This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/1/FEBA73E668F06EB3E835940A05E3FE7036390D15.mft
File:                     FEBA73E668F06EB3E835940A05E3FE7036390D15.mft (raw, json)
Hash identifier:          KJ3A6tasKDv3eusrw5MuPdwSptqN7gS5vriAtIDJM+M=
Subject key identifier:   91:E7:40:CB:53:88:AB:65:1A:F9:90:5D:56:E9:06:E8:AD:18:1C:27
Authority key identifier: FE:BA:73:E6:68:F0:6E:B3:E8:35:94:0A:05:E3:FE:70:36:39:0D:15
Certificate issuer:       /CN=FEBA73E668F06EB3E835940A05E3FE7036390D15
Certificate serial:       2D374C56E100427FF6BFAEB1FB3002CB42CA76C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEBA73E668F06EB3E835940A05E3FE7036390D15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/1/FEBA73E668F06EB3E835940A05E3FE7036390D15.mft
Manifest number:          032C
Signing time:             Sat 06 Dec 2025 15:18:07 +0000
Manifest this update:     Sat 06 Dec 2025 15:13:07 +0000
Manifest next update:     Sun 07 Dec 2025 15:51:07 +0000
Files and hashes:         1: 3137302e3234352e3133342e302f32332d3234203d3e203532373536.roa (hash: LIKuz5pj01N6pk0zdxtF6irMjQrMnEtZM1w1PixKfW8=)
                          2: 323830313a38303a316331303a3a2f34382d3438203d3e203532373536.roa (hash: sdikR7QnP0fmJyoKN/rukPMyzjXvL5e4quy7RCqpyvo=)
                          3: 3137302e3234352e3133342e302f32342d3234203d3e203532373536.roa (hash: CaV1Odb8NWfmMmb841oeSnut5ZQhys+Hijr5E9nhBZc=)
                          4: 3137372e31312e3235322e302f32342d3234203d3e203532373536.roa (hash: mgB6YCNSLkH5mDvw/iyhZRAuESVQ47056OuM6mT75pw=)
                          5: FEBA73E668F06EB3E835940A05E3FE7036390D15.crl (hash: 3Mt3JEDvNZ42WR3Ageh7hH67H2257BQ7TJMZ3hk42mA=)
                          6: 3137302e3234352e3133352e302f32342d3234203d3e203532373536.roa (hash: ajxPNYKpo2QBiZm1aq8TflVpC9P4HnySaTQ0xZObDhc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/1/FEBA73E668F06EB3E835940A05E3FE7036390D15.crl
                          rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/1/FEBA73E668F06EB3E835940A05E3FE7036390D15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEBA73E668F06EB3E835940A05E3FE7036390D15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 15:51:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:37:4c:56:e1:00:42:7f:f6:bf:ae:b1:fb:30:02:cb:42:ca:76:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEBA73E668F06EB3E835940A05E3FE7036390D15
        Validity
            Not Before: Dec  6 15:13:07 2025 GMT
            Not After : Dec  7 15:51:07 2025 GMT
        Subject: CN=91E740CB5388AB651AF9905D56E906E8AD181C27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:96:c1:67:c4:2b:c2:92:71:8c:15:02:f6:eb:
                    d3:48:9b:89:b5:6d:b6:a6:ea:c8:ab:fc:a5:ae:4f:
                    b8:7e:47:0c:b9:81:f9:a5:4f:e2:4e:95:67:7b:dc:
                    c1:67:a0:54:57:aa:e3:40:d2:0a:4a:ee:6d:6e:cd:
                    3e:27:82:ab:96:9f:1e:97:bc:57:c8:c8:12:3b:12:
                    ba:b3:b8:5a:17:d1:fc:bd:98:3b:26:cb:6e:c1:3c:
                    e1:30:d2:05:11:4f:a9:4c:01:9d:22:1a:60:c3:dd:
                    28:ef:43:dd:c7:60:34:b0:b5:0e:16:e9:60:aa:04:
                    d7:e2:37:2c:36:4b:a0:bd:af:e3:a7:99:e7:41:1e:
                    99:f5:6e:b9:ca:68:0a:66:a9:54:04:81:7d:8d:a3:
                    04:4a:26:4c:07:4b:ee:cd:01:47:06:95:39:0a:4c:
                    1b:be:6b:ad:07:47:4a:73:06:6b:19:6a:35:a8:81:
                    1d:76:21:01:12:c8:6a:77:8a:bd:27:bb:5c:18:c4:
                    51:74:eb:7d:0b:fd:3c:ab:b8:62:ab:81:ea:c4:0b:
                    20:ff:d1:05:46:c5:7a:e6:1f:72:1f:72:bf:a7:79:
                    cb:64:8a:20:79:90:e2:09:8a:78:5b:52:45:83:ca:
                    54:75:df:59:1b:35:4c:45:40:45:5c:28:32:b5:78:
                    55:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:E7:40:CB:53:88:AB:65:1A:F9:90:5D:56:E9:06:E8:AD:18:1C:27
            X509v3 Authority Key Identifier:
                keyid:FE:BA:73:E6:68:F0:6E:B3:E8:35:94:0A:05:E3:FE:70:36:39:0D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/1/FEBA73E668F06EB3E835940A05E3FE7036390D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEBA73E668F06EB3E835940A05E3FE7036390D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/1/FEBA73E668F06EB3E835940A05E3FE7036390D15.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:96:61:c0:dc:93:fc:11:a0:3b:eb:48:a9:9b:d2:58:03:25:
         18:af:80:8e:e5:ed:26:52:4e:bd:5a:95:99:e0:44:aa:7d:0d:
         46:6f:c6:1a:9c:17:b2:a9:2a:c5:0b:f4:3f:1c:05:1a:6e:c3:
         35:fb:a4:37:d8:e4:f9:3a:f1:3c:0d:46:f8:64:e8:2a:2d:de:
         3d:89:67:d7:3b:a6:ca:5c:be:74:bd:41:68:de:7e:c6:91:e9:
         0d:01:ab:26:33:a1:54:3b:0c:5c:06:cd:9e:eb:b6:af:ae:ed:
         e4:c3:4b:64:35:d7:8c:fe:da:a1:01:c0:23:a0:55:71:a2:4c:
         1a:64:1d:fa:68:1f:7a:7f:34:6f:ec:ad:75:79:84:eb:8f:44:
         5d:b4:75:a1:67:f7:9e:9b:d4:b7:65:d4:c3:06:e4:93:44:ec:
         25:0e:44:4d:c0:f6:cb:71:a7:1f:06:30:60:8d:5d:f7:fe:f9:
         12:d2:2e:b3:2a:9e:e5:1f:5a:5b:55:94:21:c4:4f:28:1b:b2:
         59:12:0b:0e:bb:60:38:a5:34:5d:66:a6:cd:e4:5d:8a:fb:d5:
         6c:09:e4:0b:00:e5:32:07:a1:1e:90:d4:19:63:99:2e:be:0a:
         d9:ed:fc:51:de:19:9d:31:13:87:68:c9:f9:b8:07:5c:e7:dc:
         b7:d4:3d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:21:17 2025 by rpki-client