This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.mft
File:                     D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.mft (raw, json)
Hash identifier:          rmmoVj19x9tIqO+tqogmlNDaEuAo6tjK8PQkDEBGRho=
Subject key identifier:   9A:C0:21:10:44:92:76:0C:2B:1F:DD:40:E3:E1:92:D1:A5:93:DE:24
Authority key identifier: D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28
Certificate issuer:       /CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
Certificate serial:       497FCEF121D7723BD5925E06944CFC822304D235
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.mft
Manifest number:          03A5
Signing time:             Fri 05 Dec 2025 23:00:01 +0000
Manifest this update:     Fri 05 Dec 2025 22:55:01 +0000
Manifest next update:     Sat 06 Dec 2025 23:00:01 +0000
Files and hashes:         1: 3138372e36382e302e302f31342d3234203d3e203232303835.roa (hash: BfkDCImjdqncl2QFrQn7IaOtExxeI04Bo367iNixbBQ=)
                          2: 3139312e3234342e302e302f31342d3234203d3e203232303835.roa (hash: dXFynrjQZ06LARzcP2wrsX9z/tRvmiTNpSDbW6xkt30=)
                          3: 3230312e37312e36342e302f31382d3234203d3e203237363532.roa (hash: fIMaTpHtjBrMw8lX1wq/2pIZa0ayp/9snHSCxzgWi3g=)
                          4: 3230312e32332e3136302e302f31392d3234203d3e203232303835.roa (hash: zNN0KX8bCPz322w8MwbhK4KjLWvviytbVhsIxAZu/Dg=)
                          5: 3137372e35362e302e302f31342d3234203d3e203232303835.roa (hash: eNp145pUnrV85kKFEy3mxiY8v78aRrsEXeSfMaYUh9c=)
                          6: 3137392e3234302e302e302f31342d3234203d3e203232303835.roa (hash: 7mg5fd3hDdiRkw6fmlO4Qc+OjX3Ry9vQdIxxWKzbOC0=)
                          7: 3230302e3134362e3132382e302f31382d3234203d3e203237363532.roa (hash: LVCA/er9ePdbeMtOlvOiqjHhC8ZC16guOnxDWjn97mU=)
                          8: 3138392e39322e302e302f31342d3234203d3e203232303835.roa (hash: rUyYTzgIZrSGv4tk8Dq6kJebf+TAaCG2GwXUEQexuH8=)
                          9: 323830343a3338383a3a2f33302d3438203d3e203232303835.roa (hash: 21PacDvvQIpv9xYW6EO4wI77IVvBOlq6BePnRCA1UGg=)
                          10: 3139302e3130392e38342e302f32322d3234203d3e203232303835.roa (hash: bxSGraewbYfJks+i/XGcTo7Iwv6KEOaNVpwumbKpkBc=)
                          11: 3230302e3136392e3131322e302f32302d3234203d3e203232303835.roa (hash: K+hqMqedi4qTDsAAvik8Mg1dGNQ9gPIJZqW3LifrHkE=)
                          12: D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl (hash: tlnSxc/yor7SipX2EPAoIRgdbfQVvq9sHym5sZVO82Y=)
                          13: 3138372e32342e302e302f31342d3234203d3e203232303835.roa (hash: AZnN08+KqW/+0nVOlFEwAwQTk0RdwiZalVHDNBMP0A8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl
