This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.mft
File:                     5019A6C324130601793432FC2FAFF3DE1F1210C0.mft (raw, json)
Hash identifier:          cIx32D4FctiqJmow5VOYLJgDrS1GzgYypwkNaX87hIg=
Subject key identifier:   32:72:0C:C7:DB:3B:64:92:CE:20:C8:1E:55:10:A4:00:16:DB:1E:30
Authority key identifier: 50:19:A6:C3:24:13:06:01:79:34:32:FC:2F:AF:F3:DE:1F:12:10:C0
Certificate issuer:       /CN=5019A6C324130601793432FC2FAFF3DE1F1210C0
Certificate serial:       1D4C1B6414B131088655EFE9C4017684C41BECCC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.mft
Manifest number:          0345
Signing time:             Tue 23 Dec 2025 23:20:40 +0000
Manifest this update:     Tue 23 Dec 2025 23:15:40 +0000
Manifest next update:     Thu 25 Dec 2025 00:02:40 +0000
Files and hashes:         1: 5019A6C324130601793432FC2FAFF3DE1F1210C0.crl (hash: CfWSB8ZyuzhfduO73cL4PwU+skszQkvWUHyLsggNeyE=)
                          2: 3137372e38342e32302e302f32322d3234203d3e203532373135.roa (hash: 8Jln5/8Uo9dSq+b7gMCxOW5PiC+lqOyIFD1Wuy3tzVw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.crl
                          rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 00:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:4c:1b:64:14:b1:31:08:86:55:ef:e9:c4:01:76:84:c4:1b:ec:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5019A6C324130601793432FC2FAFF3DE1F1210C0
        Validity
            Not Before: Dec 23 23:15:40 2025 GMT
            Not After : Dec 25 00:02:40 2025 GMT
        Subject: CN=32720CC7DB3B6492CE20C81E5510A40016DB1E30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:85:90:01:f1:91:14:48:37:76:a9:a5:c8:69:
                    02:0e:a6:ce:d2:d8:17:b8:cd:df:d4:16:b8:09:d5:
                    67:5e:13:54:a7:cc:f2:6a:f4:02:28:c6:df:6a:e4:
                    5c:29:27:77:d5:c5:7e:69:b9:49:70:d1:49:46:e4:
                    b9:01:c2:c7:f6:77:06:72:74:b7:7c:2a:ce:fc:bb:
                    da:48:63:5d:61:02:69:c7:1b:93:0d:6f:50:ea:a4:
                    d9:85:8d:d8:5b:af:6d:cb:55:53:12:4a:33:07:82:
                    ef:16:b0:c8:b0:3e:18:0f:91:55:86:57:91:e4:4a:
                    c1:02:50:02:4f:39:77:d8:4d:72:fc:20:8d:d0:60:
                    8f:ec:dc:36:73:04:3e:a0:c5:9f:47:68:59:5e:01:
                    a2:08:af:9e:13:60:d1:13:34:10:54:25:1c:7b:93:
                    f8:31:2c:90:0f:28:c6:78:c8:83:a2:4e:bf:8d:d8:
                    e5:58:82:89:3a:19:c8:65:78:99:d0:af:18:81:47:
                    4d:8b:40:de:38:b9:a7:1d:29:c0:7a:9a:59:5a:04:
                    e4:e7:02:ca:5d:e2:25:ca:33:ff:f3:ff:8b:fa:21:
                    8b:09:22:e9:5f:b7:b3:d6:98:bf:d0:af:fd:e3:52:
                    ca:86:4d:34:c8:a1:6a:b4:65:00:fb:31:d9:be:00:
                    a7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:72:0C:C7:DB:3B:64:92:CE:20:C8:1E:55:10:A4:00:16:DB:1E:30
