This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.mft
File:                     9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.mft (raw, json)
Hash identifier:          kuwRA3fufn6dn9ENnZi14YZNW1VM5ZGObV3Zu1YSFvI=
Subject key identifier:   DC:19:C5:A6:FC:86:CA:EC:A2:7D:95:EE:EF:2D:3E:F2:25:DD:1A:41
Authority key identifier: 9A:EA:4D:C1:41:FC:20:D7:BA:2A:53:81:C5:2B:C3:4A:29:AB:68:15
Certificate issuer:       /CN=9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815
Certificate serial:       704CCDEE8F19B1B13221EC45029811EEECFB46D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.mft
Manifest number:          034F
Signing time:             Sun 28 Dec 2025 19:11:09 +0000
Manifest this update:     Sun 28 Dec 2025 19:06:09 +0000
Manifest next update:     Mon 29 Dec 2025 19:43:09 +0000
Files and hashes:         1: 3137372e37342e3132382e302f32312d3332203d3e203631353838.roa (hash: 4YJBApvhbXwz/upIzjSRYDj0zftiDWYYQnXHyePPlpM=)
                          2: 3134332e3235352e37362e302f32322d3332203d3e203631353838.roa (hash: fY9/YION973ZO5Ms5K3FaemUO6S/fLhpqdXailJiZSg=)
                          3: 3133382e35392e3132342e302f32322d3332203d3e203631353838.roa (hash: mqIWJ2GiEj77aSPP+JRzeQwVKlTbYf8rUfSAOLVNEUM=)
                          4: 3137302e38332e39362e302f32322d3332203d3e203631353838.roa (hash: 1SaLKPmIsoCzlHkwiVIby7mdXT1jNKwG4ILAyhx4Cj4=)
                          5: 3230312e3134382e3233362e302f32322d3332203d3e203631353838.roa (hash: E/B4o9FtqM/JhugxBc5V9HRaDRKvbPz++BHBNalDAdA=)
                          6: 3137302e3234362e3232382e302f32322d3332203d3e203631353838.roa (hash: FUOC9Lre990jMiJPkMRG28xklTi+EqSwreRh8uOgHEc=)
                          7: 9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.crl (hash: xz2SMzYN0owK3MTWXG6jht9Akn9M7foy0NjL73f3Peg=)
                          8: 3133322e3235352e3234302e302f32322d3332203d3e203631353838.roa (hash: cEpaWb3QtHtk4avuKod9/t2iqD8O65CS7K3aW1WX/4k=)
                          9: 3139312e33372e38382e302f32312d3332203d3e203631353838.roa (hash: olB1Z1vPG1PAMco9tZ6PR5cEJxlUqq95y5qZjj5qqGI=)
                          10: 3230312e3231362e39362e302f32322d3332203d3e203631353838.roa (hash: 8X8ImN8tjHPRVx7a1za+79Pm5BqripaehenSDL6i4QY=)
                          11: 3137302e3135302e3234302e302f32322d3332203d3e203631353838.roa (hash: mhnxKYcU3Yh5E8KUiiOwQdvcsdxNHkKn7HLOWqvuK0I=)
                          12: 3138362e3231392e3232302e302f32322d3332203d3e203631353838.roa (hash: 8L2qpEj7DymHJMulAy3UH95LrABweZFUAmKV8fWlvIE=)
                          13: 3137302e3233332e3232342e302f32322d3332203d3e203631353838.roa (hash: HNZD17sO1WyVi/O/RSPDKgSo9qUmWtB3vz4sfFT8CJg=)
                          14: 3137302e38312e38342e302f32322d3332203d3e203631353838.roa (hash: wp7fPgZ4/P4tHgsZ/6IrOd+uVF/qOEHFyhzenzF5T4s=)
                          15: 3138362e3231392e3231362e302f32322d3332203d3e203631353838.roa (hash: ZezKUAJwNc5k2rag0zXEKHMm4EnYa+WhzBS2DmN+Mg4=)
                          16: 3133382e3138352e36302e302f32322d3332203d3e203631353838.roa (hash: 3T+FiFcS/0yJ8r06+qFK/5TTdEAsX1V44uZzJUjqdWo=)
                          17: 3137302e3234352e32342e302f32322d3332203d3e203631353838.roa (hash: RccwIwVzxdCkifugtu44AST/TnFpJn+yGq4TK7BkwX0=)
                          18: 3133382e3132312e3137322e302f32322d3332203d3e203631353838.roa (hash: PcPIcKsKac9c0IMW4PaBqrKO0mEkQQfxsMHuKeCsBrw=)
