This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6EwDWDTTv7jSybESZWvVsyZguVFmwvVTBHenUwawiF5z/0/5DB9D1112BE2979B659023FF1013B1891DF0BC2F.mft
File:                     5DB9D1112BE2979B659023FF1013B1891DF0BC2F.mft (raw, json)
Hash identifier:          /U2uzDkovpih6z+8ma3MeLgytWT2YEaCgaKuDp4jG08=
Subject key identifier:   25:CA:04:E4:A3:7B:33:5B:4A:D2:E9:8A:D5:26:C7:A6:6B:FE:D9:53
Authority key identifier: 5D:B9:D1:11:2B:E2:97:9B:65:90:23:FF:10:13:B1:89:1D:F0:BC:2F
Certificate issuer:       /CN=5DB9D1112BE2979B659023FF1013B1891DF0BC2F
Certificate serial:       2D38E406849B501E4ECA62DF185C99C206CC9F87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DB9D1112BE2979B659023FF1013B1891DF0BC2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6EwDWDTTv7jSybESZWvVsyZguVFmwvVTBHenUwawiF5z/0/5DB9D1112BE2979B659023FF1013B1891DF0BC2F.mft
Manifest number:          0166
Signing time:             Sat 20 Dec 2025 08:13:36 +0000
Manifest this update:     Sat 20 Dec 2025 08:08:36 +0000
Manifest next update:     Sun 21 Dec 2025 12:03:36 +0000
Files and hashes:         1: 323830343a383739633a3a2f33322d3333203d3e20323732373230.roa (hash: UIFYaXICVinmcyN/GiMBixZu8B6KaPa5illfAdp2QM0=)
                          2: 5DB9D1112BE2979B659023FF1013B1891DF0BC2F.crl (hash: Aw3jCEnAzpxT3Gup3u2bB12m51Y1l6NHvSUhs6ld2EI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6EwDWDTTv7jSybESZWvVsyZguVFmwvVTBHenUwawiF5z/0/5DB9D1112BE2979B659023FF1013B1891DF0BC2F.crl
                          rsync://rpki-repo.registro.br/repo/6EwDWDTTv7jSybESZWvVsyZguVFmwvVTBHenUwawiF5z/0/5DB9D1112BE2979B659023FF1013B1891DF0BC2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DB9D1112BE2979B659023FF1013B1891DF0BC2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 12:03:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:38:e4:06:84:9b:50:1e:4e:ca:62:df:18:5c:99:c2:06:cc:9f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DB9D1112BE2979B659023FF1013B1891DF0BC2F
        Validity
            Not Before: Dec 20 08:08:36 2025 GMT
            Not After : Dec 21 12:03:36 2025 GMT
        Subject: CN=25CA04E4A37B335B4AD2E98AD526C7A66BFED953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f4:fd:f5:a3:2f:f0:43:cc:a3:a5:90:3c:e5:
                    22:d0:54:66:cd:f4:55:df:84:b4:83:65:ec:a6:ad:
                    08:05:4c:15:0b:e6:7d:44:15:66:71:57:51:4c:01:
                    b5:bf:3e:dd:49:ca:44:7f:1c:05:55:df:55:6f:20:
                    cf:cc:49:c1:45:c1:c1:58:02:d3:4f:bd:f8:d6:44:
                    fb:7f:70:e3:6d:a8:3d:3a:3e:d2:91:b7:f0:6e:ab:
                    8f:97:4f:33:a5:fa:9a:83:ec:b9:be:94:5e:17:e9:
                    33:87:33:ba:4a:06:8f:33:de:c3:ea:3f:51:f5:17:
                    e2:40:6d:28:d6:05:55:b2:7b:b8:84:91:b8:28:f9:
                    be:e6:b4:06:83:07:43:7e:16:3c:f4:b2:7a:7a:5e:
                    79:95:8d:7f:27:11:66:36:04:a0:68:3b:5d:d0:5d:
                    7f:1e:0c:7c:3a:a7:93:0f:84:1d:c7:53:f3:13:6a:
                    03:74:e8:73:b9:d3:18:a3:cc:4a:b7:b5:b6:22:04:
                    c6:fa:a2:80:d2:84:f2:50:a2:86:53:ea:77:42:6c:
                    14:1f:9f:66:e6:39:f3:b5:13:14:4d:38:3a:76:87:
                    c0:85:c8:9b:25:7e:5a:1d:4b:bd:9b:6e:a9:04:a5:
                    cd:82:d3:d2:23:c9:7b:0e:bc:56:21:dc:9a:8d:50:
                    52:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:CA:04:E4:A3:7B:33:5B:4A:D2:E9:8A:D5:26:C7:A6:6B:FE:D9:53
            X509v3 Authority Key Identifier:
                keyid:5D:B9:D1:11:2B:E2:97:9B:65:90:23:FF:10:13:B1:89:1D:F0:BC:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6EwDWDTTv7jSybESZWvVsyZguVFmwvVTBHenUwawiF5z/0/5DB9D1112BE2979B659023FF1013B1891DF0BC2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DB9D1112BE2979B659023FF1013B1891DF0BC2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6EwDWDTTv7jSybESZWvVsyZguVFmwvVTBHenUwawiF5z/0/5DB9D1112BE2979B659023FF1013B1891DF0BC2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:4a:60:a2:6d:35:0e:dd:b6:ff:36:5d:24:1d:f2:71:59:76:
         61:58:a1:a5:25:b2:e7:10:30:c2:d9:b6:6b:38:27:88:6e:a1:
         e1:a0:41:01:f4:e6:34:ed:8a:41:35:ea:51:6a:2f:8f:89:3d:
         7d:35:7b:7a:c5:44:ea:8a:81:fa:5c:88:f1:50:fa:f8:8c:6a:
         b5:aa:9f:ea:57:85:94:ec:cc:34:24:b6:95:76:62:5d:12:e7:
         21:5a:04:39:9e:49:b9:7f:5c:03:f1:23:40:82:18:6b:40:ad:
         ca:71:e3:aa:fb:a2:88:38:88:76:f6:35:7b:5f:ed:14:5d:e9:
         24:69:dc:93:c0:f9:ec:37:a3:80:41:46:82:48:c4:95:c5:2b:
         7d:42:4d:41:8a:e8:fb:99:0f:62:5c:78:93:d1:0e:6f:44:a1:
         38:c3:82:8a:69:82:0f:68:7d:88:8f:12:9a:c4:4d:06:b8:a8:
         6d:34:46:56:b4:4d:03:6d:f0:46:ca:ef:01:11:51:60:d5:11:
         e4:7e:56:05:88:09:99:2c:f8:3a:f0:bb:9a:6e:76:fa:6d:1b:
         84:6d:4d:78:00:79:55:79:55:fe:4f:d7:cd:93:c0:5c:fb:77:
         4d:6b:d2:28:d7:ff:f7:aa:11:fe:12:68:92:ee:69:a1:ae:c7:
         d5:a4:b5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:16:02 2025 by rpki-client