This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EUKmo2KA5E7FMZ1jGfXHoARHS8K1FnRBiQQ4j9PJtuzy/0/909C3BC7730E7442AD1CECA961D8613A425EBA1F.mft
File:                     909C3BC7730E7442AD1CECA961D8613A425EBA1F.mft (raw, json)
Hash identifier:          iKwqZaYbg/ivdVZxXRHMoWrNaf4K3NFNgXSSDFN2bJA=
Subject key identifier:   1D:3A:BB:E8:7E:6D:AE:DB:A9:32:D4:B2:7E:B7:CB:70:A2:53:B6:25
Authority key identifier: 90:9C:3B:C7:73:0E:74:42:AD:1C:EC:A9:61:D8:61:3A:42:5E:BA:1F
Certificate issuer:       /CN=909C3BC7730E7442AD1CECA961D8613A425EBA1F
Certificate serial:       3BF2C888D2853757497B316B38E843A5D828A000
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909C3BC7730E7442AD1CECA961D8613A425EBA1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUKmo2KA5E7FMZ1jGfXHoARHS8K1FnRBiQQ4j9PJtuzy/0/909C3BC7730E7442AD1CECA961D8613A425EBA1F.mft
Manifest number:          C4
Signing time:             Tue 23 Dec 2025 09:33:36 +0000
Manifest this update:     Tue 23 Dec 2025 09:28:36 +0000
Manifest next update:     Wed 24 Dec 2025 11:19:36 +0000
Files and hashes:         1: 909C3BC7730E7442AD1CECA961D8613A425EBA1F.crl (hash: b4RmiAgA0Ad6O6cbi+OWpkR3t9Ao1if4ZONnb791XRE=)
                          2: 323830343a393531303a3a2f33322d3332203d3e20323734343936.roa (hash: 3SlqjibwQyve9/5SBv/6xv00X8rc4+7qgC8+lBv0fAw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUKmo2KA5E7FMZ1jGfXHoARHS8K1FnRBiQQ4j9PJtuzy/0/909C3BC7730E7442AD1CECA961D8613A425EBA1F.crl
                          rsync://rpki-repo.registro.br/repo/EUKmo2KA5E7FMZ1jGfXHoARHS8K1FnRBiQQ4j9PJtuzy/0/909C3BC7730E7442AD1CECA961D8613A425EBA1F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909C3BC7730E7442AD1CECA961D8613A425EBA1F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 11:19:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f2:c8:88:d2:85:37:57:49:7b:31:6b:38:e8:43:a5:d8:28:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909C3BC7730E7442AD1CECA961D8613A425EBA1F
        Validity
            Not Before: Dec 23 09:28:36 2025 GMT
            Not After : Dec 24 11:19:36 2025 GMT
        Subject: CN=1D3ABBE87E6DAEDBA932D4B27EB7CB70A253B625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:40:4a:a1:b6:8f:47:a0:57:c3:33:02:95:34:
                    dc:84:73:2b:f9:48:18:54:b1:7c:1b:de:8a:87:03:
                    76:cd:48:6b:a6:05:5b:28:17:f5:47:0b:2e:74:00:
                    09:b1:df:a5:2f:e8:bd:a8:90:74:4c:28:32:25:78:
                    14:ac:4e:dd:47:88:7d:8c:9d:f9:97:a3:eb:ad:87:
                    29:ab:3b:cd:ea:20:a0:ca:35:d5:d5:29:34:1f:5a:
                    15:70:b5:51:21:f7:6f:5d:bf:5a:4b:e8:f3:b8:62:
                    29:32:7b:e6:f9:25:96:40:b4:2f:69:d1:b5:e3:2a:
                    fa:20:ac:98:8b:4e:e6:f1:da:aa:a1:20:10:f2:f6:
                    a2:62:46:d4:91:8e:b9:1e:cd:c0:31:de:5d:39:46:
                    4a:23:88:d0:88:84:4e:13:f2:5d:1f:19:b1:29:07:
                    22:25:82:65:32:52:75:82:c5:3b:0c:f9:3f:73:1e:
                    31:8b:05:d6:6e:25:bd:21:e1:f2:67:e6:34:f2:47:
                    be:a2:79:c2:e4:ff:1b:fe:4b:8a:f4:1a:95:b8:4c:
                    cb:34:31:dd:7a:76:b9:3e:0c:01:26:ed:df:fe:e3:
                    40:56:ba:d8:6c:0f:33:7a:74:2e:6c:32:60:1d:2d:
                    d1:62:d0:c0:94:7f:a6:73:90:74:74:10:67:5e:c1:
                    78:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3A:BB:E8:7E:6D:AE:DB:A9:32:D4:B2:7E:B7:CB:70:A2:53:B6:25
            X509v3 Authority Key Identifier:
                keyid:90:9C:3B:C7:73:0E:74:42:AD:1C:EC:A9:61:D8:61:3A:42:5E:BA:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUKmo2KA5E7FMZ1jGfXHoARHS8K1FnRBiQQ4j9PJtuzy/0/909C3BC7730E7442AD1CECA961D8613A425EBA1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909C3BC7730E7442AD1CECA961D8613A425EBA1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUKmo2KA5E7FMZ1jGfXHoARHS8K1FnRBiQQ4j9PJtuzy/0/909C3BC7730E7442AD1CECA961D8613A425EBA1F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:d5:c9:f6:df:24:80:2e:34:9d:0f:9f:8d:c0:55:b4:64:b8:
         34:e0:a5:14:bf:df:0b:64:a9:fc:9c:a3:6e:72:f9:a5:30:d7:
         55:03:6c:72:96:6a:70:23:5d:d5:4b:35:ae:77:1f:05:3e:70:
         1c:fe:08:2d:db:70:10:e2:b3:a7:0a:74:68:95:07:dc:c8:38:
         d7:89:d1:40:ac:c0:07:65:f4:d3:1c:33:77:24:d8:a5:1e:c1:
         a3:22:31:8e:c3:a6:75:bd:cb:89:32:c8:5e:94:26:cc:19:5d:
         f8:4a:b4:3c:f7:a6:58:72:e8:d6:4a:b3:71:e7:b1:73:33:0c:
         01:67:ce:5b:cc:51:6e:0d:ff:ea:d2:a9:7e:b9:96:3a:b5:1b:
         b2:a2:ea:c3:f3:cf:5d:6e:d7:88:1d:ab:55:aa:71:de:5a:81:
         ac:25:29:eb:74:b8:e0:89:18:b2:c2:15:f6:86:52:4e:80:ba:
         51:00:a3:fa:b9:d8:84:83:30:a9:8c:e4:44:49:3a:df:d3:04:
         28:c2:d6:b2:e5:0d:f1:3a:2d:a9:d3:63:20:4f:4d:52:a1:d8:
         e9:7c:6b:85:66:89:bd:a3:71:36:7e:ef:47:d0:d3:ef:98:64:
         a4:73:92:1a:1d:53:60:aa:ab:54:2b:5f:61:b3:9d:70:f0:c6:
         e5:02:39:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 16:23:22 2025 by rpki-client