This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.mft
File:                     395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.mft (raw, json)
Hash identifier:          zwU9VQ3mxlRTyGme+DL455D6Q1/FDjVRRxaNReu+pwg=
Subject key identifier:   8A:63:E1:3F:69:99:79:69:1C:A6:C7:D5:40:91:3D:CA:A2:3D:40:84
Authority key identifier: 39:5A:3C:0B:8F:8A:2C:EF:DC:38:3D:57:6F:90:72:BC:CC:70:CB:9F
Certificate issuer:       /CN=395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F
Certificate serial:       79D8EA328BB7BAE5D3C64283B074BEFC978BB227
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.mft
Manifest number:          5D
Signing time:             Fri 05 Dec 2025 21:21:17 +0000
Manifest this update:     Fri 05 Dec 2025 21:16:17 +0000
Manifest next update:     Sat 06 Dec 2025 23:15:17 +0000
Files and hashes:         1: 323830343a393465383a323030313a3a2f34382d3438203d3e20323734343836.roa (hash: HSUvzHiVpQpq4kNCy7yi2zvXEOwCT6X+P/m4EwuVhJk=)
                          2: 323830343a393465383a313030303a3a2f34382d3438203d3e20323734343836.roa (hash: kDMldU2cBIr1Vp1KF8PYKiw2kAkgoOXQkxXZnXmLDxc=)
                          3: 3138362e3139352e3137312e302f32342d3234203d3e20323734343836.roa (hash: husUT7FBNkRRHKPsrl7uTrNVMC2ojPN9my1XjvtrMlQ=)
                          4: 323830343a393465383a323030303a3a2f34382d3438203d3e20323734343836.roa (hash: /fgOe1Chb97e88tjMRjyKUfcRm17IJSqxMzPf8Btqqc=)
                          5: 323830343a393465383a333030303a3a2f34382d3438203d3e20323734343836.roa (hash: U35HynX+Hd2ZOm85T2tKJnlJAzZrKjlfbQLABLn2/C0=)
                          6: 3138362e3139352e3137302e302f32342d3234203d3e20323734343836.roa (hash: b4qECnw8+rt7FicQTbKqH3Ft91Eeo7EA36Y2wdqhn6w=)
                          7: 323830343a393465383a313030313a3a2f34382d3438203d3e20323734343836.roa (hash: 05ujGz8LMZaKSe4JP6feKrZA8lMnkTiCG9sdYs5wdKs=)
                          8: 395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.crl (hash: 4b3QULwfztQkKnMtiF4ynM3jSuUQYJgS5ZrxlE/gQ7A=)
                          9: 323830343a393465383a333030313a3a2f34382d3438203d3e20323734343836.roa (hash: Ww2I+OLikcbCS5DKkV4LVqPogqvnCstjGKT2xvimr1M=)
                          10: 3138362e3139352e3137302e302f32332d3233203d3e20323734343836.roa (hash: X+mCLrq1lF4TuBCG729FsKiX1sKXwVJf5LMMbYOAHpA=)
                          11: 323830343a393465383a3a2f33322d3332203d3e20323734343836.roa (hash: aTaA7WmiUy+R0jgQpKmjz0NyFV8N03D7nxYMsvKxE50=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.crl
                          rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 23:15:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:d8:ea:32:8b:b7:ba:e5:d3:c6:42:83:b0:74:be:fc:97:8b:b2:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F
        Validity
            Not Before: Dec  5 21:16:17 2025 GMT
            Not After : Dec  6 23:15:17 2025 GMT
        Subject: CN=8A63E13F699979691CA6C7D540913DCAA23D4084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:50:e0:81:38:2c:b3:cf:35:91:9c:d3:83:de:
                    41:fa:6c:97:3b:ce:7d:2f:6b:36:82:0b:6b:1e:29:
                    62:a6:29:54:a1:bb:09:34:ac:80:06:54:53:d7:3e:
                    b7:91:d1:1f:52:48:72:88:f5:b9:0e:b8:7c:d7:1c:
                    df:17:18:6d:5e:8a:f4:47:76:74:f3:24:d0:56:89:
                    d8:cf:0b:91:cd:22:89:c2:85:3e:ce:1b:5f:8a:e9:
                    88:5c:cf:48:7b:37:46:c8:a1:89:4c:f0:d9:58:76:
                    f4:d4:d6:13:c9:ec:2c:3e:3a:70:a4:73:6d:6b:f3:
                    2e:f7:7a:a1:b8:6b:c5:71:cc:fe:e6:28:0e:aa:4c:
                    4a:fa:30:ba:fd:b8:c9:ec:0e:aa:7a:b3:d4:69:36:
                    7c:13:f0:f3:ed:63:83:a9:c0:8d:e8:ec:74:26:b1:
                    0f:b8:6c:cb:6e:8b:91:09:35:b1:c1:52:13:cb:3a:
                    37:a3:5c:37:eb:8d:ab:30:8b:a1:1d:8e:8a:90:2e:
                    ed:fc:93:4d:0c:5a:06:8d:dc:68:0a:37:46:98:98:
                    59:b3:21:f1:05:e5:d5:11:ff:47:79:13:bc:e8:6c:
                    92:08:84:34:3d:2e:83:b1:3a:71:c7:6a:6d:51:70:
                    2e:c0:6b:ca:d6:56:55:74:b3:44:20:08:d7:89:77:
                    79:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:63:E1:3F:69:99:79:69:1C:A6:C7:D5:40:91:3D:CA:A2:3D:40:84
            X509v3 Authority Key Identifier:
                keyid:39:5A:3C:0B:8F:8A:2C:EF:DC:38:3D:57:6F:90:72:BC:CC:70:CB:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:57:3d:61:17:6c:62:8a:be:c0:46:a3:60:bc:4e:44:59:2f:
         08:91:60:23:97:2f:98:d7:e2:20:2d:c7:c5:7b:47:59:42:9a:
         f6:f6:3a:9f:13:77:78:6a:cc:c6:66:82:26:34:04:e3:34:7b:
         41:0a:62:70:93:78:a0:6e:79:72:a7:8b:ee:71:c6:a1:d3:f2:
         a9:fd:ac:34:22:ff:43:42:1e:e3:47:fc:7a:54:5d:df:6e:40:
         c7:94:eb:41:f8:a4:f0:f7:a9:5e:9d:e6:ab:dc:15:43:df:a9:
         95:b8:57:d6:df:b9:ee:8b:02:9c:00:73:d3:2c:33:64:70:07:
         b7:28:6b:19:2f:d6:aa:70:8f:08:5a:85:76:0f:44:6d:fc:bd:
         d3:39:69:27:d2:49:2b:06:51:08:37:ea:c9:cb:11:68:a2:00:
         80:b1:d5:f5:4c:58:43:e4:bc:e7:20:d3:06:4b:d6:37:b5:39:
         24:8a:6f:60:1d:5c:25:d3:6f:65:ff:06:92:e5:6b:15:9f:07:
         35:63:c1:4d:ac:3f:26:63:8a:d1:17:3c:9c:4a:84:e7:7a:e9:
         6b:d9:37:3b:78:ac:8d:b0:d0:a4:c3:96:d3:de:36:05:37:9e:
         ac:ab:08:25:95:dd:0a:a8:cd:66:2c:85:58:df:57:0c:11:35:
         6b:70:00:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:55:14 2025 by rpki-client