This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft
File:                     C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft (raw, json)
Hash identifier:          Si5YaikW9oWWbc5cbMwW0WW/ZN2Fm4NmzXGvVpp9ez0=
Subject key identifier:   C5:A6:70:C4:99:4E:20:14:94:FE:AD:DF:6A:59:04:3D:1C:29:55:84
Authority key identifier: C9:B4:4C:42:CE:21:94:CF:2A:ED:5F:3F:1C:5F:9E:7D:28:D2:2E:AC
Certificate issuer:       /CN=C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC
Certificate serial:       0622B24067C2B051FC576A199ACF70E754423E0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft
Manifest number:          9C
Signing time:             Fri 19 Dec 2025 23:49:11 +0000
Manifest this update:     Fri 19 Dec 2025 23:44:11 +0000
Manifest next update:     Sun 21 Dec 2025 03:26:11 +0000
Files and hashes:         1: 3134332e3133372e3136302e302f32322d3332203d3e20323634303531.roa (hash: 6odTTXV/YEt0Dl4aWNPP6L1GAoNrXc5ZxFO+rO0cG3A=)
                          2: 323830343a326130343a3a2f33322d313238203d3e20323634303531.roa (hash: RSDuNCVU1VTlfLD/mOTkHE5pcS11RZ6Pk8iJjzVZgVU=)
                          3: C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.crl (hash: 9Ifm5bm7JVB6wUCa1viGD4szKMVsEWDsKamQ93S30kw=)
                          4: 3137302e3234362e3232342e302f32322d3332203d3e20323634303531.roa (hash: ai1fq1d0v27iy15z6wZaaZtUTWGC9NDlAklm01QMFAU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.crl
                          rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 03:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:22:b2:40:67:c2:b0:51:fc:57:6a:19:9a:cf:70:e7:54:42:3e:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC
        Validity
            Not Before: Dec 19 23:44:11 2025 GMT
            Not After : Dec 21 03:26:11 2025 GMT
        Subject: CN=C5A670C4994E201494FEADDF6A59043D1C295584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:40:cc:84:a3:90:11:7f:bd:76:e7:e3:0b:fd:
                    32:f4:04:96:8a:65:82:4e:b3:b6:82:71:46:9b:9a:
                    f9:70:b9:77:6b:f4:b8:6c:75:9c:f5:0a:de:6b:cd:
                    8a:80:92:83:c4:1b:92:7f:ee:ab:6d:ac:b5:48:6d:
                    79:19:f0:02:1c:b0:a3:1c:f3:dd:c2:ca:bc:a4:17:
                    8c:d4:c9:42:b0:1c:49:3a:3b:43:c0:a8:42:44:f8:
                    f4:53:d1:2a:bc:17:97:a0:d5:9c:83:e1:33:1d:ce:
                    81:75:52:e9:bf:47:f8:ec:28:84:29:14:e8:7d:b4:
                    f1:e6:3c:47:9e:67:d9:86:96:16:62:6b:cb:9a:1c:
                    f6:0a:0c:dd:f1:b5:a1:32:7a:bb:c3:13:c4:df:aa:
                    13:2b:6b:9d:d9:ac:a6:c0:2b:d4:12:e5:12:ec:bc:
                    0c:38:80:9f:f9:ff:7f:ed:a6:e3:fd:d8:33:79:bd:
                    2f:6c:b2:74:5a:0e:a1:b6:96:9d:24:ae:d2:9b:c1:
                    c8:e8:b5:4a:28:7d:a2:4f:58:40:78:e9:37:3b:2e:
                    dc:61:c9:5a:17:4d:5b:a7:e9:1a:c5:96:37:9f:9e:
                    91:e0:95:90:69:0c:09:30:cb:11:5c:f7:4c:50:3d:
                    a0:54:ae:2d:f6:3a:9f:3b:fe:d2:0a:68:9c:18:0e:
                    d9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A6:70:C4:99:4E:20:14:94:FE:AD:DF:6A:59:04:3D:1C:29:55:84
            X509v3 Authority Key Identifier:
                keyid:C9:B4:4C:42:CE:21:94:CF:2A:ED:5F:3F:1C:5F:9E:7D:28:D2:2E:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:fc:83:ea:af:72:a4:77:91:39:af:f2:f7:99:03:d9:3a:fe:
         6a:c0:6c:14:64:f2:3d:80:e6:60:6c:52:14:b8:00:e3:1a:27:
         78:f4:63:6b:ff:2f:11:3b:e1:35:66:f3:68:a5:2c:1f:c0:db:
         3c:37:80:71:98:5b:87:76:78:4a:a1:4c:13:e6:42:99:f0:35:
         0c:f7:50:df:1a:de:e1:ad:cf:4d:3b:27:15:32:77:5c:f2:f8:
         a0:e4:7f:42:27:38:b8:a3:c4:46:b6:a7:50:b5:63:ba:0e:c3:
         77:f7:de:6f:44:cd:76:90:54:46:47:7f:e0:3e:44:63:07:98:
         d4:4a:f9:e4:76:cb:d5:48:f9:72:3b:fa:60:1a:db:ea:00:96:
         a0:b0:49:24:43:8b:d6:e6:85:de:84:3c:5d:e9:6b:0e:4f:5c:
         43:f4:19:07:c3:3e:7d:b3:3c:a9:2d:de:3f:5f:10:01:bc:81:
         cb:bd:3e:a8:36:af:b1:10:cd:4d:2a:67:7f:03:2f:55:e5:b2:
         38:72:c3:bf:fe:f6:48:ac:11:60:de:ba:a7:a7:cb:47:9b:93:
         e2:ff:b5:68:03:ec:55:54:62:af:ab:f0:99:5d:2d:9b:68:85:
         1b:9b:77:44:69:86:e3:6f:6e:b5:76:34:1d:f4:19:ab:f3:40:
         41:27:32:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:50:03 2025 by rpki-client