This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.mft
File:                     9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.mft (raw, json)
Hash identifier:          spRlAqks8RRO/WUShaQ7Se4rzc2dia4ENYqIlcFacg4=
Subject key identifier:   38:33:F3:37:6C:03:35:53:76:2C:BB:68:D0:6C:2E:CC:F6:DD:DC:BB
Authority key identifier: 9F:B2:CE:2B:97:CE:82:E0:FA:2F:A5:67:4E:36:9E:4C:F2:E6:E1:C7
Certificate issuer:       /CN=9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7
Certificate serial:       5A4572EEC6BC66607E3E697949C5981D9EE06798
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.mft
Manifest number:          0101
Signing time:             Wed 24 Dec 2025 18:20:00 +0000
Manifest this update:     Wed 24 Dec 2025 18:15:00 +0000
Manifest next update:     Thu 25 Dec 2025 22:14:00 +0000
Files and hashes:         1: 9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.crl (hash: 8terFQcTrqm6xcRx7uNk71MD/yOf22Fzz8B4bwjwEck=)
                          2: 323830343a346331343a3a2f33322d313238203d3e20323637333438.roa (hash: SovmUIJJ5U2fuNBT+r1C7n72DlVGWC5OWc4DHty3Dao=)
                          3: 34352e3233332e3138382e302f32322d3332203d3e20323637333438.roa (hash: uDawTwmGqJ1MIxsEcKJEu7RxsH45LcWNSnX+etpyxaU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.crl
                          rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 22:14:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:45:72:ee:c6:bc:66:60:7e:3e:69:79:49:c5:98:1d:9e:e0:67:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7
        Validity
            Not Before: Dec 24 18:15:00 2025 GMT
            Not After : Dec 25 22:14:00 2025 GMT
        Subject: CN=3833F3376C033553762CBB68D06C2ECCF6DDDCBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4f:dc:6e:55:3a:5c:3c:e2:a5:0a:88:1a:00:
                    d9:96:91:7b:29:6d:10:b4:ac:32:13:53:00:a7:f8:
                    32:97:66:c8:43:1a:da:e4:be:72:80:80:5b:42:89:
                    08:9f:a9:61:91:b0:4a:6d:98:16:a7:64:d4:50:fc:
                    73:b0:32:d0:28:9c:c9:e7:66:35:ba:3c:00:7e:fb:
                    b5:0f:ee:0e:a2:3e:c5:4d:f6:c0:df:75:a2:d8:be:
                    d7:b7:b0:f4:ca:88:eb:ff:67:e6:b0:d1:7e:71:b2:
                    70:1a:31:8c:62:85:89:74:23:61:e7:62:35:e8:ba:
                    4b:1f:a8:6d:ba:db:58:f0:54:75:8f:9a:c8:03:b2:
                    91:49:fe:97:95:63:e8:21:5d:f3:55:79:39:5a:3b:
                    df:5b:31:1a:e1:b4:d7:1b:0a:79:79:91:ef:ad:33:
                    0b:25:09:58:69:0e:33:68:c6:eb:d6:0a:fd:33:69:
                    d6:2c:2e:98:ef:4e:5b:e8:de:c0:47:79:11:a1:27:
                    6c:1a:e8:9a:7b:ed:47:91:92:b5:ed:ad:ba:1c:22:
                    b2:05:92:27:30:b6:7c:50:58:c4:ff:fe:e5:cc:cc:
                    73:7e:cc:97:e3:35:da:b9:18:f2:87:57:27:9e:c1:
                    bf:a7:b3:14:2f:ba:b2:d0:f6:5b:1d:31:a0:98:3a:
                    84:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:33:F3:37:6C:03:35:53:76:2C:BB:68:D0:6C:2E:CC:F6:DD:DC:BB
            X509v3 Authority Key Identifier:
                keyid:9F:B2:CE:2B:97:CE:82:E0:FA:2F:A5:67:4E:36:9E:4C:F2:E6:E1:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:8b:0d:d9:6e:b5:a6:4a:a3:9d:f2:1b:c0:34:54:b8:02:e7:
         64:51:2d:f2:1b:89:66:b7:5b:68:54:a1:8c:4e:43:6f:b0:ec:
         ec:15:ab:ba:0f:96:ad:39:6e:ee:47:d4:5f:63:f3:38:a7:58:
         42:af:45:57:59:48:38:d5:44:c5:a2:2d:c8:15:58:9a:58:1a:
         ef:7c:8d:7d:22:7e:9c:0e:f5:61:ae:99:e1:a0:e2:a0:3d:de:
         20:65:b7:48:e7:50:a7:b2:a3:69:c4:1a:85:22:95:c4:20:6c:
         50:a4:b6:6c:07:0e:62:83:7a:21:b0:86:da:23:61:72:d8:72:
         b5:6f:e6:a6:1f:5f:c0:22:29:b1:01:36:3d:e1:8d:47:5d:e9:
         e8:a3:37:b2:11:7f:d0:8e:ea:d0:23:40:fa:b7:58:4b:74:88:
         4d:73:4e:ee:92:48:0e:af:9a:5f:68:2f:5a:74:37:48:9b:7c:
         48:18:aa:1b:d1:37:70:4a:7d:6b:82:e4:e1:5e:13:45:21:27:
         99:98:e5:b2:6e:5b:09:29:9b:cb:bc:69:63:26:69:61:6e:45:
         96:f9:d4:d6:59:09:f3:b6:da:17:09:f1:29:f0:99:3a:bf:e7:
         bd:9f:4a:86:0a:b6:0d:6a:f1:85:37:5b:4c:1a:cb:4a:fd:4a:
         64:6d:47:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 09:33:29 2025 by rpki-client