This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft
File:                     470AE1EB9714E43320F9D361336505142D7D836B.mft (raw, json)
Hash identifier:          yP91E8LAVS1efbIP1/QSdgMX5VTlLEucg8Qv4QH5VJk=
Subject key identifier:   74:14:68:80:16:2A:2B:54:49:7B:1E:8E:C4:68:E0:BE:AE:05:7D:61
Authority key identifier: 47:0A:E1:EB:97:14:E4:33:20:F9:D3:61:33:65:05:14:2D:7D:83:6B
Certificate issuer:       /CN=470AE1EB9714E43320F9D361336505142D7D836B
Certificate serial:       600324CAA7116228505D248CBDDEA728E598B956
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470AE1EB9714E43320F9D361336505142D7D836B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft
Manifest number:          0124
Signing time:             Sun 25 Jan 2026 14:23:11 +0000
Manifest this update:     Sun 25 Jan 2026 14:18:11 +0000
Manifest next update:     Mon 26 Jan 2026 17:28:11 +0000
Files and hashes:         1: 3137372e33392e39382e302f32332d3332203d3e20323731363135.roa (hash: BdLrbEU7II3NX1HsAT1F9Ah5WD1IUR9s5CyZjRaEy4Y=)
                          2: 470AE1EB9714E43320F9D361336505142D7D836B.crl (hash: t9b5SwxFCu42de0oc6cmkGgrzwP9z8jJ6IAvXfnrGJY=)
                          3: 3137372e33392e39362e302f32342d3332203d3e20323731363135.roa (hash: 1vyNuWE5jauLyptTokeHnfrLaNFayN+UWnzSx2Hk+eA=)
                          4: 323830343a376534633a3a2f33322d313238203d3e20323731363135.roa (hash: OdU9UEZt02QpSGkR3fyYMJem0AChe2we0Z/o1VOpO5k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.crl
                          rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470AE1EB9714E43320F9D361336505142D7D836B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 16:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:03:24:ca:a7:11:62:28:50:5d:24:8c:bd:de:a7:28:e5:98:b9:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=470AE1EB9714E43320F9D361336505142D7D836B
        Validity
            Not Before: Jan 25 14:18:11 2026 GMT
            Not After : Jan 26 17:28:11 2026 GMT
        Subject: CN=74146880162A2B54497B1E8EC468E0BEAE057D61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:87:34:d9:c0:4c:d7:ab:de:23:cf:f4:34:31:
                    10:19:41:0e:7a:72:bc:bb:fb:17:60:c3:7b:d5:7f:
                    91:eb:e8:9f:0a:86:0a:40:45:df:73:9f:10:d9:01:
                    fd:fa:e1:ec:c6:79:90:bf:dc:01:76:11:bc:05:07:
                    97:8d:e7:47:a9:13:18:8b:f7:92:ac:6d:c7:0b:15:
                    09:18:d6:9a:02:b8:77:66:a3:ab:5e:50:59:ee:b6:
                    0d:57:21:8b:c8:54:cf:bd:b9:f4:8b:4b:f3:52:39:
                    5f:74:93:58:81:21:e3:db:fc:0b:6a:84:e1:06:f0:
                    a4:e1:17:89:14:0f:f6:f9:9d:82:c2:cb:51:07:d3:
                    a0:2c:cb:45:4a:7e:3a:de:ef:5b:30:53:2a:65:11:
                    67:76:4d:f9:ca:64:8e:8f:60:8b:1d:69:a1:17:b0:
                    dc:67:3e:3b:c0:9a:60:b9:29:50:d0:78:c8:17:13:
                    40:d9:d0:77:5f:f3:05:36:07:69:72:5a:28:00:54:
                    36:2c:a7:ad:21:05:27:a6:fe:c0:1d:bf:52:e3:86:
                    ba:0a:c4:3b:e9:35:ec:0e:7a:c6:49:89:4c:6c:30:
                    a1:dc:72:57:2b:34:52:2b:1e:ee:1e:25:e5:7e:4e:
