This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/1/5704C8A4F0A08E97025D71F1C624C9280EDADDD4.mft
File:                     5704C8A4F0A08E97025D71F1C624C9280EDADDD4.mft (raw, json)
Hash identifier:          qAlJKTu/5EKCuHMPy6MJaJFPXfCRKcYU6jFHukxvFOE=
Subject key identifier:   7C:C2:78:D5:CD:8F:1B:54:87:10:7E:B8:5E:76:26:28:AF:27:21:61
Authority key identifier: 57:04:C8:A4:F0:A0:8E:97:02:5D:71:F1:C6:24:C9:28:0E:DA:DD:D4
Certificate issuer:       /CN=5704C8A4F0A08E97025D71F1C624C9280EDADDD4
Certificate serial:       574EBBA1241B7CC33A93E9123B1000FFB1488FD5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5704C8A4F0A08E97025D71F1C624C9280EDADDD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/1/5704C8A4F0A08E97025D71F1C624C9280EDADDD4.mft
Manifest number:          02A1
Signing time:             Sat 20 Dec 2025 00:57:55 +0000
Manifest this update:     Sat 20 Dec 2025 00:52:55 +0000
Manifest next update:     Sun 21 Dec 2025 04:24:55 +0000
Files and hashes:         1: 323830343a336131633a3a2f33322d313238203d3e20323636303731.roa (hash: N7e/PQ2kzUanaLPvZyM/+HO/ocxTbEg7k0cGw0YXALs=)
                          2: 34352e342e3132302e302f32322d3332203d3e20323636303731.roa (hash: Y4rlqM2UsFSr2ohMXETXTbaPUxNid9uarpbjzj3aa1g=)
                          3: 5704C8A4F0A08E97025D71F1C624C9280EDADDD4.crl (hash: 2OOy+WwKqimbJELQCGIzkxsw3UXtgctWQFibt3xKZjs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/1/5704C8A4F0A08E97025D71F1C624C9280EDADDD4.crl
                          rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/1/5704C8A4F0A08E97025D71F1C624C9280EDADDD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5704C8A4F0A08E97025D71F1C624C9280EDADDD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 04:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:4e:bb:a1:24:1b:7c:c3:3a:93:e9:12:3b:10:00:ff:b1:48:8f:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5704C8A4F0A08E97025D71F1C624C9280EDADDD4
        Validity
            Not Before: Dec 20 00:52:55 2025 GMT
            Not After : Dec 21 04:24:55 2025 GMT
        Subject: CN=7CC278D5CD8F1B5487107EB85E762628AF272161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:c5:b6:2b:2e:47:bc:30:39:f9:fc:e3:f7:89:
                    79:44:74:a1:d5:b5:61:c4:cc:a1:a5:70:44:75:63:
                    25:de:e7:72:b9:f0:79:2a:4e:2a:ff:30:c4:df:37:
                    9c:92:d0:fa:c1:93:19:bc:a4:d9:d5:67:e3:e3:f5:
                    cb:ea:a8:69:d7:e1:b7:7b:54:b9:b3:a9:01:6b:dc:
                    69:22:8a:25:ba:93:0e:bd:b5:74:f0:c7:97:2d:62:
                    28:72:4b:b3:6d:03:c9:50:a9:6d:1c:d6:95:bb:14:
                    b7:8a:e3:9a:3e:65:b1:d8:72:cf:8c:fa:f9:ed:48:
                    7e:9b:e3:15:fd:d0:8a:0d:c3:1f:fa:fc:42:6e:c3:
                    b2:99:c8:d8:5c:c2:36:c6:21:4f:b3:ee:70:87:92:
                    83:5e:e3:d5:2a:5d:37:06:ad:0d:16:dc:bf:b0:1f:
                    22:59:97:92:6c:cd:bb:8e:c6:cb:16:aa:d5:ef:fa:
                    95:79:45:fc:e5:d1:6a:d1:3b:98:20:f4:2f:f0:5f:
                    05:64:89:06:e8:87:31:1a:b7:fb:03:52:f7:98:9f:
                    06:e4:1d:89:66:0d:36:aa:ce:93:16:1d:31:4b:7e:
                    c9:b3:13:04:46:07:7c:59:73:5d:3f:c2:96:1a:76:
                    10:ce:64:91:e9:33:5d:9f:c4:ab:1d:ef:db:e1:28:
                    0b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C2:78:D5:CD:8F:1B:54:87:10:7E:B8:5E:76:26:28:AF:27:21:61
            X509v3 Authority Key Identifier:
                keyid:57:04:C8:A4:F0:A0:8E:97:02:5D:71:F1:C6:24:C9:28:0E:DA:DD:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/1/5704C8A4F0A08E97025D71F1C624C9280EDADDD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5704C8A4F0A08E97025D71F1C624C9280EDADDD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/1/5704C8A4F0A08E97025D71F1C624C9280EDADDD4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:df:ca:e5:d8:31:c2:1c:8a:47:8b:e1:b8:4f:6d:22:88:36:
         88:6c:fe:31:c8:0d:2b:ce:83:d1:e7:aa:36:b7:36:31:c3:a8:
         6a:51:37:02:f7:84:46:04:02:46:9d:55:12:6d:77:8d:96:43:
         94:f9:b3:9e:bb:6f:e2:40:ef:db:34:b7:f7:ec:66:f5:0a:91:
         c5:ef:6b:e4:0d:9f:60:6d:36:74:06:a0:29:94:1b:8f:69:33:
         2f:25:33:c7:dc:46:b2:fc:0e:9d:9a:9d:26:e7:d1:9b:c8:64:
         3c:f8:ed:7a:c0:ac:ca:e1:8f:dd:7b:90:5f:6d:53:00:4a:b0:
         52:d9:cc:21:23:e4:5e:bf:ac:9e:53:4a:fb:cf:10:95:3b:8f:
         2a:9b:c4:fa:c2:2a:73:8d:b4:98:b6:79:57:87:f1:c6:f7:c5:
         5c:49:ec:ee:87:2c:1c:60:14:a6:fa:93:39:de:79:87:25:e2:
         5b:be:99:13:aa:0e:b7:fb:50:84:99:ab:5d:e3:50:b9:3d:29:
         b4:ab:3c:93:0c:00:73:20:3f:79:aa:b0:44:1f:11:e6:e6:75:
         98:ed:e2:45:35:4a:0a:e8:c5:18:a2:fc:41:f1:2d:8d:2c:c5:
         3c:ca:46:d9:76:34:0f:cb:ed:b4:67:b1:2a:dc:f7:29:9a:4f:
         4f:28:83:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 10:47:20 2025 by rpki-client