This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.mft
File:                     0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.mft (raw, json)
Hash identifier:          FehkU+Uk+SzvAQy2MsvCQh8FCLH83YDKdoKVSxnG3P4=
Subject key identifier:   62:31:B8:89:DF:27:BB:79:72:96:AD:45:CB:4B:32:0D:06:3A:70:4A
Authority key identifier: 0B:F2:84:1F:A2:33:6A:7C:8B:D1:92:BC:93:5F:8F:3A:53:F7:F0:F9
Certificate issuer:       /CN=0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9
Certificate serial:       3A6A0EA1834541A5B047B4F6E168AE186ED0D0D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.mft
Manifest number:          5E
Signing time:             Sat 06 Dec 2025 05:53:50 +0000
Manifest this update:     Sat 06 Dec 2025 05:48:50 +0000
Manifest next update:     Sun 07 Dec 2025 09:14:50 +0000
Files and hashes:         1: 0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.crl (hash: qRlxKpW4qJgnzMLxwcmZU12EgaP43X8ZPcv9pjkN/TA=)
                          2: 323830343a383266633a3a2f33322d313238203d3e20323732313639.roa (hash: I6emds5ngPltq+zX/8WmZ4R9w3ZwGbEw6yUNHUh4RpU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.crl
                          rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 09:14:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:6a:0e:a1:83:45:41:a5:b0:47:b4:f6:e1:68:ae:18:6e:d0:d0:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9
        Validity
            Not Before: Dec  6 05:48:50 2025 GMT
            Not After : Dec  7 09:14:50 2025 GMT
        Subject: CN=6231B889DF27BB797296AD45CB4B320D063A704A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:83:ef:b4:10:eb:18:0d:86:47:63:d9:05:18:
                    48:9f:89:80:1f:86:4b:9b:38:ef:d5:c6:2e:bf:98:
                    b6:39:ff:1d:40:88:4a:0b:70:16:cc:05:f7:11:01:
                    5c:34:5f:99:95:61:e0:ac:37:ed:3b:3b:98:2a:3e:
                    8c:38:0a:da:5b:c4:ba:88:0d:b9:09:63:5c:71:c1:
                    8d:42:2e:d2:2e:fa:79:43:ed:92:ca:89:59:87:bd:
                    3b:8d:71:45:1c:2d:8a:5d:d5:4e:c2:23:c0:77:d3:
                    c0:fd:f3:06:c2:e3:b1:10:ce:46:21:be:a1:dc:1c:
                    03:27:dc:58:a2:e4:16:04:56:44:31:fa:56:15:e5:
                    7b:fb:63:82:3b:23:73:ff:de:df:e0:9c:e5:cf:ca:
                    11:1d:31:cc:d1:a8:ed:4f:d9:26:fb:f7:f9:16:67:
                    0e:24:5d:e4:67:f1:bb:e3:c6:97:24:f0:af:3f:59:
                    70:23:38:96:c6:f4:73:2b:7c:68:34:da:35:e7:75:
                    56:ef:44:93:33:6e:83:b6:07:b1:67:ac:2f:ff:f8:
                    a2:07:71:c2:87:17:3f:84:84:47:3c:a8:e0:b3:31:
                    43:b0:c4:e2:10:c7:9d:36:4a:6b:bd:f5:fd:e9:93:
                    93:f6:9b:d8:0d:2e:39:c5:7f:a8:1e:bb:a4:d1:5a:
                    ca:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:31:B8:89:DF:27:BB:79:72:96:AD:45:CB:4B:32:0D:06:3A:70:4A
            X509v3 Authority Key Identifier:
                keyid:0B:F2:84:1F:A2:33:6A:7C:8B:D1:92:BC:93:5F:8F:3A:53:F7:F0:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:94:a9:3b:78:17:43:59:87:78:c1:6f:2c:73:85:55:39:8d:
         ac:4b:f8:7d:7e:c9:4c:4c:1e:f9:c6:30:c3:51:8c:b3:9c:2c:
         06:78:6b:70:30:44:10:ff:42:c4:88:bb:ce:f6:ff:ab:e2:50:
         64:fa:0c:be:1a:11:9d:81:dd:67:3b:6c:0b:b7:79:ee:41:86:
         90:ce:38:0d:02:92:14:af:6e:d5:ca:95:af:9d:f8:23:43:08:
         7f:8c:3c:3b:b6:6e:6d:4f:8c:1e:f4:20:a9:4c:88:9b:e4:ca:
         5f:0b:56:0c:fe:72:6a:e5:ff:0c:d5:99:25:61:96:16:86:e8:
         fa:72:21:1c:13:19:3c:fd:c1:07:4b:38:a5:61:bc:e4:5c:8a:
         9f:37:db:13:82:20:ae:35:df:68:19:9b:68:e4:5c:c2:03:19:
         84:9b:1a:05:91:74:bd:8d:72:e7:58:c7:88:9c:4c:35:d2:1f:
         56:9e:df:fd:0d:a8:8e:1b:91:5d:9e:bf:81:0c:2d:aa:eb:17:
         9a:b1:48:fc:f7:2e:39:f3:d7:27:86:34:b5:8e:99:67:fa:e0:
         62:f8:63:16:fc:12:a1:e1:be:e3:52:a1:4e:f0:18:49:0b:66:
         77:6f:31:b0:45:12:ab:3d:dd:2a:97:91:43:08:09:d6:ed:c5:
         d1:35:aa:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:09:08 2025 by rpki-client