This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.mft
File:                     D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.mft (raw, json)
Hash identifier:          87wVyKouvN2kqmlPkStE9fXIMQnq8UbkZ1johSi10OY=
Subject key identifier:   B7:C9:4A:45:96:78:F3:01:F8:98:F9:37:2F:AD:94:A5:03:7B:F8:9A
Authority key identifier: D4:5D:43:F1:B6:0A:DF:D2:FE:33:99:6A:90:BB:B6:2E:F5:5A:1D:02
Certificate issuer:       /CN=D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02
Certificate serial:       18CA933A78A44682D19645200CEC7129B50CC322
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.mft
Manifest number:          5E
Signing time:             Sat 06 Dec 2025 02:38:59 +0000
Manifest this update:     Sat 06 Dec 2025 02:33:59 +0000
Manifest next update:     Sun 07 Dec 2025 04:27:59 +0000
Files and hashes:         1: D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.crl (hash: D5bt2JWOofNKCxPFVb4EWmA9L0xSm1eYkHbbz0wZ4z4=)
                          2: 3139322e3134312e37362e302f32322d3233203d3e20323637343731.roa (hash: BAIjoYlkoz30iWzjTTZ7rECmmuGLwYnw0gEYlRfBtXA=)
                          3: 323830343a343230303a3a2f33322d3333203d3e20323637343731.roa (hash: ENOTPp+Zx/+E9r3MsBtUJ8AK0ZmsIRTEgOgOR3Mab9k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.crl
                          rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:27:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ca:93:3a:78:a4:46:82:d1:96:45:20:0c:ec:71:29:b5:0c:c3:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02
        Validity
            Not Before: Dec  6 02:33:59 2025 GMT
            Not After : Dec  7 04:27:59 2025 GMT
        Subject: CN=B7C94A459678F301F898F9372FAD94A5037BF89A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:18:8f:c4:4a:63:3b:e5:39:71:fc:2f:3b:d2:
                    d6:f8:80:1c:a3:ef:d4:5b:38:b8:6d:b2:7e:9d:02:
                    74:dd:de:48:fe:04:f6:54:29:0d:47:e2:b6:38:b6:
                    8f:91:8e:70:be:d4:72:e4:9e:45:4e:fe:0d:ae:e3:
                    ca:36:8c:cf:d5:0c:72:02:2a:0a:4d:45:77:17:2c:
                    54:78:80:ff:76:a6:8d:20:44:05:16:26:48:e3:89:
                    79:a3:19:5a:92:60:ce:7a:ba:e7:6f:1c:82:68:af:
                    a6:33:68:17:f5:57:56:1b:82:e1:2a:bd:08:5f:e2:
                    72:5c:3a:96:1c:c5:a9:0e:1b:98:a9:b6:4b:95:80:
                    77:7e:15:0d:c4:28:fb:ef:f7:a0:d0:a5:58:6c:8d:
                    23:54:bd:e3:02:7b:e9:d8:72:88:12:9e:ac:22:3a:
                    8d:64:36:25:b6:b3:b0:06:e1:a9:da:c8:ea:f3:f6:
                    97:d8:9b:db:00:78:33:27:ca:66:99:fc:76:65:90:
                    79:79:99:31:11:84:78:1f:da:38:ec:8a:df:2a:40:
                    f2:47:ce:2b:ff:63:cb:ab:f2:57:42:21:f9:c4:fc:
                    9b:c4:ec:ba:46:0c:24:db:66:a3:e8:ee:f4:d0:ea:
                    d2:3e:2d:18:d6:c7:8a:d4:31:b6:30:3f:e8:09:da:
                    21:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C9:4A:45:96:78:F3:01:F8:98:F9:37:2F:AD:94:A5:03:7B:F8:9A
            X509v3 Authority Key Identifier:
                keyid:D4:5D:43:F1:B6:0A:DF:D2:FE:33:99:6A:90:BB:B6:2E:F5:5A:1D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:86:02:94:cc:82:12:83:a2:b8:bf:17:22:1a:24:53:20:9f:
         74:98:85:b7:af:4d:9a:1c:c2:f0:9f:d5:d4:89:e6:1e:e2:4a:
         9c:63:4f:4c:eb:4d:68:e5:3a:63:06:33:0d:0b:c8:af:dc:e9:
         47:03:cd:70:7c:24:5f:f8:3c:b7:9c:e9:ae:89:13:30:e1:7d:
         b2:49:c3:9c:76:0d:1b:de:93:a2:89:6c:c2:84:e7:b1:2c:f1:
         81:e6:5c:8a:e1:ef:e1:74:bb:8b:2a:36:85:3e:27:b7:31:92:
         13:31:93:f0:4e:7d:0f:f9:85:8d:df:5f:aa:c6:75:01:ec:c6:
         82:11:c6:15:7c:6c:e9:ff:9a:f7:20:6b:ec:c7:a6:7c:8d:dd:
         f5:86:6c:0e:9f:51:74:8e:e8:95:05:2c:0b:a3:ab:50:8f:90:
         12:7d:3f:51:e9:30:25:0d:bb:7b:1d:11:c2:e9:a4:72:68:33:
         a4:24:56:4b:b8:38:27:c9:91:2d:30:c4:a7:b9:ba:06:76:4e:
         9c:e1:37:91:77:38:ec:f3:64:61:68:15:1d:9e:69:88:c1:7e:
         16:66:fc:46:c7:ba:2d:e6:56:61:43:96:05:c5:46:85:56:1c:
         78:4d:32:a9:a5:a7:54:77:2b:c2:c0:4f:ec:38:94:bc:60:2d:
         ee:3d:10:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:02:32 2025 by rpki-client