This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.mft
File:                     D45D3138F5EB85594C2205AF938DBA4D8D129CC4.mft (raw, json)
Hash identifier:          c/6r2j9LWevzD0eQFYsww+GdjWIAwomCxxsPQ6F4ggo=
Subject key identifier:   EC:F6:56:D9:C2:5D:71:37:C8:95:DA:98:03:99:4D:73:94:D0:58:84
Authority key identifier: D4:5D:31:38:F5:EB:85:59:4C:22:05:AF:93:8D:BA:4D:8D:12:9C:C4
Certificate issuer:       /CN=D45D3138F5EB85594C2205AF938DBA4D8D129CC4
Certificate serial:       397D4978DE6AB0F7203D77292D0F07F281928CE4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.mft
Manifest number:          015D
Signing time:             Sun 25 Jan 2026 01:28:27 +0000
Manifest this update:     Sun 25 Jan 2026 01:23:27 +0000
Manifest next update:     Mon 26 Jan 2026 02:54:27 +0000
Files and hashes:         1: D45D3138F5EB85594C2205AF938DBA4D8D129CC4.crl (hash: EfJ4G1SzTgt+ig8Wj5R3qxboF/ZiTErDGlH0u2/MUOw=)
                          2: 3230302e33362e3231322e302f32322d3234203d3e20323731333833.roa (hash: uYfQM6YKSgvOOW9mte5IfDz0qPNh0BQj/v17JCn1X+c=)
                          3: 323830343a376161343a3a2f33322d3334203d3e20323731333833.roa (hash: vxQxmFCt9E0nxYJOt/0X0YNotaJuOGuDeX1OIJZ7JpA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.crl
                          rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 02:54:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:7d:49:78:de:6a:b0:f7:20:3d:77:29:2d:0f:07:f2:81:92:8c:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D45D3138F5EB85594C2205AF938DBA4D8D129CC4
        Validity
            Not Before: Jan 25 01:23:27 2026 GMT
            Not After : Jan 26 02:54:27 2026 GMT
        Subject: CN=ECF656D9C25D7137C895DA9803994D7394D05884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6e:24:c2:7e:76:de:af:f8:0f:91:70:bd:7f:
                    c8:d7:49:70:16:bd:0f:4b:c4:49:28:0e:39:59:50:
                    75:77:95:e1:a8:46:ce:71:18:1f:ae:33:fa:41:09:
                    fe:60:2a:fc:56:9d:73:7f:5f:ff:94:90:52:e2:f5:
                    6a:46:4a:7d:3d:81:39:7b:95:9f:56:da:f9:97:ea:
                    28:ad:96:e5:72:be:c8:65:11:2d:2c:6a:f1:33:3f:
                    9e:55:f0:ea:85:33:41:08:a4:a4:5d:cd:d7:07:d5:
                    03:ac:55:5b:91:64:33:e4:83:a2:49:c9:fc:d4:09:
                    c9:57:5f:11:f0:52:5d:ba:77:5d:3f:a0:c4:cf:41:
                    60:00:1f:db:a4:33:4a:a6:f0:1c:5a:4d:7a:11:5a:
                    79:89:ef:3e:06:cf:1b:00:47:02:45:a8:29:5b:89:
                    3e:c9:49:7e:5d:32:f5:7f:6e:85:df:46:06:45:aa:
                    dd:3c:c5:91:03:93:0f:0b:e8:18:ff:81:57:f3:c2:
                    72:f3:89:1b:e4:d2:4f:81:6e:b7:1f:6e:92:21:fb:
                    a7:9c:4b:b3:21:85:52:81:4b:2c:75:1a:9c:d2:d6:
                    6f:28:b7:7e:74:3e:60:85:26:d6:25:99:62:01:35:
                    59:d8:52:06:cc:17:c8:86:65:0a:8b:e1:76:cd:e3:
                    d2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F6:56:D9:C2:5D:71:37:C8:95:DA:98:03:99:4D:73:94:D0:58:84
            X509v3 Authority Key Identifier:
                keyid:D4:5D:31:38:F5:EB:85:59:4C:22:05:AF:93:8D:BA:4D:8D:12:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ea:47:00:cb:7c:61:ed:9b:59:42:6b:2b:6b:f3:44:d3:0b:
         60:e3:d9:a5:3f:12:f2:12:f4:fb:af:0d:5e:c5:01:4f:ac:41:
         2c:f6:53:d8:2d:f0:2c:b6:06:eb:7a:12:35:e3:15:d0:6a:d7:
         88:4d:e2:9a:39:da:e7:eb:bb:56:67:2d:a5:b5:74:07:54:9b:
         7b:df:a6:53:0a:59:12:99:ff:c3:45:5a:fb:6d:dd:01:b5:44:
         c5:50:c9:dd:49:69:6f:c2:1c:27:43:09:9f:6b:9e:c7:d9:f3:
         33:0f:fd:a4:24:6a:04:f0:a0:b6:5c:31:69:e8:d7:de:44:1f:
         23:a5:17:7f:d4:2b:64:86:fb:39:d7:3e:a8:a7:5a:e0:d6:e6:
         2a:b4:bc:bb:4b:e2:5d:b9:fa:03:a7:25:45:b9:69:48:5b:d2:
         c0:05:03:3f:ad:79:5d:c6:bd:72:b6:ef:68:9e:47:52:1b:db:
         60:2e:19:59:4c:50:e3:d4:fa:1a:36:6c:38:de:c3:3d:a7:1e:
         c2:fa:e2:fa:cc:ba:80:be:4a:2e:2d:dc:3d:c0:0b:31:2c:88:
         ac:e7:13:d4:52:28:e3:ba:be:07:4e:86:01:48:a7:7a:9a:56:
         2e:ea:18:2b:4e:3a:a0:da:a9:05:19:31:dc:7d:c1:17:f2:8c:
         e5:02:b5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:44:21 2026 by rpki-client