This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft
File:                     C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft (raw, json)
Hash identifier:          mcOdfYcuWhVJVtehsuks4KJ87qc1gUDeFEQQXXrla0M=
Subject key identifier:   8D:11:DA:1F:AC:55:E4:6C:FC:D5:DE:04:A3:C8:B2:C2:3E:7A:11:5E
Authority key identifier: C9:DB:8E:A1:1F:6A:5A:48:5A:EC:29:55:61:43:81:5D:B2:50:7A:3B
Certificate issuer:       /CN=C9DB8EA11F6A5A485AEC29556143815DB2507A3B
Certificate serial:       652B99AE3FA60246CE8568DECDDADEBC0BE7FF45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft
Manifest number:          02BE
Signing time:             Thu 25 Dec 2025 02:50:48 +0000
Manifest this update:     Thu 25 Dec 2025 02:45:48 +0000
Manifest next update:     Fri 26 Dec 2025 05:52:48 +0000
Files and hashes:         1: C9DB8EA11F6A5A485AEC29556143815DB2507A3B.crl (hash: JWn5wygj/DlmY1XRgv3DyBGBl+Qm4Ul+FIHoCMqxOM8=)
                          2: 323830343a373739383a3a2f33322d313238203d3e20323731313838.roa (hash: Oq8XP3wv/ghsrdwyvbkipNglCVLH6ofbbhpDuh9rzrI=)
                          3: 3230302e362e34382e302f32342d3332203d3e20323731313838.roa (hash: HXzDFfjvaudy+HCQJ3LevFAJF+IlNvHbKDb7azvjpI4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.crl
                          rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 26 Dec 2025 03:57:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:2b:99:ae:3f:a6:02:46:ce:85:68:de:cd:da:de:bc:0b:e7:ff:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9DB8EA11F6A5A485AEC29556143815DB2507A3B
        Validity
            Not Before: Dec 25 02:45:48 2025 GMT
            Not After : Dec 26 05:52:48 2025 GMT
        Subject: CN=8D11DA1FAC55E46CFCD5DE04A3C8B2C23E7A115E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f9:4c:9b:1f:b0:47:89:9e:2e:41:f9:6d:37:
                    3d:cb:47:7c:8d:26:e5:03:9b:3e:70:8d:8c:1d:c5:
                    4b:6d:57:4c:ff:78:1b:2c:8b:e1:4b:60:67:e6:ba:
                    52:ab:24:31:e6:1d:46:0c:26:31:30:a0:f1:29:57:
                    ba:00:97:97:ac:16:a1:16:5e:c9:3f:e7:6b:18:d6:
                    71:fc:9d:5d:22:32:23:a2:c3:2b:f4:7c:c7:60:61:
                    4a:91:b3:d8:80:6f:e4:b9:f0:2f:c1:dc:a8:a7:d8:
                    1b:9f:8d:2b:d4:cf:21:f4:f9:f4:52:56:e4:77:23:
                    e6:9a:e4:10:63:fc:0e:97:ae:e8:10:3b:96:81:a9:
                    b1:9d:90:56:1c:f8:1a:db:c8:f9:51:db:cb:b2:da:
                    ef:6c:ea:ec:09:d5:d8:65:0a:af:e2:d2:e7:e0:b3:
                    9c:7b:3e:ac:ef:71:57:93:1f:d5:32:2a:04:ef:ef:
                    43:ab:88:18:5e:cd:10:54:3b:de:87:3e:4d:a1:16:
                    0b:88:40:50:80:c7:7d:8a:42:e3:7a:b5:53:ea:75:
                    d9:2c:99:f1:93:2f:92:ed:28:4c:c9:49:40:d8:2a:
                    aa:00:49:19:3a:ee:12:0a:ce:0a:03:75:21:b7:56:
                    69:19:55:95:cf:3b:d2:ea:32:08:37:df:56:b5:6f:
