This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft
File:                     9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft (raw, json)
Hash identifier:          lOytippHRSxQotWYUNYe9hJAwMLUWm7p1WXqw0dzlSQ=
Subject key identifier:   87:56:A3:78:E6:22:4E:86:CD:72:7C:30:46:C3:C6:67:C3:3F:31:AC
Authority key identifier: 9E:8E:1D:B5:C3:3D:3F:C8:F8:E7:C9:93:01:15:80:AA:28:F3:0B:C9
Certificate issuer:       /CN=9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9
Certificate serial:       1F3AD64DD6BB8F7E06D23A70AE7E17921320ACED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft
Manifest number:          0242
Signing time:             Sun 21 Dec 2025 20:34:46 +0000
Manifest this update:     Sun 21 Dec 2025 20:29:46 +0000
Manifest next update:     Mon 22 Dec 2025 22:34:46 +0000
Files and hashes:         1: 9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.crl (hash: h8QOlEKl8JhOzY8aCOf8GpEHi8AE5w8jNmsrhnOE0l4=)
                          2: 323830343a346163383a3a2f33322d3332203d3e20323637323633.roa (hash: VSH2fxDW2V0tjSJpkhSvwy0Yrc/hswmaGt0+pSH8vjk=)
                          3: 3136302e3233382e32342e302f32322d3234203d3e20323637323633.roa (hash: 2qOT4j6HG0vWun6Vyzh2Pkj1UkPidk6rSXOhaCbNHUU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.crl
                          rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 22:34:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:3a:d6:4d:d6:bb:8f:7e:06:d2:3a:70:ae:7e:17:92:13:20:ac:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9
        Validity
            Not Before: Dec 21 20:29:46 2025 GMT
            Not After : Dec 22 22:34:46 2025 GMT
        Subject: CN=8756A378E6224E86CD727C3046C3C667C33F31AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:00:ce:e3:64:55:fd:39:5c:a5:34:83:ee:7e:
                    0b:2c:25:d4:f3:c0:11:3a:d5:dd:ee:db:87:ac:d1:
                    be:a7:e6:04:83:2d:a9:86:93:42:99:f8:9d:33:ac:
                    73:be:8d:98:0a:ea:96:3b:3d:52:83:ae:a4:ce:65:
                    4a:37:82:c3:27:47:3e:a1:73:88:a0:d5:9e:97:eb:
                    42:9e:27:79:9c:e8:c7:be:1f:a7:28:ff:4c:68:a8:
                    00:41:c2:04:fa:72:27:a2:fb:20:db:91:10:38:a3:
                    e6:31:05:e6:bd:f2:7e:57:09:db:32:f1:8d:d2:79:
                    82:3c:55:80:4f:48:44:99:c1:ed:b3:b0:89:9b:e4:
                    71:c8:66:96:44:22:07:a6:82:d3:69:96:04:9b:09:
                    d4:03:77:23:3d:c5:df:03:74:1c:91:e4:84:89:e1:
                    ee:fc:e7:34:84:62:dd:03:b4:b1:9a:a3:f4:c1:35:
                    f2:44:4f:6e:64:1a:94:b0:ad:9f:04:42:3f:ca:f3:
                    31:ec:c4:96:95:f4:58:11:4d:0d:69:d6:64:74:fe:
                    ac:50:08:bd:7a:a3:ee:59:39:e3:b2:3d:c9:90:7a:
                    92:e3:4d:1f:97:a7:7a:ef:d1:f9:97:60:fb:ed:af:
                    de:11:11:fb:50:e7:3b:2d:b2:92:06:0e:ba:47:9e:
                    02:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:56:A3:78:E6:22:4E:86:CD:72:7C:30:46:C3:C6:67:C3:3F:31:AC
            X509v3 Authority Key Identifier:
                keyid:9E:8E:1D:B5:C3:3D:3F:C8:F8:E7:C9:93:01:15:80:AA:28:F3:0B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:00:73:80:fc:ba:50:92:a1:73:93:6c:92:6c:1c:6d:78:52:
         b2:f9:bc:d4:b4:5e:5b:9e:63:a4:55:23:d6:28:7b:cf:66:b3:
         c9:26:19:02:de:99:70:97:55:ae:da:49:05:8a:30:6a:bd:46:
         69:bf:31:df:49:e0:6b:6d:49:54:fe:0d:c0:1e:f5:73:bf:bb:
         87:8d:0a:f8:36:39:aa:c2:31:03:09:cf:09:b9:10:c9:4c:41:
         16:53:f4:12:d0:3c:96:b6:28:d8:3b:f6:f7:e1:bd:c2:5c:44:
         95:ed:80:13:41:7a:e8:cf:0c:ae:79:75:d6:d9:2a:c8:3f:0a:
         49:a1:48:31:5b:04:8b:77:f4:70:47:d5:5e:ac:55:c5:d8:76:
         08:97:9d:9e:e2:88:1b:d4:c8:fa:20:43:a9:44:97:6d:78:69:
         70:46:aa:b8:be:c3:02:93:29:9b:0c:e9:b6:ff:4f:56:61:fa:
         95:fc:77:aa:35:53:bb:aa:95:a9:92:ac:78:8c:99:b3:12:34:
         58:c7:d7:be:69:9e:d5:db:c4:06:4a:89:81:22:c5:21:df:f6:
         4d:44:3c:37:91:89:a6:bc:bc:a5:f7:a2:70:1f:e4:a2:d2:df:
         43:a8:1b:d5:79:a4:c9:9b:22:37:93:0f:63:9c:18:c4:87:b0:
         b4:bf:9d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----