This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/9675F8853862F77109315A71203F65D7C66AD7D3.mft
File:                     9675F8853862F77109315A71203F65D7C66AD7D3.mft (raw, json)
Hash identifier:          U4kYsfHFMjKFRJUgPc6iQSSNUSqkT0d+uSvVESibjvE=
Subject key identifier:   55:AA:1D:89:13:99:B8:2B:01:3B:9D:F1:93:C1:24:E3:FA:4F:F8:5D
Authority key identifier: 96:75:F8:85:38:62:F7:71:09:31:5A:71:20:3F:65:D7:C6:6A:D7:D3
Certificate issuer:       /CN=9675F8853862F77109315A71203F65D7C66AD7D3
Certificate serial:       0890C871EF2C0EA34E1B06004F3172F0AC836028
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9675F8853862F77109315A71203F65D7C66AD7D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/9675F8853862F77109315A71203F65D7C66AD7D3.mft
Manifest number:          D9
Signing time:             Wed 24 Dec 2025 05:32:57 +0000
Manifest this update:     Wed 24 Dec 2025 05:27:57 +0000
Manifest next update:     Thu 25 Dec 2025 08:50:57 +0000
Files and hashes:         1: 9675F8853862F77109315A71203F65D7C66AD7D3.crl (hash: 1owZqKQJORlUDDDucu1VyfSB9sdkBv7cCrkEJSojHf0=)
                          2: 3136382e3139372e3232382e302f32322d3332203d3e20323633323532.roa (hash: IxJ+aaIE5s/TSGvp5UxzlcUSrmgGWCPiJKRwmgAtlgw=)
                          3: 323830343a313763633a3a2f33322d313238203d3e20323633323532.roa (hash: TIrXa4sZ9J01+ogoc0KZjktzJcYNOQ05yKle75N5dOE=)
                          4: 3138392e3230312e3233322e302f32312d3332203d3e20323633323532.roa (hash: 4rw4Uail/JnVkUqBw1XhL5zOOCFkwqiFSWQ2yKJ8vLc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/9675F8853862F77109315A71203F65D7C66AD7D3.crl
                          rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/9675F8853862F77109315A71203F65D7C66AD7D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9675F8853862F77109315A71203F65D7C66AD7D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 08:50:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:90:c8:71:ef:2c:0e:a3:4e:1b:06:00:4f:31:72:f0:ac:83:60:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9675F8853862F77109315A71203F65D7C66AD7D3
        Validity
            Not Before: Dec 24 05:27:57 2025 GMT
            Not After : Dec 25 08:50:57 2025 GMT
        Subject: CN=55AA1D891399B82B013B9DF193C124E3FA4FF85D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3a:14:e1:57:d2:ff:e3:2e:3f:14:8f:16:4b:
                    7f:fe:a0:ba:f0:db:98:82:ad:f6:56:5f:a5:9d:a3:
                    f9:18:63:c1:74:22:87:9d:dd:17:fb:f9:4a:73:f8:
                    3e:f6:35:c0:dd:83:a4:13:a2:d7:4e:a4:bd:39:dd:
                    46:36:59:60:ce:b3:6e:2e:de:fe:81:4d:22:cf:13:
                    25:21:2e:cc:f6:d2:42:08:69:60:4e:75:59:90:00:
                    ad:32:91:55:94:8f:dc:5a:a9:33:ba:d6:3f:3a:f9:
                    5a:e3:ce:06:9d:17:50:ef:b8:a5:7f:b4:a4:8f:95:
                    9a:6c:b9:34:e2:65:6c:cc:42:40:30:57:80:16:00:
                    f5:8e:31:8e:ef:0d:65:f9:cd:43:b7:db:a0:44:8a:
                    b9:06:2c:39:6d:bc:bb:61:bd:09:cc:02:6e:ca:37:
                    25:c2:8f:92:52:fe:51:8c:f2:78:fb:09:f9:77:8e:
                    a4:47:d8:be:81:d2:e4:d9:51:33:b5:e2:fc:4c:22:
                    68:8a:c4:8b:94:cc:b0:48:1f:cd:71:21:8c:2a:52:
                    2f:51:ce:08:2f:31:5d:c1:06:a4:ed:4b:a9:d8:a6:
                    13:29:59:30:2a:7f:25:67:82:df:cf:19:74:c1:4c:
