This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/9B3D73E994CF6DEB88330D12BCB1BB6523C3D129.mft
File:                     9B3D73E994CF6DEB88330D12BCB1BB6523C3D129.mft (raw, json)
Hash identifier:          KFRzMcE/vEZhoGoH7mw/E5M8Pj/e/up80yQjjBPZyAA=
Subject key identifier:   47:6E:58:E4:B5:70:12:65:72:FB:13:24:0C:51:E7:FD:73:1E:A4:26
Authority key identifier: 9B:3D:73:E9:94:CF:6D:EB:88:33:0D:12:BC:B1:BB:65:23:C3:D1:29
Certificate issuer:       /CN=9B3D73E994CF6DEB88330D12BCB1BB6523C3D129
Certificate serial:       3C04E203F18AD025C236543F10F4CED04071E5AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B3D73E994CF6DEB88330D12BCB1BB6523C3D129.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/9B3D73E994CF6DEB88330D12BCB1BB6523C3D129.mft
Manifest number:          33
Signing time:             Sat 20 Dec 2025 07:35:06 +0000
Manifest this update:     Sat 20 Dec 2025 07:30:06 +0000
Manifest next update:     Sun 21 Dec 2025 11:12:06 +0000
Files and hashes:         1: 9B3D73E994CF6DEB88330D12BCB1BB6523C3D129.crl (hash: nWAp6q+fverCdvPsf6nQ+MaIhWGpFV+biP6e1kqV4YE=)
                          2: 323830343a343938343a3a2f33322d313238203d3e20323637313838.roa (hash: FoEQJ8tlIgczN2J7NaMOqYyc8jiwXLf8c/zu4kMyTCU=)
                          3: 34352e3233312e32382e302f32322d3332203d3e20323637313838.roa (hash: QWVs4E+HfWaj+XpwO11VqNnXeyW8YuSkNrmWtF5t3iw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/9B3D73E994CF6DEB88330D12BCB1BB6523C3D129.crl
                          rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/9B3D73E994CF6DEB88330D12BCB1BB6523C3D129.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B3D73E994CF6DEB88330D12BCB1BB6523C3D129.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 10:45:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:04:e2:03:f1:8a:d0:25:c2:36:54:3f:10:f4:ce:d0:40:71:e5:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B3D73E994CF6DEB88330D12BCB1BB6523C3D129
        Validity
            Not Before: Dec 20 07:30:06 2025 GMT
            Not After : Dec 21 11:12:06 2025 GMT
        Subject: CN=476E58E4B570126572FB13240C51E7FD731EA426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:73:c4:d6:81:e4:34:9e:73:12:9a:b2:68:7b:
                    7d:45:18:62:96:9b:a1:9f:cd:4f:05:90:b4:62:e1:
                    6e:e9:0d:01:0b:b8:3c:ca:94:1f:05:3d:a8:5c:ac:
                    40:4c:c7:2f:10:cf:55:9f:74:15:80:82:72:11:71:
                    e9:d3:b6:00:6c:d7:b6:ed:1a:54:a8:f7:8b:3e:48:
                    51:de:5a:e1:24:ab:6c:9f:b3:ff:f7:39:9c:cd:6b:
                    1c:51:87:f5:c7:76:42:57:27:a3:09:0b:c5:8b:6d:
                    06:71:a3:69:1d:17:b6:cc:a9:ed:06:80:6f:49:3d:
                    a5:5a:23:a0:2e:ab:ca:06:e3:3d:72:b4:d8:d2:7d:
                    9c:6e:84:2f:2b:90:ca:f6:b1:f0:9d:00:99:14:5c:
                    ea:1b:5f:ea:7b:8a:2e:d7:6a:9a:a0:fe:53:35:62:
                    9f:23:91:44:f9:93:e9:26:07:c9:60:92:53:ce:a6:
                    5d:7d:8b:0d:3b:eb:c3:d4:66:67:52:e5:c8:b0:82:
                    05:67:af:0a:5d:f4:dc:b0:8d:57:08:ef:05:e8:d4:
                    91:57:ce:e3:a4:12:d6:a9:b6:22:fc:67:a8:6e:6b:
                    be:3b:9f:b1:05:d0:91:7e:5e:df:1f:9c:7b:5e:2a:
                    ff:a9:a2:06:87:87:28:c9:91:3a:eb:16:78:c2:f2:
                    8f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:6E:58:E4:B5:70:12:65:72:FB:13:24:0C:51:E7:FD:73:1E:A4:26
            X509v3 Authority Key Identifier:
                keyid:9B:3D:73:E9:94:CF:6D:EB:88:33:0D:12:BC:B1:BB:65:23:C3:D1:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/9B3D73E994CF6DEB88330D12BCB1BB6523C3D129.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B3D73E994CF6DEB88330D12BCB1BB6523C3D129.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/9B3D73E994CF6DEB88330D12BCB1BB6523C3D129.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:49:f4:d1:8f:82:8b:4b:fd:96:fd:c8:0b:bc:b6:8e:45:5d:
         41:5d:1e:11:bb:35:db:0b:18:f4:f7:bb:48:5c:e7:a2:a8:38:
         64:9e:eb:b2:41:67:15:68:ce:a0:4e:96:99:98:a5:ea:1a:2a:
         e5:29:22:85:03:48:bd:9c:22:8e:e3:64:47:7c:af:7a:74:34:
         47:3c:48:de:cd:47:bb:fe:2a:28:b4:45:6f:ce:ed:7c:c9:1e:
         4a:47:c7:7e:fa:b4:99:d3:28:ff:da:e1:38:d5:6f:8a:ac:eb:
         fa:f0:51:86:53:b1:43:e9:f4:b7:94:4d:35:38:ea:49:56:cd:
         49:67:9f:40:27:40:df:b9:5b:ff:9f:03:0c:2a:b3:11:04:29:
         ca:ae:56:cd:59:4c:4d:d3:4a:78:30:97:86:3e:f1:07:21:13:
         45:24:2b:4f:e6:79:a4:76:6f:0a:ea:5c:29:16:2d:1f:dc:9b:
         6c:7d:05:cd:18:af:20:8d:4d:c7:5d:b3:cb:72:60:3f:a4:90:
         08:a3:48:cb:06:89:9e:b5:04:02:43:46:26:b6:68:fe:22:20:
         66:a1:94:86:84:cb:e6:67:3c:81:5f:2b:af:24:92:6e:2e:ae:
         bf:b6:38:5f:65:26:8e:f5:05:8c:ae:2d:f1:49:08:ff:bb:e6:
         6f:d1:a3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 10:52:10 2025 by rpki-client