This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.mft
File:                     39D7DC5EB84F95D2DB8156F97805B6303A56A12B.mft (raw, json)
Hash identifier:          4wXlmTeyPfEkmj8C3PLtxpuFv9BcaMXHeuL7GkkZCKc=
Subject key identifier:   37:07:9C:0E:BB:A4:A4:E2:BF:B2:63:A4:AB:95:92:4D:C6:3C:38:20
Authority key identifier: 39:D7:DC:5E:B8:4F:95:D2:DB:81:56:F9:78:05:B6:30:3A:56:A1:2B
Certificate issuer:       /CN=39D7DC5EB84F95D2DB8156F97805B6303A56A12B
Certificate serial:       6A7C9934C556AB58A9841E8D9427E60C16E970CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.mft
Manifest number:          01C5
Signing time:             Wed 24 Dec 2025 13:41:28 +0000
Manifest this update:     Wed 24 Dec 2025 13:36:28 +0000
Manifest next update:     Thu 25 Dec 2025 14:57:28 +0000
Files and hashes:         1: 39D7DC5EB84F95D2DB8156F97805B6303A56A12B.crl (hash: jtmkQw09SNPF00SlDuFgzBTP8lw9tMeHpAJd4FZIv4Y=)
                          2: 3133312e37322e3138302e302f32322d3332203d3e203631373337.roa (hash: uAMdtVL40b9ds6awCiCsmPZthB3stigLIOnewfJ/Lc8=)
                          3: 323830343a316239633a3a2f33322d313238203d3e203631373337.roa (hash: 3lYqpwlwZpeKcmP1B5up2XOzGqyWwLy1Z0IaEI+U//Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.crl
                          rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 14:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:7c:99:34:c5:56:ab:58:a9:84:1e:8d:94:27:e6:0c:16:e9:70:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39D7DC5EB84F95D2DB8156F97805B6303A56A12B
        Validity
            Not Before: Dec 24 13:36:28 2025 GMT
            Not After : Dec 25 14:57:28 2025 GMT
        Subject: CN=37079C0EBBA4A4E2BFB263A4AB95924DC63C3820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e8:ef:2f:02:9a:a6:f1:2d:dd:a3:4a:fe:e9:
                    66:70:4f:66:7c:2c:9f:56:64:5f:00:60:94:36:8d:
                    b9:bb:5d:4d:d1:07:a1:6e:b4:0e:ef:09:c7:78:99:
                    06:41:2a:ab:27:60:ac:fe:e5:cd:d4:3e:8d:4b:2e:
                    8b:21:ae:00:0b:49:dc:3a:08:d6:fd:bc:d7:65:78:
                    d9:a7:bf:5b:3c:a7:92:49:6e:55:b8:8b:c3:84:e3:
                    c1:6d:45:c9:b4:43:5c:92:50:3c:16:93:0e:f5:d6:
                    95:2d:2e:99:9f:8e:02:ae:b1:e1:76:ca:2d:d8:89:
                    0f:4d:72:df:56:5b:6f:7c:89:d2:72:82:45:eb:ae:
                    2c:a2:c5:b0:8a:d2:5b:bb:b2:96:f7:0f:48:38:05:
                    1c:71:d5:be:bb:86:f8:9d:7a:4a:0e:ef:ef:03:4c:
                    58:0d:82:dc:92:41:8c:5b:89:fd:e9:fa:47:9b:77:
                    ec:a1:66:97:21:27:86:59:ca:0f:e1:8e:06:e4:d2:
                    d2:1c:6e:5a:5d:37:6e:5b:7d:0a:1a:d7:37:3f:09:
                    6c:91:a6:17:06:99:52:a1:31:13:34:dc:c2:bc:13:
                    35:d3:9d:fe:91:69:2f:01:7f:b5:55:6a:a6:40:b3:
                    30:82:81:2c:ef:0b:34:73:3c:27:21:95:2f:f2:ea:
                    0a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:07:9C:0E:BB:A4:A4:E2:BF:B2:63:A4:AB:95:92:4D:C6:3C:38:20
            X509v3 Authority Key Identifier:
                keyid:39:D7:DC:5E:B8:4F:95:D2:DB:81:56:F9:78:05:B6:30:3A:56:A1:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:8e:cd:a5:21:40:02:13:68:27:80:46:06:63:be:a2:56:75:
         c5:0e:fb:50:c2:a0:80:8c:3e:f8:a3:32:d3:a2:77:0c:8b:71:
         dc:37:08:7b:a8:27:9f:38:47:ce:32:11:40:5a:d5:5f:62:86:
         9c:a3:d6:6e:47:17:6f:a3:90:3b:e9:55:ff:86:3d:03:4d:9c:
         3b:65:21:3f:f1:05:06:40:16:e8:4d:2c:10:6b:86:5e:47:21:
         d8:88:2f:86:29:c6:33:c6:e2:2c:5a:d9:4a:23:56:ab:bb:91:
         f3:45:d2:1b:8c:a8:c5:72:ee:14:cc:7c:17:21:21:09:0b:65:
         44:de:09:9c:a2:27:70:cf:2f:cd:e3:f5:07:8b:49:5f:5f:9b:
         4b:1d:f2:fd:cb:7d:94:e0:1d:7f:3b:9c:b7:e5:3a:e0:0a:f4:
         ee:6a:cc:4a:26:1e:97:47:41:33:8d:30:65:d2:0b:c1:21:b3:
         93:8f:19:b2:7a:7f:4a:48:30:65:6e:cd:88:a1:ba:d3:8e:89:
         5f:d9:5f:02:bb:c5:28:6d:ad:d1:18:99:75:af:d5:57:b2:8e:
         d0:c2:6b:02:77:f4:1f:f8:d1:97:6a:62:ff:dc:67:35:76:a4:
         2d:00:22:1e:f4:03:e8:ac:af:f3:4a:fe:3f:26:1e:ae:c8:55:
         e5:f0:9c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----