This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.mft
File:                     EEEFDF0561F507F6A8EEC33D55604D7A011BB588.mft (raw, json)
Hash identifier:          hTTeskEMyS/5dJXu+1TPv4jJEO+Bd/05O0Wzp7WmJYs=
Subject key identifier:   89:76:9D:22:3C:2E:F2:52:DF:76:DF:B8:B1:B6:32:A4:E1:80:F0:F3
Authority key identifier: EE:EF:DF:05:61:F5:07:F6:A8:EE:C3:3D:55:60:4D:7A:01:1B:B5:88
Certificate issuer:       /CN=EEEFDF0561F507F6A8EEC33D55604D7A011BB588
Certificate serial:       5DA739F6C7EE1FB3EE818AFD0368F5CE3FC17475
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.mft
Manifest number:          10
Signing time:             Fri 05 Dec 2025 12:35:03 +0000
Manifest this update:     Fri 05 Dec 2025 12:30:03 +0000
Manifest next update:     Sat 06 Dec 2025 15:45:03 +0000
Files and hashes:         1: EEEFDF0561F507F6A8EEC33D55604D7A011BB588.crl (hash: NZ9isOR6AvL4xnTVpTKApZTJemZnVbbrmgt/DY2dpMg=)
                          2: 323830343a6232633a3a2f34382d3438203d3e203532393436.roa (hash: Q/hTGEDmiPhrcmtsP3IkVjQQei5FdNCFOQ+jD49/Hcg=)
                          3: 3137372e31312e3234342e302f32322d3234203d3e203532393436.roa (hash: eTfKflTgHLtPjzxSmjJQCfX7XAIZmlj5ozgtIXuNnoU=)
                          4: 323830343a6232633a3a2f34302d3430203d3e203532393436.roa (hash: +grW7UKi6eZoew3442rlNic2hRAmnibyjH3TQN5PEOc=)
                          5: 323830343a6232633a3a2f33322d3332203d3e203532393436.roa (hash: CvgqQ/IQBdOtMO9ImDMYOMa+eCVHs8yPFLF9RpdD4EI=)
                          6: 323830343a6232633a3a2f33362d3336203d3e203532393436.roa (hash: buJc0n2TzQnk7INGDOUnIeqfTbUdF9t+tzFZRTXAlL4=)
                          7: 323830343a6232633a3a2f34342d3434203d3e203532393436.roa (hash: f1iXpw0ISV4XJpehYig4Gu/H7p2A+YgQoh7G0Slf3kU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.crl
                          rsync://rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 15:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a7:39:f6:c7:ee:1f:b3:ee:81:8a:fd:03:68:f5:ce:3f:c1:74:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEEFDF0561F507F6A8EEC33D55604D7A011BB588
        Validity
            Not Before: Dec  5 12:30:03 2025 GMT
            Not After : Dec  6 15:45:03 2025 GMT
        Subject: CN=89769D223C2EF252DF76DFB8B1B632A4E180F0F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bc:3b:63:27:8f:0c:ca:ea:14:5c:0c:cd:7f:
                    9b:40:4e:45:37:e7:27:58:61:7c:8d:c9:7e:7e:55:
                    a1:d9:69:11:a0:f3:40:d8:37:e7:6f:5d:7f:a0:90:
                    f0:d0:1f:53:09:59:c0:30:ae:2b:85:98:6d:6c:34:
                    12:00:db:6f:c4:e5:cd:d8:d8:31:ad:b4:53:3d:1d:
                    97:ca:39:f4:6f:6f:73:8a:cc:e2:4a:19:57:f6:4e:
                    d0:6d:f5:eb:44:2a:27:f0:85:c9:b0:c6:12:23:5b:
                    24:3e:82:d2:6d:58:79:6c:e5:72:a2:43:eb:41:de:
                    92:7a:a5:85:f6:0a:91:24:24:b7:15:62:67:68:a6:
                    77:34:0f:1a:9a:73:fd:e3:ee:ce:af:7f:a7:fa:2e:
                    09:74:d6:a1:a8:c0:91:86:09:74:e4:8f:68:cd:7d:
                    d1:e1:6a:f6:69:80:f8:ac:14:54:c4:35:51:92:a9:
                    3d:a2:da:59:f4:c9:d4:78:6c:c9:a8:16:b5:df:99:
                    b9:02:09:9e:bb:9b:63:8d:3f:96:b0:74:1c:6c:ad:
                    d8:bf:fe:d9:c8:7b:25:ed:e1:64:0a:5c:47:8b:f1:
                    75:8b:0f:ec:9d:88:55:88:98:4e:19:24:f0:90:7c:
                    98:40:c9:37:3b:0a:96:4c:a3:22:23:26:db:ba:5a:
                    55:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:76:9D:22:3C:2E:F2:52:DF:76:DF:B8:B1:B6:32:A4:E1:80:F0:F3
            X509v3 Authority Key Identifier:
                keyid:EE:EF:DF:05:61:F5:07:F6:A8:EE:C3:3D:55:60:4D:7A:01:1B:B5:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:0d:fb:c0:9e:57:2f:00:f5:fd:9a:cd:53:23:15:a7:8a:a1:
         3c:a9:65:21:2e:27:64:c3:fc:24:77:76:d3:fd:a7:8c:47:1c:
         2f:d0:a3:ab:48:c7:80:77:49:96:9c:5d:c8:dd:6a:fc:79:df:
         e6:49:27:da:1e:97:34:db:c6:ee:e1:a0:cd:1b:fb:7b:4b:4e:
         d7:7c:74:9a:3d:95:6d:1b:45:20:8a:ed:a7:b1:98:54:a3:54:
         c7:be:39:c8:82:3d:6d:df:05:35:9d:7b:a1:27:ed:39:ef:cb:
         09:90:43:f6:60:37:51:f4:b1:81:d9:ad:7a:38:b2:a8:9d:7a:
         9f:2c:ac:7d:7e:bb:08:37:ef:8f:06:ed:53:00:7f:91:d6:70:
         11:9b:a8:24:9d:ee:90:77:b9:7c:ce:ac:38:49:41:b3:c8:c8:
         ab:db:43:9e:02:ab:e7:c5:ae:66:3c:cd:74:90:f2:20:8c:b1:
         82:ad:9c:25:81:c4:c3:24:05:a8:49:ec:65:cb:bd:b0:3a:70:
         0f:1b:60:d7:7c:e9:73:42:6c:34:33:3c:e1:c4:f1:40:8b:d6:
         cd:11:c3:0c:b6:2f:12:18:27:b7:f0:f9:98:ea:e7:22:1e:c0:
         1c:86:d0:e8:b3:4b:68:fa:07:d2:03:fd:3e:56:56:e5:f6:44:
         d7:fa:60:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:56:07 2025 by rpki-client