This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft
File:                     9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft (raw, json)
Hash identifier:          Lt+1c0o4BTprX2yfuSUhBw6Yav5ny3CuTlHJdgHTEcQ=
Subject key identifier:   3E:F6:32:9E:77:70:CD:82:2C:2A:E2:17:7F:5F:BF:AA:7A:EC:74:B4
Authority key identifier: 9C:CE:91:35:2B:AA:C0:EA:33:71:FB:42:CA:C1:03:0A:A9:1B:8B:E2
Certificate issuer:       /CN=9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2
Certificate serial:       53F269C64A5A778485FD3BB684BC34F8FB95FA93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft
Manifest number:          033E
Signing time:             Fri 19 Dec 2025 21:11:31 +0000
Manifest this update:     Fri 19 Dec 2025 21:06:31 +0000
Manifest next update:     Sun 21 Dec 2025 00:20:31 +0000
Files and hashes:         1: 323830343a336234633a3a2f33322d313238203d3e20323636313430.roa (hash: wtL9IYalkHyva3LZqTtTEMQ7BxCRTX/aVoPlnkJnyRE=)
                          2: 9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.crl (hash: B8bnoDMjcpbypFj/6AlH/admtzdNlUuPuriTMpE8Xq0=)
                          3: 34352e362e3136342e302f32322d3332203d3e20323636313430.roa (hash: qMvBmq1pgzlHrJKNsO9NjVqPj2Gyp6zALArUCGJqi18=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.crl
                          rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 00:20:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:f2:69:c6:4a:5a:77:84:85:fd:3b:b6:84:bc:34:f8:fb:95:fa:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2
        Validity
            Not Before: Dec 19 21:06:31 2025 GMT
            Not After : Dec 21 00:20:31 2025 GMT
        Subject: CN=3EF6329E7770CD822C2AE2177F5FBFAA7AEC74B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f5:fb:3b:86:43:67:ae:5f:fa:59:62:e3:eb:
                    c8:45:8f:f2:b8:c4:81:ee:7d:5d:2b:89:a1:98:b3:
                    66:00:60:46:e3:35:98:ba:b4:9e:91:45:ca:d1:41:
                    9e:42:d7:4b:a5:a1:f5:e3:5a:28:87:62:c6:42:95:
                    a3:5e:35:20:f7:1a:43:5f:e5:28:64:b5:7c:a4:59:
                    10:fa:8f:e4:e8:6d:83:62:3c:71:00:6a:88:d8:a9:
                    47:b8:9e:41:9a:b4:1e:dc:4d:4a:f4:75:3c:0b:fa:
                    11:23:77:88:73:3e:bd:a8:14:ad:fc:53:bc:54:bc:
                    f4:a3:e7:cf:46:1e:8a:ec:c0:f6:75:91:3d:98:c7:
                    8c:c9:d5:0e:ce:c2:56:a9:db:4d:e5:9f:2e:47:a9:
                    39:e2:26:ae:4e:a5:dd:8f:e1:77:e2:9e:3c:fa:e7:
                    81:fa:6d:af:d7:51:e1:58:59:ad:f0:f1:3d:ac:71:
                    b9:50:14:4a:84:75:20:5a:d3:75:67:f3:6a:9c:9b:
                    48:56:e8:58:1c:f1:9c:c8:66:0f:6f:d7:6a:e9:9e:
                    e1:9e:c7:2d:f8:a7:be:d4:94:70:17:1e:a5:78:2f:
                    ef:c4:75:ae:89:82:cf:38:53:fb:fc:c0:01:bb:b5:
                    dc:9e:81:82:fb:3e:13:d3:38:d7:bc:80:24:a1:1e:
                    93:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F6:32:9E:77:70:CD:82:2C:2A:E2:17:7F:5F:BF:AA:7A:EC:74:B4
            X509v3 Authority Key Identifier:
                keyid:9C:CE:91:35:2B:AA:C0:EA:33:71:FB:42:CA:C1:03:0A:A9:1B:8B:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:a1:ec:ff:fc:2e:2f:75:e3:2a:83:f4:c6:de:94:ce:db:ac:
         13:4d:8e:5e:95:e3:5e:40:17:3c:94:a0:9c:77:96:e4:65:a1:
         f0:29:10:d8:c5:12:36:e4:4f:0f:e6:61:a0:7f:1c:b1:aa:4a:
         7d:b1:5c:c1:11:93:8e:82:90:d8:76:ec:04:25:27:5b:1f:2b:
         d2:26:b5:ad:0a:28:02:d1:ee:ef:f5:83:fd:42:de:de:99:cd:
         69:77:f1:45:d6:01:b7:3d:bf:c1:68:6b:ed:08:a2:6d:f6:cc:
         87:35:8d:46:47:aa:22:87:54:b6:4d:12:10:64:91:d8:8a:8f:
         be:13:85:5c:df:9e:58:d8:ae:32:10:93:37:6e:0b:61:aa:21:
         62:f0:6f:85:1e:74:7f:05:c1:d7:5c:6e:03:10:c7:7a:0d:b4:
         66:d0:f4:d0:a2:71:f9:73:4b:16:86:76:92:e8:67:6e:43:1a:
         4c:3a:a8:64:62:ee:e4:9b:c2:11:3d:0a:00:fd:26:6a:c9:e4:
         81:24:25:03:d3:f8:7c:31:64:ac:10:0d:0e:90:8b:24:eb:14:
         31:eb:4b:aa:93:03:9b:ff:94:5b:4b:d0:ad:07:c5:26:e1:c7:
         45:52:00:59:c3:8a:f0:41:f8:2f:19:5c:46:4a:09:d5:6a:91:
         bf:61:87:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 03:55:38 2025 by rpki-client