This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/9E17AE12E54FEC7BF015C94EBD811062D85D7047.mft
File:                     9E17AE12E54FEC7BF015C94EBD811062D85D7047.mft (raw, json)
Hash identifier:          /6CtplDPud64Q5AWQorun+xa8tsOSXxMcd1D6EUtm6g=
Subject key identifier:   EA:9A:A5:5B:A0:9D:BC:16:39:80:B4:F6:F7:10:88:D2:E5:DC:0F:76
Authority key identifier: 9E:17:AE:12:E5:4F:EC:7B:F0:15:C9:4E:BD:81:10:62:D8:5D:70:47
Certificate issuer:       /CN=9E17AE12E54FEC7BF015C94EBD811062D85D7047
Certificate serial:       1F34E9532F06D30F3458CCE93D715DE2DD74C0AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E17AE12E54FEC7BF015C94EBD811062D85D7047.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/9E17AE12E54FEC7BF015C94EBD811062D85D7047.mft
Manifest number:          02CD
Signing time:             Wed 31 Dec 2025 16:47:21 +0000
Manifest this update:     Wed 31 Dec 2025 16:42:21 +0000
Manifest next update:     Thu 01 Jan 2026 19:32:21 +0000
Files and hashes:         1: 9E17AE12E54FEC7BF015C94EBD811062D85D7047.crl (hash: 0Mniha+kB4oEpPjro3O9q5dPq438lMDUsOJ3zzfT4PU=)
                          2: 3230302e3130362e3137362e302f32322d3332203d3e20323731323632.roa (hash: kWIHzD0y5GXw8oi2jQKsjvmzMk3ObH8EiiM16pmOXtA=)
                          3: 323830343a373862633a3a2f33322d313238203d3e20323731323632.roa (hash: W8hsSOKjJTpzYWQXdLpDwkH1spfBNRqGKdniteFHpVU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/9E17AE12E54FEC7BF015C94EBD811062D85D7047.crl
                          rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/9E17AE12E54FEC7BF015C94EBD811062D85D7047.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E17AE12E54FEC7BF015C94EBD811062D85D7047.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 Jan 2026 19:32:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:34:e9:53:2f:06:d3:0f:34:58:cc:e9:3d:71:5d:e2:dd:74:c0:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E17AE12E54FEC7BF015C94EBD811062D85D7047
        Validity
            Not Before: Dec 31 16:42:21 2025 GMT
            Not After : Jan  1 19:32:21 2026 GMT
        Subject: CN=EA9AA55BA09DBC163980B4F6F71088D2E5DC0F76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e0:31:02:df:7f:ff:aa:c8:1c:fa:f3:d3:ff:
                    45:5f:d0:1d:4b:8e:85:0f:76:d9:30:43:e5:e3:c4:
                    9c:12:0c:8e:f2:3b:b7:e0:04:36:7a:5e:72:c0:a6:
                    3d:20:5c:89:4b:73:6a:65:9d:a4:c4:b5:84:35:75:
                    1f:01:9a:63:af:3c:ee:db:ba:2f:95:bf:6c:a9:db:
                    9a:f9:69:d3:43:be:c3:09:3d:ad:57:bc:84:bf:c4:
                    3d:6a:f4:73:1b:4d:27:5d:43:23:26:35:52:35:ef:
                    55:70:2c:91:7d:fe:8b:64:a7:9c:ce:69:ee:41:1a:
                    2c:4e:d3:c3:94:8e:f5:04:89:c5:16:22:b5:d0:bc:
                    be:f6:d8:ed:16:99:f2:00:a0:3d:c9:5e:11:67:a6:
                    59:eb:48:3b:25:25:cd:c2:15:50:b7:ff:48:ad:51:
                    09:6c:3d:9a:22:3e:dd:46:07:68:45:63:08:ba:ac:
                    d9:21:40:f3:d1:dc:9d:a0:cb:6f:3c:c0:f9:60:80:
                    0c:65:78:97:fc:0e:40:68:01:80:0f:fd:f5:39:22:
                    5b:a1:a2:72:87:d0:f6:f6:26:b7:e7:76:9a:91:50:
                    a3:36:79:79:b3:04:e1:6e:b5:70:c9:a6:6e:2a:49:
                    4b:9b:fa:2e:c1:04:bf:ee:51:07:a6:0b:9e:de:2c:
                    cd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:9A:A5:5B:A0:9D:BC:16:39:80:B4:F6:F7:10:88:D2:E5:DC:0F:76
            X509v3 Authority Key Identifier:
                keyid:9E:17:AE:12:E5:4F:EC:7B:F0:15:C9:4E:BD:81:10:62:D8:5D:70:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/9E17AE12E54FEC7BF015C94EBD811062D85D7047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E17AE12E54FEC7BF015C94EBD811062D85D7047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/9E17AE12E54FEC7BF015C94EBD811062D85D7047.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:9d:04:32:6d:85:03:3c:1d:64:22:e5:ce:f2:1b:5c:cc:cb:
         83:24:e2:56:e6:fd:11:77:6f:f2:90:f3:fb:f2:b5:34:1f:10:
         c4:3f:e4:64:03:d5:31:a7:6c:c7:85:c1:69:1c:c6:18:80:9d:
         28:4f:4b:82:97:75:48:7f:52:77:f9:a7:60:da:bb:4f:c9:b9:
         fa:03:23:76:2f:32:62:16:a5:7a:83:8d:ee:ef:7d:4c:c3:12:
         9b:20:78:b8:4e:f8:12:37:3d:43:3d:5b:d0:18:59:44:e0:ba:
         4e:e6:f3:cb:43:0a:6c:65:9a:4d:cf:f8:ca:36:54:ca:02:e3:
         31:00:5f:11:d2:9f:52:eb:e9:52:19:2e:cc:ba:08:87:71:8b:
         c2:e0:4c:7b:b7:20:3e:7a:4f:53:9a:75:6a:5d:22:5f:dc:7b:
         5f:d4:0c:e0:69:4c:58:d6:e1:d5:40:63:2c:c6:85:db:80:5c:
         85:ad:cc:03:50:45:69:f5:09:72:6b:28:69:a3:aa:bb:a2:95:
         57:af:c9:77:8a:39:59:30:56:bc:29:5c:69:28:7e:e9:74:9a:
         43:df:f1:c7:05:8d:32:8f:38:0a:c7:7c:ac:e1:3c:53:17:f3:
         1a:e2:d8:38:72:f4:fb:b6:be:82:70:5a:fa:09:62:af:b4:3a:
         70:52:84:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 12:34:14 2026 by rpki-client