This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/91A9CE422C010D9E7886B57603291103F2C9DB57.mft
File:                     91A9CE422C010D9E7886B57603291103F2C9DB57.mft (raw, json)
Hash identifier:          2r/q8BZLrCWwlnuiogx5mO2iv52pP0L4H3NqhzntsrQ=
Subject key identifier:   12:64:8B:68:7C:51:F2:A6:50:22:76:3B:8B:64:FC:0C:72:73:B9:8B
Authority key identifier: 91:A9:CE:42:2C:01:0D:9E:78:86:B5:76:03:29:11:03:F2:C9:DB:57
Certificate issuer:       /CN=91A9CE422C010D9E7886B57603291103F2C9DB57
Certificate serial:       1F60AA294BBCE0B743F4150479A27F4EC8E4332D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91A9CE422C010D9E7886B57603291103F2C9DB57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/91A9CE422C010D9E7886B57603291103F2C9DB57.mft
Manifest number:          0102
Signing time:             Sat 06 Dec 2025 10:00:19 +0000
Manifest this update:     Sat 06 Dec 2025 09:55:19 +0000
Manifest next update:     Sun 07 Dec 2025 10:37:19 +0000
Files and hashes:         1: 323830343a373934303a3a2f33322d3334203d3e20323731323934.roa (hash: 2XPfQPAiuhi39VUU42ChmZ3ZMunOKIzsepamcsvpKEM=)
                          2: 91A9CE422C010D9E7886B57603291103F2C9DB57.crl (hash: hmvdG9JaVErIGsWcfpTF60j9u1vJnvPSIPwNqSM0lJI=)
                          3: 3230312e3232312e3131362e302f32322d3234203d3e20323731323934.roa (hash: /0PxdDvkAoM1jNWfhg3qAj8lZ4LVMSrrIq9x0bWWwLk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/91A9CE422C010D9E7886B57603291103F2C9DB57.crl
                          rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/91A9CE422C010D9E7886B57603291103F2C9DB57.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91A9CE422C010D9E7886B57603291103F2C9DB57.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 10:37:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:60:aa:29:4b:bc:e0:b7:43:f4:15:04:79:a2:7f:4e:c8:e4:33:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91A9CE422C010D9E7886B57603291103F2C9DB57
        Validity
            Not Before: Dec  6 09:55:19 2025 GMT
            Not After : Dec  7 10:37:19 2025 GMT
        Subject: CN=12648B687C51F2A65022763B8B64FC0C7273B98B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:da:bf:6a:89:a6:9b:b4:15:ad:7e:9d:ab:35:
                    31:5f:f3:b8:9d:9a:e7:07:1b:a9:28:64:cc:f9:93:
                    bb:6e:44:fd:bb:46:dd:85:b4:c0:28:8d:69:c7:f3:
                    2d:e8:eb:8c:8d:3f:71:cb:a5:a9:e3:40:eb:44:31:
                    37:b7:47:12:76:ee:e0:15:02:10:69:f7:02:a3:2f:
                    cd:07:1b:6b:9a:81:05:54:d0:29:75:44:28:a2:47:
                    01:72:95:18:9a:13:c2:38:85:f2:5e:59:12:25:da:
                    09:63:6d:0e:b0:56:5c:c7:4c:77:60:57:de:26:73:
                    aa:79:86:ab:73:93:87:e0:ff:73:f9:2b:b6:dd:0e:
                    c1:da:0d:37:49:39:d9:64:2d:80:af:9d:a6:59:69:
                    fd:1f:2d:81:79:df:02:ee:dd:d0:01:76:e8:a5:9e:
                    72:de:42:bc:1d:90:99:a2:ab:86:ff:fe:16:7a:6d:
                    3e:73:44:2b:5d:ef:d1:98:67:e8:a7:c4:af:f9:61:
                    ff:4d:d9:b8:47:69:26:1c:23:5d:90:d1:62:30:d5:
                    60:c0:8c:87:aa:8a:1e:c6:fb:26:74:1d:53:eb:3b:
                    03:65:af:e1:ae:2e:97:0e:bb:89:a3:03:fc:0b:25:
                    4d:de:02:0f:6e:9e:c8:1c:bc:58:22:0e:6b:fe:cd:
                    73:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:64:8B:68:7C:51:F2:A6:50:22:76:3B:8B:64:FC:0C:72:73:B9:8B
            X509v3 Authority Key Identifier:
                keyid:91:A9:CE:42:2C:01:0D:9E:78:86:B5:76:03:29:11:03:F2:C9:DB:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/91A9CE422C010D9E7886B57603291103F2C9DB57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91A9CE422C010D9E7886B57603291103F2C9DB57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/91A9CE422C010D9E7886B57603291103F2C9DB57.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:c5:de:d6:c7:68:c5:1d:48:43:ee:31:1b:ff:44:24:ff:18:
         5d:c7:e3:4d:a6:fe:5b:2d:af:45:74:83:cb:24:55:4e:7f:06:
         d6:7a:c4:68:ae:f1:80:d4:c2:9e:41:02:d2:4d:10:eb:c5:1a:
         22:3f:5f:c2:49:07:c4:d5:fe:e9:7a:6f:0e:cb:9e:f7:90:6b:
         e4:3e:58:ce:dc:5d:e8:50:3d:15:06:ee:62:ea:97:ac:a7:7e:
         a1:9e:f5:36:50:1b:64:5a:63:8c:6d:13:08:48:b6:64:c1:30:
         80:25:59:1e:ce:35:ae:2d:06:95:ed:d7:c1:ce:89:94:bc:23:
         e9:81:8a:0b:71:b5:c9:1f:b9:bd:ad:9a:b8:c7:b6:a6:f0:50:
         cb:05:30:d5:d0:e9:f5:2f:cc:76:af:d7:7d:33:8b:e2:01:6d:
         14:c9:ab:03:3f:1b:a9:f6:53:6a:60:9f:0b:ff:41:85:36:e7:
         38:39:61:f5:0e:07:cb:a9:c4:94:b7:3b:08:94:11:be:18:65:
         53:5e:f7:ed:c8:76:93:dc:df:cf:07:5c:2a:f4:83:aa:d2:04:
         53:8b:73:e2:45:8c:08:4f:35:03:4a:6d:67:b4:b0:89:85:84:
         fa:c3:d2:c9:af:89:ea:1c:c0:87:89:26:d8:ea:ed:7c:71:90:
         e2:b9:5c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:58:24 2025 by rpki-client