This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2STZbsMdQ2f4oPm868zSRLgfJ4bYWq9tXoV8sZJzdYEN/0/B7EF22DFD881235D264FE132548F573E3667BD1A.mft
File:                     B7EF22DFD881235D264FE132548F573E3667BD1A.mft (raw, json)
Hash identifier:          0RZ2xE/84Jy1Y0yl71AiCBbHRzcSbjSp98b7kOjU87I=
Subject key identifier:   0A:87:36:3F:9D:F1:57:60:7F:66:62:62:B9:58:C1:89:22:1B:C4:83
Authority key identifier: B7:EF:22:DF:D8:81:23:5D:26:4F:E1:32:54:8F:57:3E:36:67:BD:1A
Certificate issuer:       /CN=B7EF22DFD881235D264FE132548F573E3667BD1A
Certificate serial:       195AB0363798D37477DD88F9E6E0A539724E0A83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7EF22DFD881235D264FE132548F573E3667BD1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2STZbsMdQ2f4oPm868zSRLgfJ4bYWq9tXoV8sZJzdYEN/0/B7EF22DFD881235D264FE132548F573E3667BD1A.mft
Manifest number:          02AE
Signing time:             Sun 25 Jan 2026 03:23:47 +0000
Manifest this update:     Sun 25 Jan 2026 03:18:47 +0000
Manifest next update:     Mon 26 Jan 2026 17:31:47 +0000
Files and hashes:         1: B7EF22DFD881235D264FE132548F573E3667BD1A.crl (hash: OAJ/jB5OXenQ7xWAXcIDEWXnMMXTGvmvMZRMRb23kAU=)
                          2: 3138362e3233322e36322e302f32332d3332203d3e203533303231.roa (hash: OqnIlGrkF8zcu1CJBmm0arYzGKRZ3nGoDFTjLlj5zYE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2STZbsMdQ2f4oPm868zSRLgfJ4bYWq9tXoV8sZJzdYEN/0/B7EF22DFD881235D264FE132548F573E3667BD1A.crl
                          rsync://rpki-repo.registro.br/repo/2STZbsMdQ2f4oPm868zSRLgfJ4bYWq9tXoV8sZJzdYEN/0/B7EF22DFD881235D264FE132548F573E3667BD1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7EF22DFD881235D264FE132548F573E3667BD1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 16:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:5a:b0:36:37:98:d3:74:77:dd:88:f9:e6:e0:a5:39:72:4e:0a:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7EF22DFD881235D264FE132548F573E3667BD1A
        Validity
            Not Before: Jan 25 03:18:47 2026 GMT
            Not After : Jan 26 17:31:47 2026 GMT
        Subject: CN=0A87363F9DF157607F666262B958C189221BC483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e7:2f:75:35:ea:95:be:c7:ac:1f:08:d4:71:
                    ba:02:4b:dc:04:c3:e6:27:1f:3f:bd:91:46:20:90:
                    9f:dd:5b:10:0c:e4:a5:6c:cc:69:b7:f0:ed:69:9d:
                    30:38:f6:50:58:fd:28:9b:35:fe:4c:3e:ec:12:90:
                    8d:bb:d4:20:5f:c3:73:13:45:55:2d:81:f5:a4:71:
                    84:25:a9:4b:de:98:16:3b:7a:d7:8d:95:10:6d:8a:
                    ae:96:c3:dd:2b:95:06:09:3b:67:45:2b:5a:d5:72:
                    a7:c9:c6:cc:34:a7:80:da:72:54:28:37:5c:bd:59:
                    87:5e:7b:fb:84:cc:fd:52:4a:e8:89:1e:68:81:a9:
                    5c:98:8a:fa:8b:64:b6:17:4f:60:05:9d:1a:81:1f:
                    1d:9f:cf:75:a5:4f:ed:ca:a7:3e:62:0e:8b:20:e9:
                    f5:13:c5:ad:5c:2b:38:4c:68:7f:b6:35:c1:2d:fa:
                    06:b5:66:9b:82:3b:29:d8:52:51:12:d6:b4:02:f3:
                    71:29:15:fe:31:17:87:68:1b:df:e2:0e:e2:a1:87:
                    5b:33:b7:33:98:dd:9b:22:57:5b:98:1f:c4:df:57:
                    dc:85:90:bd:7e:a2:b8:30:13:52:25:57:58:79:d2:
                    bc:ab:12:cf:b1:93:e3:04:d7:64:37:8a:57:23:02:
                    d3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:87:36:3F:9D:F1:57:60:7F:66:62:62:B9:58:C1:89:22:1B:C4:83
            X509v3 Authority Key Identifier:
                keyid:B7:EF:22:DF:D8:81:23:5D:26:4F:E1:32:54:8F:57:3E:36:67:BD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2STZbsMdQ2f4oPm868zSRLgfJ4bYWq9tXoV8sZJzdYEN/0/B7EF22DFD881235D264FE132548F573E3667BD1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7EF22DFD881235D264FE132548F573E3667BD1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2STZbsMdQ2f4oPm868zSRLgfJ4bYWq9tXoV8sZJzdYEN/0/B7EF22DFD881235D264FE132548F573E3667BD1A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:77:c9:b3:dc:0d:dd:b3:3c:c3:10:f0:d4:51:00:79:2c:57:
         ba:ea:6c:7f:14:b3:ca:ed:3f:9c:a1:a5:3a:c4:8f:80:15:14:
         50:03:8d:ed:05:36:93:92:2b:f9:35:7b:78:ff:78:e3:fe:a6:
         3f:96:9d:7f:86:55:01:7d:48:25:63:89:c9:02:76:07:22:94:
         2c:e6:91:82:5f:6c:33:1d:1d:39:bb:70:cb:ff:0e:31:17:24:
         fc:b8:eb:71:46:ba:2b:b0:8e:4a:5f:d3:3e:56:b4:a5:6d:c6:
         e2:11:8f:17:1e:72:85:22:fc:6a:0d:43:0f:f7:bb:5d:83:73:
         82:c4:cc:ff:a2:f4:1a:be:b1:e8:42:b2:60:c0:77:b5:59:a9:
         8d:aa:c1:75:b4:a0:a4:3b:e2:c5:64:54:91:73:d5:45:f8:48:
         1d:9d:46:04:81:d4:7d:c6:6b:8b:04:68:59:76:d6:bb:45:ec:
         3f:f6:ba:68:24:c3:cf:d2:74:24:ff:de:ba:4d:a3:7c:82:4c:
         48:e7:bc:a1:5d:c4:8b:61:6c:62:2a:5f:fc:34:fd:e2:42:83:
         ef:55:4d:52:72:97:7f:d1:27:65:3b:50:ed:fb:dd:78:83:41:
         90:c5:3e:50:04:00:f6:d6:9e:d2:69:a3:ef:e5:93:d3:4c:49:
         b1:6d:3e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:40:06 2026 by rpki-client