            X509v3 Authority Key Identifier:
                keyid:50:19:A6:C3:24:13:06:01:79:34:32:FC:2F:AF:F3:DE:1F:12:10:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:c2:63:61:a2:60:46:cb:a7:91:76:9e:39:92:b1:bc:f3:33:
         9e:28:11:da:a1:4c:ba:9c:d3:3d:45:a5:eb:b5:ef:dd:3d:94:
         7f:ad:94:54:ea:a8:98:ab:4e:01:ae:88:d3:e8:f1:a4:34:d2:
         66:42:8a:83:dc:68:25:1c:54:d8:ec:86:8c:40:04:4d:10:3e:
         b7:72:0a:e5:b6:44:b0:95:f6:20:66:59:cc:80:ff:5f:a3:5a:
         33:c5:77:f0:0e:76:5b:95:cd:bb:ec:c2:3f:54:1d:50:93:21:
         8b:7d:96:d3:e9:f1:41:d6:b6:7a:3e:e2:97:1c:ab:81:67:d0:
         ee:27:8a:bd:5b:cd:44:44:7d:61:50:23:0f:6d:3e:a5:f9:c4:
         53:5f:58:39:30:e3:ce:d2:9f:d3:af:e7:cf:a6:60:97:92:1e:
         87:c7:ed:0f:49:07:ed:f2:14:c2:7f:27:64:6a:26:a8:70:37:
         aa:03:cc:0d:24:11:96:e3:52:6b:e7:c6:80:6d:53:e0:c8:01:
         79:ea:d0:22:5b:85:e2:70:85:1b:79:83:09:4a:55:2a:38:fd:
         71:d9:b1:b3:e5:d5:7e:39:e0:74:fc:ad:11:36:5e:c2:c1:83:
         3a:2a:51:07:1b:5f:b5:0a:7a:ed:6b:04:0b:c7:85:b6:14:21:
         d1:02:34:c2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUHUwbZBSxMQiGVe/pxAF2hMQb7MwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTAxOUE2QzMyNDEzMDYwMTc5MzQzMkZDMkZBRkYzREUx
RjEyMTBDMDAeFw0yNTEyMjMyMzE1NDBaFw0yNTEyMjUwMDAyNDBaMDMxMTAvBgNV
BAMTKDMyNzIwQ0M3REIzQjY0OTJDRTIwQzgxRTU1MTBBNDAwMTZEQjFFMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/hZAB8ZEUSDd2qaXIaQIOps7S
2Be4zd/UFrgJ1WdeE1SnzPJq9AIoxt9q5FwpJ3fVxX5puUlw0UlG5LkBwsf2dwZy
dLd8Ks78u9pIY11hAmnHG5MNb1DqpNmFjdhbr23LVVMSSjMHgu8WsMiwPhgPkVWG
V5HkSsECUAJPOXfYTXL8II3QYI/s3DZzBD6gxZ9HaFleAaIIr54TYNETNBBUJRx7
k/gxLJAPKMZ4yIOiTr+N2OVYgok6GchleJnQrxiBR02LQN44uacdKcB6mllaBOTn
Aspd4iXKM//z/4v6IYsJIulft7PWmL/Qr/3jUsqGTTTIoWq0ZQD7Mdm+AKfLAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUMnIMx9s7ZJLOIMgeVRCkABbbHjAwHwYDVR0j
BBgwFoAUUBmmwyQTBgF5NDL8L6/z3h8SEMAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ25QS2MyOXdQWmdWeHY4UE1iQ3Z1M1lQQVhNTmVSUVlOZEZGWnZkU3lK
a04vMS81MDE5QTZDMzI0MTMwNjAxNzkzNDMyRkMyRkFGRjNERTFGMTIxMEMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUwMTlBNkMzMjQxMzA2MDE3
OTM0MzJGQzJGQUZGM0RFMUYxMjEwQzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q25QS2MyOXdQWmdWeHY4UE1iQ3Z1M1lQQVhNTmVSUVlOZEZGWnZkU3lKa04vMS81
MDE5QTZDMzI0MTMwNjAxNzkzNDMyRkMyRkFGRjNERTFGMTIxMEMwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtsJjYaJgRsunkXaeOZKxvPMznigR2qFMupzTPUWl67Xv3T2Uf62UVOqomKtO
Aa6I0+jxpDTSZkKKg9xoJRxU2OyGjEAETRA+t3IK5bZEsJX2IGZZzID/X6NaM8V3
8A52W5XNu+zCP1QdUJMhi32W0+nxQda2ej7ilxyrgWfQ7ieKvVvNRER9YVAjD20+
pfnEU19YOTDjztKf06/nz6Zgl5Ieh8ftD0kH7fIUwn8nZGomqHA3qgPMDSQRluNS
a+fGgG1T4MgBeerQIluF4nCFG3mDCUpVKjj9cdmxs+XVfjngdPytETZewsGDOipR
BxtftQp67WsEC8eFthQh0QI0wg==
-----END CERTIFICATE-----