This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HkCaY28h886xQtW1F4cXP2hot5dhattHfveCuSRvSbBq/0/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.mft
File:                     B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.mft (raw, json)
Hash identifier:          9qKRpZaa3ZxE6caTHozzdY/banvn37ZkSIzBxLyKGuk=
Subject key identifier:   FA:F6:32:E7:CA:B3:9D:5F:08:23:B3:2B:06:FB:D9:5D:81:75:BE:0F
Authority key identifier: B6:29:AD:9F:55:FA:B6:BB:BF:BD:FF:EB:C0:5F:F5:6F:BC:A9:CC:94
Certificate issuer:       /CN=B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94
Certificate serial:       764084872E19661CD742BFC89B6401F40FD87840
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkCaY28h886xQtW1F4cXP2hot5dhattHfveCuSRvSbBq/0/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.mft
Manifest number:          5E
Signing time:             Fri 05 Dec 2025 17:03:51 +0000
Manifest this update:     Fri 05 Dec 2025 16:58:51 +0000
Manifest next update:     Sat 06 Dec 2025 17:32:51 +0000
Files and hashes:         1: 34352e3138312e3138342e302f32322d3234203d3e20323639323030.roa (hash: MjgAbGBA3MLIQEbDOEqfgH94qhnYSyUXbioQpjVsW7I=)
                          2: 323830343a363065633a3a2f33322d3332203d3e20323639323030.roa (hash: n9rse3OoCQBo0ruAYtRVJWD4u89jY4UKuEhCcVoKoUM=)
                          3: B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.crl (hash: TgwUhu9Y9MSYN2DVDo/eCxjN7CifuYFZh2zhu2xcpe4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HkCaY28h886xQtW1F4cXP2hot5dhattHfveCuSRvSbBq/0/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.crl
                          rsync://rpki-repo.registro.br/repo/HkCaY28h886xQtW1F4cXP2hot5dhattHfveCuSRvSbBq/0/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 17:32:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:40:84:87:2e:19:66:1c:d7:42:bf:c8:9b:64:01:f4:0f:d8:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94
        Validity
            Not Before: Dec  5 16:58:51 2025 GMT
            Not After : Dec  6 17:32:51 2025 GMT
        Subject: CN=FAF632E7CAB39D5F0823B32B06FBD95D8175BE0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:08:50:e1:2d:f6:9c:0f:af:55:7d:03:6e:1e:
                    41:b5:cf:3d:23:84:71:36:6b:4c:f8:a0:fa:5e:41:
                    db:a2:fa:8a:91:d1:15:6b:79:61:5d:e0:9d:52:1f:
                    ed:bb:8b:e3:af:b0:82:53:8f:4f:63:7e:99:78:2f:
                    67:d4:cb:dc:c7:f5:ea:40:be:8e:76:f3:dd:d2:10:
                    3f:da:5e:dc:2e:68:29:58:f1:26:a9:a7:31:db:40:
                    01:c5:b0:b8:42:5c:79:5d:d5:17:af:37:74:3c:3d:
                    74:0b:97:4f:5e:06:fb:d2:62:a9:a5:1d:46:1c:f5:
                    db:ac:9f:53:ea:5b:4c:68:ac:1c:a1:41:1b:13:37:
                    62:0b:39:0c:48:a8:53:fd:13:d2:d7:2d:17:dd:d9:
                    81:14:80:45:ab:c7:0b:7e:5e:72:46:b8:13:ad:13:
                    37:53:9b:14:b5:49:a5:a2:7b:d5:46:6d:ae:26:77:
                    bb:41:33:56:d5:5e:4e:d9:97:6c:2f:70:50:43:5f:
                    49:67:da:5a:0b:4d:6a:81:94:ae:3f:4f:a3:fa:f6:
                    a3:86:c7:d5:d7:ee:69:81:83:81:12:6b:7c:13:a4:
                    9f:06:06:45:3b:40:4e:05:58:b8:b5:23:a2:20:a1:
                    fa:fb:a8:c6:5b:48:ff:07:7a:c3:66:72:38:ae:13:
                    54:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F6:32:E7:CA:B3:9D:5F:08:23:B3:2B:06:FB:D9:5D:81:75:BE:0F
            X509v3 Authority Key Identifier:
                keyid:B6:29:AD:9F:55:FA:B6:BB:BF:BD:FF:EB:C0:5F:F5:6F:BC:A9:CC:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkCaY28h886xQtW1F4cXP2hot5dhattHfveCuSRvSbBq/0/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkCaY28h886xQtW1F4cXP2hot5dhattHfveCuSRvSbBq/0/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:6c:03:3e:69:81:84:ef:ce:90:1d:c8:60:cb:9b:cf:5a:48:
         07:38:3a:c6:e4:4f:2b:8e:c9:e6:42:cf:f1:75:81:92:e6:2d:
         ba:ac:d0:f5:bc:75:81:a7:37:12:e6:fb:dc:7b:4a:38:ad:98:
         f5:4c:d5:c4:cc:b1:46:82:b2:59:22:23:4f:73:06:4a:db:f2:
         bb:12:64:4f:fd:2b:62:88:a1:8d:15:3a:1c:62:ff:0d:af:5b:
         6a:97:c1:36:84:ea:94:3b:ae:87:f9:d2:75:c8:57:15:9e:d4:
         89:bb:9b:a7:c4:c9:64:ec:69:07:c1:d2:aa:e0:3e:fa:9e:8e:
         75:93:ec:3b:18:56:cc:68:63:9f:e4:3d:2c:3f:be:c3:a5:36:
         1d:fe:79:c8:67:f0:a3:46:0f:65:cc:bd:ce:03:56:92:a1:6b:
         ba:ff:95:24:6b:4f:72:89:63:e6:58:d0:2f:a5:fd:63:16:d3:
         94:44:1d:a9:1a:0f:4c:56:f7:b8:c8:19:44:e0:2c:b7:96:a2:
         53:ca:a9:74:9e:88:49:c0:1e:2c:f9:84:f8:64:a7:72:45:ac:
         21:59:f0:40:43:13:98:62:e8:e9:a7:88:5d:2a:bf:aa:0f:cb:
         8b:99:aa:cf:cc:fd:13:85:65:96:fb:9b:b3:0c:cc:f3:6f:46:
         21:1e:e5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:55:52 2025 by rpki-client