This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/D272B79940440721190429AABBA45B0BB5589F3E.mft
File:                     D272B79940440721190429AABBA45B0BB5589F3E.mft (raw, json)
Hash identifier:          8YzFXtTvh3i3URZi52uHykN64ySYpYpnmvZNSzUUAWw=
Subject key identifier:   2D:2B:63:1A:1E:E6:BE:78:39:FB:8E:F8:4A:74:49:62:F0:20:E0:D5
Authority key identifier: D2:72:B7:99:40:44:07:21:19:04:29:AA:BB:A4:5B:0B:B5:58:9F:3E
Certificate issuer:       /CN=D272B79940440721190429AABBA45B0BB5589F3E
Certificate serial:       5AB42CC512E48E96FBA217D4C4ECF197EC596836
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D272B79940440721190429AABBA45B0BB5589F3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/D272B79940440721190429AABBA45B0BB5589F3E.mft
Manifest number:          01BC
Signing time:             Tue 23 Dec 2025 20:23:50 +0000
Manifest this update:     Tue 23 Dec 2025 20:18:50 +0000
Manifest next update:     Wed 24 Dec 2025 23:42:50 +0000
Files and hashes:         1: D272B79940440721190429AABBA45B0BB5589F3E.crl (hash: 5ctxqkPzem7yRaPL5H6SEmY1vq3PhHxC2jVZ/OQvARk=)
                          2: 323830343a336137383a3a2f33322d3438203d3e20323636303931.roa (hash: hTMjYKeXC/M6OdDXuJYg47J8XfGr4MytiTOYk9kboqU=)
                          3: 34352e352e39362e302f32322d3234203d3e20323636303931.roa (hash: /6iGVAHYIhPWPHHz3993u3r1D5NYjNcPNziE02dN4Kw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/D272B79940440721190429AABBA45B0BB5589F3E.crl
                          rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/D272B79940440721190429AABBA45B0BB5589F3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D272B79940440721190429AABBA45B0BB5589F3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 23:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:b4:2c:c5:12:e4:8e:96:fb:a2:17:d4:c4:ec:f1:97:ec:59:68:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D272B79940440721190429AABBA45B0BB5589F3E
        Validity
            Not Before: Dec 23 20:18:50 2025 GMT
            Not After : Dec 24 23:42:50 2025 GMT
        Subject: CN=2D2B631A1EE6BE7839FB8EF84A744962F020E0D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a1:1f:41:8f:43:4f:99:b2:05:39:4e:77:07:
                    95:2d:9a:dc:18:7b:64:f1:f0:eb:06:74:85:f2:8e:
                    0a:4b:30:25:b2:ea:91:70:31:5b:d7:50:74:7d:9a:
                    8d:13:88:53:bc:26:52:9e:5e:ea:a0:c8:2e:6d:98:
                    99:8a:aa:c8:8a:02:10:74:0b:ac:e7:b7:ce:69:7a:
                    bd:74:57:d1:b3:7e:f7:15:3a:7b:f6:91:4a:34:a0:
                    3a:0a:72:39:e6:b5:1c:26:a2:ba:5a:1c:5a:23:1a:
                    cc:e9:fd:6f:9e:38:8a:f7:4c:7e:fa:d4:13:84:c7:
                    35:1f:7e:27:12:b3:10:1a:91:15:a7:e7:52:c7:08:
                    9e:9a:d6:b1:83:d7:3b:b6:40:e1:0e:50:5a:4c:c2:
                    56:57:e0:35:8a:69:df:8f:9a:fb:28:4c:94:b0:b2:
                    12:dd:b5:72:36:f0:65:39:50:ab:39:65:d1:6a:da:
                    8d:2b:d1:5d:56:01:7c:fd:85:4c:f6:83:e4:92:44:
                    94:5d:f3:63:d1:e3:9f:06:d3:a2:cd:3d:76:0a:90:
                    f8:f7:35:bc:86:41:94:1c:29:e6:cf:95:e6:9f:5e:
                    17:b4:95:a1:fe:75:f4:97:b6:86:9d:e1:83:06:cb:
                    69:9a:e2:34:4f:42:6d:62:41:9c:eb:33:17:5e:7c:
