This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft
File:                     09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft (raw, json)
Hash identifier:          goiObXivysUd8GVbrve7BI6xJ7hWd8HAlfmICKq/Jzo=
Subject key identifier:   E5:DE:18:0C:F4:61:AB:0A:E9:4F:1C:EF:EB:85:29:2B:12:17:60:86
Authority key identifier: 09:D8:D4:A6:70:69:58:0E:34:F1:6A:B0:47:42:0B:D4:A0:8D:4F:F0
Certificate issuer:       /CN=09D8D4A67069580E34F16AB047420BD4A08D4FF0
Certificate serial:       21D5CE42F9FB9321CEE72FE4B9268710EADE4579
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft
Manifest number:          028B
Signing time:             Sun 28 Dec 2025 09:50:45 +0000
Manifest this update:     Sun 28 Dec 2025 09:45:45 +0000
Manifest next update:     Mon 29 Dec 2025 10:45:45 +0000
Files and hashes:         1: 09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl (hash: bTC6TtMGa/eTNpqB2YqQndhjHHsUKjhSEJB8tVimEIE=)
                          2: 34352e3136312e33362e302f32322d3332203d3e20323638353030.roa (hash: i8P9i+svn6eTugjVKIH7LsBAziQNryR6tY4w3i2ypmg=)
                          3: 323830343a353232633a3a2f33322d313238203d3e20323638353030.roa (hash: VL/snBcA4TQASO1JgrhJJ4GnQSQZ2IO6gxXlLXQGjG8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl
                          rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 29 Dec 2025 10:45:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d5:ce:42:f9:fb:93:21:ce:e7:2f:e4:b9:26:87:10:ea:de:45:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09D8D4A67069580E34F16AB047420BD4A08D4FF0
        Validity
            Not Before: Dec 28 09:45:45 2025 GMT
            Not After : Dec 29 10:45:45 2025 GMT
        Subject: CN=E5DE180CF461AB0AE94F1CEFEB85292B12176086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:33:4c:cb:a1:0a:98:4f:99:01:9d:1a:3f:31:
                    e2:58:14:3f:86:79:81:8d:82:9d:9a:74:82:7c:e2:
                    4b:7f:f1:ce:5e:66:3d:21:f3:fe:cf:5c:e2:35:34:
                    60:30:bf:dc:58:a8:5e:67:d6:7b:e8:05:48:eb:f7:
                    98:c7:9a:2d:74:5c:a2:57:57:9e:36:51:44:4f:f6:
                    ca:61:00:77:d7:4a:e7:32:01:3d:18:3d:0f:f6:8a:
                    6b:5a:4c:a4:63:73:26:5b:79:1d:a7:20:04:75:94:
                    f2:12:4a:aa:1b:11:7a:18:c2:c0:95:31:1b:e3:5f:
                    70:64:be:ef:4f:25:65:0d:63:9e:b6:f3:e0:2d:74:
                    74:27:2c:45:14:9e:2a:45:03:ec:2d:0f:8d:56:2a:
                    c6:34:1a:01:5b:d1:03:7e:87:40:17:ee:75:72:1a:
                    6f:a6:00:a9:6c:3f:13:c5:09:35:9d:31:6e:8f:bd:
                    49:3f:3d:2c:a2:1a:8d:7f:51:5c:77:f1:4e:e1:b8:
                    4a:20:da:c1:8c:d2:a0:4a:23:f2:97:c4:34:9f:8d:
                    29:aa:dc:34:0a:cf:4e:c8:0d:80:21:06:1d:ab:fd:
                    87:30:ad:29:ea:34:c7:5d:61:b3:11:04:bd:22:b4:
                    53:b0:87:3d:10:c3:e8:f7:f7:91:0a:54:0d:58:d0:
                    ab:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:DE:18:0C:F4:61:AB:0A:E9:4F:1C:EF:EB:85:29:2B:12:17:60:86
            X509v3 Authority Key Identifier:
                keyid:09:D8:D4:A6:70:69:58:0E:34:F1:6A:B0:47:42:0B:D4:A0:8D:4F:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:84:07:06:8b:a2:6a:4f:70:3d:ab:54:b1:79:e6:b1:de:ed:
         71:d2:91:a9:4f:94:8c:a1:91:f6:be:16:e2:3c:74:45:e3:0a:
         6f:b0:a2:90:cf:79:32:bc:db:2c:fd:1c:43:65:04:93:75:84:
         84:1d:48:11:0d:cb:a4:d1:c9:5d:b3:ed:a1:ae:0b:54:4f:7f:
         16:dc:3a:d7:06:88:d2:a6:da:11:bd:82:5a:b1:0e:a2:79:e1:
         60:fa:84:36:27:8c:04:16:6c:7c:7b:a0:95:69:9b:b3:72:b9:
         cd:a9:ca:10:a7:95:cc:e6:a0:63:66:6e:56:04:4f:ee:d2:04:
         e0:7b:51:2b:24:3c:94:f7:88:92:a8:9f:60:48:05:7d:f5:6d:
         7d:83:a3:7e:32:c5:c3:39:f0:20:c2:c8:40:6e:3e:8c:96:e2:
         49:cd:66:0b:d2:50:8b:84:9f:0c:39:a1:36:58:80:50:be:10:
         3d:7b:2d:5c:9b:76:72:f8:a8:1c:3b:98:63:da:81:47:6d:73:
         c9:74:7a:b1:97:07:59:52:58:68:01:8a:c2:86:b1:35:9f:20:
         1e:f7:ee:da:8d:31:67:39:2d:78:2c:6a:fb:74:e7:12:a3:6f:
         db:ee:f9:0f:d2:b1:d3:ee:39:0c:ed:01:c2:ff:70:1c:ae:6d:
         cf:e5:d7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 21:59:14 2025 by rpki-client