This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/pHQPrHVB7VHg5mLMGnVUYfvkbVqtzE2ted8C7gGFXYp/0/519EB4C8F7D595D1C83083F1A140256DB60A221B.mft
File:                     519EB4C8F7D595D1C83083F1A140256DB60A221B.mft (raw, json)
Hash identifier:          Yfh2gnAzU/39avt1M8yMe2bBjq7PretJy86JfAyhCBw=
Subject key identifier:   A1:B7:C1:AD:00:D8:12:FE:E2:9C:77:16:7F:C2:9C:1A:D1:E8:7F:E2
Authority key identifier: 51:9E:B4:C8:F7:D5:95:D1:C8:30:83:F1:A1:40:25:6D:B6:0A:22:1B
Certificate issuer:       /CN=519EB4C8F7D595D1C83083F1A140256DB60A221B
Certificate serial:       1075B57679904290B2B789E3C40D57B5F195582B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/519EB4C8F7D595D1C83083F1A140256DB60A221B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/pHQPrHVB7VHg5mLMGnVUYfvkbVqtzE2ted8C7gGFXYp/0/519EB4C8F7D595D1C83083F1A140256DB60A221B.mft
Manifest number:          2C
Signing time:             Sun 14 Dec 2025 10:24:51 +0000
Manifest this update:     Sun 14 Dec 2025 10:19:51 +0000
Manifest next update:     Mon 15 Dec 2025 11:40:51 +0000
Files and hashes:         1: 519EB4C8F7D595D1C83083F1A140256DB60A221B.crl (hash: YE7B//h/Z4DIJDqEnfuANKd1V0jHjndr9pXApXTxllU=)
                          2: 3137372e3139302e3138342e302f32312d3233203d3e20323633343632.roa (hash: Ix2ka9mCP17rIRTD0+LYKO9c3/RaTFmI3laJbDwsi58=)
                          3: 323830343a313233303a3a2f33322d3335203d3e20323633343632.roa (hash: MwuJduWLqKc5joSghLo7Ejz/PbUqGcnvHq0DLQlp3Po=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/pHQPrHVB7VHg5mLMGnVUYfvkbVqtzE2ted8C7gGFXYp/0/519EB4C8F7D595D1C83083F1A140256DB60A221B.crl
                          rsync://rpki-repo.registro.br/repo/pHQPrHVB7VHg5mLMGnVUYfvkbVqtzE2ted8C7gGFXYp/0/519EB4C8F7D595D1C83083F1A140256DB60A221B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/519EB4C8F7D595D1C83083F1A140256DB60A221B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Dec 2025 11:40:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:75:b5:76:79:90:42:90:b2:b7:89:e3:c4:0d:57:b5:f1:95:58:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=519EB4C8F7D595D1C83083F1A140256DB60A221B
        Validity
            Not Before: Dec 14 10:19:51 2025 GMT
            Not After : Dec 15 11:40:51 2025 GMT
        Subject: CN=A1B7C1AD00D812FEE29C77167FC29C1AD1E87FE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:61:b5:1e:8a:4b:c1:a3:bc:be:50:dd:3a:9f:
                    d0:ac:63:66:4d:ff:f2:2c:00:ad:7b:3d:67:7a:9a:
                    8e:8a:c4:5e:3e:67:75:33:5f:54:b4:8c:c3:ab:bb:
                    7a:2a:aa:69:16:a6:23:07:88:b9:7c:39:58:4c:af:
                    29:8a:8c:eb:dd:ec:a7:58:33:c6:9a:81:9f:a7:a1:
                    4a:2a:28:69:ff:69:64:3a:49:01:0e:a6:94:1d:b8:
                    db:12:03:33:62:51:3c:68:8c:94:ad:b4:d4:f5:f3:
                    e1:83:38:b8:df:ff:27:3c:58:07:62:87:83:49:72:
                    14:7b:83:51:2c:31:1f:0b:5d:cf:25:a9:1e:a7:16:
                    eb:cc:20:f4:ba:44:1f:b3:55:c0:13:86:ed:95:03:
                    a5:b8:f5:2a:16:ed:d8:fe:e6:25:82:5f:b9:a4:fd:
                    0d:8c:49:ff:5e:13:4b:2d:bf:c8:91:30:b3:85:74:
                    82:1d:e8:e2:c0:7f:c8:47:9a:70:44:33:b3:5e:df:
                    b0:a5:29:0e:81:57:b1:6c:39:f7:f3:12:23:d5:c5:
                    d9:73:c1:77:5e:86:d9:75:3f:52:37:d8:86:b1:24:
                    5a:60:b0:fc:48:d6:13:a1:ac:8a:9a:c3:c2:32:22:
                    c5:d9:82:04:44:cb:68:4a:c8:a1:2b:e6:fe:b0:30:
                    e4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B7:C1:AD:00:D8:12:FE:E2:9C:77:16:7F:C2:9C:1A:D1:E8:7F:E2
            X509v3 Authority Key Identifier:
                keyid:51:9E:B4:C8:F7:D5:95:D1:C8:30:83:F1:A1:40:25:6D:B6:0A:22:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/pHQPrHVB7VHg5mLMGnVUYfvkbVqtzE2ted8C7gGFXYp/0/519EB4C8F7D595D1C83083F1A140256DB60A221B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/519EB4C8F7D595D1C83083F1A140256DB60A221B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/pHQPrHVB7VHg5mLMGnVUYfvkbVqtzE2ted8C7gGFXYp/0/519EB4C8F7D595D1C83083F1A140256DB60A221B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:36:8f:34:c9:2b:d8:37:d3:f3:25:f9:f4:62:1f:ad:f5:4a:
         18:6e:3d:d7:b4:57:d3:1d:86:06:fe:92:9f:1e:07:f1:41:2d:
         9f:e6:77:d0:c0:2e:a2:e5:38:91:67:3f:5e:f1:d2:b1:58:2d:
         63:bc:39:48:15:33:16:a3:ad:29:53:37:d8:0f:3e:3e:d8:5b:
         05:c9:50:ed:19:e3:f3:c6:62:23:cc:21:45:93:38:2b:64:1d:
         03:13:54:3c:4e:74:28:26:8c:25:e7:3c:3b:9e:73:ce:92:9a:
         5c:dc:6d:c0:79:b9:9b:97:25:ee:d8:70:56:d9:9c:9c:53:94:
         0b:ca:b8:95:cc:bb:04:1c:07:37:32:eb:21:8f:15:bc:f5:df:
         04:ec:7a:31:c1:c7:91:5e:09:11:68:95:69:c8:17:0a:db:eb:
         83:ef:1c:dd:fb:64:da:11:6b:db:57:78:60:45:08:76:9f:b0:
         fb:52:c5:77:91:8b:1f:1b:02:46:51:d4:c2:f3:81:a7:c6:82:
         12:90:f2:be:6f:29:e1:dd:d2:f4:7b:9f:9b:5b:e7:fe:58:72:
         13:e2:94:f4:5c:c8:ca:1e:c9:84:0d:da:7b:44:34:30:46:43:
         e8:02:c3:97:5d:b3:d6:40:5f:9e:0d:e2:3a:40:2d:94:43:d9:
         7b:c4:a8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----