This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft
File:                     91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft (raw, json)
Hash identifier:          mshbskriEdT8mhgsiRkPN9QjgeVLzMzFIH3tQ7gNPQI=
Subject key identifier:   9D:79:D6:84:D5:92:CA:F7:C4:2D:62:B1:03:E1:B2:18:66:11:1E:3B
Authority key identifier: 91:CB:0D:46:F3:8A:17:C0:F3:AB:C4:9D:94:96:AF:CB:60:EC:C5:C0
Certificate issuer:       /CN=91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0
Certificate serial:       32091267A35F6AF2690494FE589DB74D17E09C86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft
Manifest number:          01CE
Signing time:             Fri 19 Dec 2025 08:43:11 +0000
Manifest this update:     Fri 19 Dec 2025 08:38:11 +0000
Manifest next update:     Sat 20 Dec 2025 09:44:11 +0000
Files and hashes:         1: 3139302e3132342e3234362e302f32342d3234203d3e20323730383630.roa (hash: yhCEcAckvwPKSDtMoQZfTsl9LHRlGqIgsIS6HHuJuj4=)
                          2: 3139302e3132342e3234342e302f32322d3232203d3e20323730383630.roa (hash: erRoCXS4iqelx3A7z2b/q9tQEsfBwZglNV4IwQy/+hk=)
                          3: 3139302e3132342e3234342e302f32342d3234203d3e20323730383630.roa (hash: SxLydP1ukGSzGHXOiuYXuCRXNw1G+x/PyOeKcjdByH8=)
                          4: 91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.crl (hash: 7DZ4U9BwHG3DlBwYpANdwQQhBDxrj3QF4onPJ37tZIM=)
                          5: 3139302e3132342e3234362e302f32332d3233203d3e20323730383630.roa (hash: wqBV7tfhYsJ8D3tZWeBaxwFKyCV7kzq53BgCnlIvCdM=)
                          6: 3139302e3132342e3234342e302f32332d3233203d3e20323730383630.roa (hash: 5L94fU1eW2N8OJJy5XdX8sulVnpAlAmfp800rgkZdUY=)
                          7: 323830343a373238633a3a2f33322d3332203d3e20323730383630.roa (hash: 50RGORFzNi46cbY+NQic6cf7hNVnZxFatRiH80X68MY=)
                          8: 3139302e3132342e3234372e302f32342d3234203d3e20323730383630.roa (hash: 9WEF1uYsp+6QI/10WwUiQw2/f2jQzTJh6/g+AkeCDo4=)
                          9: 3139302e3132342e3234352e302f32342d3234203d3e20323730383630.roa (hash: 5GH9fkPBvrIeE2ML5V2pN8b1kv22FpZP/80hIS2JLHU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.crl
                          rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 09:44:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:09:12:67:a3:5f:6a:f2:69:04:94:fe:58:9d:b7:4d:17:e0:9c:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0
        Validity
            Not Before: Dec 19 08:38:11 2025 GMT
            Not After : Dec 20 09:44:11 2025 GMT
        Subject: CN=9D79D684D592CAF7C42D62B103E1B21866111E3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:39:e8:53:45:06:15:20:ce:36:0d:48:82:17:
                    8a:bb:85:96:10:40:44:33:ae:36:bd:60:da:cd:0f:
                    b0:fd:57:d8:b1:33:5a:6a:78:9d:3f:9f:1b:10:45:
                    fb:26:7b:6e:61:96:2c:12:90:1e:53:52:c4:1d:d2:
                    ff:e2:dd:02:22:d3:67:70:71:de:ef:d5:33:56:22:
                    92:89:04:86:c6:07:68:2a:79:28:4d:1b:9c:27:b7:
                    17:0b:f7:ce:f2:f8:1d:ca:d7:a6:2f:98:ca:28:7b:
                    8e:31:d8:89:a8:06:8d:98:5a:50:2f:ba:4b:af:f3:
                    b3:17:40:0d:0a:03:5d:3d:1e:d6:b9:19:f1:30:d9:
                    1c:67:f3:9d:09:6b:d5:13:6b:8a:03:6a:c4:61:1f:
                    e6:c1:60:45:d3:4b:27:72:49:c0:c5:e0:fd:0b:7f:
                    71:19:17:2f:6e:6f:37:18:d2:a4:5d:48:dc:15:5e:
                    47:d2:31:43:f2:b7:e9:0e:c1:df:37:e0:3c:20:4c:
                    94:a6:10:32:8e:2b:ee:16:eb:ca:c6:6d:e8:fe:fd:
                    8e:d2:ba:63:99:c4:8e:44:de:7a:89:9d:5e:47:a1:
                    6b:14:ce:d0:14:5a:0c:ee:90:cf:c0:10:32:a1:06:
                    04:5e:5a:a8:9f:9d:e8:bf:5f:6c:85:3e:40:9f:e8:
                    e4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:79:D6:84:D5:92:CA:F7:C4:2D:62:B1:03:E1:B2:18:66:11:1E:3B
            X509v3 Authority Key Identifier:
                keyid:91:CB:0D:46:F3:8A:17:C0:F3:AB:C4:9D:94:96:AF:CB:60:EC:C5:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:88:1e:45:d9:c4:cf:55:4c:f1:ce:46:ec:43:f7:73:32:cf:
         b6:3a:9a:33:19:67:84:a5:5f:9c:e1:42:17:83:a1:23:c1:1b:
         d2:1c:4c:a7:c8:ff:3a:e4:17:b8:66:99:c1:19:3d:c7:f5:15:
         75:86:84:27:0e:45:59:3c:7a:c5:a3:f3:2d:88:b4:66:ed:1d:
         c6:2e:06:44:ce:1d:a4:49:b0:39:4b:c9:76:ae:e0:31:d7:41:
         e4:6c:c9:1a:cb:f6:bb:9f:b4:02:22:71:60:26:8e:c0:5c:a5:
         2f:49:60:c7:de:be:e5:48:be:58:98:ae:35:22:ea:6f:47:5e:
         85:dd:fb:2f:d4:29:8a:d9:b6:95:44:a1:94:2c:95:c5:83:f0:
         01:87:f6:c0:2e:1d:94:0c:43:90:e3:a8:7b:c8:ba:e2:f9:cd:
         75:43:0b:56:9f:28:b2:17:ca:bf:f3:80:6d:38:aa:7b:0a:88:
         fa:1c:f4:de:34:ac:cb:50:09:73:bc:0e:e5:87:e3:2c:4b:90:
         f6:60:dd:95:ef:58:67:01:84:f8:e0:9f:d1:98:e2:f3:1e:3b:
         85:03:1d:16:bf:5a:ac:5e:da:ab:9a:b3:57:21:b0:97:d9:c9:
         f3:29:7a:39:58:f1:0e:7c:4a:d4:1c:0c:41:6e:16:f4:48:22:
         e4:e8:04:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:16:12 2025 by rpki-client