                    da:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:2B:63:1A:1E:E6:BE:78:39:FB:8E:F8:4A:74:49:62:F0:20:E0:D5
            X509v3 Authority Key Identifier:
                keyid:D2:72:B7:99:40:44:07:21:19:04:29:AA:BB:A4:5B:0B:B5:58:9F:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/D272B79940440721190429AABBA45B0BB5589F3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D272B79940440721190429AABBA45B0BB5589F3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/D272B79940440721190429AABBA45B0BB5589F3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:58:72:d7:86:9d:71:c2:3d:37:b5:54:4c:18:ab:16:af:6b:
         79:ee:e7:f6:7f:d8:aa:4e:13:b1:56:f2:60:a1:05:2f:3d:62:
         fb:bf:d0:fc:8d:72:8b:f2:02:67:bc:e8:45:48:74:f6:ed:77:
         c8:70:ca:6c:01:a3:6b:52:d7:76:ab:b4:b7:4c:90:be:24:f9:
         20:ed:53:54:e5:e5:e1:0f:ac:66:aa:9c:42:08:9a:64:da:d7:
         ac:cb:f3:2b:3f:3c:89:d0:5a:17:33:db:c8:27:4d:45:61:5d:
         fa:80:c0:dd:50:28:3d:0a:7c:12:61:fa:ea:10:95:10:ef:12:
         6a:2a:1a:b8:8f:c6:c0:be:e3:31:25:74:d7:da:a4:70:68:cd:
         ca:36:cf:17:e1:78:e1:6a:4b:f7:df:17:d3:92:45:0a:c9:aa:
         c5:19:b9:79:4d:6a:fc:cb:b3:ba:95:db:ba:8a:b8:0c:90:d7:
         2f:2b:d2:15:c4:e1:db:47:2c:57:bc:42:75:31:40:2a:b7:81:
         55:ca:e2:ff:10:b7:06:4f:19:83:ac:db:af:5b:7d:4d:a0:e2:
         6d:90:af:b4:85:1c:f0:98:e4:91:ee:ae:e4:08:47:1d:be:b8:
         7c:94:70:c5:d2:e0:ca:33:28:2a:13:cc:58:10:5e:59:e0:7e:
         7f:4c:d0:96
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWrQsxRLkjpb7ohfUxOzxl+xZaDYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDI3MkI3OTk0MDQ0MDcyMTE5MDQyOUFBQkJBNDVCMEJC
NTU4OUYzRTAeFw0yNTEyMjMyMDE4NTBaFw0yNTEyMjQyMzQyNTBaMDMxMTAvBgNV
BAMTKDJEMkI2MzFBMUVFNkJFNzgzOUZCOEVGODRBNzQ0OTYyRjAyMEUwRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCooR9Bj0NPmbIFOU53B5UtmtwY
e2Tx8OsGdIXyjgpLMCWy6pFwMVvXUHR9mo0TiFO8JlKeXuqgyC5tmJmKqsiKAhB0
C6znt85per10V9GzfvcVOnv2kUo0oDoKcjnmtRwmorpaHFojGszp/W+eOIr3TH76
1BOExzUfficSsxAakRWn51LHCJ6a1rGD1zu2QOEOUFpMwlZX4DWKad+PmvsoTJSw
shLdtXI28GU5UKs5ZdFq2o0r0V1WAXz9hUz2g+SSRJRd82PR458G06LNPXYKkPj3
NbyGQZQcKebPleafXhe0laH+dfSXtoad4YMGy2ma4jRPQm1iQZzrMxdefNppAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQULStjGh7mvng5+474SnRJYvAg4NUwHwYDVR0j
BBgwFoAU0nK3mUBEByEZBCmqu6RbC7VYnz4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDV2VjdYQjdmandBdk04UnZGRWc3QzR3VHJpUW53NjdXbkF3UFN5OXpW
d1QvMC9EMjcyQjc5OTQwNDQwNzIxMTkwNDI5QUFCQkE0NUIwQkI1NTg5RjNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyNzJCNzk5NDA0NDA3MjEx
OTA0MjlBQUJCQTQ1QjBCQjU1ODlGM0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SDV2VjdYQjdmandBdk04UnZGRWc3QzR3VHJpUW53NjdXbkF3UFN5OXpWd1QvMC9E
MjcyQjc5OTQwNDQwNzIxMTkwNDI5QUFCQkE0NUIwQkI1NTg5RjNFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKVhy14adccI9N7VUTBirFq9ree7n9n/Yqk4TsVbyYKEFLz1i+7/Q/I1yi/IC
Z7zoRUh09u13yHDKbAGja1LXdqu0t0yQviT5IO1TVOXl4Q+sZqqcQgiaZNrXrMvz
Kz88idBaFzPbyCdNRWFd+oDA3VAoPQp8EmH66hCVEO8SaioauI/GwL7jMSV019qk
cGjNyjbPF+F44WpL998X05JFCsmqxRm5eU1q/MuzupXbuoq4DJDXLyvSFcTh20cs
V7xCdTFAKreBVcri/xC3Bk8Zg6zbr1t9TaDibZCvtIUc8Jjkke6u5AhHHb64fJRw
xdLgyjMoKhPMWBBeWeB+f0zQlg==
-----END CERTIFICATE-----