This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.mft
File:                     28AEA4799AA16796C18CA8950931D4394F01179A.mft (raw, json)
Hash identifier:          3cZXjOgkLrgdYfMB6qvkrvyA42PagmesjMBUyEhDXRE=
Subject key identifier:   F2:45:F1:0B:B6:8A:7D:3D:8E:A6:60:F8:D0:33:B6:22:47:3D:09:41
Authority key identifier: 28:AE:A4:79:9A:A1:67:96:C1:8C:A8:95:09:31:D4:39:4F:01:17:9A
Certificate issuer:       /CN=28AEA4799AA16796C18CA8950931D4394F01179A
Certificate serial:       5D29DB7F095A53DD4C5B4745EB5DD141CB2911FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28AEA4799AA16796C18CA8950931D4394F01179A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.mft
Manifest number:          010A
Signing time:             Wed 24 Dec 2025 00:11:10 +0000
Manifest this update:     Wed 24 Dec 2025 00:06:10 +0000
Manifest next update:     Thu 25 Dec 2025 01:04:10 +0000
Files and hashes:         1: 323830343a333137343a383030303a3a2f33362d313238203d3e20323635303136.roa (hash: Rj6vfHuvEIIrIwG8lNEGd6KDgvKS0X/NDvCLaLd/AAg=)
                          2: 3137302e38342e3136342e302f32322d3332203d3e20323635303136.roa (hash: y3CoVEWObW7u+N074Y8vxEijHZnpu3jXbFZ4orw4uP8=)
                          3: 28AEA4799AA16796C18CA8950931D4394F01179A.crl (hash: DId6z9W2mY0z5TFBgnxTSZUBhVGXgwbd6/R01MACMV4=)
                          4: 323830343a333137343a3a2f33362d313238203d3e20323635303136.roa (hash: qAzyEkmPw3mlSBC4lABTQiivdhcCsktw+/oqmoHZXow=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.crl
                          rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28AEA4799AA16796C18CA8950931D4394F01179A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 01:04:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:29:db:7f:09:5a:53:dd:4c:5b:47:45:eb:5d:d1:41:cb:29:11:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28AEA4799AA16796C18CA8950931D4394F01179A
        Validity
            Not Before: Dec 24 00:06:10 2025 GMT
            Not After : Dec 25 01:04:10 2025 GMT
        Subject: CN=F245F10BB68A7D3D8EA660F8D033B622473D0941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e9:c3:ea:62:7e:fb:3b:af:b4:30:04:14:1d:
                    98:e4:69:38:cb:81:5b:02:4f:5c:92:6a:73:37:68:
                    4b:e7:4b:0c:00:2b:08:98:12:b2:b0:11:80:7e:27:
                    8a:58:9c:86:83:88:7b:29:46:a5:6f:9d:f1:c1:55:
                    4e:97:3f:18:9b:7d:fa:f5:3c:cd:24:fa:f1:00:01:
                    af:d7:d4:cd:4e:00:23:21:26:ee:5c:7c:55:7b:62:
                    66:9b:9e:7f:b1:bc:cc:9e:ae:4f:dc:6e:cc:63:41:
                    fc:ed:6e:b2:d3:5a:6a:93:53:0e:8f:a1:62:17:3c:
                    14:46:3c:1e:2c:89:13:8d:1c:ec:16:73:14:70:08:
                    10:33:f3:37:fc:36:ee:60:69:37:cc:33:fd:43:b4:
                    e6:78:84:10:6e:1a:0b:0a:d9:6f:f4:29:a5:1e:e8:
                    f2:35:1d:4f:08:ca:45:92:05:ea:b6:28:fd:14:26:
                    b8:64:c6:ea:ef:1f:ff:2e:48:ac:89:3f:06:68:99:
                    19:53:da:09:ec:7e:c4:4e:54:cc:fc:e3:f8:25:1b:
                    79:f1:bb:5c:b3:af:bd:1f:04:49:6e:8b:f3:fb:e5:
                    67:ea:74:e6:4d:69:0a:eb:9f:d2:fa:d1:79:a6:72:
                    a6:7b:da:ae:bc:5a:8f:55:0e:3f:c7:f8:e9:a2:c4:
                    16:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:45:F1:0B:B6:8A:7D:3D:8E:A6:60:F8:D0:33:B6:22:47:3D:09:41
            X509v3 Authority Key Identifier:
                keyid:28:AE:A4:79:9A:A1:67:96:C1:8C:A8:95:09:31:D4:39:4F:01:17:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28AEA4799AA16796C18CA8950931D4394F01179A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:db:40:93:d5:1b:55:22:36:8f:e1:c0:b9:21:10:6c:13:9b:
         7c:ee:31:03:3d:bd:b8:d5:1a:77:38:7f:af:94:e6:5e:97:f6:
         06:c2:ba:45:70:74:b5:66:ff:4e:e7:9f:4f:6f:63:38:6c:e9:
         a8:37:f7:8b:b7:89:0e:f9:6e:6d:a7:0c:1c:2a:a7:19:be:0b:
         ca:86:db:7b:31:c2:48:96:84:68:bc:36:57:77:8b:25:4d:0f:
         02:aa:48:be:cd:a9:4d:71:95:a9:18:d6:3a:f7:97:e8:97:49:
         f4:bc:39:d0:b1:67:e2:22:14:64:e8:61:c2:bc:f9:fc:75:e4:
         01:19:3d:a9:2a:d3:ab:b3:eb:a2:ea:eb:f4:5b:89:7b:e0:d0:
         fc:fa:cc:c9:86:e0:2e:6a:3b:59:f3:50:35:ae:93:5a:ca:c6:
         07:ff:f4:b5:ea:c0:02:87:75:d2:68:c9:c0:16:61:af:34:46:
         c6:e9:ad:f7:0d:f0:ed:a8:6d:91:12:66:9d:cf:27:4e:ca:06:
         3b:c3:2e:a1:1b:81:55:c1:d8:2c:dc:bc:6b:0d:34:0c:60:74:
         1d:85:d0:af:d3:ae:31:25:4e:03:a3:f2:4e:61:50:a7:49:02:
         5f:19:8a:8a:d1:08:73:a2:1d:71:45:a2:d5:e2:12:d6:77:da:
         f8:fd:ee:97
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXSnbfwlaU91MW0dF613RQcspEfswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhBRUE0Nzk5QUExNjc5NkMxOENBODk1MDkzMUQ0Mzk0
RjAxMTc5QTAeFw0yNTEyMjQwMDA2MTBaFw0yNTEyMjUwMTA0MTBaMDMxMTAvBgNV
BAMTKEYyNDVGMTBCQjY4QTdEM0Q4RUE2NjBGOEQwMzNCNjIyNDczRDA5NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC6cPqYn77O6+0MAQUHZjkaTjL
gVsCT1ySanM3aEvnSwwAKwiYErKwEYB+J4pYnIaDiHspRqVvnfHBVU6XPxibffr1
PM0k+vEAAa/X1M1OACMhJu5cfFV7Ymabnn+xvMyerk/cbsxjQfztbrLTWmqTUw6P
oWIXPBRGPB4siRONHOwWcxRwCBAz8zf8Nu5gaTfMM/1DtOZ4hBBuGgsK2W/0KaUe
6PI1HU8IykWSBeq2KP0UJrhkxurvH/8uSKyJPwZomRlT2gnsfsROVMz84/glG3nx
u1yzr70fBElui/P75WfqdOZNaQrrn9L60XmmcqZ72q68Wo9VDj/H+OmixBaTAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU8kXxC7aKfT2OpmD40DO2Ikc9CUEwHwYDVR0j
BBgwFoAUKK6keZqhZ5bBjKiVCTHUOU8BF5owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEdyY0JIZWZmSE12NVJtOG83RjJYSjNkTEJ0Qlo5Sms1OEpjZTFiaGZV
WGQvMC8yOEFFQTQ3OTlBQTE2Nzk2QzE4Q0E4OTUwOTMxRDQzOTRGMDExNzlBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4QUVBNDc5OUFBMTY3OTZD
MThDQTg5NTA5MzFENDM5NEYwMTE3OUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SEdyY0JIZWZmSE12NVJtOG83RjJYSjNkTEJ0Qlo5Sms1OEpjZTFiaGZVWGQvMC8y
OEFFQTQ3OTlBQTE2Nzk2QzE4Q0E4OTUwOTMxRDQzOTRGMDExNzlBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdNtAk9UbVSI2j+HAuSEQbBObfO4xAz29uNUadzh/r5TmXpf2BsK6RXB0tWb/
TuefT29jOGzpqDf3i7eJDvlubacMHCqnGb4LyobbezHCSJaEaLw2V3eLJU0PAqpI
vs2pTXGVqRjWOveX6JdJ9Lw50LFn4iIUZOhhwrz5/HXkARk9qSrTq7Prourr9FuJ
e+DQ/PrMyYbgLmo7WfNQNa6TWsrGB//0terAAod10mjJwBZhrzRGxumt9w3w7aht
kRJmnc8nTsoGO8MuoRuBVcHYLNy8aw00DGB0HYXQr9OuMSVOA6PyTmFQp0kCXxmK
itEIc6IdcUWi1eIS1nfa+P3ulw==
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:26:40 2025 by rpki-client