This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.mft
File:                     5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.mft (raw, json)
Hash identifier:          cSHcRCVacZxDI5CEkTl6yd7npgpSRc2NTQda01RJATo=
Subject key identifier:   84:83:12:0B:DD:8D:D2:5A:9E:53:77:79:65:38:74:74:D8:35:14:0D
Authority key identifier: 5A:1E:4C:0F:6F:96:E5:93:3B:E0:09:91:E3:86:C3:F9:65:E7:C3:E9
Certificate issuer:       /CN=5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9
Certificate serial:       4EDE6E06457E65D0B90A93A9D6278084B7EF0921
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.mft
Manifest number:          54
Signing time:             Sat 06 Dec 2025 21:36:38 +0000
Manifest this update:     Sat 06 Dec 2025 21:31:38 +0000
Manifest next update:     Mon 08 Dec 2025 01:08:38 +0000
Files and hashes:         1: 34352e37302e3235322e302f32322d3332203d3e20323637363131.roa (hash: yRi1SXpN/dv/T/K6SaSvoW/LDkoILoiPkENVWXL0Ftc=)
                          2: 5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.crl (hash: /3fGKbmClT9o2OsyI1v22+Gcu5S13jcUNWA7kt2R7XI=)
                          3: 323830343a343433633a3a2f33322d313238203d3e20323637363131.roa (hash: bL/3cJavWtCjzV3M2Smxs5oF64TchmbOwc08G5LhIYM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.crl
                          rsync://rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Dec 2025 01:08:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:de:6e:06:45:7e:65:d0:b9:0a:93:a9:d6:27:80:84:b7:ef:09:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9
        Validity
            Not Before: Dec  6 21:31:38 2025 GMT
            Not After : Dec  8 01:08:38 2025 GMT
        Subject: CN=8483120BDD8DD25A9E53777965387474D835140D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:dd:53:6d:e9:4f:00:5d:f3:24:66:a7:60:7e:
                    93:cc:2f:30:f8:77:2e:7c:99:83:2b:64:5a:a0:8e:
                    49:fd:dc:f9:6e:3c:58:7b:f7:50:c6:8c:97:dd:aa:
                    51:ac:08:db:ca:f4:4e:bd:b4:13:81:6f:90:0d:ad:
                    ba:96:90:a4:1c:50:67:23:51:da:a3:41:32:0c:ca:
                    83:ef:a2:48:9b:b2:bd:0b:29:93:3d:00:47:2b:fe:
                    f9:b1:29:7b:6b:b6:41:94:6c:20:e0:27:36:ee:7c:
                    07:64:b3:ae:7d:7b:bc:33:e9:2f:74:52:66:0b:cb:
                    51:12:79:29:1f:1e:05:8d:67:d2:c0:39:14:50:23:
                    c1:80:d3:e6:5c:9b:d3:fa:b6:b2:75:aa:70:de:7c:
                    9b:6f:84:00:39:1c:5a:c3:a6:3b:de:53:0b:2e:18:
                    de:f9:66:0f:05:05:6f:41:f9:a7:0c:a9:a2:86:bd:
                    54:86:b5:1e:b5:9c:01:68:6a:23:04:2e:94:04:3a:
                    92:d0:b3:75:ee:05:27:71:8c:43:b3:da:5e:3e:89:
                    e7:60:4d:aa:2b:d8:90:86:cf:8e:7c:89:fc:01:36:
                    ca:b3:98:f5:7d:80:1d:59:c5:2f:42:1f:b6:e3:82:
                    18:16:8e:2b:e3:9a:d2:94:7c:31:77:1a:4a:b1:fe:
                    f4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:83:12:0B:DD:8D:D2:5A:9E:53:77:79:65:38:74:74:D8:35:14:0D
            X509v3 Authority Key Identifier:
                keyid:5A:1E:4C:0F:6F:96:E5:93:3B:E0:09:91:E3:86:C3:F9:65:E7:C3:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:54:53:d4:3e:0d:cd:64:3c:50:53:f6:bb:fc:c5:74:2a:0a:
         f6:4e:a9:a2:90:b3:e4:4b:6c:25:d5:73:81:37:7b:2a:c4:7d:
         89:87:51:11:66:6c:10:5f:7c:e0:71:16:0a:eb:df:bc:b9:ca:
         b8:2f:14:30:42:f2:e3:4c:5f:ec:05:65:6e:b1:05:30:13:57:
         4b:cc:4d:4a:7e:f5:73:2c:2c:6c:8f:60:8d:a3:b2:ff:98:9a:
         ae:60:ce:d0:ba:9c:bc:90:45:74:7a:6a:c9:cb:a7:e6:8e:01:
         bc:b1:f2:14:2d:fb:ff:14:f6:2d:21:fc:89:21:93:aa:e7:48:
         48:06:48:91:23:f9:d6:b8:af:0d:bf:6e:7a:7f:b0:3f:e2:c3:
         d9:cc:97:77:ba:87:27:67:c0:24:6f:d6:46:4b:0a:5e:de:a1:
         9e:31:0f:c5:72:64:d6:1a:ac:a6:35:88:ee:d0:6d:93:c4:f1:
         2a:e7:ee:99:60:31:48:90:cd:de:1a:e6:c0:b8:f4:34:22:8a:
         af:eb:bc:60:51:29:69:a1:fd:f4:db:b7:b0:38:29:8c:a3:e5:
         4f:61:f5:b0:a6:77:d4:7f:3b:a1:7d:bb:5a:27:cc:3a:bf:a6:
         91:fa:38:8e:3f:a2:7a:bb:12:35:9c:e4:6f:19:1b:02:99:fd:
         cf:ca:71:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:25:32 2025 by rpki-client