This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.mft
File:                     417A3C46308D4692153B994B72E51599225B4979.mft (raw, json)
Hash identifier:          BFOIaIQ8nJCaC02W5faT1+aiFQI5a+dqo5BsFL6H0eo=
Subject key identifier:   56:54:8E:9B:39:39:A9:51:14:9C:76:32:9F:6A:9A:1A:08:04:C5:DB
Authority key identifier: 41:7A:3C:46:30:8D:46:92:15:3B:99:4B:72:E5:15:99:22:5B:49:79
Certificate issuer:       /CN=417A3C46308D4692153B994B72E51599225B4979
Certificate serial:       0E5BAEBBD96BAC5BAC6309028FF3CC9307F25B39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/417A3C46308D4692153B994B72E51599225B4979.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.mft
Manifest number:          4C
Signing time:             Sun 25 Jan 2026 11:11:17 +0000
Manifest this update:     Sun 25 Jan 2026 11:06:17 +0000
Manifest next update:     Mon 26 Jan 2026 14:36:17 +0000
Files and hashes:         1: 3138392e3230312e3234382e302f32322d3332203d3e20323639373035.roa (hash: 67ErBlbOvFpg0hvnl1IkwlbuCRkTDA6ZZMEUfu5lUqE=)
                          2: 323830343a363861303a3a2f33322d313238203d3e20323639373035.roa (hash: zhdfCF+qRAETjvfVQ6OraQ2dmSybxhayrJCM+QSnLjw=)
                          3: 417A3C46308D4692153B994B72E51599225B4979.crl (hash: s4fUS9L7GdpenWjMbepRV3LR4IyBDIP3ZapZSlR6cqA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.crl
                          rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/417A3C46308D4692153B994B72E51599225B4979.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 14:36:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:5b:ae:bb:d9:6b:ac:5b:ac:63:09:02:8f:f3:cc:93:07:f2:5b:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=417A3C46308D4692153B994B72E51599225B4979
        Validity
            Not Before: Jan 25 11:06:17 2026 GMT
            Not After : Jan 26 14:36:17 2026 GMT
        Subject: CN=56548E9B3939A951149C76329F6A9A1A0804C5DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ea:e7:20:87:71:9a:3d:95:72:a3:12:d6:db:
                    1d:e5:db:7a:3a:cc:9d:99:f5:67:d8:83:3d:4c:94:
                    34:b5:a1:6a:47:26:6b:e6:f3:2b:43:24:87:e8:30:
                    f2:e4:ab:b5:24:2d:43:4f:91:f5:d7:0c:d3:97:0b:
                    be:cd:6b:07:5c:57:b2:4f:11:aa:e4:73:16:64:f2:
                    89:54:05:6d:7c:88:dc:b4:d5:11:6a:af:25:af:47:
                    74:1b:82:72:85:89:34:73:f1:9e:e0:8b:17:70:53:
                    81:e0:f8:f8:89:d8:19:e4:0f:c7:c1:61:09:10:31:
                    34:e0:b6:ee:92:1e:ac:0a:a0:58:6c:ac:c5:dc:66:
                    40:e5:d4:77:9a:1c:98:96:05:27:26:67:25:d1:1c:
                    60:c7:3a:29:15:db:d1:90:b4:96:e2:c1:e9:2c:87:
                    50:5d:72:51:ac:4d:09:75:29:1d:25:5d:e8:05:37:
                    2d:6f:03:83:f5:2d:50:8f:36:29:6a:09:7c:a3:cc:
                    fb:e5:69:24:eb:87:ad:e1:94:7a:b0:74:b9:7f:94:
                    68:ea:ce:66:1d:b4:60:7a:09:fa:69:79:9c:3b:24:
                    21:08:3f:0d:d6:5f:32:63:67:5f:e2:d6:29:16:fd:
                    f9:70:8e:5c:e1:41:92:fc:e0:3a:ca:f3:fd:dc:c8:
                    38:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:54:8E:9B:39:39:A9:51:14:9C:76:32:9F:6A:9A:1A:08:04:C5:DB
            X509v3 Authority Key Identifier:
                keyid:41:7A:3C:46:30:8D:46:92:15:3B:99:4B:72:E5:15:99:22:5B:49:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/417A3C46308D4692153B994B72E51599225B4979.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:15:d7:5c:27:20:9e:f4:2a:fc:61:1f:24:7c:d4:75:5f:33:
         fb:31:51:f8:13:ed:e6:28:8f:b8:c7:5c:85:fd:17:14:c9:88:
         5d:8b:4a:f1:c7:7d:ad:73:8e:e2:79:84:40:f3:d9:9b:4a:88:
         8a:2d:ae:f1:6a:f1:6f:92:cb:6e:6b:31:03:d1:98:68:4d:e6:
         2a:35:c2:bd:21:be:5b:33:71:07:f3:5b:82:9e:45:18:11:23:
         8a:a2:54:1f:73:b3:cd:bc:4c:e0:0e:d4:b6:b6:1c:4d:6f:89:
         ca:a3:40:d8:a2:60:63:5b:d4:41:e4:47:35:f5:02:e4:25:02:
         a7:e5:71:f9:05:cb:52:8e:fd:d0:88:69:a3:1b:af:5c:99:3c:
         5c:8a:f9:d5:51:81:00:ad:93:37:ae:70:dc:be:16:09:36:af:
         22:6e:85:e9:d5:4e:af:10:52:09:a4:23:51:0a:78:68:f7:3e:
         7d:e5:05:6b:45:be:f8:3f:3c:4d:51:c7:b2:d3:79:1b:a6:3a:
         9c:93:e1:31:6a:f5:d0:10:dd:09:c2:d8:bf:18:21:59:b3:a3:
         bb:75:97:74:cf:da:a7:04:bd:d5:61:f8:76:1e:e9:94:61:d2:
         46:3e:dc:7a:a6:5f:2d:f5:84:af:5d:a7:f5:a5:63:e1:4a:e3:
         7c:83:71:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:51:56 2026 by rpki-client