This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/643PQWupQ2KsMbQqqR2YtWuAc28NWrXD176pLs4GKoEf/0/8DC9BF1ADE379959593FC137298AB5F7F113CA41.mft
File:                     8DC9BF1ADE379959593FC137298AB5F7F113CA41.mft (raw, json)
Hash identifier:          xO9KDJEK7nNtpomOX6LF0oUYq0U0I5ubxAHmM8eMnOg=
Subject key identifier:   EF:19:80:F2:FB:A7:26:D1:C5:85:1A:3B:22:B2:03:95:24:C8:6D:DA
Authority key identifier: 8D:C9:BF:1A:DE:37:99:59:59:3F:C1:37:29:8A:B5:F7:F1:13:CA:41
Certificate issuer:       /CN=8DC9BF1ADE379959593FC137298AB5F7F113CA41
Certificate serial:       4A9952ACA091530AB2A67A6EC7E48196B2E33F8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC9BF1ADE379959593FC137298AB5F7F113CA41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/643PQWupQ2KsMbQqqR2YtWuAc28NWrXD176pLs4GKoEf/0/8DC9BF1ADE379959593FC137298AB5F7F113CA41.mft
Manifest number:          FA
Signing time:             Sat 06 Dec 2025 11:07:27 +0000
Manifest this update:     Sat 06 Dec 2025 11:02:27 +0000
Manifest next update:     Sun 07 Dec 2025 12:07:27 +0000
Files and hashes:         1: 3136382e3230352e3231362e302f32322d3332203d3e20323634383639.roa (hash: GbLn53lVwmZV/KM9ZK4ywi7kXxK/ooiAIOAwJLgXDDA=)
                          2: 8DC9BF1ADE379959593FC137298AB5F7F113CA41.crl (hash: EtnxMDXat2hoxGW8JaY3l/HNkJ+UhKPibvQcMFFOj6A=)
                          3: 323830343a326631303a3a2f33322d313238203d3e20323634383639.roa (hash: haGQzrr28ZiQjHzuCQOTrEMszBlmFytBSTZxEBxcvlY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/643PQWupQ2KsMbQqqR2YtWuAc28NWrXD176pLs4GKoEf/0/8DC9BF1ADE379959593FC137298AB5F7F113CA41.crl
                          rsync://rpki-repo.registro.br/repo/643PQWupQ2KsMbQqqR2YtWuAc28NWrXD176pLs4GKoEf/0/8DC9BF1ADE379959593FC137298AB5F7F113CA41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC9BF1ADE379959593FC137298AB5F7F113CA41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 12:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:99:52:ac:a0:91:53:0a:b2:a6:7a:6e:c7:e4:81:96:b2:e3:3f:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DC9BF1ADE379959593FC137298AB5F7F113CA41
        Validity
            Not Before: Dec  6 11:02:27 2025 GMT
            Not After : Dec  7 12:07:27 2025 GMT
        Subject: CN=EF1980F2FBA726D1C5851A3B22B2039524C86DDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e8:39:83:40:cc:43:b4:0b:23:aa:e1:8e:7d:
                    74:41:0d:91:de:f6:86:37:c5:a2:ad:0e:1a:d5:97:
                    79:b5:60:19:0c:19:f9:a5:04:36:5b:c6:9c:2e:be:
                    16:52:df:ff:c0:c0:cb:e5:c3:78:dd:3b:53:39:af:
                    33:ad:25:3f:b8:3d:ea:bb:15:5a:63:71:53:94:9a:
                    b0:c3:67:cc:4f:e8:2c:b4:83:1e:14:8b:66:52:93:
                    0b:9a:64:7a:b2:74:6f:ef:2e:b7:b7:b5:75:a9:b6:
                    d1:f1:8f:5a:f9:aa:b3:d6:cb:c6:5a:fe:aa:ed:fc:
                    92:2e:e3:8d:dd:5a:0f:be:4b:8f:af:31:a4:cf:48:
                    46:57:c1:8f:f8:c2:76:ec:2f:03:e1:86:f0:db:6a:
                    7e:d3:14:66:f4:27:61:38:51:23:dd:49:09:74:3d:
                    0f:a1:2d:5b:e4:0a:af:c8:3a:4a:f1:01:17:73:b3:
                    f2:25:e6:66:a5:5a:15:a3:99:dc:d6:a4:30:c3:cb:
                    bb:16:71:88:68:16:1b:e1:46:c3:81:4e:69:95:13:
                    e2:66:33:cd:1c:7f:e6:73:0f:78:4f:c1:66:61:09:
                    19:dc:7c:da:43:1f:bd:b4:a7:2f:f3:aa:77:e5:cb:
                    95:f0:7c:3f:af:7f:24:59:5a:2a:78:5a:e0:6c:b9:
                    fe:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:19:80:F2:FB:A7:26:D1:C5:85:1A:3B:22:B2:03:95:24:C8:6D:DA
            X509v3 Authority Key Identifier:
                keyid:8D:C9:BF:1A:DE:37:99:59:59:3F:C1:37:29:8A:B5:F7:F1:13:CA:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/643PQWupQ2KsMbQqqR2YtWuAc28NWrXD176pLs4GKoEf/0/8DC9BF1ADE379959593FC137298AB5F7F113CA41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC9BF1ADE379959593FC137298AB5F7F113CA41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/643PQWupQ2KsMbQqqR2YtWuAc28NWrXD176pLs4GKoEf/0/8DC9BF1ADE379959593FC137298AB5F7F113CA41.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:b3:3b:ed:67:86:77:72:0d:90:01:74:73:db:b6:e5:12:ce:
         15:0e:73:ca:4a:40:78:db:f0:16:70:63:38:b4:db:ac:66:e2:
         2d:3e:b4:af:9d:36:c0:d6:e0:cf:d3:ee:9b:29:e0:68:81:c9:
         71:12:f6:81:e6:d6:a0:e3:2a:52:7e:3c:3e:96:c6:ce:e7:b0:
         c5:79:78:22:6c:d4:5b:58:fc:3a:f6:68:f3:3f:61:c2:e5:27:
         96:7b:15:29:3e:3e:93:b6:38:99:f4:e2:d2:9c:2e:d6:2a:52:
         3d:74:ab:60:27:5a:b9:f9:37:05:61:b3:4e:77:e7:30:e0:9a:
         b7:db:05:8e:2f:1f:41:cb:d5:c1:51:0a:77:a0:66:da:ec:f9:
         2a:48:5c:e9:1a:41:c6:c5:96:91:5c:c4:fa:03:c8:42:5f:7c:
         55:ec:b7:a2:aa:00:10:ec:0a:c1:28:bb:22:9f:01:5e:bf:c4:
         76:ef:e4:ed:d0:6c:c5:ab:36:58:96:12:25:0f:f8:72:f4:3a:
         0e:1e:eb:2c:00:82:48:55:d9:02:68:5f:55:34:f2:82:a3:21:
         f0:41:b1:af:b0:e2:37:3f:39:6f:e2:d3:5a:23:d9:82:2b:21:
         9b:d1:4f:01:f8:14:0a:16:c2:6c:b9:78:3a:99:34:2d:22:6b:
         16:6b:e3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:26:34 2025 by rpki-client