This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.mft
File:                     F5053681E4FFFE993EC674A211C8BBC7FB338987.mft (raw, json)
Hash identifier:          fEWYNW/cMw/vzEi2G8uOGESfy29igLxIj/OLgVa5t3k=
Subject key identifier:   85:FA:FE:FF:4B:8D:6E:5B:6C:05:3D:84:51:DE:85:80:C7:F8:15:48
Authority key identifier: F5:05:36:81:E4:FF:FE:99:3E:C6:74:A2:11:C8:BB:C7:FB:33:89:87
Certificate issuer:       /CN=F5053681E4FFFE993EC674A211C8BBC7FB338987
Certificate serial:       1D39B11460DB338CD78FBB5D655C53761266E063
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.mft
Manifest number:          0344
Signing time:             Tue 23 Dec 2025 16:20:05 +0000
Manifest this update:     Tue 23 Dec 2025 16:15:05 +0000
Manifest next update:     Wed 24 Dec 2025 18:48:05 +0000
Files and hashes:         1: 3137372e3135342e32342e302f32342d3234203d3e20323632393435.roa (hash: 4mlCpPtB58d4EeykIYbZeX2CHsHwLeil+dmyQzac0ls=)
                          2: 3137372e3135342e32352e302f32342d3234203d3e20323632393435.roa (hash: manvCyjIR3EA+3q8ehMvQ2iFxULK4S3votfqkYDfji0=)
                          3: 3137372e3135342e32342e302f32322d3232203d3e20323632393435.roa (hash: /5OPTVRcxYpsOjA9hjEMus6aBGeRFw9rTV80FGFDvTE=)
                          4: 3137372e3135342e32372e302f32342d3234203d3e20323632393435.roa (hash: 7cCDVdxlmax0MvrCuat2orQT5G7ajstZXE5IvPkldPc=)
                          5: F5053681E4FFFE993EC674A211C8BBC7FB338987.crl (hash: MdawAerI+S2U4ELIMC8N1zZjwMAI9uveTWShO0U3rZo=)
                          6: 3137372e3135342e32362e302f32342d3234203d3e20323632393435.roa (hash: 4u6tKi1kHweoD5BREURntXTDzSvyWL6tFd62cTF5Ej0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.crl
                          rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 18:48:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:39:b1:14:60:db:33:8c:d7:8f:bb:5d:65:5c:53:76:12:66:e0:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5053681E4FFFE993EC674A211C8BBC7FB338987
        Validity
            Not Before: Dec 23 16:15:05 2025 GMT
            Not After : Dec 24 18:48:05 2025 GMT
        Subject: CN=85FAFEFF4B8D6E5B6C053D8451DE8580C7F81548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7e:a4:4c:f6:41:3e:99:91:94:e2:91:95:20:
                    20:15:63:60:cb:7c:d0:2b:ed:c5:82:d9:51:1c:17:
                    a7:06:4f:87:36:84:01:2c:da:15:c2:7b:68:57:10:
                    95:f7:15:ba:00:44:f4:0b:60:02:3d:75:45:28:2d:
                    b4:76:60:92:00:b6:52:99:b7:c9:28:3a:af:af:21:
                    ac:99:45:59:18:25:8a:b0:65:ec:03:2f:23:1e:0f:
                    88:b0:d4:b7:2d:8d:98:c8:db:07:3d:d8:9b:9b:a2:
                    3a:af:5d:14:18:3f:cf:8d:df:f8:cc:ea:f7:29:4d:
                    5f:33:2e:dc:a4:de:2a:63:e7:14:37:04:02:54:ce:
                    fc:7a:92:3b:02:77:40:b7:2f:44:01:1b:b3:0a:57:
                    76:b8:25:61:02:b9:78:f0:e5:f1:c2:1b:9c:bf:71:
                    b3:a3:fc:7c:c9:75:e0:6b:c7:b8:c9:37:b6:38:25:
                    c6:14:4e:f9:7f:37:d6:65:79:e5:b3:a1:29:02:9a:
                    c7:45:e1:b1:19:f5:15:a3:a0:81:d7:16:35:22:45:
                    d4:2a:c7:6e:04:b0:25:eb:5b:24:dc:78:4c:ba:6b:
                    5d:27:6e:60:cc:71:7b:9f:89:83:43:9f:35:ec:d8:
                    f3:8b:b9:52:4b:59:bb:08:97:a0:63:11:ac:ef:41:
                    71:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FA:FE:FF:4B:8D:6E:5B:6C:05:3D:84:51:DE:85:80:C7:F8:15:48
            X509v3 Authority Key Identifier:
                keyid:F5:05:36:81:E4:FF:FE:99:3E:C6:74:A2:11:C8:BB:C7:FB:33:89:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:6d:14:0f:25:40:d0:65:83:51:64:53:99:af:2a:33:c4:50:
         24:86:53:59:88:c0:4c:a8:d3:fe:c4:04:67:80:e3:cb:c6:b3:
         cf:1f:fa:dc:b5:eb:59:0a:79:a2:74:e8:63:ac:5b:06:10:50:
         6f:68:a0:e1:a5:51:44:f3:24:33:e2:9d:d6:59:0b:41:90:6c:
         dd:68:d0:4e:6c:c5:dd:e8:b2:75:d7:6c:aa:03:bd:4c:b5:71:
         31:2c:b3:7b:e8:43:11:6f:7a:10:25:27:d4:43:c3:54:ad:1a:
         45:ed:61:d9:0e:ac:a9:16:2a:17:44:77:9c:fd:38:e9:d6:b4:
         c8:0d:ad:3b:a1:3b:d9:41:71:77:4e:21:f5:b6:15:89:45:5b:
         dc:fe:49:c5:37:b6:cb:57:60:30:4f:ab:43:15:f4:e1:f0:8b:
         9f:64:47:a6:14:e9:e1:1e:1d:14:05:63:c2:a7:14:f3:07:63:
         15:39:cb:9a:7f:fd:cc:9e:52:22:fc:82:dd:d8:1b:cd:bb:c9:
         f3:48:57:a2:6f:84:28:3b:2a:ac:b2:df:20:7b:7b:46:1d:de:
         81:54:0e:93:95:4b:d5:76:2e:ef:e0:8e:bd:ff:df:13:1b:b7:
         6d:46:e8:56:72:03:8a:af:88:ac:c0:b1:d2:94:ee:26:c3:44:
         f2:03:5a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 23:54:07 2025 by rpki-client