This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6EwDWDTTv7jSybESZWvVsyZguVFmwvVTBHenUwawiF5z/0/5DB9D1112BE2979B659023FF1013B1891DF0BC2F.mft
File:                     5DB9D1112BE2979B659023FF1013B1891DF0BC2F.mft (raw, json)
Hash identifier:          3+lFcEPPTGgBg48b5hFsoR8bNkLIasEuMv1HY7LPteo=
Subject key identifier:   F1:AF:1F:2D:81:37:49:89:3F:BF:66:E2:C8:81:98:9B:E5:37:71:5B
Authority key identifier: 5D:B9:D1:11:2B:E2:97:9B:65:90:23:FF:10:13:B1:89:1D:F0:BC:2F
Certificate issuer:       /CN=5DB9D1112BE2979B659023FF1013B1891DF0BC2F
Certificate serial:       198022E34298C8A086D0AA673A242879EA1B70BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DB9D1112BE2979B659023FF1013B1891DF0BC2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6EwDWDTTv7jSybESZWvVsyZguVFmwvVTBHenUwawiF5z/0/5DB9D1112BE2979B659023FF1013B1891DF0BC2F.mft
Manifest number:          0154
Signing time:             Sat 06 Dec 2025 13:47:50 +0000
Manifest this update:     Sat 06 Dec 2025 13:42:50 +0000
Manifest next update:     Sun 07 Dec 2025 16:11:50 +0000
Files and hashes:         1: 5DB9D1112BE2979B659023FF1013B1891DF0BC2F.crl (hash: 1sDeuFxSJujNo+HDcVrVJRb29OmZpNjMorhehkPv7L4=)
                          2: 323830343a383739633a3a2f33322d3333203d3e20323732373230.roa (hash: UIFYaXICVinmcyN/GiMBixZu8B6KaPa5illfAdp2QM0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6EwDWDTTv7jSybESZWvVsyZguVFmwvVTBHenUwawiF5z/0/5DB9D1112BE2979B659023FF1013B1891DF0BC2F.crl
                          rsync://rpki-repo.registro.br/repo/6EwDWDTTv7jSybESZWvVsyZguVFmwvVTBHenUwawiF5z/0/5DB9D1112BE2979B659023FF1013B1891DF0BC2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DB9D1112BE2979B659023FF1013B1891DF0BC2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 16:11:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:80:22:e3:42:98:c8:a0:86:d0:aa:67:3a:24:28:79:ea:1b:70:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DB9D1112BE2979B659023FF1013B1891DF0BC2F
        Validity
            Not Before: Dec  6 13:42:50 2025 GMT
            Not After : Dec  7 16:11:50 2025 GMT
        Subject: CN=F1AF1F2D813749893FBF66E2C881989BE537715B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:50:30:49:1f:6d:97:09:95:5e:d7:92:3b:3a:
                    21:ea:bd:d0:be:45:74:56:25:5f:be:6b:47:12:23:
                    0b:d7:1c:6a:55:1f:a5:7f:8a:19:37:78:33:e1:ac:
                    06:4c:f1:13:2e:5c:a6:a7:0a:ba:9f:87:c7:43:62:
                    b4:73:6c:a0:bd:91:73:72:78:30:d9:f3:5d:c1:62:
                    c1:6f:26:71:ba:2c:23:da:11:b5:ac:f4:9c:b0:a8:
                    50:e3:29:e9:5a:0d:f9:25:b7:d2:ac:a2:8e:90:17:
                    d5:b1:7e:c3:f3:69:66:b0:a3:bb:f2:a6:f9:36:b5:
                    49:b0:65:5f:b9:73:0d:9f:67:cf:1f:67:4f:41:15:
                    6a:30:1f:45:f5:53:1a:c1:52:07:b7:8d:55:8e:0a:
                    67:e4:a1:97:73:3c:f8:5c:00:46:35:1b:87:fa:2e:
                    4b:f4:c8:90:f6:6f:7c:4c:96:6a:77:8a:d4:e5:7f:
                    3d:b7:d7:3a:da:48:56:19:f2:55:f0:89:00:03:12:
                    98:cf:fd:0b:8b:08:dd:f7:9c:c1:00:da:5d:b9:b9:
                    73:56:6a:cc:0d:12:d3:54:05:c1:04:2d:10:a2:c1:
                    01:a4:b0:03:ab:ba:3b:79:88:7a:3e:57:4d:96:53:
                    3a:31:d3:47:0e:bd:a6:bf:c6:76:95:50:9e:eb:82:
                    c2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:AF:1F:2D:81:37:49:89:3F:BF:66:E2:C8:81:98:9B:E5:37:71:5B
            X509v3 Authority Key Identifier:
                keyid:5D:B9:D1:11:2B:E2:97:9B:65:90:23:FF:10:13:B1:89:1D:F0:BC:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6EwDWDTTv7jSybESZWvVsyZguVFmwvVTBHenUwawiF5z/0/5DB9D1112BE2979B659023FF1013B1891DF0BC2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DB9D1112BE2979B659023FF1013B1891DF0BC2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6EwDWDTTv7jSybESZWvVsyZguVFmwvVTBHenUwawiF5z/0/5DB9D1112BE2979B659023FF1013B1891DF0BC2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:68:56:ad:9b:9a:83:c8:34:d2:76:a0:e1:a2:7f:ff:39:c7:
         25:88:e4:56:ad:f3:c8:57:9e:8c:5b:dc:25:a0:1c:5d:e4:78:
         f4:ce:c9:04:e0:ea:7e:51:00:b3:c4:86:b4:77:33:4e:fe:57:
         68:05:e1:7a:cd:02:f1:e4:4b:34:6b:af:3f:5f:01:0b:a2:de:
         45:86:91:d5:4f:59:4b:cc:ff:d1:cd:08:6f:89:48:73:da:12:
         0a:bf:3c:7c:9a:34:6f:19:08:43:76:ef:e4:42:7f:d4:00:4d:
         b6:ef:54:61:5b:b4:d8:0d:00:b7:51:b7:b9:8f:6c:27:9d:4c:
         2e:12:41:2a:1b:f9:5a:65:17:97:a4:54:69:54:03:24:5d:a9:
         65:a8:2a:1d:b4:1a:a2:2a:8e:4d:a8:0e:30:1f:23:1f:d7:9d:
         44:0a:7f:04:33:70:88:a1:9c:8c:1d:1e:12:34:cf:e7:fd:b1:
         be:a4:66:ed:b8:32:d9:10:83:3e:9a:66:1d:2e:67:c5:50:69:
         a5:42:20:53:8b:85:a1:f1:78:ef:1f:2e:b7:4a:3f:4f:46:11:
         cb:30:72:5e:bf:19:ab:41:38:3a:e5:67:51:ad:e2:33:5c:b3:
         6f:26:45:46:d7:7c:7a:12:4c:8f:ac:c2:72:64:e3:3e:ef:48:
         c0:4f:02:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:33:57 2025 by rpki-client