This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/F4UzVWXXk6HGr8gbzLuxpLeUVtRna4CmBppqavpDdZPE/0/9BB7FC9A69CBB06CBF7AF74C65A4A734D284C5EE.mft
File:                     9BB7FC9A69CBB06CBF7AF74C65A4A734D284C5EE.mft (raw, json)
Hash identifier:          4XsbD1kA5JeCLRvcHEDmjV/TDBTlU+sqZncBed7syyE=
Subject key identifier:   D3:39:38:A0:EA:B1:54:DC:8B:26:68:36:B7:CA:93:98:B6:4F:34:21
Authority key identifier: 9B:B7:FC:9A:69:CB:B0:6C:BF:7A:F7:4C:65:A4:A7:34:D2:84:C5:EE
Certificate issuer:       /CN=9BB7FC9A69CBB06CBF7AF74C65A4A734D284C5EE
Certificate serial:       21391C70E43363C6ED2C32E5B342F5DF3168E2DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BB7FC9A69CBB06CBF7AF74C65A4A734D284C5EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4UzVWXXk6HGr8gbzLuxpLeUVtRna4CmBppqavpDdZPE/0/9BB7FC9A69CBB06CBF7AF74C65A4A734D284C5EE.mft
Manifest number:          01E9
Signing time:             Tue 23 Dec 2025 00:19:41 +0000
Manifest this update:     Tue 23 Dec 2025 00:14:41 +0000
Manifest next update:     Wed 24 Dec 2025 02:31:41 +0000
Files and hashes:         1: 9BB7FC9A69CBB06CBF7AF74C65A4A734D284C5EE.crl (hash: aNkfM+FpA0vytR1SORy16M+GJY0EcULLOKQGyugZT2U=)
                          2: 323830343a346564343a3a2f33322d3336203d3e20323638323835.roa (hash: QXv1NTyXGDp0Bkpgy+Qge0i/oVLklZ5oUVZsHcZipzs=)
                          3: 34352e3233372e3131322e302f32322d3234203d3e20323638323835.roa (hash: 4igDBlHcnGZk9JH1XtRVMIA3FuzCqc1vHKDKg2ncVZI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F4UzVWXXk6HGr8gbzLuxpLeUVtRna4CmBppqavpDdZPE/0/9BB7FC9A69CBB06CBF7AF74C65A4A734D284C5EE.crl
                          rsync://rpki-repo.registro.br/repo/F4UzVWXXk6HGr8gbzLuxpLeUVtRna4CmBppqavpDdZPE/0/9BB7FC9A69CBB06CBF7AF74C65A4A734D284C5EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BB7FC9A69CBB06CBF7AF74C65A4A734D284C5EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 02:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:39:1c:70:e4:33:63:c6:ed:2c:32:e5:b3:42:f5:df:31:68:e2:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BB7FC9A69CBB06CBF7AF74C65A4A734D284C5EE
        Validity
            Not Before: Dec 23 00:14:41 2025 GMT
            Not After : Dec 24 02:31:41 2025 GMT
        Subject: CN=D33938A0EAB154DC8B266836B7CA9398B64F3421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:43:2d:7d:3b:4a:6d:8a:b9:0f:44:ac:55:24:
                    c7:1c:34:9b:cd:a8:34:d6:b9:d0:6d:16:1e:52:40:
                    f7:ab:b1:a3:43:1d:21:db:4f:c3:70:e7:a7:5a:b3:
                    df:6f:e7:30:66:19:fd:fd:e9:bc:3c:6f:83:a7:6e:
                    7b:00:ac:ac:7c:8a:60:a1:cf:92:52:c8:20:15:1b:
                    ff:4d:23:a7:d7:c6:2a:24:7b:c5:3a:19:71:1e:a5:
                    a5:71:51:aa:b5:9c:97:d0:30:5e:2d:58:0d:83:2a:
                    dc:bc:e0:1b:41:33:82:fd:cb:45:88:b7:8e:07:4a:
                    21:63:10:f2:fc:fb:a3:68:be:e6:cc:1d:96:64:73:
                    11:25:8f:5d:6e:78:d1:45:eb:d6:5a:08:d6:c6:bf:
                    4a:4e:18:e1:da:54:b8:81:91:5a:34:e0:52:81:c1:
                    11:79:7c:ad:e3:6b:26:95:b0:da:d0:71:f9:42:3a:
                    66:25:f1:6c:1a:b4:46:3d:01:fe:e0:50:8d:a1:9a:
                    79:ec:76:d5:39:87:fb:60:17:03:2a:5f:bb:5c:5b:
                    22:52:85:a3:7e:d4:47:52:18:75:3c:47:ad:94:e6:
                    0d:74:1a:7c:58:9e:a0:91:be:a1:44:95:cb:f0:c1:
                    c2:53:ee:1b:1b:03:cd:c8:91:12:d9:fb:9b:b7:83:
                    7c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:39:38:A0:EA:B1:54:DC:8B:26:68:36:B7:CA:93:98:B6:4F:34:21
            X509v3 Authority Key Identifier:
                keyid:9B:B7:FC:9A:69:CB:B0:6C:BF:7A:F7:4C:65:A4:A7:34:D2:84:C5:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4UzVWXXk6HGr8gbzLuxpLeUVtRna4CmBppqavpDdZPE/0/9BB7FC9A69CBB06CBF7AF74C65A4A734D284C5EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BB7FC9A69CBB06CBF7AF74C65A4A734D284C5EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4UzVWXXk6HGr8gbzLuxpLeUVtRna4CmBppqavpDdZPE/0/9BB7FC9A69CBB06CBF7AF74C65A4A734D284C5EE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:da:a6:29:fb:27:e4:ac:52:21:75:d7:17:a2:cf:55:bf:2b:
         99:61:5c:36:3d:cf:8c:9a:3f:60:fc:cb:b0:d3:e7:1b:13:d5:
         ea:35:94:24:bb:9d:1d:5d:c3:be:f1:c0:19:62:83:19:20:11:
         9b:a6:3e:fd:1d:5b:e9:41:cf:e5:6c:27:68:33:43:e4:11:90:
         fb:a2:ae:bd:a9:6a:b0:5a:09:59:54:f7:18:7b:bb:96:3f:d3:
         ed:41:f2:c4:c2:a0:23:8a:ec:69:28:ec:82:e2:a8:46:7f:f6:
         93:9d:2c:f6:ac:7a:8f:41:d5:b2:11:64:0d:e8:8d:5e:df:e7:
         c7:45:9a:f8:9a:e3:38:e6:b0:46:88:41:70:68:6e:b3:a0:31:
         f4:e5:ad:b0:a8:81:e2:72:87:8c:9d:d6:7b:8d:46:73:54:ca:
         0d:66:77:26:a3:d5:e2:0c:cb:36:86:e4:c1:fc:4c:16:18:d2:
         05:b2:ba:57:ed:27:ef:4f:54:93:78:22:cc:82:76:6b:ae:24:
         4e:7a:32:0d:4d:2f:bf:86:44:43:6d:bc:67:50:a1:7a:7a:c7:
         c3:ea:8c:98:e2:06:4e:55:ac:83:da:95:1c:16:6e:bb:82:19:
         9c:9f:2e:aa:bf:41:5d:d6:6a:24:e7:dc:63:0e:6b:e6:f0:0d:
         49:d5:6e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 16:34:15 2025 by rpki-client