                    a8:bc:ba:2b:c0:96:0b:85:d6:58:ff:e6:7e:92:d2:
                    71:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:AA:1D:89:13:99:B8:2B:01:3B:9D:F1:93:C1:24:E3:FA:4F:F8:5D
            X509v3 Authority Key Identifier:
                keyid:96:75:F8:85:38:62:F7:71:09:31:5A:71:20:3F:65:D7:C6:6A:D7:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/9675F8853862F77109315A71203F65D7C66AD7D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9675F8853862F77109315A71203F65D7C66AD7D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/9675F8853862F77109315A71203F65D7C66AD7D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:b1:cf:73:1e:e8:b9:a5:93:2d:39:33:1e:f6:32:87:20:26:
         bc:56:3f:dd:a2:5f:f3:6a:c4:ed:13:81:d9:c1:8a:5c:03:40:
         89:c7:ca:4c:c2:6b:cb:1f:ea:e2:db:b6:8d:d5:59:dc:c0:a8:
         9e:a8:9a:92:fd:dc:8d:14:83:05:c4:51:69:ba:c0:aa:a4:2b:
         f4:34:42:90:68:f6:07:e4:af:ff:41:43:f9:ab:99:c5:ec:7d:
         20:23:24:c4:68:c1:d0:28:52:08:ae:8a:46:81:73:6c:e5:cb:
         0f:02:02:7a:32:44:97:b0:fb:ab:bc:77:55:83:07:ca:14:c6:
         fa:d7:46:58:ab:c0:41:74:6b:e7:91:c8:75:44:2d:1f:68:fd:
         e3:4a:4a:4a:b5:82:05:ba:c4:72:2a:43:1b:ec:fe:0f:c3:69:
         9c:34:9d:b4:63:6e:49:8a:33:aa:f1:69:74:74:c6:b3:12:91:
         2b:bd:df:f1:9d:dc:7d:5e:66:ff:8d:1e:c4:cd:cc:35:76:03:
         29:6a:19:58:96:c7:d8:86:cc:85:5f:6a:14:42:f4:71:7d:87:
         36:3e:fb:1c:ed:56:53:cc:2d:2b:1d:53:35:20:1f:7e:96:ed:
         78:41:08:bf:e4:fc:49:53:9a:4c:30:cd:18:12:df:e1:4a:26:
         da:11:a4:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCJDIce8sDqNOGwYATzFy8KyDYCgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTY3NUY4ODUzODYyRjc3MTA5MzE1QTcxMjAzRjY1RDdD
NjZBRDdEMzAeFw0yNTEyMjQwNTI3NTdaFw0yNTEyMjUwODUwNTdaMDMxMTAvBgNV
BAMTKDU1QUExRDg5MTM5OUI4MkIwMTNCOURGMTkzQzEyNEUzRkE0RkY4NUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLOhThV9L/4y4/FI8WS3/+oLrw
25iCrfZWX6Wdo/kYY8F0Ioed3Rf7+Upz+D72NcDdg6QTotdOpL053UY2WWDOs24u
3v6BTSLPEyUhLsz20kIIaWBOdVmQAK0ykVWUj9xaqTO61j86+VrjzgadF1DvuKV/
tKSPlZpsuTTiZWzMQkAwV4AWAPWOMY7vDWX5zUO326BEirkGLDltvLthvQnMAm7K
NyXCj5JS/lGM8nj7Cfl3jqRH2L6B0uTZUTO14vxMImiKxIuUzLBIH81xIYwqUi9R
zggvMV3BBqTtS6nYphMpWTAqfyVngt/PGXTBTKi8uivAlguF1lj/5n6S0nFFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUVaodiROZuCsBO53xk8Ek4/pP+F0wHwYDVR0j
BBgwFoAUlnX4hThi93EJMVpxID9l18Zq19MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnFvc0VGSFZRYmVRdnk4aWt0ZE56cFdOSEtjQjF6ZVY0bVNkNkYxZWEx
V04vMC85Njc1Rjg4NTM4NjJGNzcxMDkzMTVBNzEyMDNGNjVEN0M2NkFEN0QzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2NzVGODg1Mzg2MkY3NzEw
OTMxNUE3MTIwM0Y2NUQ3QzY2QUQ3RDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MnFvc0VGSFZRYmVRdnk4aWt0ZE56cFdOSEtjQjF6ZVY0bVNkNkYxZWExV04vMC85
Njc1Rjg4NTM4NjJGNzcxMDkzMTVBNzEyMDNGNjVEN0M2NkFEN0QzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAObHPcx7ouaWTLTkzHvYyhyAmvFY/3aJf82rE7ROB2cGKXANAicfKTMJryx/q
4tu2jdVZ3MConqiakv3cjRSDBcRRabrAqqQr9DRCkGj2B+Sv/0FD+auZxex9ICMk
xGjB0ChSCK6KRoFzbOXLDwICejJEl7D7q7x3VYMHyhTG+tdGWKvAQXRr55HIdUQt
H2j940pKSrWCBbrEcipDG+z+D8NpnDSdtGNuSYozqvFpdHTGsxKRK73f8Z3cfV5m
/40exM3MNXYDKWoZWJbH2IbMhV9qFEL0cX2HNj77HO1WU8wtKx1TNSAffpbteEEI
v+T8SVOaTDDNGBLf4Uom2hGktw==
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:16:43 2025 by rpki-client