This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.mft
File:                     695A28FC133EB5408B9BA126D9FFE20884EDECD2.mft (raw, json)
Hash identifier:          8Mrkhgbtw6e4i8WaAQZfFrzipTfdafYxSBipcsHOY7o=
Subject key identifier:   8A:3A:59:9D:67:1D:7D:15:03:15:42:BE:B2:CE:75:39:B2:2F:68:2D
Authority key identifier: 69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2
Certificate issuer:       /CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2
Certificate serial:       2C92205EFBA775199F6DB6D74E4F1CA1A0A074B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.mft
Manifest number:          0166
Signing time:             Sat 06 Dec 2025 06:33:03 +0000
Manifest this update:     Sat 06 Dec 2025 06:28:03 +0000
Manifest next update:     Sun 07 Dec 2025 07:09:03 +0000
Files and hashes:         1: 3137302e3233312e3135322e302f32322d3332203d3e20323633343234.roa (hash: QNYexqxi8ZgpvO1oIsW72rOjkHsbCORODUg23wwI2QE=)
                          2: 3133382e3132312e3231362e302f32322d3332203d3e20323633343234.roa (hash: XqR77qLnVQPjvW+NdcPMVLhS20GCaBS3cER2/qIQpkE=)
                          3: 323830343a313139343a3a2f33322d313238203d3e20323633343234.roa (hash: qRpe3HMunOlDvbnsvh59LbRtj4Tl6ZLH4gik3VMaTCc=)
                          4: AS263424.asa (hash: X2lwCnyIjJZQCVi9tOO9WwYnQKJe3byjUNKmKRdkgaw=)
                          5: 3137302e38322e3131362e302f32322d3332203d3e20323633343234.roa (hash: Bq7jYvlTzFbRiuY4gjDAmQq+hoFOYx9hFEexWG876XM=)
                          6: 3137372e39312e33322e302f32322d3332203d3e20323633343234.roa (hash: 05bv3rwHFKdXP0ka5nwmC7aUxyM/kFqlL8VfT5VE/hg=)
                          7: 695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl (hash: VGVewfoc7gundCwby8auyRfWlHeHDmcI4WHZ2g+C6A8=)
                          8: 3133312e3130382e382e302f32322d3332203d3e20323633343234.roa (hash: 5x0qHXKy052VE9+a2c/CKxVgKs0GgOqzJVo2yGxQ3ro=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl
                          rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:09:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:92:20:5e:fb:a7:75:19:9f:6d:b6:d7:4e:4f:1c:a1:a0:a0:74:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2
        Validity
            Not Before: Dec  6 06:28:03 2025 GMT
            Not After : Dec  7 07:09:03 2025 GMT
        Subject: CN=8A3A599D671D7D15031542BEB2CE7539B22F682D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b2:36:bd:ce:0a:81:f7:1f:bf:5d:b6:27:4c:
                    9b:40:68:7a:87:25:e6:b3:b0:0b:36:0f:8a:df:d1:
                    85:d2:d1:f7:2e:0f:b1:ab:79:f7:31:8a:72:1e:b8:
                    26:7c:16:0e:b4:99:26:cb:a7:fc:5d:13:24:7d:6b:
                    bc:3e:a2:11:ec:69:4e:75:c5:c4:79:16:0f:c1:bd:
                    40:f1:a3:30:b9:d1:84:23:5e:8e:cd:3e:41:03:a8:
                    54:6e:e2:9e:7b:c1:2b:e0:6a:f2:75:f1:f5:cb:24:
                    60:ad:55:45:89:c9:fe:0d:f3:4c:a7:3b:e4:b1:c3:
                    54:a1:c4:d7:ac:6c:20:0f:8b:ca:b4:38:0b:18:40:
                    bd:5d:41:bf:1b:7a:ca:aa:81:1b:b5:b5:dd:43:6e:
                    0a:6d:3e:e1:61:44:20:ce:a6:fc:87:13:c7:20:36:
                    1c:f8:9c:2c:1a:41:ce:67:b5:44:a4:a5:07:c6:28:
                    db:c3:3c:84:76:d7:41:5f:98:d5:29:20:cb:60:c7:
                    73:84:77:1f:9a:cb:68:59:c0:ee:ba:c9:3a:2b:95:
                    ff:cf:45:eb:48:6b:2e:3e:e9:80:f3:f4:b3:35:85:
                    95:8f:17:52:61:79:24:b5:9d:42:f3:27:b8:4f:1b:
                    7d:2f:f5:e8:0a:73:1d:5b:84:e5:b9:16:21:17:50:
                    16:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3A:59:9D:67:1D:7D:15:03:15:42:BE:B2:CE:75:39:B2:2F:68:2D
            X509v3 Authority Key Identifier:
                keyid:69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:c7:7f:47:f1:6a:5f:87:cc:3a:9c:eb:35:b7:c2:66:f1:7b:
         ff:ca:06:bc:6a:9d:6f:e3:1d:32:22:de:f2:0b:b4:05:64:87:
         c5:df:27:c3:83:9a:61:1a:97:bd:ab:dc:ce:29:15:16:43:4c:
         92:6b:7c:c3:c6:50:e5:df:ee:6f:0b:19:e7:b7:50:09:c6:0b:
         54:6a:5d:9d:8c:16:1a:73:a6:dd:97:af:c4:48:45:db:7b:55:
         34:bc:35:35:0e:1c:de:0a:e7:32:5a:75:fc:c2:44:cd:03:83:
         10:d3:35:0a:6e:d1:54:58:a3:83:17:54:f5:db:e7:d2:a8:54:
         66:9c:c7:49:0a:af:a6:9b:4b:18:5e:41:1c:b7:d9:50:e8:fe:
         30:b6:40:6a:6a:8d:2d:1b:7f:91:12:de:8c:fa:f7:bc:38:97:
         e7:84:58:db:b6:4c:0e:e2:98:6e:37:cb:29:8d:68:6f:ca:79:
         e2:52:b0:53:38:79:b4:62:50:7c:07:ab:a0:01:64:35:ae:fa:
         32:3e:6e:44:03:a1:68:ad:09:bc:35:cd:47:4e:4f:3f:95:13:
         a1:45:a4:72:f7:1c:13:b1:25:5e:26:fb:8b:90:63:c0:43:80:
         35:70:44:cc:6b:4d:70:3f:f4:a6:da:b2:1f:d5:0c:74:ef:9a:
         7f:c0:79:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:23:52 2025 by rpki-client