This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.mft
File:                     9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.mft (raw, json)
Hash identifier:          YjBU7VOlgJ55UYlHywlzRdkyTQu7RhHx1NKComSV7NA=
Subject key identifier:   F5:9E:58:16:AC:07:6A:20:A9:D8:EA:43:EB:8B:AA:AF:A0:C2:4A:D8
Authority key identifier: 9D:B9:9B:4A:1C:D5:6B:1C:7C:10:4F:A2:5E:FD:E5:18:59:6F:D2:21
Certificate issuer:       /CN=9DB99B4A1CD56B1C7C104FA25EFDE518596FD221
Certificate serial:       1438FE7BB07F9ADBD702516FA09C34770887C200
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.mft
Manifest number:          0341
Signing time:             Thu 18 Dec 2025 19:06:55 +0000
Manifest this update:     Thu 18 Dec 2025 19:01:55 +0000
Manifest next update:     Fri 19 Dec 2025 19:11:55 +0000
Files and hashes:         1: 3137372e39312e3233312e302f32342d3234203d3e20323730383939.roa (hash: 4ahpbqrbVjoNhJ6suC152xt5nvpn2qTcWWJstS6xu/w=)
                          2: 9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.crl (hash: r9IAmKheJTErOdLrkO7k2aAA6rGTN7imZGn7GnUqa2Q=)
                          3: 323830343a373332383a313030303a3a2f33362d3336203d3e20323730383939.roa (hash: KaDD1B9L/1YgiBrcyRisFVWHKeCqMc0d/T1zrCbZrlk=)
                          4: 3137372e39312e3232382e302f32322d3232203d3e20323730383939.roa (hash: qblvyMsP/0q623/AR9T2qt6Q+iQZ5E9cP+jioV2MfYc=)
                          5: 323830343a373332383a3a2f33322d3332203d3e20323730383939.roa (hash: 0og7mHAg1cs/CXfLP5YKWtxvT1kRb6ab0ut/ca04ON0=)
                          6: 3137372e39312e3232382e302f32342d3234203d3e20323730383939.roa (hash: 2PNhElcg7Mx6AzGTJNJzEeoiimZImJMyssS8EtLNr8M=)
                          7: 3137372e39312e3233302e302f32342d3234203d3e20323730383939.roa (hash: hITh7h70/ARvvMfkHTgRXHtN3zrRnC9UNIMEPc5H8nk=)
                          8: 323830343a373332383a323030303a3a2f33362d3336203d3e20323730383939.roa (hash: vkXUxHuNfUCti1NDkT/pFbATg8NcGqlxLavMso/cYt8=)
                          9: 323830343a373332383a3a2f33362d3336203d3e20323730383939.roa (hash: Hgb0YznLAEtDoYv49I8u6RBseazG2W8a4vF0eGCxlqM=)
                          10: 3137372e39312e3232392e302f32342d3234203d3e20323730383939.roa (hash: UMqTK9reUzNNnwRwMXBy/vvN20ODpBYMLm+4Fschui4=)
                          11: 3137372e39312e3232382e302f32332d3233203d3e20323730383939.roa (hash: I/zMkl825iiNPzx7DySyScRiyB7PG+Sehcz9/ZpNoIo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.crl
                          rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 19:11:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:38:fe:7b:b0:7f:9a:db:d7:02:51:6f:a0:9c:34:77:08:87:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB99B4A1CD56B1C7C104FA25EFDE518596FD221
        Validity
            Not Before: Dec 18 19:01:55 2025 GMT
            Not After : Dec 19 19:11:55 2025 GMT
        Subject: CN=F59E5816AC076A20A9D8EA43EB8BAAAFA0C24AD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:17:b1:92:c2:36:6c:94:11:5d:b8:cf:32:22:
                    16:a5:5e:7f:75:ff:ab:b4:22:c3:bf:82:43:90:5e:
                    2c:a0:78:1a:97:50:69:36:d3:cf:3a:52:d6:6f:d6:
                    17:0c:bb:7c:8f:6f:94:c1:a2:f0:50:b6:c2:90:1a:
                    d3:4a:cd:bc:f6:96:9b:81:e9:79:c4:ad:28:39:4a:
                    a5:97:d7:3d:39:86:dc:f9:40:db:98:21:b0:a8:9e:
                    ab:a3:19:23:4e:66:9a:52:56:b3:c1:f9:7b:1f:6c:
                    04:0d:80:91:81:cb:c5:45:98:7e:5f:01:89:8e:0a:
                    ce:e9:12:0e:ac:04:32:c0:92:1a:1f:e9:bb:99:96:
                    d1:ed:a1:df:4a:30:15:f8:2a:1a:77:93:3f:25:fe:
                    b9:63:00:32:f4:c8:6c:f8:5c:14:49:22:bf:c2:55:
                    88:d9:5a:84:d2:c6:93:4e:c7:e0:5a:0c:81:46:eb:
                    b7:ec:00:f1:e0:8c:ce:01:63:39:54:36:fa:63:ef:
                    7f:80:64:57:5c:c1:e7:5b:67:76:69:50:5f:ab:2c:
                    02:a4:8d:b3:ab:3b:fc:9c:3e:b3:60:5d:74:a5:b1:
                    a0:da:01:e2:65:e0:00:37:8d:eb:dc:5c:8a:66:73:
                    f1:35:b0:54:4a:8f:9e:89:aa:15:61:d2:04:db:2f:
                    31:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:9E:58:16:AC:07:6A:20:A9:D8:EA:43:EB:8B:AA:AF:A0:C2:4A:D8
            X509v3 Authority Key Identifier:
                keyid:9D:B9:9B:4A:1C:D5:6B:1C:7C:10:4F:A2:5E:FD:E5:18:59:6F:D2:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:bf:5a:a3:71:54:f7:56:db:8c:97:76:56:95:c8:b4:87:fa:
         e9:37:f2:d9:57:1b:74:76:66:ea:0a:ed:b8:2e:13:48:6e:d4:
         c0:7a:e7:d0:02:f5:b7:67:2b:94:3a:87:d9:ac:8a:26:69:d3:
         3a:43:80:f1:bc:78:b9:97:9f:ba:6f:63:ba:58:96:82:20:06:
         a2:1a:6a:be:8e:64:18:12:0c:e1:02:95:38:52:2a:10:30:5b:
         02:ba:f7:61:c1:99:40:9a:88:41:ec:c6:f8:08:01:5d:84:fb:
         c3:21:6d:1e:e6:80:d5:12:c2:d0:c3:b2:80:59:49:7d:32:23:
         47:ad:15:af:19:9d:9e:51:ab:e5:39:f3:c6:23:88:84:fe:21:
         ae:d6:82:6d:29:ef:84:79:07:a9:50:a2:ce:31:39:d0:63:82:
         08:96:b5:37:2e:63:69:78:df:fe:5a:4b:18:a5:bc:d3:8a:a8:
         ae:c7:b8:00:06:5c:4a:7e:86:fb:0d:df:e7:ca:47:6e:9c:18:
         17:af:61:15:17:db:63:e2:fa:9b:37:cb:30:d7:f1:2f:40:ab:
         3e:43:eb:f3:c0:4a:9e:61:dc:8e:14:6e:7d:24:7c:52:a1:c9:
         28:a2:63:30:45:7e:2c:25:e6:61:32:c3:d8:06:e6:9f:0e:bf:
         c2:f2:f0:d6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFDj+e7B/mtvXAlFvoJw0dwiHwgAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOURCOTlCNEExQ0Q1NkIxQzdDMTA0RkEyNUVGREU1MTg1
OTZGRDIyMTAeFw0yNTEyMTgxOTAxNTVaFw0yNTEyMTkxOTExNTVaMDMxMTAvBgNV
BAMTKEY1OUU1ODE2QUMwNzZBMjBBOUQ4RUE0M0VCOEJBQUFGQTBDMjRBRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5F7GSwjZslBFduM8yIhalXn91
/6u0IsO/gkOQXiygeBqXUGk20886UtZv1hcMu3yPb5TBovBQtsKQGtNKzbz2lpuB
6XnErSg5SqWX1z05htz5QNuYIbConqujGSNOZppSVrPB+XsfbAQNgJGBy8VFmH5f
AYmOCs7pEg6sBDLAkhof6buZltHtod9KMBX4Khp3kz8l/rljADL0yGz4XBRJIr/C
VYjZWoTSxpNOx+BaDIFG67fsAPHgjM4BYzlUNvpj73+AZFdcwedbZ3ZpUF+rLAKk
jbOrO/ycPrNgXXSlsaDaAeJl4AA3jevcXIpmc/E1sFRKj56JqhVh0gTbLzHtAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU9Z5YFqwHaiCp2OpD64uqr6DCStgwHwYDVR0j
BBgwFoAUnbmbShzVaxx8EE+iXv3lGFlv0iEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1Z3TUVwNUVuSlNLN1RhQ2pidTVEcUhZU1RaV2E4UndxYXI5QWNBQ0pq
N3MvMS85REI5OUI0QTFDRDU2QjFDN0MxMDRGQTI1RUZERTUxODU5NkZEMjIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlEQjk5QjRBMUNENTZCMUM3
QzEwNEZBMjVFRkRFNTE4NTk2RkQyMjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R1Z3TUVwNUVuSlNLN1RhQ2pidTVEcUhZU1RaV2E4UndxYXI5QWNBQ0pqN3MvMS85
REI5OUI0QTFDRDU2QjFDN0MxMDRGQTI1RUZERTUxODU5NkZEMjIxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHL9ao3FU91bbjJd2VpXItIf66Tfy2VcbdHZm6grtuC4TSG7UwHrn0AL1t2cr
lDqH2ayKJmnTOkOA8bx4uZefum9juliWgiAGohpqvo5kGBIM4QKVOFIqEDBbArr3
YcGZQJqIQezG+AgBXYT7wyFtHuaA1RLC0MOygFlJfTIjR60VrxmdnlGr5TnzxiOI
hP4hrtaCbSnvhHkHqVCizjE50GOCCJa1Ny5jaXjf/lpLGKW804qorse4AAZcSn6G
+w3f58pHbpwYF69hFRfbY+L6mzfLMNfxL0CrPkPr88BKnmHcjhRufSR8UqHJKKJj
MEV+LCXmYTLD2Abmnw6/wvLw1g==
-----END CERTIFICATE-----
Generated at Fri Dec 19 10:59:44 2025 by rpki-client