                          rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 23:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:7f:ce:f1:21:d7:72:3b:d5:92:5e:06:94:4c:fc:82:23:04:d2:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
        Validity
            Not Before: Dec  5 22:55:01 2025 GMT
            Not After : Dec  6 23:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9e:0f:49:16:4b:e0:ac:88:a3:db:3c:35:3c:
                    c6:cd:a7:8e:5b:80:18:5a:09:c9:69:0a:16:3d:9d:
                    83:00:7c:52:4a:f1:15:90:bf:99:96:b2:36:a7:66:
                    86:41:ad:51:8d:d9:32:c2:4c:65:2e:c2:a7:16:57:
                    f7:cb:57:5a:17:aa:06:d9:55:79:d9:c7:a6:f8:06:
                    85:0f:15:25:b5:39:43:14:92:fa:3a:9a:66:7c:83:
                    d2:e4:28:70:32:57:df:79:69:a5:eb:31:69:e5:54:
                    a9:cd:40:73:e9:58:84:8b:77:84:05:bd:6a:b8:d2:
                    92:07:7a:c7:84:72:1c:d6:6f:af:dd:5e:8e:38:fc:
                    ac:78:8d:c8:85:07:93:6f:94:9f:41:37:99:be:a3:
                    65:8b:0f:f3:24:cc:08:3b:ae:a1:a0:1f:4f:8e:9d:
                    bf:71:46:c2:26:f5:8f:60:af:ef:61:24:d2:37:55:
                    c3:b1:5f:f5:0d:29:91:8a:25:f6:e0:65:2b:2f:4d:
                    69:e8:58:4c:d9:e8:63:7c:cb:b2:52:84:ff:e4:98:
                    c8:5c:4e:21:be:79:a4:c3:87:9d:14:59:ec:78:37:
                    94:1c:5d:e6:ab:6c:ad:83:cd:3e:0b:d4:85:7c:ae:
                    4e:96:da:f7:a4:40:f9:e2:08:02:8d:37:7e:1b:27:
                    35:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C0:21:10:44:92:76:0C:2B:1F:DD:40:E3:E1:92:D1:A5:93:DE:24
            X509v3 Authority Key Identifier:
                keyid:D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:1d:7d:fb:8f:0d:3a:65:8c:ab:84:5b:2b:f8:3d:7f:58:3e:
         ea:0c:53:66:3c:32:3f:ac:29:bc:25:87:15:54:3b:ef:b2:dd:
         92:98:3a:98:cc:d9:02:47:d9:f4:c4:33:a8:a6:6d:22:25:79:
         8f:12:52:3d:36:42:ac:28:3e:9e:ce:64:77:df:8c:28:7d:5b:
         89:c7:b3:77:21:bd:46:59:ac:c5:5f:08:bb:05:76:e4:4f:a7:
         4e:33:d9:36:ee:c9:51:be:5e:35:48:3e:8b:c3:73:43:71:4c:
         e0:ef:6f:b2:6f:e4:a6:2b:2a:3f:19:57:2b:fa:03:5f:76:7b:
         c3:c0:92:af:7b:34:8a:81:1f:3f:42:7e:84:77:d5:32:b5:4d:
         52:ff:f0:93:55:44:1b:ed:6a:c0:c9:03:54:a2:1f:12:f6:66:
         3e:69:67:f1:3c:45:17:52:d1:43:3d:43:3a:2f:77:5f:ef:f1:
         c0:74:49:0c:0a:25:da:37:2b:b1:cb:3b:27:1f:ad:71:43:03:
         7c:e5:08:fe:37:7e:1e:3c:6e:c7:65:e1:5d:37:23:6c:31:6c:
