This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9CSH7hhQHsC5ciihaZjkgALtVPW9cs976GoT6XdBqxaL/0/8031D0E22F282EF7F099D4A03C6628FBA6DB248F.mft
File:                     8031D0E22F282EF7F099D4A03C6628FBA6DB248F.mft (raw, json)
Hash identifier:          9/U54xViCy6GLXrWUP6iMnNSYIFSqrsh9qpoyFBrejA=
Subject key identifier:   3A:7A:12:6B:FC:B2:CC:26:BF:FD:86:FB:17:C0:53:A8:64:F0:A4:CF
Authority key identifier: 80:31:D0:E2:2F:28:2E:F7:F0:99:D4:A0:3C:66:28:FB:A6:DB:24:8F
Certificate issuer:       /CN=8031D0E22F282EF7F099D4A03C6628FBA6DB248F
Certificate serial:       0F66EBFC33782BED53FF6619B359AC2B2CAD4241
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8031D0E22F282EF7F099D4A03C6628FBA6DB248F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9CSH7hhQHsC5ciihaZjkgALtVPW9cs976GoT6XdBqxaL/0/8031D0E22F282EF7F099D4A03C6628FBA6DB248F.mft
Manifest number:          A9
Signing time:             Sat 06 Dec 2025 01:12:00 +0000
Manifest this update:     Sat 06 Dec 2025 01:06:56 +0000
Manifest next update:     Sun 07 Dec 2025 01:35:56 +0000
Files and hashes:         1: 323830343a363331633a3a2f33322d3438203d3e20323639333339.roa (hash: HD0myhB8bn7kzpt0FynNIYGe5HWBiFi6r/TKWu/vwag=)
                          2: 34352e3138322e39362e302f32322d3234203d3e20323639333339.roa (hash: HQQdEDdofsnYw3yHXz+fZjeg+nu+Nry8tc0k0GOXHOk=)
                          3: 8031D0E22F282EF7F099D4A03C6628FBA6DB248F.crl (hash: m/m6wH3+LtLXXwHB1nJTOtS9dEijWRC3r7Bxftt55NI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9CSH7hhQHsC5ciihaZjkgALtVPW9cs976GoT6XdBqxaL/0/8031D0E22F282EF7F099D4A03C6628FBA6DB248F.crl
                          rsync://rpki-repo.registro.br/repo/9CSH7hhQHsC5ciihaZjkgALtVPW9cs976GoT6XdBqxaL/0/8031D0E22F282EF7F099D4A03C6628FBA6DB248F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8031D0E22F282EF7F099D4A03C6628FBA6DB248F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 01:35:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:66:eb:fc:33:78:2b:ed:53:ff:66:19:b3:59:ac:2b:2c:ad:42:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8031D0E22F282EF7F099D4A03C6628FBA6DB248F
        Validity
            Not Before: Dec  6 01:06:56 2025 GMT
            Not After : Dec  7 01:35:56 2025 GMT
        Subject: CN=3A7A126BFCB2CC26BFFD86FB17C053A864F0A4CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4c:d8:91:c5:75:c5:eb:0d:7c:08:66:2c:f6:
                    48:54:41:77:eb:de:de:28:ad:55:16:13:0e:e1:87:
                    be:1a:8b:62:13:8d:eb:57:12:ec:c9:de:b0:e5:d9:
                    2e:7c:24:49:eb:be:49:57:24:a7:51:8b:59:7f:34:
                    a6:63:32:76:44:35:5a:ec:8e:0e:14:24:78:a0:45:
                    29:03:99:3b:e5:25:94:3a:a8:b7:b2:11:8f:8a:b2:
                    08:f9:5f:b6:57:66:fd:a4:2e:53:e5:87:5c:1e:b4:
                    95:30:01:b9:38:48:0c:f7:9d:a8:e7:08:0e:8f:a6:
                    97:d2:d8:76:ea:74:90:ec:b6:32:93:d1:22:05:c1:
                    83:ba:72:fa:a7:3d:01:95:5e:e1:ce:e5:5c:c9:b9:
                    56:06:d2:f4:1a:22:13:16:c8:e5:f4:71:bb:ac:24:
                    3a:01:5d:53:22:88:5a:c2:f5:00:2a:c0:cf:91:c7:
                    04:0d:86:35:13:f3:0d:4e:c7:1f:b2:52:24:cc:33:
                    ca:fe:92:5e:b7:9b:ab:46:34:0d:67:7d:3d:04:fd:
                    6a:7c:d9:31:17:a4:31:7e:b7:8a:6d:e6:ed:24:ed:
                    30:db:56:2a:af:9e:7a:ba:84:3a:f5:48:6b:dd:3c:
                    fe:09:38:14:7a:da:40:89:41:cb:f7:c7:f9:35:51:
                    c3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:7A:12:6B:FC:B2:CC:26:BF:FD:86:FB:17:C0:53:A8:64:F0:A4:CF
            X509v3 Authority Key Identifier:
                keyid:80:31:D0:E2:2F:28:2E:F7:F0:99:D4:A0:3C:66:28:FB:A6:DB:24:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9CSH7hhQHsC5ciihaZjkgALtVPW9cs976GoT6XdBqxaL/0/8031D0E22F282EF7F099D4A03C6628FBA6DB248F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8031D0E22F282EF7F099D4A03C6628FBA6DB248F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9CSH7hhQHsC5ciihaZjkgALtVPW9cs976GoT6XdBqxaL/0/8031D0E22F282EF7F099D4A03C6628FBA6DB248F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:c2:e9:be:22:e7:2a:a4:79:df:5e:f7:ba:b2:61:be:83:0b:
         51:a4:8f:1e:23:3c:42:2e:f9:09:5c:4b:c2:d1:bb:1b:ed:14:
         72:b0:98:bb:71:47:f4:f6:aa:93:f6:95:16:36:a8:3e:98:4e:
         e7:b4:a7:32:04:48:30:fa:90:c3:58:45:f8:10:61:03:d7:15:
         e4:d5:ec:4c:fb:ed:03:48:ca:10:30:ee:56:cf:cf:cd:fd:ba:
         2d:1c:06:66:68:e3:d5:ad:a5:56:73:51:bf:28:1b:e4:f4:89:
         34:ff:72:13:6f:35:be:af:1d:08:42:c5:1d:65:a9:06:13:ad:
         0c:32:b6:54:8c:bd:4c:cd:5a:43:b7:db:9b:a9:7a:3d:a2:65:
         4f:0d:47:ca:32:f3:37:bc:d7:02:39:6e:48:8c:52:dd:e7:d1:
         aa:cc:15:10:eb:f8:10:27:b4:35:ac:44:28:b3:63:ab:51:b9:
         39:07:c0:4a:c3:79:6d:5b:26:91:97:f0:76:31:37:b1:51:52:
         ec:61:4c:b9:0e:b1:2f:dd:1e:31:99:ec:94:8f:82:f4:c6:eb:
         39:1d:a1:4b:15:f2:be:13:62:be:0c:19:eb:84:a4:91:41:a8:
         fe:64:e1:6f:50:eb:dd:fc:81:98:11:65:2b:d8:f1:4a:9e:29:
         dc:ab:fa:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:50:11 2025 by rpki-client