                    b4:d8:f0:86:27:de:d7:cd:af:40:ac:53:d3:03:7c:
                    c8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:14:68:80:16:2A:2B:54:49:7B:1E:8E:C4:68:E0:BE:AE:05:7D:61
            X509v3 Authority Key Identifier:
                keyid:47:0A:E1:EB:97:14:E4:33:20:F9:D3:61:33:65:05:14:2D:7D:83:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470AE1EB9714E43320F9D361336505142D7D836B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:d5:39:e6:55:1f:8d:f9:cc:c1:19:17:5f:cf:be:05:9a:ff:
         83:60:a8:ea:51:cb:c0:8f:51:7f:7f:3a:9a:94:52:64:1e:27:
         b4:cd:7a:8f:68:57:fb:2a:78:83:33:67:68:f1:00:3e:35:5b:
         ae:a7:5c:14:be:67:cb:92:1f:c6:34:65:14:c0:f2:3d:2d:79:
         dc:a3:3e:a9:2c:41:cc:2d:0b:ac:5f:40:75:0d:19:a3:77:cc:
         df:af:f5:b8:20:d0:80:03:6c:d2:d4:9b:88:ef:29:af:51:06:
         82:18:ae:34:27:be:29:bf:a4:26:a7:71:7f:de:95:31:c5:5b:
         cb:59:3b:6b:54:9d:ee:02:03:3c:15:94:a7:f2:e2:80:e4:d7:
         97:f8:32:78:88:a3:24:ec:93:29:bd:f9:b4:f6:e7:48:b2:f8:
         65:96:99:9d:1a:03:44:c3:e3:31:13:87:5b:c5:9f:af:13:36:
         d5:34:26:64:91:4c:a1:e7:85:c4:97:b1:15:9f:fb:52:6f:db:
         ec:71:94:8a:11:bd:0c:19:65:b3:80:75:21:ed:d6:16:2c:13:
         95:93:a2:1f:30:6c:97:b0:52:4f:07:15:77:c7:b4:46:0d:81:
         56:0e:8f:7e:78:f2:12:d9:1d:78:73:5d:93:a1:1f:bf:39:6c:
         21:42:d7:b1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYAMkyqcRYihQXSSMvd6nKOWYuVYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDcwQUUxRUI5NzE0RTQzMzIwRjlEMzYxMzM2NTA1MTQy
RDdEODM2QjAeFw0yNjAxMjUxNDE4MTFaFw0yNjAxMjYxNzI4MTFaMDMxMTAvBgNV
BAMTKDc0MTQ2ODgwMTYyQTJCNTQ0OTdCMUU4RUM0NjhFMEJFQUUwNTdENjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5hzTZwEzXq94jz/Q0MRAZQQ56
cry7+xdgw3vVf5Hr6J8KhgpARd9znxDZAf364ezGeZC/3AF2EbwFB5eN50epExiL
95KsbccLFQkY1poCuHdmo6teUFnutg1XIYvIVM+9ufSLS/NSOV90k1iBIePb/Atq
hOEG8KThF4kUD/b5nYLCy1EH06Asy0VKfjre71swUyplEWd2TfnKZI6PYIsdaaEX
sNxnPjvAmmC5KVDQeMgXE0DZ0Hdf8wU2B2lyWigAVDYsp60hBSem/sAdv1LjhroK
xDvpNewOesZJiUxsMKHcclcrNFIrHu4eJeV+TrTY8IYn3tfNr0CsU9MDfMhPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUdBRogBYqK1RJex6OxGjgvq4FfWEwHwYDVR0j
BBgwFoAURwrh65cU5DMg+dNhM2UFFC19g2swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkNNendWYWtXMzdvbTVYUFNyRVFjdVBHWjFDUUZOenc2eXZ0bW9SU0dv
THcvMC80NzBBRTFFQjk3MTRFNDMzMjBGOUQzNjEzMzY1MDUxNDJEN0Q4MzZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3MEFFMUVCOTcxNEU0MzMy
MEY5RDM2MTMzNjUwNTE0MkQ3RDgzNkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MkNNendWYWtXMzdvbTVYUFNyRVFjdVBHWjFDUUZOenc2eXZ0bW9SU0dvTHcvMC80
NzBBRTFFQjk3MTRFNDMzMjBGOUQzNjEzMzY1MDUxNDJEN0Q4MzZCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAi9U55lUfjfnMwRkXX8++BZr/g2Co6lHLwI9Rf386mpRSZB4ntM16j2hX+yp4
gzNnaPEAPjVbrqdcFL5ny5IfxjRlFMDyPS153KM+qSxBzC0LrF9AdQ0Zo3fM36/1
uCDQgANs0tSbiO8pr1EGghiuNCe+Kb+kJqdxf96VMcVby1k7a1Sd7gIDPBWUp/Li
gOTXl/gyeIijJOyTKb35tPbnSLL4ZZaZnRoDRMPjMROHW8WfrxM21TQmZJFMoeeF
xJexFZ/7Um/b7HGUihG9DBlls4B1Ie3WFiwTlZOiHzBsl7BSTwcVd8e0Rg2BVg6P
fnjyEtkdeHNdk6EfvzlsIULXsQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:18:40 2026 by rpki-client