This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft
File:                     C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft (raw, json)
Hash identifier:          GiUHIbXArf3tbJezSe3GdfYbNFMGa6qlnwTCbLGEa4w=
Subject key identifier:   BC:5B:AC:12:F2:6F:C1:67:48:20:AF:90:C3:68:DF:2D:BA:6E:56:A7
Authority key identifier: C9:B4:4C:42:CE:21:94:CF:2A:ED:5F:3F:1C:5F:9E:7D:28:D2:2E:AC
Certificate issuer:       /CN=C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC
Certificate serial:       38B29CC2FF1167E0AF8E36B689D09AE6420ECD16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft
Manifest number:          89
Signing time:             Sat 06 Dec 2025 04:40:31 +0000
Manifest this update:     Sat 06 Dec 2025 04:35:31 +0000
Manifest next update:     Sun 07 Dec 2025 08:00:31 +0000
Files and hashes:         1: C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.crl (hash: gitsRUAKyXQ0lyfUIudFf0rWTJlatwTY9zVqJws6QsE=)
                          2: 3134332e3133372e3136302e302f32322d3332203d3e20323634303531.roa (hash: 6odTTXV/YEt0Dl4aWNPP6L1GAoNrXc5ZxFO+rO0cG3A=)
                          3: 323830343a326130343a3a2f33322d313238203d3e20323634303531.roa (hash: RSDuNCVU1VTlfLD/mOTkHE5pcS11RZ6Pk8iJjzVZgVU=)
                          4: 3137302e3234362e3232342e302f32322d3332203d3e20323634303531.roa (hash: ai1fq1d0v27iy15z6wZaaZtUTWGC9NDlAklm01QMFAU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.crl
                          rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 08:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b2:9c:c2:ff:11:67:e0:af:8e:36:b6:89:d0:9a:e6:42:0e:cd:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC
        Validity
            Not Before: Dec  6 04:35:31 2025 GMT
            Not After : Dec  7 08:00:31 2025 GMT
        Subject: CN=BC5BAC12F26FC1674820AF90C368DF2DBA6E56A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cd:79:a0:c9:6f:4e:3f:66:e7:0c:5f:cf:af:
                    af:96:ed:e6:67:f4:03:48:dc:a4:59:93:bd:e2:f0:
                    bf:11:f2:c3:ae:2f:af:4f:b5:c2:ad:24:06:55:63:
                    df:3d:5f:d1:69:59:b7:c2:e1:39:db:e2:3d:e8:3a:
                    26:b8:4d:dc:5c:93:c8:48:f4:75:c4:56:c5:16:12:
                    c7:15:bc:ab:0b:9d:0d:a6:7c:4d:a0:0b:0f:df:df:
                    fb:c8:13:d1:6c:8e:50:c1:ac:d4:a7:9e:10:43:10:
                    e5:b7:4e:a6:0e:3e:b9:59:7d:3c:76:f9:92:1b:e0:
                    a5:db:71:45:67:60:d3:d6:a0:7a:b6:53:52:dc:13:
                    ea:df:25:82:16:38:4b:10:8e:69:c4:1c:cf:c4:eb:
                    a8:4e:3f:28:6a:43:95:d9:8c:51:73:e1:84:1a:a6:
                    dc:c1:3d:a7:06:13:82:a8:a9:95:25:72:ec:f4:93:
                    cf:0a:8d:27:71:ae:07:45:56:08:a1:a8:61:76:99:
                    ed:87:50:89:92:91:5a:04:dc:61:18:31:bd:af:90:
                    98:bf:6a:c2:2b:38:52:47:b5:ca:e7:53:4f:23:10:
                    63:5f:3d:61:6d:39:1a:6d:16:8e:01:25:1f:fa:bb:
                    42:77:c0:3b:41:9f:98:21:2f:69:68:23:dc:43:a9:
                    22:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:5B:AC:12:F2:6F:C1:67:48:20:AF:90:C3:68:DF:2D:BA:6E:56:A7
            X509v3 Authority Key Identifier:
                keyid:C9:B4:4C:42:CE:21:94:CF:2A:ED:5F:3F:1C:5F:9E:7D:28:D2:2E:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:97:39:7f:46:9d:5f:25:93:38:85:f1:b1:31:1d:fc:d0:90:
         ad:7a:23:fa:08:62:82:32:1d:f5:27:a7:b0:2a:66:75:77:7e:
         6d:a7:da:6f:69:d9:a8:16:3d:b5:f6:16:e7:27:f5:50:08:ed:
         6b:b3:d0:f4:04:a5:c4:81:c1:75:25:4e:dd:09:b2:da:02:26:
         9c:4a:c5:6d:2d:71:0a:a7:45:30:99:81:e4:74:98:35:f3:bf:
         61:1f:b3:5e:e5:31:89:47:f3:f4:82:7e:54:84:66:3e:9d:46:
         5e:5d:25:db:9e:0a:11:51:aa:a7:1a:60:e8:9e:2b:42:5d:82:
         b3:4c:9d:77:af:69:45:fe:b0:85:18:6f:61:e7:37:5d:42:21:
         75:ce:3f:8d:37:f6:ed:74:08:75:23:7f:3d:6d:5d:1c:15:49:
         ed:b0:d3:a5:fc:d8:7f:f9:d3:27:85:e8:1b:7f:a8:33:54:17:
         52:fd:e7:ca:9d:19:fc:04:94:b2:5e:e2:ad:61:3b:4a:21:f5:
         99:4e:6b:0b:49:d6:bf:a0:54:8b:32:fa:2e:bc:e8:4a:32:ff:
         a6:1c:7c:af:c4:c7:34:a9:32:dc:26:29:9a:eb:95:4a:70:29:
         2c:69:bf:52:5b:79:01:83:10:de:4a:f0:e3:cd:8a:2b:82:b6:
         af:7f:a4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:27:43 2025 by rpki-client