This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/1/D37909F713CBE989D0A993E0FC6E6A4570B059F9.mft
File:                     D37909F713CBE989D0A993E0FC6E6A4570B059F9.mft (raw, json)
Hash identifier:          9qDNA97LV5moy0Uq/TBS++fqLh9xNJ68djoYpxnfc7w=
Subject key identifier:   87:FA:37:53:12:A1:14:51:13:4A:CB:D7:B0:71:34:D8:F2:12:08:0F
Authority key identifier: D3:79:09:F7:13:CB:E9:89:D0:A9:93:E0:FC:6E:6A:45:70:B0:59:F9
Certificate issuer:       /CN=4fb32fadfe6194122d0f228351afceae2f7be96b055a5cce33
Certificate serial:       787B7E9DB3CFF37FE3176006ABDECB1627FC7F2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/4fb32fadfe6194122d0f228351afceae2f7be96b055a5cce33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/1/D37909F713CBE989D0A993E0FC6E6A4570B059F9.mft
Manifest number:          69
Signing time:             Sat 06 Dec 2025 21:53:44 +0000
Manifest this update:     Sat 06 Dec 2025 21:48:44 +0000
Manifest next update:     Sun 07 Dec 2025 22:14:44 +0000
Files and hashes:         1: 34352e34322e3136302e302f32322d3234203d3e20333936353039.roa (hash: R8qUjIZ6ysKWvC5/eDGClxNbLjc/860MLitI4fgP5XI=)
                          2: D37909F713CBE989D0A993E0FC6E6A4570B059F9.crl (hash: IfB/o0/icIMRE0NM+8WQfF2yAQ1hXoj8hLO/dUbFH8M=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/1/D37909F713CBE989D0A993E0FC6E6A4570B059F9.crl
                          rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/1/D37909F713CBE989D0A993E0FC6E6A4570B059F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/4fb32fadfe6194122d0f228351afceae2f7be96b055a5cce33.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 22:14:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:7b:7e:9d:b3:cf:f3:7f:e3:17:60:06:ab:de:cb:16:27:fc:7f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fb32fadfe6194122d0f228351afceae2f7be96b055a5cce33
        Validity
            Not Before: Dec  6 21:48:44 2025 GMT
            Not After : Dec  7 22:14:44 2025 GMT
        Subject: CN=87FA375312A11451134ACBD7B07134D8F212080F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:42:f3:c7:4e:ba:cc:de:5a:b9:6a:ef:6f:5c:
                    d6:01:a9:3b:df:b7:41:53:b3:5c:ce:45:f8:98:db:
                    ba:8e:24:fa:e6:ea:e9:f6:ba:90:c9:38:51:11:4c:
                    89:08:6c:68:08:88:16:ec:bb:0d:cb:59:87:2f:f5:
                    ee:1d:d9:14:49:73:cf:c4:a2:bb:7d:9f:42:40:d8:
                    a3:14:05:93:84:4a:76:91:1f:f8:52:96:ce:c7:db:
                    14:14:6c:9a:17:57:5a:b6:da:d3:b7:f1:43:df:f7:
                    c2:8a:24:7a:9d:fe:87:28:17:2f:a2:fb:29:32:cc:
                    5a:28:db:4f:95:69:0a:ef:39:db:45:39:4e:47:1d:
                    03:d3:84:d7:66:a1:36:3f:dc:de:f2:a5:ed:cf:88:
                    65:28:ef:56:14:5b:dd:1b:2c:96:94:ec:d8:49:e4:
                    38:ba:ad:3b:04:9e:74:94:3a:04:5b:4b:f3:a2:fd:
                    2f:c1:11:80:ad:ff:6d:49:cd:16:42:8f:83:4c:57:
                    b8:67:33:29:c1:4d:ab:c5:0d:d3:23:da:9d:1d:20:
                    d1:a6:6f:79:a5:60:6b:15:a7:f5:20:c1:f3:76:b5:
                    15:6f:94:a2:93:79:b6:ba:c6:f3:43:7a:43:03:2a:
                    46:a4:f1:ad:78:b8:6c:e9:2f:7e:50:ff:8f:97:ad:
                    22:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:FA:37:53:12:A1:14:51:13:4A:CB:D7:B0:71:34:D8:F2:12:08:0F
            X509v3 Authority Key Identifier:
                keyid:D3:79:09:F7:13:CB:E9:89:D0:A9:93:E0:FC:6E:6A:45:70:B0:59:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/1/D37909F713CBE989D0A993E0FC6E6A4570B059F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/4fb32fadfe6194122d0f228351afceae2f7be96b055a5cce33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/1/D37909F713CBE989D0A993E0FC6E6A4570B059F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:0d:03:97:63:3e:1b:3e:cf:26:e8:de:b2:2d:93:f2:c6:cd:
         4a:f7:fb:06:52:b5:55:67:37:1d:06:43:a9:12:78:cc:4f:bf:
         a0:1a:ef:04:d3:b8:12:e2:17:53:e8:89:8b:f4:51:d9:ec:29:
         74:0d:ff:ba:3b:88:98:99:de:1e:e2:ed:43:cd:5d:63:a7:37:
         76:1d:94:56:60:71:ad:f2:9f:6b:54:b6:43:a0:47:bf:ef:e7:
         bf:6a:52:5c:20:1e:b3:1f:b0:5e:5c:a6:7e:1b:13:d1:26:ad:
         8f:b2:c2:7f:cf:b4:5b:ca:e4:7e:ca:00:f9:93:9a:ea:ca:c2:
         0d:5e:2c:40:a0:e6:fe:41:fe:67:41:89:6a:31:3f:bc:6f:17:
         5e:10:9c:8e:4e:0e:98:74:8d:c8:1f:6b:cc:0a:d8:4b:d6:a6:
         3a:a9:f6:81:c2:ef:66:d1:fb:50:a2:76:54:58:f7:72:dc:6f:
         8f:46:67:44:45:f1:e0:9b:18:26:a5:36:c8:ed:c7:42:29:ab:
         27:07:7b:73:c7:00:32:0f:1b:59:82:5c:89:52:ff:af:30:70:
         3d:e0:73:ab:c6:fd:bd:6c:cb:57:51:00:9e:c1:55:91:86:6f:
         c8:80:f2:0f:45:14:84:60:6f:f3:92:96:c7:5a:06:f0:da:60:
         08:c6:ee:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:36:57 2025 by rpki-client