This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.mft
File:                     9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.mft (raw, json)
Hash identifier:          daVH2dOADdcQMx2xx59Uxo8bDAnzDTKX1BRTl7yKfGc=
Subject key identifier:   0F:69:2A:8D:A0:DB:3B:D1:09:93:42:6D:6B:39:67:73:D3:E3:E0:00
Authority key identifier: 9F:FA:BF:FA:1B:28:AB:A1:D0:51:EC:CB:BE:57:DE:91:57:6D:3F:3B
Certificate issuer:       /CN=9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B
Certificate serial:       0BBB7EFE09F97E22C9B2A7EC65A9C158EA387B6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.mft
Manifest number:          0396
Signing time:             Sat 06 Dec 2025 02:40:00 +0000
Manifest this update:     Sat 06 Dec 2025 02:35:00 +0000
Manifest next update:     Sun 07 Dec 2025 02:40:00 +0000
Files and hashes:         1: 9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.crl (hash: 9bA4u9VO7FnPuhrSXs/rg8qC8ZUGFzR1xl0bdSRIw5k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.crl
                          rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 02:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:bb:7e:fe:09:f9:7e:22:c9:b2:a7:ec:65:a9:c1:58:ea:38:7b:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B
        Validity
            Not Before: Dec  6 02:35:00 2025 GMT
            Not After : Dec 13 02:40:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:da:75:95:d4:d8:cc:81:66:0f:bc:f4:42:68:
                    f3:43:5a:cc:e1:40:c1:01:a0:4b:5b:d5:c1:07:71:
                    2d:6e:a0:e3:b3:74:24:2f:6f:d6:eb:d5:49:a4:53:
                    0f:6b:05:ac:c8:c7:cc:7c:8f:50:19:37:ce:7d:d6:
                    64:4d:df:2b:92:be:3a:15:2f:b1:4b:db:34:05:ac:
                    c5:4d:82:44:62:be:94:1e:6f:d3:31:1a:b0:77:60:
                    fd:33:9a:f6:fa:60:f1:d9:5b:18:66:62:e0:c3:1e:
                    ab:3a:2f:0c:b5:1d:bb:86:18:16:65:aa:2e:da:ff:
                    6d:c3:8b:db:1f:37:4e:6f:90:c9:8c:76:bd:40:29:
                    15:0d:ee:60:53:cd:be:b9:e8:18:82:32:cb:12:ca:
                    40:13:83:13:63:ce:77:2a:bd:0f:12:3d:f7:55:4d:
                    47:88:8d:1d:86:ab:23:7f:45:63:25:98:1f:bf:4f:
                    54:ac:19:b5:25:53:f8:6b:a6:39:7c:e8:08:1a:7b:
                    e2:cc:fe:48:e6:36:39:75:38:84:33:28:50:ba:50:
                    71:71:46:c8:3d:cb:f5:f4:cf:08:89:e6:a1:89:ad:
                    47:24:81:f4:cf:13:81:41:9c:00:65:7a:66:27:56:
                    00:e3:bf:e4:6b:12:5c:2e:67:96:1d:cb:a4:b5:d0:
                    b6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:69:2A:8D:A0:DB:3B:D1:09:93:42:6D:6B:39:67:73:D3:E3:E0:00
            X509v3 Authority Key Identifier:
                keyid:9F:FA:BF:FA:1B:28:AB:A1:D0:51:EC:CB:BE:57:DE:91:57:6D:3F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:ac:1c:56:67:ea:2a:3d:cf:24:bb:96:48:ac:2b:91:06:9c:
         e6:40:ee:37:e5:dd:ef:73:95:cd:8c:32:ca:b6:b7:67:21:93:
         05:10:04:cd:44:7f:fc:80:c9:fe:26:93:90:fb:9f:83:c7:a6:
         1d:29:a3:ec:72:73:d6:ac:a7:b6:33:85:ac:c4:34:fb:81:d7:
         27:c8:ad:81:40:28:2c:d0:7a:0b:06:2d:94:61:93:eb:48:e5:
         78:97:5d:03:1d:4f:84:08:7c:0c:a2:5e:c2:75:d1:9d:30:9b:
         65:69:d7:24:97:68:35:fd:c9:ba:c0:d6:a0:2f:0b:7f:a8:ce:
         8e:6b:98:4e:9c:58:d4:9b:2f:ca:fb:5b:03:12:b4:70:8f:40:
         a5:ac:a3:9e:22:71:6b:36:10:3f:98:fc:65:28:f0:67:5e:47:
         fb:6f:7b:ac:eb:28:0a:74:28:a7:e7:b9:57:d7:28:3d:4b:a4:
         d9:53:f5:5c:50:a1:3c:72:cf:1e:76:5b:e1:ab:aa:25:36:51:
         03:3d:43:5c:da:ca:25:95:97:be:2f:e7:e3:3b:5d:e1:92:a0:
         9b:ee:d3:b5:5b:f4:d2:7f:83:e6:57:dd:f4:d5:ed:f8:15:10:
         20:33:71:a7:3f:3a:c8:56:62:a6:1d:07:27:ac:a7:8f:f7:fd:
         82:b0:e7:b9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----