                          19: 34352e3137392e3137362e302f32322d3332203d3e203631353838.roa (hash: cc0bTGKUnFOZje5dL0Ep+E4SzwdNg4ooILwPtpD8mLY=)
                          20: 323830343a6562633a3a2f33322d313238203d3e203631353838.roa (hash: lFMx1DmWbOrjm0d5t4X99p73WR8axDmER+pjgmyDvbo=)
                          21: 3136382e3233322e35322e302f32322d3332203d3e203631353838.roa (hash: Tcyzju6Z5U2MeMK+vbZd6+U4esIGfi+2dN7tBr405Ag=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.crl
                          rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 29 Dec 2025 19:43:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:4c:cd:ee:8f:19:b1:b1:32:21:ec:45:02:98:11:ee:ec:fb:46:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815
        Validity
            Not Before: Dec 28 19:06:09 2025 GMT
            Not After : Dec 29 19:43:09 2025 GMT
        Subject: CN=DC19C5A6FC86CAECA27D95EEEF2D3EF225DD1A41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:83:7d:3f:36:5b:b4:03:c5:87:57:ca:c9:3a:
                    31:9d:dc:9a:41:e3:d7:ce:ba:98:c6:d5:5a:0e:15:
                    21:0a:e4:de:50:88:21:8d:4e:65:1a:b0:76:f0:9b:
                    ed:78:48:75:67:e9:60:e3:ed:92:3a:df:82:c1:6f:
                    98:39:7a:7e:24:6c:45:45:b2:c4:0c:28:aa:f1:4b:
                    dd:ba:0a:d6:81:e8:de:7e:77:49:58:1d:ce:ac:49:
                    9c:e2:69:d1:82:50:1b:73:04:7b:d0:85:f9:20:a0:
                    33:12:39:27:72:f2:95:fa:64:63:2b:27:03:81:90:
                    bf:7a:07:39:d4:64:4d:ce:fb:26:a4:60:26:64:ed:
                    18:db:1d:c9:e7:97:1a:dd:b7:71:45:03:0a:96:87:
                    c7:11:91:a8:05:20:bf:d9:aa:c5:d9:87:e0:44:70:
                    22:75:16:d7:1d:da:be:92:5c:37:f5:b8:84:57:ac:
                    9b:fe:e0:b5:be:31:69:e3:f7:2d:32:33:2e:ea:44:
                    d1:07:10:5b:c5:55:bd:d5:f0:bf:9e:7f:aa:0a:88:
                    72:a8:17:09:6d:77:10:59:17:68:9b:de:12:da:f5:
                    5c:a5:ec:d2:c2:57:24:0e:f0:88:0b:1e:df:45:ef:
                    05:fc:52:e8:a2:41:14:14:b9:00:62:f5:8b:ce:4c:
                    50:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:19:C5:A6:FC:86:CA:EC:A2:7D:95:EE:EF:2D:3E:F2:25:DD:1A:41
            X509v3 Authority Key Identifier:
                keyid:9A:EA:4D:C1:41:FC:20:D7:BA:2A:53:81:C5:2B:C3:4A:29:AB:68:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:6c:45:cf:97:6d:de:6b:17:c3:64:62:25:ad:f0:8a:97:31:
         de:04:c5:3b:dc:b6:c7:a0:14:c9:12:35:e7:15:c8:bd:db:6e:
         d9:7f:c5:93:d8:12:04:af:47:13:bf:d3:23:d6:54:75:3c:4f:
         e2:dc:65:65:1d:7e:cc:be:b2:5d:d3:9e:98:c4:30:93:c5:de:
         a9:95:05:82:fa:9e:86:44:8e:32:e5:2e:05:19:d1:c4:12:c1:
         19:20:48:29:dc:9d:e9:15:4e:90:9b:14:fb:73:28:38:44:96:
         33:f5:62:82:d3:0b:a1:4e:f1:a1:97:ff:e6:88:62:99:c1:c3:
         dd:d1:73:6a:15:61:40:b5:e4:d6:9a:fa:07:b4:ac:b3:15:a4:
         4d:1e:a0:d0:2e:73:19:91:b9:3d:38:f7:79:72:7d:10:4d:7b:
         bd:19:70:3e:11:26:36:50:a2:d4:6f:25:1c:e1:94:1b:fc:ca:
         85:2b:09:96:68:94:f0:e8:02:23:b1:47:a2:c3:af:c7:8d:4d:
         6e:0b:47:f7:4a:16:2b:a1:80:4a:44:bc:28:ed:f2:44:97:b6:
         df:f6:5f:a3:e8:7f:65:f8:1f:c5:08:58:91:56:09:67:d6:6a:
         72:b2:d6:06:83:7e:0a:4d:90:99:85:d5:d8:f1:a8:5b:f9:ff:
         ea:ee:82:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 10:16:10 2025 by rpki-client