         84:22:fb:5c:29:18:62:26:4a:42:28:e1:c0:b1:e1:02:49:24:
         26:f1:12:73:b5:c7:8b:f0:c6:b7:0d:66:af:7e:7b:32:cf:d3:
         a1:f5:e3:90
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUSX/O8SHXcjvVkl4GlEz8giME0jUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDVFQkVFRkQ0NUEwRDkwQjVFNjBDRDhENEI0Mzg0MDk4
MzUzRTgyODAeFw0yNTEyMDUyMjU1MDFaFw0yNTEyMDYyMzAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTQ5RTBGNDkxNjRCRTBBQzg4
QTNEQjNDMzUzQ0M2Q0RBNzhFNUI4MDE4NUEwOUM5NjkwQTE2M0Q5RDgzMDA3QzUy
NEFGMTE1OTBCRjk5OTZCMjM2QTc2Njg2NDFBRDUxOEREOTMyQzI0QzY1MkVDMkE3
MTY1N0Y3Q0I1NzVBMTdBQTA2RDk1NTc5RDlDN0E2RjgwNjg1MEYxNTI1QjUzOTQz
MTQ5MkZBM0E5QTY2N0M4M0QyRTQyODcwMzI1N0RGNzk2OUE1RUIzMTY5RTU1NEE5
Q0Q0MDczRTk1ODg0OEI3Nzg0MDVCRDZBQjhEMjkyMDc3QUM3ODQ3MjFDRDY2RkFG
REQ1RThFMzhGQ0FDNzg4REM4ODUwNzkzNkY5NDlGNDEzNzk5QkVBMzY1OEIwRkYz
MjRDQzA4M0JBRUExQTAxRjRGOEU5REJGNzE0NkMyMjZGNThGNjBBRkVGNjEyNEQy
Mzc1NUMzQjE1RkY1MEQyOTkxOEEyNUY2RTA2NTJCMkY0RDY5RTg1ODRDRDlFODYz
N0NDQkIyNTI4NEZGRTQ5OEM4NUM0RTIxQkU3OUE0QzM4NzlEMTQ1OUVDNzgzNzk0
MUM1REU2QUI2Q0FEODNDRDNFMEJENDg1N0NBRTRFOTZEQUY3QTQ0MEY5RTIwODAy
OEQzNzdFMUIyNzM1NUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA5J4PSRZL4KyIo9s8NTzGzaeOW4AYWgnJaQoWPZ2DAHxSSvEVkL+Z
lrI2p2aGQa1RjdkywkxlLsKnFlf3y1daF6oG2VV52cem+AaFDxUltTlDFJL6Oppm
fIPS5ChwMlffeWml6zFp5VSpzUBz6ViEi3eEBb1quNKSB3rHhHIc1m+v3V6OOPys
eI3IhQeTb5SfQTeZvqNliw/zJMwIO66hoB9Pjp2/cUbCJvWPYK/vYSTSN1XDsV/1
DSmRiiX24GUrL01p6FhM2ehjfMuyUoT/5JjIXE4hvnmkw4edFFnseDeUHF3mq2yt
g80+C9SFfK5Oltr3pED54ggCjTd+Gyc1XwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FJrAIRBEknYMKx/dQOPhktGlk94kMB8GA1UdIwQYMBaAFNXr7v1FoNkLXmDNjUtD
hAmDU+goMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hGWXFjckxWdjFKSld6
dlVGZ1I4cVp6cGlkTFFUdGtCa1haczZnZVFkdWllLzEvRDVFQkVFRkQ0NUEwRDkw
QjVFNjBDRDhENEI0Mzg0MDk4MzUzRTgyOC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9ENUVCRUVGRDQ1QTBEOTBCNUU2MENEOEQ0QjQzODQwOTgzNTNF
ODI4LmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hGWXFjckxWdjFKSld6dlVGZ1I4
cVp6cGlkTFFUdGtCa1haczZnZVFkdWllLzEvRDVFQkVFRkQ0NUEwRDkwQjVFNjBD
RDhENEI0Mzg0MDk4MzUzRTgyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACodffuPDTpljKuEWyv4PX9Y
PuoMU2Y8Mj+sKbwlhxVUO++y3ZKYOpjM2QJH2fTEM6imbSIleY8SUj02QqwoPp7O
ZHffjCh9W4nHs3chvUZZrMVfCLsFduRPp04z2TbuyVG+XjVIPovDc0NxTODvb7Jv
5KYrKj8ZVyv6A192e8PAkq97NIqBHz9CfoR31TK1TVL/8JNVRBvtasDJA1SiHxL2
Zj5pZ/E8RRdS0UM9Qzovd1/v8cB0SQwKJdo3K7HLOycfrXFDA3zlCP43fh48bsdl
4V03I2wxbIQi+1wpGGImSkIo4cCx4QJJJCbxEnO1x4vwxrcNZq9+ezLP06H145A=
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:08:51 2025 by rpki-client