This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft
File:                     5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft (raw, json)
Hash identifier:          rAC0abqlpPUijCXf0Gydt7Ko4W/AY7OgM4B0WNCVdkI=
Subject key identifier:   26:5B:B8:15:45:A9:41:79:39:C4:CA:31:57:3B:46:EC:1C:35:3D:58
Authority key identifier: 5A:F9:55:DC:B3:FA:6C:6B:A7:AE:C3:D8:BC:13:72:70:86:96:B8:ED
Certificate issuer:       /CN=5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED
Certificate serial:       780109F23B2E6140DC9B33E9F723D497C921D2C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft
Manifest number:          032B
Signing time:             Fri 05 Dec 2025 19:15:13 +0000
Manifest this update:     Fri 05 Dec 2025 19:10:13 +0000
Manifest next update:     Sat 06 Dec 2025 19:57:13 +0000
Files and hashes:         1: 3136342e3136332e35322e302f32322d3234203d3e20323635393533.roa (hash: N0btAFtvDXp7wrWYpNQVZV54i7RyzNCdiBD/oCt2wRo=)
                          2: 5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.crl (hash: jCvWu1RIjdNj/SgG94n7vXozbHgxUSdje6Wj0IZTcfc=)
                          3: 323830343a343035383a3a2f33322d3438203d3e20323635393533.roa (hash: P1kjWEGrObzZJrYICVUDSoEdRZLmjZ79Ee/h/Dakbdo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.crl
                          rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 19:57:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:01:09:f2:3b:2e:61:40:dc:9b:33:e9:f7:23:d4:97:c9:21:d2:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED
        Validity
            Not Before: Dec  5 19:10:13 2025 GMT
            Not After : Dec  6 19:57:13 2025 GMT
        Subject: CN=265BB81545A9417939C4CA31573B46EC1C353D58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3f:b8:1a:32:dd:04:ea:78:05:fd:ea:3f:4c:
                    91:fa:86:15:47:36:66:dc:43:aa:78:fd:88:16:e9:
                    51:62:7b:a1:4c:af:45:fd:10:bd:39:13:8b:be:4a:
                    b1:e7:b0:67:90:d9:9c:d2:53:b6:41:59:c2:f4:a2:
                    ab:c3:6c:78:7b:ba:62:4a:99:a9:71:9a:00:27:2b:
                    eb:e3:c6:d0:6f:0a:74:31:ef:21:88:26:d0:00:76:
                    1e:9b:17:d8:f5:2b:e0:ea:15:df:fd:0a:6b:02:45:
                    bd:7b:c4:02:53:17:78:88:76:dc:81:6b:77:38:97:
                    b0:cb:82:61:e5:8c:c9:2b:c2:6f:f5:65:8b:1a:69:
                    2d:13:fa:c6:35:25:bb:66:54:df:bf:3f:0b:1d:32:
                    22:b0:aa:13:b8:a9:3b:b8:22:3a:af:ec:28:85:c3:
                    1e:11:30:58:eb:7e:f6:1a:16:28:15:83:04:e8:82:
                    44:51:f3:4e:e0:e0:ad:7e:dc:d6:9b:c6:1a:45:53:
                    a1:65:de:4b:ac:39:4b:ba:72:c2:16:b6:64:3c:3a:
                    d9:a7:29:5b:5b:ea:05:fd:b0:3d:f0:16:24:05:b6:
                    41:35:3c:67:4f:a8:69:c5:3a:4b:0e:43:69:2a:f4:
                    4c:da:c3:c4:b1:2d:35:fb:c8:e4:d3:9d:1f:61:f9:
                    92:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:5B:B8:15:45:A9:41:79:39:C4:CA:31:57:3B:46:EC:1C:35:3D:58
            X509v3 Authority Key Identifier:
                keyid:5A:F9:55:DC:B3:FA:6C:6B:A7:AE:C3:D8:BC:13:72:70:86:96:B8:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:9a:c7:be:6f:49:7b:ff:d2:cc:1f:7b:9a:b4:e6:13:8f:aa:
         58:03:e8:52:cf:df:8f:27:7b:cf:4b:f6:aa:5a:48:45:0f:81:
         c3:50:4d:4b:be:25:b0:7d:3b:98:a3:10:f9:64:57:9b:eb:e6:
         9c:34:3b:24:f2:82:61:02:29:ad:6a:ef:c9:ad:7b:18:20:e8:
         dc:7f:36:44:3b:59:3c:74:a0:49:fc:72:22:66:74:d1:ab:e6:
         2a:3f:9e:d2:60:92:3e:de:59:c3:4b:e3:78:db:a4:cd:8c:84:
         ff:51:8c:f6:28:9d:d5:0e:ca:c6:a7:d0:20:3f:d1:fa:58:6f:
         97:ed:2c:1e:ea:cb:50:1f:13:e8:6d:f5:76:e5:08:0b:66:2d:
         d3:2b:5b:ad:34:52:c0:34:16:0f:6b:37:37:6c:06:98:fb:10:
         cc:bc:13:7e:c2:42:f5:e9:27:63:83:e0:5b:56:a2:34:cb:fb:
         93:85:1c:dd:fd:c1:ae:45:33:3d:2b:f5:ed:04:8b:76:ed:4e:
         cf:d9:74:6b:e0:ba:f5:03:1b:2c:28:a9:ad:95:93:f2:e7:0d:
         73:7a:33:a2:6e:04:27:58:73:3d:87:97:a9:03:a3:3b:98:75:
         42:26:52:5b:3c:d2:dc:4b:c6:0c:18:76:94:c2:3e:73:03:06:
         e0:1a:32:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:12:01 2025 by rpki-client