3: 3137302e3233312e3135322e302f32322d3332203d3e20323633343234.roa (hash: QNYexqxi8ZgpvO1oIsW72rOjkHsbCORODUg23wwI2QE=)
                          4: 3137372e39312e33322e302f32322d3332203d3e20323633343234.roa (hash: 05bv3rwHFKdXP0ka5nwmC7aUxyM/kFqlL8VfT5VE/hg=)
                          5: AS263424.asa (hash: X2lwCnyIjJZQCVi9tOO9WwYnQKJe3byjUNKmKRdkgaw=)
                          6: 3137302e38322e3131362e302f32322d3332203d3e20323633343234.roa (hash: Bq7jYvlTzFbRiuY4gjDAmQq+hoFOYx9hFEexWG876XM=)
                          7: 695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl (hash: kHH/rJjnViX7boKygx62UkoDYt+rCRzKad/bw/Wlru8=)
                          8: 3133312e3130382e382e302f32322d3332203d3e20323633343234.roa (hash: 5x0qHXKy052VE9+a2c/CKxVgKs0GgOqzJVo2yGxQ3ro=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl
                          rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 19:11:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d6:81:e4:a1:ab:dd:6d:89:4a:89:f5:bf:88:0c:2d:55:c5:63:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2
        Validity
            Not Before: Dec 22 15:38:06 2025 GMT
            Not After : Dec 23 19:11:06 2025 GMT
        Subject: CN=1A44401BCC2F08D73F499C736DE0E13B25FF83CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:04:24:67:41:cc:73:bc:8a:48:7c:24:8e:ea:
                    ed:9f:45:99:35:a2:f9:b6:61:06:2e:1d:f2:e9:d8:
                    a7:c0:2c:df:7c:6f:92:cc:49:70:77:26:d3:eb:30:
                    b1:57:3a:e7:56:ff:af:c6:e3:e2:11:b2:c1:41:67:
                    62:46:2d:5f:63:e0:3c:c6:cf:4f:e9:48:14:84:24:
                    c8:e3:70:23:7e:47:ab:7b:1f:c9:a4:0f:96:47:db:
                    7c:bd:63:a6:73:1e:e5:b2:34:3b:ff:ac:f6:59:08:
                    0e:45:19:28:7d:e8:3c:cd:e5:42:2e:17:a5:f5:11:
                    03:b1:b2:2d:de:4e:f4:98:1d:a7:cd:03:79:ee:aa:
                    1e:43:8f:21:38:23:78:20:c5:ed:6c:3d:cc:5c:af:
                    e8:c4:f5:6a:87:19:5d:a8:d9:b2:b9:fa:a0:cd:a0:
                    ef:d8:9d:fe:45:34:ea:69:a1:90:03:e3:65:2e:9d:
                    64:53:3c:c3:70:00:2b:da:6a:7a:48:72:95:78:ad:
                    f9:0f:5a:40:d9:b0:6e:d5:91:76:37:f0:17:c1:d0:
                    85:20:86:b0:2e:7c:ae:6e:8f:12:c3:af:fa:d6:68:
                    2e:43:6b:2b:12:be:76:df:78:7a:36:f6:8f:4f:38:
                    b5:d4:39:c5:2d:23:d7:b3:a1:0e:25:32:d2:90:73:
                    f5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:44:40:1B:CC:2F:08:D7:3F:49:9C:73:6D:E0:E1:3B:25:FF:83:CB
            X509v3 Authority Key Identifier:
                keyid:69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:90:00:b6:1a:7a:5c:92:86:3b:d2:07:21:ea:a6:5c:e6:57:
         6d:5b:b0:52:e9:58:ad:75:49:19:70:a4:6e:95:aa:49:51:7f:
         a4:de:02:b7:38:b7:50:ac:cd:f2:82:ab:a8:e8:5d:f3:89:97:
         2e:7d:db:6a:b0:40:c2:f1:b6:fb:98:90:7f:0f:ad:d1:79:1e:
         d4:a1:cd:e0:fb:37:98:ad:75:0b:74:9c:7a:a5:88:aa:03:d5:
         fe:d5:e3:45:46:f0:16:68:84:29:a7:22:82:f5:4a:fb:f9:e2:
         ff:bf:d2:97:7f:52:76:16:d3:fe:68:16:69:8a:1b:cd:90:78:
         9a:93:c3:c4:e7:ba:99:ea:da:86:c0:6e:93:a0:f1:d9:a8:9c:
         a3:98:dd:87:a5:af:d3:27:0e:2e:36:8b:8c:4e:19:cd:45:f5:
         1a:b2:65:55:24:5d:8e:52:6c:b8:24:75:7d:a7:f6:9b:41:58:
         05:21:75:46:b6:08:1a:42:53:cb:c9:fb:a3:f1:1c:fb:ed:70:
         bd:47:19:5a:5f:5d:76:30:04:6a:25:cb:e3:d6:b8:20:38:e4:
         f0:96:bb:9c:3f:e3:d4:57:cb:7b:c5:86:c6:74:e7:51:2b:46:
         87:fa:9b:5a:a4:2a:c5:5d:8f:1c:8c:22:b8:26:53:e6:e5:3f:
         fb:ce:47:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 03:50:38 2025 by rpki-client