This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft
File:                     CA9F7609986EAF1A517249B9120F2B69069A604A.mft (raw, json)
Hash identifier:          msy+S+N6i/q6Zy506MMiaDr/SkR/oczmVRFnkfMDh10=
Subject key identifier:   E7:37:BF:D4:CC:8A:A6:1A:2E:6C:80:F8:B7:8E:4B:50:BD:69:24:47
Authority key identifier: CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A
Certificate issuer:       /CN=CA9F7609986EAF1A517249B9120F2B69069A604A
Certificate serial:       1ABE7632307E9EB1C94C705D3220D54750BBEB8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft
Manifest number:          034B
Signing time:             Thu 25 Dec 2025 20:10:00 +0000
Manifest this update:     Thu 25 Dec 2025 20:05:00 +0000
Manifest next update:     Fri 26 Dec 2025 21:50:00 +0000
Files and hashes:         1: 323830343a333864383a3a2f33322d3334203d3e20323636353035.roa (hash: t4980+rUmsxpFvMPiI7I8jUd83zOqWinNqdfWWIlnEA=)
                          2: 3137302e3234342e37362e302f32342d3234203d3e20323636353035.roa (hash: amplB2JLDJJAckH9IaBBkn+qJzqilzpjHxaNCTaCWYQ=)
                          3: 3137302e3234342e37382e302f32332d3233203d3e20323636353035.roa (hash: zYfkxrKkqL3tYrhKgo7C4mfgls0J10QOQdD+qfnFkqw=)
                          4: 3137302e3234342e37372e302f32342d3234203d3e20323636353035.roa (hash: eJBkgue2M5PeX7HA+TZbr9kyv+9Hqw6VsgHSqBR6XUE=)
                          5: CA9F7609986EAF1A517249B9120F2B69069A604A.crl (hash: 4B410DTFvnjP2UvrmhZuZFujXNFYhdR2AZ0GgQBcaNY=)
                          6: 3137302e3234342e37382e302f32342d3234203d3e20323636353035.roa (hash: P2xrOWpHLY6EnnxO2vbmZAQg+LiKo7wZq6AG1cS/2u4=)
                          7: 3137302e3234342e37362e302f32322d3232203d3e20323636353035.roa (hash: smiarjDG+OGsbjcVsk86Au5AndvkklCegjiEmQy0Xdw=)
                          8: 3137302e3234342e37362e302f32332d3233203d3e20323636353035.roa (hash: PVZgZ80ec1MnnTWZFJhH3Pekch5EzlVCo00ByHvruS8=)
                          9: 3137302e3234342e37392e302f32342d3234203d3e20323636353035.roa (hash: YF8aSn8ZrakqqHsGkJ+aJMpg3UM2WIjA8ryfsST1/NQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl
                          rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 26 Dec 2025 21:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:be:76:32:30:7e:9e:b1:c9:4c:70:5d:32:20:d5:47:50:bb:eb:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA9F7609986EAF1A517249B9120F2B69069A604A
        Validity
            Not Before: Dec 25 20:05:00 2025 GMT
            Not After : Dec 26 21:50:00 2025 GMT
        Subject: CN=E737BFD4CC8AA61A2E6C80F8B78E4B50BD692447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e9:53:b6:42:22:d1:dd:d4:fc:ea:33:d4:bc:
                    0e:14:f2:1c:bf:18:b2:66:ac:9e:3d:65:5d:ff:bd:
                    b5:8e:c9:a5:49:5e:87:02:24:de:dc:bf:82:6a:09:
                    37:79:cd:a1:5a:e6:f9:f0:1b:db:b2:49:14:5f:49:
                    2b:c5:50:5d:28:a1:45:5b:2f:9d:af:94:3a:2d:fd:
                    f3:6d:44:0a:76:20:b2:80:cc:53:fa:54:11:e2:ef:
                    56:b0:87:39:02:e9:05:41:2f:c8:a2:33:79:dd:07:
                    58:46:1f:19:de:02:84:bb:fb:cc:ee:71:ff:4b:34:
                    16:1d:f4:55:f1:b9:e8:24:8b:5e:e5:27:fc:5f:91:
                    47:d0:fd:6e:09:50:18:b8:b8:d3:d4:72:e0:2a:79:
                    2f:08:c2:d7:16:f3:d8:9f:c1:22:b2:2d:fe:5d:18:
                    56:20:7d:33:1c:1e:4c:36:e5:c1:51:67:2e:13:e7:
                    43:e7:b5:86:b3:d3:c3:a9:8e:5d:3d:31:cd:ef:96:
                    b0:0d:28:6d:ad:fd:29:40:a6:2e:7a:3f:08:7b:09:
                    c2:ad:bf:2c:44:b3:92:cf:5f:a3:09:ed:08:34:bf:
                    6d:c0:a4:f9:ab:4d:5d:bb:3e:38:13:8d:54:f9:c1:
                    a0:ce:e2:a2:7e:db:a7:fe:32:4b:a0:80:ca:a5:d0:
                    f6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:37:BF:D4:CC:8A:A6:1A:2E:6C:80:F8:B7:8E:4B:50:BD:69:24:47
            X509v3 Authority Key Identifier:
                keyid:CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:4b:db:e0:2d:64:14:44:20:1b:11:b5:52:8e:8c:c3:f8:f8:
         22:e0:40:14:f9:03:12:36:b5:a5:19:7e:10:ec:2e:95:cb:a3:
         7d:63:13:6f:6f:4d:ea:f1:f7:14:cf:2f:15:ff:16:a1:aa:20:
         64:90:97:ab:c2:57:91:0f:74:1f:08:67:6f:a4:24:d1:be:7f:
         19:e1:33:bd:54:44:f4:71:53:87:e0:07:ec:a2:43:cd:55:90:
         4e:d9:a4:2a:90:c7:2d:11:19:ee:32:8f:8c:84:ef:84:f1:2f:
         aa:fb:64:e0:76:de:ec:f7:9f:6b:86:3b:aa:1f:e6:dd:4e:2b:
         82:28:01:19:40:a4:f2:4f:ac:02:a5:ae:2f:1f:80:56:3b:e0:
         f0:a7:46:6f:fa:fc:e2:f2:fd:a8:24:86:89:35:d5:6d:12:18:
         b0:96:84:89:14:36:a2:72:c8:22:fa:16:10:89:b5:a9:3c:38:
         0e:19:18:b4:de:fe:4e:0c:41:26:9b:0f:1f:37:74:a0:50:d8:
         39:2a:81:9f:6d:f4:6b:39:94:0b:0c:dd:4e:67:dd:3a:8a:44:
         19:30:d5:80:cc:2c:a4:08:56:c3:84:aa:80:b1:2d:be:ad:6f:
         14:01:9d:fa:f7:9f:4c:8c:5d:6a:8f:77:c0:83:9f:31:d5:87:
         d3:78:66:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGr52MjB+nrHJTHBdMiDVR1C764owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0E5Rjc2MDk5ODZFQUYxQTUxNzI0OUI5MTIwRjJCNjkw
NjlBNjA0QTAeFw0yNTEyMjUyMDA1MDBaFw0yNTEyMjYyMTUwMDBaMDMxMTAvBgNV
BAMTKEU3MzdCRkQ0Q0M4QUE2MUEyRTZDODBGOEI3OEU0QjUwQkQ2OTI0NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/6VO2QiLR3dT86jPUvA4U8hy/
GLJmrJ49ZV3/vbWOyaVJXocCJN7cv4JqCTd5zaFa5vnwG9uySRRfSSvFUF0ooUVb
L52vlDot/fNtRAp2ILKAzFP6VBHi71awhzkC6QVBL8iiM3ndB1hGHxneAoS7+8zu
cf9LNBYd9FXxuegki17lJ/xfkUfQ/W4JUBi4uNPUcuAqeS8IwtcW89ifwSKyLf5d
GFYgfTMcHkw25cFRZy4T50PntYaz08Opjl09Mc3vlrANKG2t/SlApi56Pwh7CcKt
vyxEs5LPX6MJ7Qg0v23ApPmrTV27PjgTjVT5waDO4qJ+26f+MkuggMql0PadAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU5ze/1MyKphoubID4t45LUL1pJEcwHwYDVR0j
BBgwFoAUyp92CZhurxpRckm5Eg8raQaaYEowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTdBVFVlNFJENTFZcUx5dkNHdUhTdlM2M2lBdHJyWGFFeEpqUmpydjk2
RGIvMS9DQTlGNzYwOTk4NkVBRjFBNTE3MjQ5QjkxMjBGMkI2OTA2OUE2MDRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBOUY3NjA5OTg2RUFGMUE1
MTcyNDlCOTEyMEYyQjY5MDY5QTYwNEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QTdBVFVlNFJENTFZcUx5dkNHdUhTdlM2M2lBdHJyWGFFeEpqUmpydjk2RGIvMS9D
QTlGNzYwOTk4NkVBRjFBNTE3MjQ5QjkxMjBGMkI2OTA2OUE2MDRBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANkvb4C1kFEQgGxG1Uo6Mw/j4IuBAFPkDEja1pRl+EOwulcujfWMTb29N6vH3
FM8vFf8WoaogZJCXq8JXkQ90Hwhnb6Qk0b5/GeEzvVRE9HFTh+AH7KJDzVWQTtmk
KpDHLREZ7jKPjITvhPEvqvtk4Hbe7Pefa4Y7qh/m3U4rgigBGUCk8k+sAqWuLx+A
Vjvg8KdGb/r84vL9qCSGiTXVbRIYsJaEiRQ2onLIIvoWEIm1qTw4DhkYtN7+TgxB
JpsPHzd0oFDYOSqBn230azmUCwzdTmfdOopEGTDVgMwspAhWw4SqgLEtvq1vFAGd
+vefTIxdao93wIOfMdWH03hmnQ==
-----END CERTIFICATE-----
Generated at Thu Dec 25 22:23:22 2025 by rpki-client