This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/C5FAC883F52999ACF758B4E2B97F23641E0B1141.mft
File:                     C5FAC883F52999ACF758B4E2B97F23641E0B1141.mft (raw, json)
Hash identifier:          MnhGfuMJabMdB95dcDRVd9eH25FzTABS05FpG2DarhM=
Subject key identifier:   5F:46:F6:91:76:26:1A:5C:F4:1C:0D:F0:CC:DC:5F:BD:BE:03:D2:50
Authority key identifier: C5:FA:C8:83:F5:29:99:AC:F7:58:B4:E2:B9:7F:23:64:1E:0B:11:41
Certificate issuer:       /CN=C5FAC883F52999ACF758B4E2B97F23641E0B1141
Certificate serial:       0D014A6D2B88C340A5DD198EA2376C49E8D1D94B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5FAC883F52999ACF758B4E2B97F23641E0B1141.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/C5FAC883F52999ACF758B4E2B97F23641E0B1141.mft
Manifest number:          02E2
Signing time:             Sun 21 Dec 2025 14:27:14 +0000
Manifest this update:     Sun 21 Dec 2025 14:22:14 +0000
Manifest next update:     Mon 22 Dec 2025 18:23:14 +0000
Files and hashes:         1: 323830343a383030303a3a2f33322d3332203d3e20323731373233.roa (hash: LSu3GftnomNKTBnhOtUHqc0EyfeYBG14n6JK7jzTHtA=)
                          2: 323830343a383030303a383030303a3a2f33332d3333203d3e20323731373233.roa (hash: h7Kv+zxSfT3tP9oYJdoUTulCa62bqCSpyNfGiBC+m9w=)
                          3: 323830343a383030303a3a2f33332d3333203d3e20323731373233.roa (hash: rjOzK9VSD9fq/SxJ+lECML6w865sYD3+8bpb9tcyUnY=)
                          4: C5FAC883F52999ACF758B4E2B97F23641E0B1141.crl (hash: SEHugP7U2Fk3YgEnreR1MmPVDQZ2Q829BgLRnMHXjzg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/C5FAC883F52999ACF758B4E2B97F23641E0B1141.crl
                          rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/C5FAC883F52999ACF758B4E2B97F23641E0B1141.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5FAC883F52999ACF758B4E2B97F23641E0B1141.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 18:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:01:4a:6d:2b:88:c3:40:a5:dd:19:8e:a2:37:6c:49:e8:d1:d9:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5FAC883F52999ACF758B4E2B97F23641E0B1141
        Validity
            Not Before: Dec 21 14:22:14 2025 GMT
            Not After : Dec 22 18:23:14 2025 GMT
        Subject: CN=5F46F69176261A5CF41C0DF0CCDC5FBDBE03D250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5e:d3:91:ac:8a:f6:92:25:7d:83:80:3d:0e:
                    0a:4f:5e:8d:51:71:bb:99:29:bd:9c:2c:b3:32:08:
                    82:2e:e2:69:88:b8:c2:9e:18:c3:b4:a2:6e:41:59:
                    ab:1c:af:42:bc:d7:6b:e1:b3:1f:7a:2e:40:a9:10:
                    f6:da:4f:37:f2:53:ba:f4:72:3c:8a:85:c8:80:cf:
                    e5:e9:8d:81:ab:ae:4d:79:b4:6b:16:8b:40:91:1b:
                    8c:87:46:23:e1:a3:65:0b:13:e2:ff:66:aa:32:07:
                    93:af:90:e1:be:4d:bb:e1:8d:07:92:1b:ed:18:d8:
                    37:5f:3c:4e:98:41:b5:c0:03:3d:1e:72:2f:01:64:
                    56:f9:59:e6:6a:c8:b8:4e:7a:9e:9c:c2:1f:ac:bc:
                    e9:92:76:d5:bc:79:51:e9:07:75:87:ee:9b:64:4f:
                    75:9d:c8:32:93:0e:68:12:44:ae:1e:02:f0:4e:d8:
                    36:ce:04:fd:93:e5:4a:9f:10:7b:82:e0:04:3c:bb:
                    77:43:b9:e1:56:3e:4a:6a:ea:7d:c9:60:ce:c4:92:
                    18:e1:f8:39:c9:ae:b1:90:0b:37:1e:a5:82:37:17:
                    9c:45:8c:01:49:ae:37:30:c2:35:85:05:ce:26:02:
                    15:0c:5b:f5:2c:2a:a5:62:e6:f3:89:27:b1:3c:67:
                    e9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:46:F6:91:76:26:1A:5C:F4:1C:0D:F0:CC:DC:5F:BD:BE:03:D2:50
            X509v3 Authority Key Identifier:
                keyid:C5:FA:C8:83:F5:29:99:AC:F7:58:B4:E2:B9:7F:23:64:1E:0B:11:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/C5FAC883F52999ACF758B4E2B97F23641E0B1141.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5FAC883F52999ACF758B4E2B97F23641E0B1141.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/C5FAC883F52999ACF758B4E2B97F23641E0B1141.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ce:7c:e0:fe:83:e0:96:75:ff:9d:d3:6c:8d:cd:71:50:e9:
         6f:8c:97:4b:22:75:8a:a2:26:6f:55:d4:81:94:17:0b:1f:9d:
         98:9f:d7:39:d2:66:13:7e:57:ef:f5:dd:dd:f3:51:19:94:6d:
         47:f4:53:3b:da:9e:c2:1a:18:b2:30:2d:d7:a3:15:a2:c0:e3:
         5a:a7:9d:a1:9c:75:ef:14:7b:e7:05:56:fd:16:c8:e5:a2:9c:
         aa:2a:47:ae:38:80:17:d4:f2:34:ae:39:63:7a:0f:59:3f:45:
         e9:63:9e:c4:47:8f:c4:74:06:7a:ab:3a:c6:e7:4b:a4:a9:15:
         44:2c:f1:69:62:6c:95:c9:6b:41:28:c6:da:ca:ac:09:8f:d5:
         3c:6a:e8:b9:e2:c5:8f:46:79:c0:ac:be:c1:49:95:bc:c4:3b:
         a7:4c:08:28:67:9a:ee:d4:38:bd:d7:2a:5a:20:3b:3c:75:5b:
         82:24:46:ae:f1:52:32:1c:32:a8:df:44:cd:02:50:3a:bf:99:
         3a:b0:e2:47:5d:c1:19:20:5d:57:44:92:23:f2:1e:5f:5f:78:
         70:e9:d1:53:ec:c2:9b:a0:24:e9:88:83:af:c8:6c:11:51:df:
         59:6c:c6:94:43:18:88:ca:61:93:80:16:5e:80:9b:d3:61:e4:
         81:cf:0a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 22:44:29 2025 by rpki-client