This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.mft
File:                     57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.mft (raw, json)
Hash identifier:          cyCJE6kNmOkbp4uqPW+EiudL2yaXcTw0VP6jLFWCJPM=
Subject key identifier:   86:BF:90:A1:41:A5:DF:46:85:59:E7:EC:5B:9B:26:20:98:E6:39:A1
Authority key identifier: 57:29:3D:96:DA:FC:56:E0:45:0C:22:FB:EE:7A:67:3D:F7:BB:26:B8
Certificate issuer:       /CN=57293D96DAFC56E0450C22FBEE7A673DF7BB26B8
Certificate serial:       2673339A0CC5F6F24E2CF1C1E13803676E843E50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.mft
Manifest number:          0336
Signing time:             Sat 06 Dec 2025 05:11:14 +0000
Manifest this update:     Sat 06 Dec 2025 05:06:14 +0000
Manifest next update:     Sun 07 Dec 2025 08:10:14 +0000
Files and hashes:         1: 3137372e3132342e3133342e302f32332d3234203d3e203238313333.roa (hash: VXZXx5MDjCUocYXdBumu7SvgLNibfOJ15PJjIGeIOF0=)
                          2: 3137392e3138392e3230382e302f32322d3234203d3e203238313333.roa (hash: v7A59cNihVuoQ8xCnbIa1ITZ+P+AUUV0pKC0LhjQEnQ=)
                          3: 3138372e34352e33322e302f32302d3234203d3e203238313333.roa (hash: H6FQM6oLIlnRm9VE1YWYabzhQWldfb9niywpmJyB5y4=)
                          4: 323830343a3334383a3a2f33322d3438203d3e203238313333.roa (hash: GLgJrOP1uIGgDwT+S1DeZCFHwRhmGbqjknuYkNxeykk=)
                          5: 57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.crl (hash: 25rlAmDE3fRbnX+/MtVTUeevyCRt3VgyUm+Ct7OV8o0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.crl
                          rsync://rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:73:33:9a:0c:c5:f6:f2:4e:2c:f1:c1:e1:38:03:67:6e:84:3e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57293D96DAFC56E0450C22FBEE7A673DF7BB26B8
        Validity
            Not Before: Dec  6 05:06:14 2025 GMT
            Not After : Dec  7 08:10:14 2025 GMT
        Subject: CN=86BF90A141A5DF468559E7EC5B9B262098E639A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:72:32:c9:d2:db:95:7c:ab:48:a3:4c:2d:bb:
                    6b:01:15:d6:05:79:87:b4:9e:6d:0d:d7:af:59:4c:
                    3c:db:56:7c:4e:d6:32:41:5b:f7:c0:9c:af:64:b3:
                    0f:64:5d:c1:2b:a5:6a:c1:ed:c0:b7:5f:91:03:9e:
                    91:79:19:c8:16:01:77:24:ee:7f:71:57:31:b7:53:
                    38:ca:45:6d:ad:de:ba:87:61:33:5d:7d:17:29:78:
                    3d:4e:04:f5:1b:89:79:e0:47:48:06:1f:d2:a0:fa:
                    4f:e8:0a:02:66:db:3a:a0:80:7b:37:36:02:dc:a9:
                    41:09:1c:e7:62:23:74:83:41:ff:4f:0b:5f:28:f2:
                    cd:a3:d3:3b:d4:9f:f4:93:de:4e:fc:d6:2f:72:93:
                    75:b8:2c:17:28:08:4d:d0:70:42:c0:e1:cd:24:4f:
                    d2:22:a8:63:1d:30:96:6e:fc:1f:5b:6c:dc:c8:5a:
                    b4:7d:96:86:2e:21:6b:2c:4d:9f:6a:35:eb:9d:a3:
                    ff:a1:b6:87:f4:38:3c:cd:55:90:70:52:29:6d:44:
                    9a:3d:51:8a:d5:41:ed:e7:52:e3:4b:a7:5e:c5:a6:
                    91:f9:89:50:e0:39:1f:b3:c8:95:cc:2b:d6:8f:40:
                    78:49:30:45:ff:b8:4c:8e:83:53:dc:40:7f:84:7f:
                    ff:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:BF:90:A1:41:A5:DF:46:85:59:E7:EC:5B:9B:26:20:98:E6:39:A1
            X509v3 Authority Key Identifier:
                keyid:57:29:3D:96:DA:FC:56:E0:45:0C:22:FB:EE:7A:67:3D:F7:BB:26:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:19:ad:76:38:13:ef:c8:0b:e8:12:6c:75:0a:70:df:d6:d9:
         6c:de:1f:83:80:31:8c:e4:f8:35:bc:63:1c:eb:b6:ba:1a:95:
         c2:0a:bd:64:b0:60:b6:58:c3:a0:4c:4f:11:bd:c9:99:b8:ec:
         ca:49:29:51:39:2c:3a:70:2c:79:ca:78:4e:6d:91:0f:de:bc:
         4a:d7:d0:2c:ca:35:39:a4:e5:e7:3a:78:a1:83:1e:65:76:5a:
         20:aa:ad:69:b1:d4:f2:e7:17:66:b3:3f:06:ed:5f:b6:0b:a2:
         51:a2:62:21:aa:cd:33:c8:dd:f6:4d:8b:70:7e:6c:e0:f2:81:
         69:06:e8:30:b3:c4:23:f9:a3:7f:d8:bc:da:f0:b5:72:92:d9:
         de:26:16:73:3b:d1:07:e9:13:4c:3c:90:3a:59:b7:0f:bd:18:
         57:72:5f:51:4e:82:ee:1c:a1:97:5b:bd:85:dc:8a:e3:9c:43:
         be:eb:48:e4:54:58:0f:53:e6:f9:9f:13:0e:27:3b:58:df:c7:
         18:cf:7c:aa:f9:08:93:27:a4:e6:ed:4c:be:c4:44:aa:5b:94:
         66:e6:e7:9a:04:22:3a:8c:bc:fb:7a:0b:eb:a9:a9:54:9e:81:
         2d:b8:b2:34:cd:ff:1a:68:0f:f0:7f:28:f9:3f:c5:82:6a:9d:
         ac:1c:22:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:58:23 2025 by rpki-client