This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft
File:                     9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft (raw, json)
Hash identifier:          qFo75RlHkzrTqYY40M2B9x7j0UkhAWny12gHOFcNt14=
Subject key identifier:   D5:CA:E2:AE:C7:06:3E:B7:A5:65:3E:4F:C6:CF:EB:0D:DC:21:A5:1F
Authority key identifier: 9E:8E:1D:B5:C3:3D:3F:C8:F8:E7:C9:93:01:15:80:AA:28:F3:0B:C9
Certificate issuer:       /CN=9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9
Certificate serial:       07D71D464BD111B172EEA279A4EDC8DE7EC10691
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft
Manifest number:          0246
Signing time:             Wed 24 Dec 2025 16:04:46 +0000
Manifest this update:     Wed 24 Dec 2025 15:59:46 +0000
Manifest next update:     Thu 25 Dec 2025 17:47:46 +0000
Files and hashes:         1: 9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.crl (hash: HlPWzHWATreQgXViBTALJka0XQckv5u+8EQbr38LKPg=)
                          2: 323830343a346163383a3a2f33322d3332203d3e20323637323633.roa (hash: VSH2fxDW2V0tjSJpkhSvwy0Yrc/hswmaGt0+pSH8vjk=)
                          3: 3136302e3233382e32342e302f32322d3234203d3e20323637323633.roa (hash: 2qOT4j6HG0vWun6Vyzh2Pkj1UkPidk6rSXOhaCbNHUU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.crl
                          rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 17:47:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:d7:1d:46:4b:d1:11:b1:72:ee:a2:79:a4:ed:c8:de:7e:c1:06:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9
        Validity
            Not Before: Dec 24 15:59:46 2025 GMT
            Not After : Dec 25 17:47:46 2025 GMT
        Subject: CN=D5CAE2AEC7063EB7A5653E4FC6CFEB0DDC21A51F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cb:92:29:1b:8a:fa:21:eb:97:36:e8:09:56:
                    e3:21:07:a3:10:d4:ee:50:7e:30:37:8a:60:9e:77:
                    07:5f:82:b1:5b:4f:70:15:87:43:1e:43:27:a0:25:
                    80:f2:ab:36:2e:a6:59:7d:9f:b3:9a:2c:3a:e6:60:
                    e9:0b:c4:74:b2:8b:ba:de:f0:28:48:47:61:8d:dc:
                    ef:0d:8d:43:fa:f6:9a:c3:5d:b3:22:00:f3:30:62:
                    93:9f:c6:11:2e:32:52:6e:df:60:96:e0:a2:f2:7a:
                    9e:80:9e:a6:4b:44:b4:92:3e:70:9e:f5:0a:e3:f8:
                    bc:df:fd:80:c3:94:23:ee:e9:70:ea:53:af:74:7f:
                    2e:40:ab:f8:d6:f9:4b:fe:1f:49:ff:d2:ee:c4:99:
                    6e:a9:73:0a:e1:48:2b:81:da:c2:a6:d9:16:36:3c:
                    d1:38:9a:bf:cc:e6:9d:21:8a:fb:f2:0a:34:1f:52:
                    97:ba:2e:73:b2:20:92:cc:68:e0:50:60:09:f8:8a:
                    82:67:4f:a3:84:f6:dd:98:e3:74:1f:75:be:23:04:
                    d5:69:94:1e:5a:c0:23:be:9b:05:19:6b:42:82:49:
                    a1:1c:42:4f:70:78:ea:25:92:a5:75:b6:89:f5:ae:
                    1f:f9:b1:b6:9c:fc:fc:f4:8d:c9:ff:8b:1d:e5:1c:
                    2a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:CA:E2:AE:C7:06:3E:B7:A5:65:3E:4F:C6:CF:EB:0D:DC:21:A5:1F
            X509v3 Authority Key Identifier:
                keyid:9E:8E:1D:B5:C3:3D:3F:C8:F8:E7:C9:93:01:15:80:AA:28:F3:0B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:a4:84:fd:10:84:87:12:75:19:ec:4c:8b:54:85:f1:37:9f:
         85:79:7d:6c:8e:74:30:f4:46:61:e5:e6:32:41:99:52:56:77:
         41:90:72:73:ed:72:ec:14:84:60:7e:ec:7f:6f:aa:13:e4:a3:
         54:df:db:d6:48:7f:db:e9:4a:06:62:6c:f0:64:a4:d5:1f:ea:
         33:5e:ac:b8:bc:33:63:e2:ec:ef:aa:76:2b:54:0f:ac:3d:8e:
         61:53:b4:52:a6:e5:c0:c5:30:b8:ab:0c:c3:4e:7f:b6:79:b6:
         90:f7:c1:34:a5:28:e2:b8:97:bf:29:29:c7:9f:35:e5:64:4a:
         2f:2a:fc:a5:4f:d0:d7:1a:2b:86:ad:22:3a:9e:33:c5:16:e2:
         fe:84:32:61:82:01:9f:1c:3d:33:46:2b:89:f9:77:84:51:9a:
         2d:41:39:0b:0d:f3:c1:9c:6d:b3:d7:30:f7:89:fe:85:ac:40:
         9e:02:c7:b1:5d:3c:1e:b6:6a:70:34:a6:20:d5:22:0d:27:97:
         8f:4a:a7:4a:bb:5a:54:25:a3:4f:c5:75:c6:37:a4:68:25:9d:
         cf:64:aa:07:ad:a3:01:8d:65:72:47:05:3d:7a:16:80:93:7a:
         dd:8b:ab:0b:1a:2c:60:08:1b:41:2e:a2:07:08:5e:01:b6:56:
         39:81:bc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 07:42:17 2025 by rpki-client