This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.mft
File:                     9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.mft (raw, json)
Hash identifier:          yjUVvGqliyI3BL99F5iUNV+ghTGx9YzGYJWLEdfQUck=
Subject key identifier:   7B:AA:88:78:51:E2:81:20:12:51:6F:CE:90:63:17:56:10:C4:88:75
Authority key identifier: 9B:68:AF:6D:E4:5D:CE:0C:21:12:08:43:56:84:C0:BC:FD:55:CC:9B
Certificate issuer:       /CN=9B68AF6DE45DCE0C211208435684C0BCFD55CC9B
Certificate serial:       3501904D6BCF89E36079BF71EC5DE53BBF11C561
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.mft
Manifest number:          0134
Signing time:             Sat 20 Dec 2025 00:12:16 +0000
Manifest this update:     Sat 20 Dec 2025 00:07:16 +0000
Manifest next update:     Sun 21 Dec 2025 00:44:16 +0000
Files and hashes:         1: 9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.crl (hash: RGw08oSN+rWFhkEwWxjfQgVckxF/lFI5VWuUejuP6co=)
                          2: 3136382e302e39332e302f32342d3234203d3e20323635323331.roa (hash: m+x74TcCn/ocgyBc3RM05glLKi8fYIlFUhBKwpn4K2c=)
                          3: 3136382e302e39342e302f32342d3234203d3e20323635323331.roa (hash: 1qlhPXsbe2YqvzA3+1VrC0oc1BrSaTzO8dGHX3NX6iw=)
                          4: 3136382e302e39322e302f32322d3232203d3e20323635323331.roa (hash: ZU9qJeLM9IJt8wNEyuuoMiWoz4PvdDcmyDLtRxf/I3Y=)
                          5: 3136382e302e39342e302f32332d3233203d3e20323635323331.roa (hash: boARMv+KextnY0lTD91sQDog/0RZ6aWlWkvUEJ9jy6M=)
                          6: 3136382e302e39322e302f32332d3233203d3e20323635323331.roa (hash: dRH1WvpSwekmglWG3rDq1VTpWxYqnyPGTxeGGy/2bxM=)
                          7: 3136382e302e39352e302f32342d3234203d3e20323635323331.roa (hash: wQlYnivjl5FtxYxNCOs7C52xmlf9Le1Ei0u+ubyv6zQ=)
                          8: 3136382e302e39322e302f32342d3234203d3e20323635323331.roa (hash: F7tTFMg2I2nUQcrRSqdu9LIlpqNtaAYXjo2W8vgNxAA=)
                          9: 323830343a326361303a3a2f33322d3438203d3e20323635323331.roa (hash: NmLkvgmPWpP3+AIUgkQshTGCVh+ID6Htu2PNGa7de/0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.crl
                          rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 00:44:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:01:90:4d:6b:cf:89:e3:60:79:bf:71:ec:5d:e5:3b:bf:11:c5:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B68AF6DE45DCE0C211208435684C0BCFD55CC9B
        Validity
            Not Before: Dec 20 00:07:16 2025 GMT
            Not After : Dec 21 00:44:16 2025 GMT
        Subject: CN=7BAA887851E2812012516FCE9063175610C48875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8e:51:c8:b3:23:4e:51:11:71:37:f6:c4:0e:
                    42:31:72:6a:e5:12:76:16:b9:2d:b6:ab:18:b1:92:
                    30:96:a7:d9:3d:a0:87:a5:71:86:fd:e9:7f:71:ec:
                    f8:49:ff:d1:05:9f:aa:b0:6f:b8:19:f1:4c:6e:6c:
                    19:2e:1a:0e:62:8a:67:87:8a:b2:14:4f:43:75:92:
                    b3:2e:a0:58:17:1e:41:54:f7:19:39:71:66:89:08:
                    85:77:23:63:00:f4:00:5e:49:61:b9:0d:51:5d:bc:
                    b4:49:c2:c9:16:80:84:ea:00:bd:ff:58:bb:21:d8:
                    69:49:71:37:ea:26:b5:07:7a:56:5c:6b:c5:b6:ab:
                    ee:7e:2a:5e:80:33:5f:a1:44:59:9b:53:4b:05:de:
                    8a:c5:51:df:71:fc:08:37:70:bb:b9:8c:2d:0b:6c:
                    9b:63:97:e8:3f:b3:8a:3f:d7:68:39:1a:a3:22:17:
                    83:73:82:13:9a:03:f0:55:12:5a:c1:3f:0b:30:bb:
                    4e:de:aa:c2:4b:3a:fc:28:80:4b:d9:11:22:89:c3:
                    5f:df:3b:25:ca:44:56:16:3d:a8:49:81:c1:6f:c7:
                    a7:e0:4a:c1:8f:ce:28:1f:f9:02:e8:5d:06:b8:29:
                    3e:f8:33:e0:c9:69:d2:52:2b:32:c0:2a:0f:13:9f:
                    fb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:AA:88:78:51:E2:81:20:12:51:6F:CE:90:63:17:56:10:C4:88:75
            X509v3 Authority Key Identifier:
                keyid:9B:68:AF:6D:E4:5D:CE:0C:21:12:08:43:56:84:C0:BC:FD:55:CC:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:7e:c1:28:0f:31:e4:45:0a:d9:1c:f8:eb:d5:a8:16:28:86:
         dc:e7:d1:1d:d0:e0:a9:47:8f:ac:d4:d9:6f:5c:93:6d:cc:f7:
         92:7c:68:47:e2:d6:92:36:e8:dc:d4:c0:72:a6:27:81:ea:b4:
         5c:d8:7f:3f:e0:29:6a:85:54:b5:6d:bc:b1:65:76:39:0a:9d:
         4e:8f:1b:1e:33:87:c3:a3:a6:dc:2c:df:7b:a0:6b:f9:22:28:
         77:49:f8:8d:41:40:37:ac:a8:83:f2:2e:00:ae:2d:da:8f:dc:
         fc:de:19:44:d9:f0:95:3b:7a:56:34:c2:03:bd:5f:7e:0a:c4:
         93:04:17:5a:ab:58:e0:1c:0c:0a:58:74:0f:0b:17:a2:bd:d0:
         74:72:32:a4:d1:97:d3:4d:9c:c6:fc:d2:c8:41:31:1b:de:0d:
         f7:84:cb:56:4d:3e:b2:da:00:d8:a3:f6:79:b4:58:41:fc:01:
         54:a6:64:c2:65:3b:ae:89:76:d6:35:a4:86:7d:08:99:49:02:
         1e:7f:e7:0f:10:c8:db:ef:4f:7c:be:76:1c:fb:19:e5:5d:37:
         50:42:97:2c:df:7d:91:cc:89:f1:a2:23:af:36:9e:14:e9:d4:
         3f:7e:01:81:6e:b5:03:e3:74:4d:13:53:16:fb:48:6d:a1:57:
         89:05:fe:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:57:09 2025 by rpki-client