This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.mft
File:                     9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.mft (raw, json)
Hash identifier:          kXubq6K0GPnJmrrs2f9ovFF2cauZbG0Wkc2OFwQ76J0=
Subject key identifier:   03:43:95:63:12:2D:18:19:BD:3C:97:DB:31:E0:93:62:58:5A:DF:CB
Authority key identifier: 9F:85:C9:FE:BF:81:51:55:C6:D4:47:98:66:9F:B3:BF:B9:FD:49:E0
Certificate issuer:       /CN=9F85C9FEBF815155C6D44798669FB3BFB9FD49E0
Certificate serial:       6A9DDB2D17432EAD49E484C099C828F609E7C115
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.mft
Manifest number:          029F
Signing time:             Sat 20 Dec 2025 14:54:35 +0000
Manifest this update:     Sat 20 Dec 2025 14:49:35 +0000
Manifest next update:     Sun 21 Dec 2025 17:14:35 +0000
Files and hashes:         1: 3133312e302e32302e302f32322d3332203d3e203238333237.roa (hash: s2/kAKjnFX6aRyyXodEUttWXr6XdHhQ5QyULnEcQnAU=)
                          2: 323830343a343864633a3a2f33322d3430203d3e203238333237.roa (hash: rzjEzJEP2xmveWGSG0oA61qZcp0+V3ZAxRdMTyuUWKo=)
                          3: 34352e3232392e3230382e302f32322d3332203d3e203238333237.roa (hash: eB9GrKFecuwervMmhfnLeZtSHrqZU4MZ+dII1aFjLew=)
                          4: 34352e3232392e3230382e302f32322d3332203d3e20313938393439.roa (hash: 46RSHOwSye0wh+PL5ysBB7nSfbqmEzYaKYMLvcSziSs=)
                          5: 3133312e302e32302e302f32322d3332203d3e20313938393439.roa (hash: fTd/5cBG9mlz6n9KlIjz6g6nXkqHzbKoyPgp4g5+LNU=)
                          6: 3138392e35302e38302e302f32302d3332203d3e20313938393439.roa (hash: PULtCWH4amDpwqJMX/vVa/ZBJqkPcmfTwYJzuPne7qM=)
                          7: 3138392e35302e38302e302f32302d3332203d3e203238333237.roa (hash: e9HZymDCqJKW/MrGNjfZUewWACYFm0DkCf9m7cTv/cY=)
                          8: 9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.crl (hash: tKlpUyvfAdcQ1IOpnIPpRhSfB7IIoT2mefYXgXRB3vI=)
                          9: 323830343a343864633a3a2f33322d3430203d3e20313938393439.roa (hash: T5PQk+XSOonG3g2hvRrDdrLKKD/SDyNap/J/IcWp2/E=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.crl
                          rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 17:14:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:9d:db:2d:17:43:2e:ad:49:e4:84:c0:99:c8:28:f6:09:e7:c1:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F85C9FEBF815155C6D44798669FB3BFB9FD49E0
        Validity
            Not Before: Dec 20 14:49:35 2025 GMT
            Not After : Dec 21 17:14:35 2025 GMT
        Subject: CN=03439563122D1819BD3C97DB31E09362585ADFCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2f:ea:5e:7c:cc:c3:9b:77:69:f9:58:2e:dd:
                    9a:92:3c:a5:cc:5c:fd:c5:c1:b8:9b:1f:47:17:1c:
                    2f:87:10:5f:a6:e3:81:78:c0:bd:f5:97:2e:33:6e:
                    85:b5:2e:49:88:08:f8:0c:cb:cd:18:c8:71:2a:47:
                    dd:d0:7e:8a:23:f5:a3:c2:db:04:74:22:a8:e3:81:
                    20:24:df:63:a6:0a:f5:b6:60:ac:a9:b0:80:a4:2f:
                    97:05:c6:75:75:26:5a:bf:d9:57:0d:04:d5:0f:db:
                    b1:eb:94:01:f3:9d:56:1e:32:ae:cc:e6:6a:69:2f:
                    3e:0e:b2:ae:76:47:b8:35:f9:90:5b:34:1a:a0:0e:
                    87:4f:5a:0c:89:33:4a:82:80:a2:be:05:2c:88:cc:
                    93:65:cd:2e:48:a1:38:01:09:12:e2:17:de:ea:a6:
                    cb:0f:b9:82:39:29:91:92:41:45:ef:d7:bd:c8:4d:
                    1b:d6:25:5d:ed:9a:86:1d:cf:97:8b:5f:73:d5:7b:
                    f3:ad:bc:a6:98:b3:a4:41:cc:b7:73:f7:d0:19:b6:
                    cf:fc:3f:3f:14:0a:d1:de:2f:59:1d:33:8a:6f:7a:
                    6a:3f:e3:a8:f0:10:a8:56:38:a1:73:c3:dd:6a:48:
                    9f:77:31:73:8a:fc:97:bb:ea:c0:e8:b7:59:53:ed:
                    e4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:43:95:63:12:2D:18:19:BD:3C:97:DB:31:E0:93:62:58:5A:DF:CB
            X509v3 Authority Key Identifier:
                keyid:9F:85:C9:FE:BF:81:51:55:C6:D4:47:98:66:9F:B3:BF:B9:FD:49:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:74:10:38:d1:b2:e6:02:d3:64:c7:91:09:38:91:ed:e9:54:
         1c:a7:40:84:1d:82:ae:16:a8:db:6f:c7:c6:b9:96:96:ea:5a:
         3f:f5:bb:33:a1:90:c1:43:20:6f:89:27:f9:a6:fa:14:04:02:
         23:6e:c9:d0:c0:09:f7:6b:c2:6f:8f:dc:cf:14:99:0e:3f:2b:
         f4:d8:1e:85:3f:7c:60:71:03:2f:54:a1:20:b7:e2:42:0e:45:
         6b:23:c6:70:91:a5:b5:b8:40:1d:9b:bf:a7:0f:48:48:8c:38:
         a2:f1:64:40:7c:62:05:4b:ee:8a:83:6d:75:bb:97:a7:5c:1f:
         fb:f4:b7:71:b4:f5:96:96:ad:ff:b4:b7:bf:71:80:c1:85:ac:
         b0:ba:46:f8:5f:71:04:21:0f:0d:c1:09:ab:51:86:99:e1:ea:
         29:cf:ae:a0:e3:3f:61:4f:6e:ac:fc:2c:99:69:a4:bc:df:0f:
         3b:25:0e:8b:70:aa:ef:49:81:58:cd:9a:e2:14:c2:fc:82:58:
         84:64:af:f4:db:b8:ff:97:93:5f:dc:13:84:9c:c6:14:6a:df:
         1a:2c:0b:19:8d:93:13:8c:b8:c2:9b:c2:b8:10:68:79:13:91:
         86:26:71:03:10:8f:ab:21:a1:46:e8:ba:b6:a9:51:dc:55:8b:
         53:f3:12:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:21:57 2025 by rpki-client