This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.mft
File:                     B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.mft (raw, json)
Hash identifier:          NSwiid4s+LGkoiM0tdqcXYfLXPtLr3/cCdi1ncbeG7w=
Subject key identifier:   AE:8C:52:4B:64:33:CA:6B:BD:F4:C9:90:66:E8:DE:9C:AE:28:FF:E9
Authority key identifier: B9:EF:F2:DC:C8:D3:B6:92:8E:51:6E:6A:2D:F0:86:E0:8C:B8:91:E4
Certificate issuer:       /CN=B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4
Certificate serial:       01D161F7D3D68B2374CA45782064426F0EBA65B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.mft
Manifest number:          0354
Signing time:             Sat 20 Dec 2025 09:50:11 +0000
Manifest this update:     Sat 20 Dec 2025 09:45:11 +0000
Manifest next update:     Sun 21 Dec 2025 09:56:11 +0000
Files and hashes:         1: B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.crl (hash: O1QpG6CBcQCtBv6gSObcXZnnWLT/NUmDKByf36PdbQU=)
                          2: 3137392e35312e3134382e302f32322d3234203d3e20323731313739.roa (hash: fscH08Be33lLCrOFmFTelyKv56wGOusIcbHMYRtzIk0=)
                          3: 323830343a373737343a3a2f33322d3332203d3e20323731313739.roa (hash: 15axzlvaPxlpvdEmdsItvuAH+wRillPEZD906FjgXUs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.crl
                          rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 09:56:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d1:61:f7:d3:d6:8b:23:74:ca:45:78:20:64:42:6f:0e:ba:65:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4
        Validity
            Not Before: Dec 20 09:45:11 2025 GMT
            Not After : Dec 21 09:56:11 2025 GMT
        Subject: CN=AE8C524B6433CA6BBDF4C99066E8DE9CAE28FFE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:94:b5:7f:4f:45:cf:ae:1c:e5:29:ea:12:3b:
                    d8:04:cb:8f:30:a6:ae:35:c2:e5:53:71:48:ac:68:
                    cd:ad:61:48:13:3e:f2:dd:25:c3:c1:55:72:f5:7a:
                    43:cc:bd:b3:fd:f0:24:94:04:50:a9:ca:c4:2b:5a:
                    5e:03:2e:d4:a1:8f:d8:11:91:c0:22:d0:63:95:89:
                    76:67:9b:8c:6e:b7:8c:e2:bc:72:2a:62:97:a0:1e:
                    08:ca:93:2e:fd:d8:0c:2e:c0:68:17:9a:5a:1d:24:
                    95:2b:0d:c5:3b:0c:aa:1a:ed:5b:3d:75:96:4d:29:
                    aa:bf:e2:3b:96:d2:97:13:52:5d:a7:d9:80:c6:79:
                    79:cb:ed:1d:75:f0:5e:15:73:0e:80:1f:12:9e:d8:
                    7b:90:db:cf:7e:ed:d6:5a:b7:a4:a2:3f:86:9a:03:
                    6b:a4:ea:1d:51:2f:97:26:f9:2e:5a:b3:04:5f:78:
                    4f:7d:1c:cd:13:ce:ec:f6:9d:9b:f2:61:ea:b1:4a:
                    71:6d:73:e3:19:9d:54:11:14:5b:86:36:c9:7e:3d:
                    14:0b:48:d9:b4:52:26:68:d9:ab:b5:ce:9e:af:21:
                    64:05:fb:10:a0:a3:1b:17:44:7e:e5:3e:46:ba:d0:
                    da:27:c4:c2:e9:b3:0c:65:ce:2f:5a:b7:cf:9c:ad:
                    e4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8C:52:4B:64:33:CA:6B:BD:F4:C9:90:66:E8:DE:9C:AE:28:FF:E9
            X509v3 Authority Key Identifier:
                keyid:B9:EF:F2:DC:C8:D3:B6:92:8E:51:6E:6A:2D:F0:86:E0:8C:B8:91:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:1d:b0:d8:d5:62:c5:71:df:1b:02:86:ab:cd:7d:c0:57:dd:
         cb:78:89:33:63:2a:ff:59:2d:dd:86:2e:d2:cd:89:52:de:04:
         db:0b:c7:3f:74:76:8a:55:13:b8:00:2f:78:6c:df:d9:12:c2:
         f9:4f:cb:aa:3f:bd:76:d4:fb:a0:05:90:d2:3c:05:20:43:c7:
         81:2c:18:9d:6a:0c:69:bc:ef:e7:27:89:0f:8e:e4:a7:7d:0a:
         59:95:04:89:18:84:81:24:63:b3:93:69:3c:f4:06:88:84:cd:
         53:d8:23:c6:a5:9f:9a:0b:e4:07:2c:e6:0c:96:dd:0f:c4:9b:
         ee:fe:3d:b2:42:ae:d2:f2:06:fb:db:17:f4:26:95:51:5e:99:
         79:99:05:5d:4e:3f:7c:e0:ca:39:27:cc:4a:d3:c0:2a:99:5c:
         07:98:5d:a2:79:85:cb:49:83:1c:0c:8f:13:a3:ef:1e:27:33:
         67:a3:22:43:71:85:10:71:ac:dc:6c:85:99:c8:60:69:a1:4e:
         f1:1d:ac:7d:d7:64:78:01:2e:ff:54:b2:39:57:ad:19:3c:02:
         a0:cb:25:32:39:27:f4:d3:d2:b3:ec:fa:b5:94:4b:a8:d0:bb:
         98:18:91:11:4d:6e:44:2e:28:53:15:90:ab:57:79:69:c2:47:
         30:fa:73:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 15:09:59 2025 by rpki-client