This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.mft
File:                     9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.mft (raw, json)
Hash identifier:          2qOp02CZYgN2peaFcCTFXlbWqdPCEYoL2Z2zdNladl8=
Subject key identifier:   95:22:EB:E2:9E:AA:CE:0F:F9:5E:85:D3:1F:9B:8E:95:AE:EF:EA:AD
Authority key identifier: 9B:68:AF:6D:E4:5D:CE:0C:21:12:08:43:56:84:C0:BC:FD:55:CC:9B
Certificate issuer:       /CN=9B68AF6DE45DCE0C211208435684C0BCFD55CC9B
Certificate serial:       432CDC33BEC1F187F4615FB2071AA495DCE446CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.mft
Manifest number:          0164
Signing time:             Sat 24 Jan 2026 23:11:29 +0000
Manifest this update:     Sat 24 Jan 2026 23:06:29 +0000
Manifest next update:     Mon 26 Jan 2026 01:28:29 +0000
Files and hashes:         1: 9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.crl (hash: lWBhc7yyRvmHodszmBweZiAgfASe+74KUzhsStqZe40=)
                          2: 3136382e302e39332e302f32342d3234203d3e20323635323331.roa (hash: m+x74TcCn/ocgyBc3RM05glLKi8fYIlFUhBKwpn4K2c=)
                          3: 3136382e302e39352e302f32342d3234203d3e20323635323331.roa (hash: wQlYnivjl5FtxYxNCOs7C52xmlf9Le1Ei0u+ubyv6zQ=)
                          4: 323830343a326361303a3a2f33322d3438203d3e20323635323331.roa (hash: NmLkvgmPWpP3+AIUgkQshTGCVh+ID6Htu2PNGa7de/0=)
                          5: 3136382e302e39342e302f32332d3233203d3e20323635323331.roa (hash: boARMv+KextnY0lTD91sQDog/0RZ6aWlWkvUEJ9jy6M=)
                          6: 3136382e302e39322e302f32332d3233203d3e20323635323331.roa (hash: dRH1WvpSwekmglWG3rDq1VTpWxYqnyPGTxeGGy/2bxM=)
                          7: 3136382e302e39342e302f32342d3234203d3e20323635323331.roa (hash: 1qlhPXsbe2YqvzA3+1VrC0oc1BrSaTzO8dGHX3NX6iw=)
                          8: 3136382e302e39322e302f32322d3232203d3e20323635323331.roa (hash: ZU9qJeLM9IJt8wNEyuuoMiWoz4PvdDcmyDLtRxf/I3Y=)
                          9: 3136382e302e39322e302f32342d3234203d3e20323635323331.roa (hash: F7tTFMg2I2nUQcrRSqdu9LIlpqNtaAYXjo2W8vgNxAA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.crl
                          rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 01:28:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:2c:dc:33:be:c1:f1:87:f4:61:5f:b2:07:1a:a4:95:dc:e4:46:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B68AF6DE45DCE0C211208435684C0BCFD55CC9B
        Validity
            Not Before: Jan 24 23:06:29 2026 GMT
            Not After : Jan 26 01:28:29 2026 GMT
        Subject: CN=9522EBE29EAACE0FF95E85D31F9B8E95AEEFEAAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:36:97:06:0a:83:8f:cf:1c:82:c3:eb:6f:b2:
                    43:2a:a3:8b:a1:4f:c0:7a:db:27:3a:0c:ff:4f:bd:
                    2f:3b:c2:25:39:c7:8d:29:22:c2:4e:d3:ed:51:60:
                    fe:76:6d:28:a8:22:d1:18:d2:42:a8:6e:81:c6:10:
                    d5:3b:e2:96:9b:8e:59:b6:7d:38:87:64:0f:35:e0:
                    0b:0f:1d:78:93:b3:84:49:c5:34:de:c1:1f:e0:18:
                    f2:03:11:ba:58:0c:ee:20:14:ca:75:a3:18:0b:9d:
                    f8:2f:ee:e2:76:c9:9c:99:c6:ec:b5:6e:7e:cd:37:
                    e2:a0:b4:e7:42:de:66:7b:ea:7f:32:e7:06:56:15:
                    06:2f:ac:6c:20:b3:e2:5f:97:57:9a:3a:44:d8:e4:
                    56:a2:5c:02:15:b2:7a:63:27:18:d0:0e:24:62:ac:
                    39:39:52:a4:18:1e:da:f0:ce:51:2f:91:cd:10:ea:
                    57:23:b8:13:d9:a1:26:64:f9:05:e9:fe:ae:a6:15:
                    72:a4:99:6f:a7:e3:ff:7a:ae:1a:ab:43:ff:99:ad:
                    72:96:b0:18:58:48:69:f0:d1:df:59:ba:b7:c0:29:
                    a6:dc:d2:cd:84:22:88:06:f6:40:b5:86:20:f7:c1:
                    59:5c:ac:bd:c2:6b:d6:34:1e:c4:45:5b:71:0c:30:
                    a2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:22:EB:E2:9E:AA:CE:0F:F9:5E:85:D3:1F:9B:8E:95:AE:EF:EA:AD
            X509v3 Authority Key Identifier:
                keyid:9B:68:AF:6D:E4:5D:CE:0C:21:12:08:43:56:84:C0:BC:FD:55:CC:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:eb:37:fe:c2:f3:0a:75:ea:54:ca:77:c9:de:66:84:28:e8:
         15:e4:4d:c4:a9:7f:39:a5:ce:a4:7a:a3:39:de:cc:49:93:8c:
         84:54:5e:f8:28:f3:9d:60:c2:84:d1:5f:a7:e3:b6:78:b3:14:
         ad:a2:50:72:ed:07:fe:38:70:ac:06:4a:ad:a8:e9:40:5a:31:
         bd:28:44:4d:a3:6b:09:a0:6c:e9:c7:d4:73:e8:04:de:07:91:
         7d:87:85:ef:4d:93:0c:b4:70:c0:64:5e:51:ae:46:f1:89:29:
         3a:bd:cb:5a:b1:19:93:b9:05:2f:b2:b9:5e:ee:38:a9:67:72:
         53:1d:ff:24:b9:b4:03:77:9e:75:f7:c2:d5:a5:c3:3c:0f:66:
         a7:14:7d:a3:e1:aa:df:21:aa:f1:47:78:1a:03:7f:44:71:b4:
         a5:17:23:3e:57:e2:1f:ee:7b:94:e8:4d:ca:8c:1c:58:04:33:
         94:70:21:1e:3c:20:e3:d7:4d:67:56:b3:35:9e:74:df:a6:63:
         96:a4:e8:b8:64:cc:7f:c3:69:1e:25:7b:69:34:58:f5:ee:65:
         46:95:d8:4b:d2:1d:ad:ca:f6:bd:d8:72:69:29:e9:dd:14:de:
         ff:81:72:ef:fe:46:5c:ce:9d:5d:14:e4:cc:1f:d4:f2:84:d5:
         57:b4:e7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:40:59 2026 by rpki-client