This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/9354BF01EDBE33FFFDB87580FB3CB1ADEDF04D6E.mft
File:                     9354BF01EDBE33FFFDB87580FB3CB1ADEDF04D6E.mft (raw, json)
Hash identifier:          Ninsau//50r6qV/JF6gWGXgr6kjrNrUJBuu0O7vNg44=
Subject key identifier:   E8:F2:93:D6:4E:60:67:53:1F:1D:FA:25:15:F6:82:28:D3:B0:2E:F4
Authority key identifier: 93:54:BF:01:ED:BE:33:FF:FD:B8:75:80:FB:3C:B1:AD:ED:F0:4D:6E
Certificate issuer:       /CN=9354BF01EDBE33FFFDB87580FB3CB1ADEDF04D6E
Certificate serial:       40AD3DC7E8E3752D15B403DE396780797838501A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9354BF01EDBE33FFFDB87580FB3CB1ADEDF04D6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/9354BF01EDBE33FFFDB87580FB3CB1ADEDF04D6E.mft
Manifest number:          0174
Signing time:             Mon 22 Dec 2025 00:28:32 +0000
Manifest this update:     Mon 22 Dec 2025 00:23:32 +0000
Manifest next update:     Tue 23 Dec 2025 01:05:32 +0000
Files and hashes:         1: 323830343a353436343a3a2f33322d3438203d3e20323638363437.roa (hash: RwIMfdEJPJO5aLK6dYjXlYp2huiKi2TGMfKiAB8zUAE=)
                          2: 9354BF01EDBE33FFFDB87580FB3CB1ADEDF04D6E.crl (hash: ZaqMmx+wxi5gxn0dj5yC00ot+IvElNt6cj3z8toomlU=)
                          3: 34352e3136342e3234302e302f32322d3234203d3e20323638363437.roa (hash: 1qeqlxD4i8ErlWYs5BtorIleXavb6sm/ubmG51/SqMA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/9354BF01EDBE33FFFDB87580FB3CB1ADEDF04D6E.crl
                          rsync://rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/9354BF01EDBE33FFFDB87580FB3CB1ADEDF04D6E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9354BF01EDBE33FFFDB87580FB3CB1ADEDF04D6E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 01:05:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ad:3d:c7:e8:e3:75:2d:15:b4:03:de:39:67:80:79:78:38:50:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9354BF01EDBE33FFFDB87580FB3CB1ADEDF04D6E
        Validity
            Not Before: Dec 22 00:23:32 2025 GMT
            Not After : Dec 23 01:05:32 2025 GMT
        Subject: CN=E8F293D64E6067531F1DFA2515F68228D3B02EF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:34:bd:f9:f5:d7:e8:db:af:04:14:ea:0d:5e:
                    8b:bb:7d:fd:33:c2:30:f3:08:8d:bf:22:b1:c1:1a:
                    a5:4e:e3:f6:b0:44:a3:58:df:13:b4:e4:bc:b0:d3:
                    cf:42:7d:69:e7:3f:03:21:82:95:69:3f:98:84:53:
                    f3:42:c0:5c:22:f4:2b:09:3a:d7:f6:7e:17:78:d7:
                    38:18:9e:13:da:5c:8c:f2:87:ec:f7:57:54:5a:3c:
                    c5:9a:2e:dc:c5:4b:0e:86:7a:c3:ce:50:88:df:05:
                    0d:1d:e9:11:d9:f2:90:5e:2a:8d:f5:7d:b2:9b:31:
                    80:56:fc:df:ad:4a:91:b0:33:79:35:f6:d5:8e:37:
                    48:46:55:0e:7c:16:97:bf:55:3d:71:e0:f1:ea:dd:
                    92:a1:d2:3e:da:07:01:f0:a1:f6:6e:ea:b6:7f:a2:
                    91:8e:49:65:53:13:fe:61:2e:b0:bb:ab:86:99:e1:
                    60:49:37:ce:6f:fb:cc:71:b9:17:6e:da:f2:87:f4:
                    01:0c:a3:1d:08:76:81:87:47:1b:08:7e:04:e2:f4:
                    49:45:7f:9e:4a:3c:0e:b0:27:87:e2:24:e9:4b:5b:
                    f8:63:52:ff:b3:bf:23:f6:01:c9:32:99:5c:d4:3b:
                    63:d9:d1:11:29:0f:79:1c:38:c4:a2:36:82:7f:fb:
                    49:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F2:93:D6:4E:60:67:53:1F:1D:FA:25:15:F6:82:28:D3:B0:2E:F4
            X509v3 Authority Key Identifier:
                keyid:93:54:BF:01:ED:BE:33:FF:FD:B8:75:80:FB:3C:B1:AD:ED:F0:4D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/9354BF01EDBE33FFFDB87580FB3CB1ADEDF04D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9354BF01EDBE33FFFDB87580FB3CB1ADEDF04D6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/9354BF01EDBE33FFFDB87580FB3CB1ADEDF04D6E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:a3:8f:28:aa:8c:ea:c6:a9:6b:60:0c:a9:ab:86:00:88:73:
         a9:76:61:5f:ff:38:a1:ed:00:68:53:d3:53:76:43:5c:42:16:
         29:50:5c:de:ed:21:ee:cc:6c:09:4d:4c:4f:a2:59:b9:b3:60:
         ad:be:1f:7f:61:59:a5:78:51:44:9b:1a:be:69:68:7b:ee:c6:
         3e:1c:1d:4b:cf:06:ea:41:fb:3b:f8:c3:b5:23:5c:71:b0:db:
         31:82:15:44:99:cd:ac:d0:d8:07:1c:a2:29:35:96:83:ca:06:
         a7:cd:9b:83:29:e9:94:60:48:3d:49:96:c4:74:9c:17:7b:eb:
         3b:12:b4:52:4d:6a:df:cf:72:12:59:b2:cf:9a:37:32:53:a5:
         9a:d8:4d:c5:5d:f9:a3:8b:2e:75:12:be:ea:61:0e:05:77:7f:
         76:56:23:0a:9d:79:37:0b:d5:ca:be:53:b4:0a:ee:d9:bb:5c:
         23:4b:82:46:74:76:70:44:b8:9c:c7:37:06:81:9c:d8:6e:a8:
         eb:4a:15:0a:1a:09:a3:1b:80:27:4b:44:d5:4c:ff:45:41:ee:
         ee:87:97:8d:49:bc:bb:22:ab:5f:8f:74:ab:90:e1:bd:b2:16:
         09:d2:37:dc:be:91:5b:46:bd:cb:1c:2f:6c:79:d0:21:c4:e3:
         4c:97:04:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 07:25:07 2025 by rpki-client