This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft
File:                     653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft (raw, json)
Hash identifier:          7LRdvHhdLvdspfDOMwPO0rXajEr5Uewhvp8bU5EOsT0=
Subject key identifier:   75:A2:A4:FD:57:14:B7:5F:F0:A6:AD:9D:F2:9C:AE:31:4E:F0:41:8D
Authority key identifier: 65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2
Certificate issuer:       /CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2
Certificate serial:       0CC14D0337A286A73A649C642272398F14A74677
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft
Manifest number:          0309
Signing time:             Thu 18 Dec 2025 23:07:39 +0000
Manifest this update:     Thu 18 Dec 2025 23:02:39 +0000
Manifest next update:     Sat 20 Dec 2025 01:55:39 +0000
Files and hashes:         1: 3138372e39352e3132382e302f32322d3332203d3e20323635323634.roa (hash: WqEYa1LHKO/TdU02rXFXLwns464zC4VFuzHF7wOxsfA=)
                          2: 3136382e39302e34382e302f32322d3332203d3e20323635323634.roa (hash: Bv6Lyj5+VhdPqvZ/TGH9M1sdk0ISaNwfb7BbI7c/FPE=)
                          3: 323830343a326432383a3a2f33322d313238203d3e20323635323634.roa (hash: 0xs1tTdh2Qke0fip6d1TEfj28igzF6NdDvyXj3IPtmI=)
                          4: 653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl (hash: buWxfAXBx1VnkArFhMmcQ2Yb8iZgnj+wYQP0EmuSuHs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl
                          rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 01:55:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:c1:4d:03:37:a2:86:a7:3a:64:9c:64:22:72:39:8f:14:a7:46:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2
        Validity
            Not Before: Dec 18 23:02:39 2025 GMT
            Not After : Dec 20 01:55:39 2025 GMT
        Subject: CN=75A2A4FD5714B75FF0A6AD9DF29CAE314EF0418D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:67:65:d1:f8:82:42:fa:1e:ea:f7:80:51:bc:
                    cf:04:fb:2c:47:6f:8e:6b:e1:e2:2b:83:ff:5d:8f:
                    a0:ea:5e:64:b3:93:c7:d9:8e:62:df:96:47:25:d2:
                    e8:e2:fd:98:0f:61:68:9a:ab:f7:be:57:fb:23:e5:
                    fa:ec:17:cf:45:bb:04:e6:8b:86:da:ac:44:d8:4a:
                    33:d0:a9:a3:13:05:34:db:36:24:52:2c:b8:df:af:
                    9d:83:29:da:b4:0f:8e:6b:96:eb:ba:8b:26:0a:68:
                    8f:86:e4:5d:1e:5a:6e:a1:39:07:c0:8a:49:a0:01:
                    f7:96:c7:d1:dc:9e:be:a6:0c:7d:52:b4:75:4c:5f:
                    00:aa:a9:e2:34:31:31:cc:ef:14:4d:20:a5:fa:4c:
                    ba:e1:32:a3:e6:d0:21:1d:51:ac:c2:c4:c9:7a:66:
                    96:06:3f:c3:4b:10:18:b1:0a:c3:2d:ae:01:e9:97:
                    fe:73:11:6f:1a:cf:f0:af:a1:5c:f8:56:2d:2b:35:
                    99:3d:2d:e3:24:49:71:a6:48:1e:24:22:14:f1:d5:
                    31:09:a7:65:7d:9b:76:96:e1:cf:09:c0:b7:20:71:
                    c1:4b:4c:8b:bf:b1:2d:ac:56:11:86:ed:73:82:93:
                    2a:90:ec:11:e3:b9:40:ee:38:d1:60:4a:3b:75:61:
                    c5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A2:A4:FD:57:14:B7:5F:F0:A6:AD:9D:F2:9C:AE:31:4E:F0:41:8D
            X509v3 Authority Key Identifier:
                keyid:65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:a6:95:ee:45:54:16:07:ae:8c:95:74:4d:6e:c0:33:ee:b2:
         88:60:e6:1e:e6:2e:fa:05:3a:9b:ce:b6:99:fa:2a:37:bb:97:
         45:7c:e0:3c:92:07:5a:c9:99:71:2a:e2:41:ff:ea:73:5e:e7:
         5e:69:c2:47:59:bd:14:76:13:2b:77:88:9a:ab:f8:0f:4d:5e:
         c7:fb:74:5c:9e:fd:7c:34:25:f2:1c:2a:7b:9d:bd:5d:36:8d:
         cb:b7:66:ad:f2:f7:23:d6:29:86:b5:f7:5d:7c:e0:15:bf:8b:
         6c:1a:26:fe:ea:2a:6c:47:a9:5c:3b:5f:49:b7:82:74:ce:20:
         03:3d:85:a2:2b:ad:bd:21:81:8c:f6:f4:e6:ae:83:f9:30:28:
         af:8d:2f:ba:a4:6c:10:3b:b3:f6:99:8f:f6:60:75:2d:0f:28:
         b5:3c:6b:4f:55:b1:6b:c8:2b:40:67:9d:4b:80:76:c4:5b:47:
         ae:94:9b:a0:a3:cf:30:20:df:dc:6c:1e:54:3d:2a:d8:7e:9f:
         68:83:fe:21:56:d6:19:9d:25:b9:29:91:72:8b:45:46:cd:22:
         82:c8:67:40:56:74:01:a7:5b:92:f3:6d:8b:91:c8:07:56:80:
         7e:0c:10:ac:16:a4:77:77:13:15:c0:79:4f:c5:93:b2:c8:11:
         b8:40:6e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:28:13 2025 by rpki-client