                    c4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:11:DA:1F:AC:55:E4:6C:FC:D5:DE:04:A3:C8:B2:C2:3E:7A:11:5E
            X509v3 Authority Key Identifier:
                keyid:C9:DB:8E:A1:1F:6A:5A:48:5A:EC:29:55:61:43:81:5D:B2:50:7A:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:54:0d:b5:65:e1:3c:de:dd:ad:aa:c4:3f:e8:ff:69:84:4f:
         9f:99:e1:4d:1d:27:ec:60:2a:0d:7d:be:e0:f5:1b:88:e1:58:
         c9:15:86:0f:10:33:66:a7:10:77:58:d1:75:65:3c:45:9e:5e:
         ad:b1:7d:70:ef:45:eb:ca:42:71:a8:43:a1:c4:55:8e:53:83:
         48:5f:77:ce:8e:ab:9e:13:48:a6:4b:a2:fb:b4:4a:bf:0e:dd:
         45:94:d9:ad:01:d3:23:db:65:0a:7d:3e:3d:c9:b2:44:dd:0e:
         c4:90:12:d0:97:b9:d4:5e:18:d1:4d:81:f4:49:93:51:93:42:
         ff:df:41:3b:bf:b1:11:58:33:21:77:fc:e7:70:57:a5:e2:07:
         e3:27:41:17:ed:22:47:a1:ea:49:78:5f:ad:e5:4c:cc:d8:de:
         69:ad:f7:58:de:39:9b:1f:5b:d5:d9:59:21:c4:06:44:70:a6:
         c4:ec:87:20:e3:ff:de:5f:50:43:a1:15:d5:5c:bd:25:be:2f:
         ca:d6:67:4e:ab:f6:fb:ce:a8:a7:1f:d5:62:78:98:d4:9a:0d:
         f4:cb:c6:fd:b6:2e:4e:e7:ee:dd:42:cd:e4:63:aa:cc:72:98:
         e8:2d:d9:c9:6c:bb:fc:4e:c9:26:0b:bf:4d:c7:7c:f9:f5:22:
         90:31:2c:bc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZSuZrj+mAkbOhWjezdrevAvn/0UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzlEQjhFQTExRjZBNUE0ODVBRUMyOTU1NjE0MzgxNURC
MjUwN0EzQjAeFw0yNTEyMjUwMjQ1NDhaFw0yNTEyMjYwNTUyNDhaMDMxMTAvBgNV
BAMTKDhEMTFEQTFGQUM1NUU0NkNGQ0Q1REUwNEEzQzhCMkMyM0U3QTExNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK+UybH7BHiZ4uQfltNz3LR3yN
JuUDmz5wjYwdxUttV0z/eBssi+FLYGfmulKrJDHmHUYMJjEwoPEpV7oAl5esFqEW
Xsk/52sY1nH8nV0iMiOiwyv0fMdgYUqRs9iAb+S58C/B3Kin2BufjSvUzyH0+fRS
VuR3I+aa5BBj/A6XrugQO5aBqbGdkFYc+BrbyPlR28uy2u9s6uwJ1dhlCq/i0ufg
s5x7PqzvcVeTH9UyKgTv70OriBhezRBUO96HPk2hFguIQFCAx32KQuN6tVPqddks
mfGTL5LtKEzJSUDYKqoASRk67hIKzgoDdSG3VmkZVZXPO9LqMgg331a1b8TZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUjRHaH6xV5Gz81d4Eo8iywj56EV4wHwYDVR0j
BBgwFoAUyduOoR9qWkha7ClVYUOBXbJQejswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVRXeFpWUzVMSnpMdlVYdmdrM2RvUjlhRjZoMW9nWEFCMkM1bWtlZ0p2
SzQvMC9DOURCOEVBMTFGNkE1QTQ4NUFFQzI5NTU2MTQzODE1REIyNTA3QTNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5REI4RUExMUY2QTVBNDg1
QUVDMjk1NTYxNDM4MTVEQjI1MDdBM0IuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OVRXeFpWUzVMSnpMdlVYdmdrM2RvUjlhRjZoMW9nWEFCMkM1bWtlZ0p2SzQvMC9D
OURCOEVBMTFGNkE1QTQ4NUFFQzI5NTU2MTQzODE1REIyNTA3QTNCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtlQNtWXhPN7drarEP+j/aYRPn5nhTR0n7GAqDX2+4PUbiOFYyRWGDxAzZqcQ
d1jRdWU8RZ5erbF9cO9F68pCcahDocRVjlODSF93zo6rnhNIpkui+7RKvw7dRZTZ
rQHTI9tlCn0+PcmyRN0OxJAS0Je51F4Y0U2B9EmTUZNC/99BO7+xEVgzIXf853BX
peIH4ydBF+0iR6HqSXhfreVMzNjeaa33WN45mx9b1dlZIcQGRHCmxOyHIOP/3l9Q
Q6EV1Vy9Jb4vytZnTqv2+86opx/VYniY1JoN9MvG/bYuTufu3ULN5GOqzHKY6C3Z
yWy7/E7JJgu/Tcd8+fUikDEsvA==
-----END CERTIFICATE-----
Generated at Thu Dec 25 05:00:35 2025 by rpki-client