This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.mft
File:                     B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.mft (raw, json)
Hash identifier:          r2d6kmxPS7jjEQJuCS+VZ+IR/hqqGxzsdwqZD/0ZBxw=
Subject key identifier:   00:D9:09:C5:41:CA:5B:CA:D6:14:CB:94:77:3B:C1:0D:BF:18:9E:1B
Authority key identifier: B9:CB:AB:6E:2B:98:D7:CF:3F:3A:EE:9E:B8:BE:ED:E0:EE:99:93:41
Certificate issuer:       /CN=B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341
Certificate serial:       77FE0AEC7B03C6BDA2EB879B572407A02797AB63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.mft
Manifest number:          9F
Signing time:             Sat 06 Dec 2025 00:16:45 +0000
Manifest this update:     Sat 06 Dec 2025 00:11:45 +0000
Manifest next update:     Sun 07 Dec 2025 02:21:45 +0000
Files and hashes:         1: 323830343a393437343a3a2f33322d3334203d3e20323734383433.roa (hash: LGKOYiD6Tp7ttJ6lg6hcYTjD8Cvq9uUvcrgbHV50Q2w=)
                          2: B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.crl (hash: VChdHolU04JZCEKuKBPzWPSYfw1kAgnR43xNvLy/q88=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.crl
                          rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 02:21:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:fe:0a:ec:7b:03:c6:bd:a2:eb:87:9b:57:24:07:a0:27:97:ab:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341
        Validity
            Not Before: Dec  6 00:11:45 2025 GMT
            Not After : Dec  7 02:21:45 2025 GMT
        Subject: CN=00D909C541CA5BCAD614CB94773BC10DBF189E1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:34:11:db:f7:d4:f8:8a:56:ea:40:de:df:76:
                    d3:51:33:35:fc:89:73:1e:dd:f5:9d:d4:4f:85:37:
                    49:7b:da:be:81:da:de:59:17:4e:dd:d7:a1:5c:28:
                    a5:3d:57:a9:c3:12:0a:ba:2e:64:53:cf:b1:17:2b:
                    57:fe:1a:f8:84:b4:5d:eb:0e:90:66:70:d9:44:f8:
                    f9:ef:58:27:09:a1:c5:d0:93:a9:52:2d:a9:74:d1:
                    11:fe:82:7b:1a:4a:53:b9:45:c3:81:6e:78:d5:ee:
                    ef:1b:a4:1d:d6:d8:66:f3:98:cd:42:5f:b2:65:47:
                    b9:36:9f:19:63:f3:e1:74:42:91:3d:ec:17:45:9f:
                    00:db:a3:e1:8d:38:0d:bc:00:9c:42:80:97:67:bc:
                    01:3d:cc:8c:aa:3c:c6:43:78:a9:75:3b:59:ce:4d:
                    e3:4d:cf:ff:72:99:4f:c1:bb:bd:03:9c:f8:65:1d:
                    32:dd:0d:d4:a7:56:98:36:67:f1:03:ee:bd:33:f7:
                    8e:38:b4:cf:5f:27:6a:f0:a1:44:02:14:34:81:a3:
                    87:00:c4:a7:87:50:81:9a:47:70:72:54:43:96:9e:
                    a5:b8:25:96:ee:7a:d3:9d:a0:20:cc:1e:b2:ee:8d:
                    28:a9:00:da:bb:52:6c:24:52:5e:df:0b:9d:a4:85:
                    e9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D9:09:C5:41:CA:5B:CA:D6:14:CB:94:77:3B:C1:0D:BF:18:9E:1B
            X509v3 Authority Key Identifier:
                keyid:B9:CB:AB:6E:2B:98:D7:CF:3F:3A:EE:9E:B8:BE:ED:E0:EE:99:93:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:06:e1:93:26:b7:99:9e:53:d3:3a:97:e7:96:17:9e:49:ae:
         42:6f:3b:c1:7c:6f:27:98:29:11:72:71:d7:a7:d4:9c:28:79:
         f9:22:de:5d:da:be:04:28:31:e5:df:74:f6:ec:f4:e6:72:e8:
         1f:1d:db:13:51:64:e8:10:6e:cc:2e:b5:ad:6c:f8:d1:ae:ad:
         92:1b:9f:b1:ca:29:7f:0d:f8:78:9c:5f:1f:31:0a:a8:7e:96:
         86:5e:c0:f6:08:34:90:f5:c9:bd:47:ba:1e:09:12:49:e2:c8:
         19:78:3a:67:d0:d3:dc:ba:7d:d4:ba:ad:84:77:19:15:f6:c8:
         d0:84:01:8a:09:06:6d:88:40:c5:fb:fd:08:dc:3f:b1:2d:40:
         31:96:78:fe:b7:3d:69:01:d4:4e:12:92:59:8e:3f:24:87:ad:
         21:91:88:32:f5:6f:15:df:37:b7:3e:23:0e:a4:2f:5d:5d:5d:
         f1:7a:0a:9f:7c:6a:52:b1:59:24:a0:61:4a:cf:33:fd:45:eb:
         7e:12:d4:85:38:48:5f:8d:f9:a9:5f:b8:c7:92:81:eb:5f:a3:
         11:35:ed:48:9b:ec:58:6f:79:92:db:2c:37:f7:ed:77:c9:dd:
         2b:91:7b:71:08:da:ce:d7:20:41:8e:2a:e5:a9:b1:07:46:c5:
         1e:b6:55:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:21:14 2025 by rpki-client