This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/1/5FA7CB850A2B0CBC348574695F2F5CF499586904.mft
File:                     5FA7CB850A2B0CBC348574695F2F5CF499586904.mft (raw, json)
Hash identifier:          +3DwCAlD1OTXHZTso/xZ7r6yJt4Y3F/hj3PB0QAA3iY=
Subject key identifier:   27:1C:CD:5B:59:2C:05:58:76:FD:79:27:D3:84:C5:1F:A8:8B:8E:05
Authority key identifier: 5F:A7:CB:85:0A:2B:0C:BC:34:85:74:69:5F:2F:5C:F4:99:58:69:04
Certificate issuer:       /CN=5FA7CB850A2B0CBC348574695F2F5CF499586904
Certificate serial:       0148B9079963698822368F85F3CCFCEA33FEBFCE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA7CB850A2B0CBC348574695F2F5CF499586904.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/1/5FA7CB850A2B0CBC348574695F2F5CF499586904.mft
Manifest number:          033D
Signing time:             Wed 24 Dec 2025 04:14:44 +0000
Manifest this update:     Wed 24 Dec 2025 04:09:44 +0000
Manifest next update:     Thu 25 Dec 2025 05:26:44 +0000
Files and hashes:         1: 3138362e3231392e3132302e302f32312d3234203d3e203631383930.roa (hash: Ql2rp3tcWN8N4XpmWDjnef9WUduPe3njcE2uPhedC34=)
                          2: 323830343a6562343a3a2f33322d3438203d3e203631383930.roa (hash: cFhQ0I7Z+CRyHywsWtB7ur3/d/T56B91GC0+4mPtaHk=)
                          3: 3133382e3230342e3231322e302f32322d3234203d3e203631383930.roa (hash: ARPPLOOo/COGvKRb0DnflhwGo9oEIJcN+nouVAyanIw=)
                          4: 3137302e3135302e32342e302f32322d3234203d3e203631383930.roa (hash: fkNTn5BqMgCsiULgiO57iSa8xVZZx+ujpZ8MUG0aMpc=)
                          5: 5FA7CB850A2B0CBC348574695F2F5CF499586904.crl (hash: KrrcDIrzER7okFrXaPtQsdmOZPS3j71Mo7Z7GCPNLvM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/1/5FA7CB850A2B0CBC348574695F2F5CF499586904.crl
                          rsync://rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/1/5FA7CB850A2B0CBC348574695F2F5CF499586904.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA7CB850A2B0CBC348574695F2F5CF499586904.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 05:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:48:b9:07:99:63:69:88:22:36:8f:85:f3:cc:fc:ea:33:fe:bf:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA7CB850A2B0CBC348574695F2F5CF499586904
        Validity
            Not Before: Dec 24 04:09:44 2025 GMT
            Not After : Dec 25 05:26:44 2025 GMT
        Subject: CN=271CCD5B592C055876FD7927D384C51FA88B8E05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:97:db:af:85:c3:7e:90:96:86:d5:b3:bc:ed:
                    81:b3:ac:7c:9e:6c:fe:08:c9:85:d7:e3:da:0d:03:
                    a0:d5:73:fd:6e:3d:67:d5:57:47:ee:c4:9d:96:80:
                    22:e7:3b:7b:3e:7d:62:33:a9:9a:90:a2:30:0f:12:
                    4c:86:96:fb:85:9c:c3:09:44:3b:1d:d4:0d:b6:83:
                    1a:be:2e:a2:80:02:aa:e9:08:3e:9c:e9:c0:7b:3e:
                    01:7a:c1:33:58:3b:91:df:1e:19:ff:2f:00:5b:af:
                    e6:86:0b:b3:fe:6d:23:b7:d2:d0:cd:6a:bf:91:0d:
                    26:46:27:40:5f:92:a8:7c:01:a0:7b:0c:04:eb:31:
                    cd:d8:fe:5d:69:af:c8:27:94:5b:1b:1b:90:54:d4:
                    cd:50:4c:f1:21:44:62:b9:1f:f4:56:d9:91:8d:bb:
                    44:41:57:17:33:f3:73:38:22:8d:01:f9:c9:53:88:
                    cc:84:5b:8f:a8:10:96:98:07:57:1a:f2:c7:43:3c:
                    f4:b9:8c:a9:f5:16:cf:26:e9:16:97:39:1a:89:43:
                    74:8b:29:a8:05:1a:ed:5b:e8:71:a8:67:d5:08:7f:
                    fa:fe:2e:1d:73:f2:b1:97:32:f6:e5:97:a2:f3:43:
                    2d:4a:3d:71:4a:0b:3a:87:b4:40:9c:af:d5:1c:26:
                    97:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:1C:CD:5B:59:2C:05:58:76:FD:79:27:D3:84:C5:1F:A8:8B:8E:05
            X509v3 Authority Key Identifier:
                keyid:5F:A7:CB:85:0A:2B:0C:BC:34:85:74:69:5F:2F:5C:F4:99:58:69:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/1/5FA7CB850A2B0CBC348574695F2F5CF499586904.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA7CB850A2B0CBC348574695F2F5CF499586904.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/1/5FA7CB850A2B0CBC348574695F2F5CF499586904.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:8d:24:97:93:fb:f8:32:9b:e7:c9:d0:d3:1b:7c:20:17:2f:
         dd:b7:57:e1:f6:c7:0f:ae:dd:3a:01:9f:07:92:be:27:9d:c6:
         1a:d0:85:37:b7:ca:1d:2f:2a:b9:9c:d3:3c:b3:1f:cb:13:df:
         a8:19:1e:38:03:9d:14:9f:9b:89:ed:6e:74:3c:cf:21:48:d0:
         86:59:d9:93:2c:73:ef:cf:5a:f7:7a:ee:d4:0f:f4:c0:aa:aa:
         0f:3b:1c:9f:02:fd:65:3d:e8:ca:f5:79:1f:29:16:0d:c6:f3:
         c3:d7:ea:a6:52:70:46:8d:03:08:bd:0b:51:dd:d3:b7:53:52:
         04:01:3b:0c:e8:19:d4:6a:44:bb:43:77:91:31:73:a3:1a:13:
         77:37:51:1d:24:3e:6f:17:29:a1:f0:2f:e0:b5:9d:a2:96:52:
         7f:6c:02:8e:8c:43:1b:98:01:81:ef:81:ef:67:05:50:6e:31:
         1c:f6:87:af:f8:c6:1f:54:e7:ed:db:4d:62:94:15:4f:df:11:
         76:69:49:49:02:4c:9c:c2:e1:aa:0c:f8:70:71:65:c9:a6:21:
         4a:30:a4:9c:1f:80:df:69:a7:ec:81:e1:df:9d:12:bd:38:13:
         93:f6:5a:1a:92:6d:fe:a2:b1:a3:0c:d6:c7:61:30:19:20:37:
         cf:d1:4a:ba
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUAUi5B5ljaYgiNo+F88z86jP+v84wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZBN0NCODUwQTJCMENCQzM0ODU3NDY5NUYyRjVDRjQ5
OTU4NjkwNDAeFw0yNTEyMjQwNDA5NDRaFw0yNTEyMjUwNTI2NDRaMDMxMTAvBgNV
BAMTKDI3MUNDRDVCNTkyQzA1NTg3NkZENzkyN0QzODRDNTFGQTg4QjhFMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNl9uvhcN+kJaG1bO87YGzrHye
bP4IyYXX49oNA6DVc/1uPWfVV0fuxJ2WgCLnO3s+fWIzqZqQojAPEkyGlvuFnMMJ
RDsd1A22gxq+LqKAAqrpCD6c6cB7PgF6wTNYO5HfHhn/LwBbr+aGC7P+bSO30tDN
ar+RDSZGJ0Bfkqh8AaB7DATrMc3Y/l1pr8gnlFsbG5BU1M1QTPEhRGK5H/RW2ZGN
u0RBVxcz83M4Io0B+clTiMyEW4+oEJaYB1ca8sdDPPS5jKn1Fs8m6RaXORqJQ3SL
KagFGu1b6HGoZ9UIf/r+Lh1z8rGXMvbll6LzQy1KPXFKCzqHtECcr9UcJpc7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUJxzNW1ksBVh2/Xkn04TFH6iLjgUwHwYDVR0j
BBgwFoAUX6fLhQorDLw0hXRpXy9c9JlYaQQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG5iZkhhMWVWTGtzZGZtN1lDenNtcDFRbWNBZFVtN1hSU3U0aWh1V2Rh
cVYvMS81RkE3Q0I4NTBBMkIwQ0JDMzQ4NTc0Njk1RjJGNUNGNDk5NTg2OTA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVGQTdDQjg1MEEyQjBDQkMz
NDg1NzQ2OTVGMkY1Q0Y0OTk1ODY5MDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SG5iZkhhMWVWTGtzZGZtN1lDenNtcDFRbWNBZFVtN1hSU3U0aWh1V2RhcVYvMS81
RkE3Q0I4NTBBMkIwQ0JDMzQ4NTc0Njk1RjJGNUNGNDk5NTg2OTA0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAp40kl5P7+DKb58nQ0xt8IBcv3bdX4fbHD67dOgGfB5K+J53GGtCFN7fKHS8q
uZzTPLMfyxPfqBkeOAOdFJ+bie1udDzPIUjQhlnZkyxz789a93ru1A/0wKqqDzsc
nwL9ZT3oyvV5HykWDcbzw9fqplJwRo0DCL0LUd3Tt1NSBAE7DOgZ1GpEu0N3kTFz
oxoTdzdRHSQ+bxcpofAv4LWdopZSf2wCjoxDG5gBge+B72cFUG4xHPaHr/jGH1Tn
7dtNYpQVT98RdmlJSQJMnMLhqgz4cHFlyaYhSjCknB+A32mn7IHh350SvTgTk/Za
GpJt/qKxowzWx2EwGSA3z9FKug==
-----END CERTIFICATE-----