This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/AD2E0D7D520E8493681B563F6D06D97221F301B2.mft
File:                     AD2E0D7D520E8493681B563F6D06D97221F301B2.mft (raw, json)
Hash identifier:          6tAwsCyWLfumrE+fN4ul4d0XBDi7voKUxccnAaf/qlI=
Subject key identifier:   91:DE:4D:BB:A0:BC:50:7C:D8:EC:82:EE:10:4F:B4:F2:11:0F:C1:32
Authority key identifier: AD:2E:0D:7D:52:0E:84:93:68:1B:56:3F:6D:06:D9:72:21:F3:01:B2
Certificate issuer:       /CN=AD2E0D7D520E8493681B563F6D06D97221F301B2
Certificate serial:       7EE3E1D1E351DAC12E5B0BA6708B88E829D7BCC1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD2E0D7D520E8493681B563F6D06D97221F301B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/AD2E0D7D520E8493681B563F6D06D97221F301B2.mft
Manifest number:          E5
Signing time:             Tue 23 Dec 2025 17:52:34 +0000
Manifest this update:     Tue 23 Dec 2025 17:47:34 +0000
Manifest next update:     Wed 24 Dec 2025 21:41:34 +0000
Files and hashes:         1: 3136382e39302e3134382e302f32322d3332203d3e20323635323835.roa (hash: WPQhACR9II7fFzwEctmqNMOWxb3w3dwSYjpMGsBdSaw=)
                          2: 323830343a326437383a3a2f33322d3438203d3e20323635323835.roa (hash: KTEhQcU5NggrfcvmT19X/DnNXtyLtRRybFwFXG0zB1U=)
                          3: AD2E0D7D520E8493681B563F6D06D97221F301B2.crl (hash: UIoWHOVBbpvSTFBnwZEhZFHkQhioSBIWq1RkATkaED8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/AD2E0D7D520E8493681B563F6D06D97221F301B2.crl
                          rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/AD2E0D7D520E8493681B563F6D06D97221F301B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD2E0D7D520E8493681B563F6D06D97221F301B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 21:41:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:e3:e1:d1:e3:51:da:c1:2e:5b:0b:a6:70:8b:88:e8:29:d7:bc:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD2E0D7D520E8493681B563F6D06D97221F301B2
        Validity
            Not Before: Dec 23 17:47:34 2025 GMT
            Not After : Dec 24 21:41:34 2025 GMT
        Subject: CN=91DE4DBBA0BC507CD8EC82EE104FB4F2110FC132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c9:eb:6a:55:5e:f6:10:19:9c:79:b5:35:25:
                    90:fe:42:8f:6d:9f:5f:d4:3d:19:b6:92:01:53:59:
                    e6:bf:4a:fa:5e:9f:7e:64:84:90:6b:bc:f0:dd:22:
                    b0:e3:f6:b6:fa:2c:9f:a2:7b:be:2b:8c:0e:2e:ee:
                    86:e4:ca:a9:8c:95:ac:60:b8:0f:c7:a6:56:bf:26:
                    2b:b3:a3:2f:49:4c:a2:c3:ea:8c:e3:34:3c:c6:e7:
                    81:d6:16:bd:49:00:ea:f5:8a:3e:a6:66:1b:bd:91:
                    6f:f3:03:e7:78:0e:86:af:ed:12:e4:ce:66:3f:4f:
                    0c:55:0f:44:20:47:bb:89:b3:ca:70:b6:7f:8c:c7:
                    57:00:76:60:af:a4:3d:4d:c0:0d:bb:10:91:1c:3e:
                    97:eb:ed:34:ef:91:86:61:3e:9a:fa:1a:2b:52:4c:
                    2e:7a:b3:b5:49:9d:09:5e:30:f1:3f:ba:f8:93:0d:
                    41:01:14:a5:76:69:96:4a:2b:49:c7:7b:95:50:de:
                    f6:80:0b:dc:5a:81:33:a1:3c:31:e6:9a:39:41:37:
                    3c:2c:e4:f5:0b:e5:b0:fe:16:5b:bd:57:26:40:6c:
                    44:0b:f7:0f:eb:cf:10:6a:5d:38:eb:15:5e:c5:1d:
                    b1:78:bf:bf:a7:c4:bd:43:ca:e8:f3:6b:4d:2e:e8:
                    1f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:DE:4D:BB:A0:BC:50:7C:D8:EC:82:EE:10:4F:B4:F2:11:0F:C1:32
            X509v3 Authority Key Identifier:
                keyid:AD:2E:0D:7D:52:0E:84:93:68:1B:56:3F:6D:06:D9:72:21:F3:01:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/AD2E0D7D520E8493681B563F6D06D97221F301B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD2E0D7D520E8493681B563F6D06D97221F301B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/AD2E0D7D520E8493681B563F6D06D97221F301B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:b3:6a:4f:7c:1d:ab:84:fc:bd:bf:92:26:87:ef:45:0d:a8:
         b3:37:c2:04:a5:e8:48:8b:d7:75:de:02:91:d0:72:5b:d1:c9:
         5d:3a:7b:3f:5c:f2:84:51:09:df:f8:68:87:6c:33:8a:cb:8c:
         31:cb:43:95:09:6e:09:32:9f:37:eb:5c:a1:76:46:c7:f0:53:
         a0:6b:b6:dc:bb:27:25:cf:3b:03:d2:85:1f:99:a2:ac:6f:e7:
         42:37:4a:37:10:20:f2:a2:29:51:32:c6:70:c1:b8:2e:c0:d6:
         c5:a1:65:f1:e3:32:78:83:1f:7a:7d:19:ae:42:f7:59:32:9b:
         66:d9:b0:8c:5c:23:b5:a2:98:d4:f2:e7:f2:3e:ad:74:b4:46:
         24:90:99:6a:83:3b:80:c6:eb:9a:94:ac:75:a1:87:34:83:de:
         1a:25:09:67:d0:a5:e5:dc:9d:0e:55:8d:c7:32:d5:c8:c5:c8:
         54:42:23:44:75:dc:2e:9f:78:a6:cd:66:0f:01:e3:23:9a:a3:
         6f:9c:16:f9:82:ce:06:8a:f5:1b:94:ce:ff:0f:39:78:de:b6:
         2a:87:1c:e5:b3:d9:85:71:71:9d:74:28:7d:aa:e8:8d:41:98:
         e9:8f:a2:42:9d:b2:41:db:f7:ca:f0:68:1f:36:28:95:4d:08:
         bf:a6:23:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:27:29 2025 by rpki-client