This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/0673A8A85FD75BDF7374650633566E470F5D792A.mft
File:                     0673A8A85FD75BDF7374650633566E470F5D792A.mft (raw, json)
Hash identifier:          Y+Wct/cKEZFXRefBih8afDc/0kEB+IQ7Fy+u0fnoR6U=
Subject key identifier:   97:07:38:B5:CB:FC:5D:40:C4:81:84:D6:C4:BF:DD:45:A3:C5:A5:C4
Authority key identifier: 06:73:A8:A8:5F:D7:5B:DF:73:74:65:06:33:56:6E:47:0F:5D:79:2A
Certificate issuer:       /CN=0673A8A85FD75BDF7374650633566E470F5D792A
Certificate serial:       3BC749C1BE9FF2DD01BBD283F3B9FE944A91EAC2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0673A8A85FD75BDF7374650633566E470F5D792A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/0673A8A85FD75BDF7374650633566E470F5D792A.mft
Manifest number:          70
Signing time:             Sun 25 Jan 2026 05:59:58 +0000
Manifest this update:     Sun 25 Jan 2026 05:54:58 +0000
Manifest next update:     Mon 26 Jan 2026 09:38:58 +0000
Files and hashes:         1: 3137372e3132392e32382e302f32322d3234203d3e20323633323636.roa (hash: Upe0YPCzHj4GTIrllXLlAxIfLTx07Sm8YoEmbCifd8I=)
                          2: 323830343a313631343a3a2f33322d3438203d3e20323633323636.roa (hash: H1ySD22gAkwKaQwiOrw+K7D23u1auOLZ3TSQPkOCeyw=)
                          3: 0673A8A85FD75BDF7374650633566E470F5D792A.crl (hash: YBRNak6Km4tC4wUZW5TIBR8X6aa5gFcROxwxJIaM1Ho=)
                          4: 3137302e38322e3130382e302f32322d3234203d3e20323633323636.roa (hash: RF38Bjpp823JDXqLKsrAUYWB/3BPbPZ7MdCkTro+SRU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/0673A8A85FD75BDF7374650633566E470F5D792A.crl
                          rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/0673A8A85FD75BDF7374650633566E470F5D792A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0673A8A85FD75BDF7374650633566E470F5D792A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 09:38:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c7:49:c1:be:9f:f2:dd:01:bb:d2:83:f3:b9:fe:94:4a:91:ea:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0673A8A85FD75BDF7374650633566E470F5D792A
        Validity
            Not Before: Jan 25 05:54:58 2026 GMT
            Not After : Jan 26 09:38:58 2026 GMT
        Subject: CN=970738B5CBFC5D40C48184D6C4BFDD45A3C5A5C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d9:be:11:67:49:24:f6:18:d3:e1:80:9f:37:
                    83:dd:8e:a0:56:41:ac:54:7a:06:6c:3e:bc:6a:c3:
                    28:69:51:b4:08:89:8e:5e:f6:18:3b:6e:8c:08:c5:
                    ec:a0:7d:76:96:c7:cb:c5:a5:ee:7f:50:4e:4d:9b:
                    57:49:72:91:d4:c5:85:20:2d:04:27:1b:b3:4d:63:
                    3b:8c:b0:71:42:36:30:e8:34:94:8b:74:ac:81:f2:
                    5c:03:e7:91:59:6f:90:a3:6f:ad:34:e8:3b:33:e0:
                    35:30:15:d3:09:05:f4:8f:b5:92:19:86:f6:91:77:
                    6b:2b:d8:fe:82:40:95:1a:a2:47:8c:05:b5:ac:21:
                    51:1e:fb:4d:c3:9c:77:8e:6e:64:65:30:42:9d:41:
                    bd:3b:9e:86:3b:e3:c9:a5:db:cb:59:bc:ec:b6:08:
                    00:1d:12:75:5b:e7:d0:ce:6e:f7:c8:aa:79:9a:67:
                    d2:3a:26:16:37:9b:03:3f:4a:be:b7:e4:3e:d0:cb:
                    8e:3f:7a:b0:6a:33:11:4d:fe:e7:46:bc:cf:b4:72:
                    04:27:c8:cc:44:93:18:dc:33:16:c8:82:28:55:35:
                    af:58:c4:34:02:44:96:7d:f3:ac:a6:a6:e5:48:2a:
                    5e:ec:ea:09:da:57:6f:63:65:1f:82:da:1c:fc:7c:
                    27:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:07:38:B5:CB:FC:5D:40:C4:81:84:D6:C4:BF:DD:45:A3:C5:A5:C4
            X509v3 Authority Key Identifier:
                keyid:06:73:A8:A8:5F:D7:5B:DF:73:74:65:06:33:56:6E:47:0F:5D:79:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/0673A8A85FD75BDF7374650633566E470F5D792A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0673A8A85FD75BDF7374650633566E470F5D792A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/0673A8A85FD75BDF7374650633566E470F5D792A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:17:58:31:e1:eb:93:2d:7b:f7:5f:31:59:af:aa:cb:2a:ab:
         3d:7e:0d:2c:01:03:ea:98:c8:b1:d3:60:5a:b8:86:82:8a:46:
         ff:9d:ed:2e:f4:12:95:fc:68:a4:b0:b5:bf:e6:75:f6:cb:6e:
         9a:72:a4:1f:7a:c8:b6:67:10:f3:14:96:c1:fb:80:0e:49:1f:
         5e:b7:db:e3:83:b2:65:fc:ca:9b:9a:5b:e8:e4:1b:1b:16:85:
         44:c1:dd:91:4d:5b:c8:eb:41:db:82:9b:c2:5d:16:57:66:ec:
         d1:2c:61:72:d0:4d:0a:d3:46:1f:44:b3:80:54:ae:77:b8:e4:
         ca:53:6a:d6:52:53:ab:f2:15:28:74:a5:39:be:d9:80:c3:69:
         e5:60:06:43:39:7e:ff:18:76:ba:6e:ad:d8:88:5c:02:35:e6:
         ca:ca:e2:6a:5d:34:40:cf:1f:0e:9a:fd:44:3e:ce:eb:2d:cd:
         7e:00:99:5e:33:e6:a4:64:42:40:04:35:66:a5:6b:bf:0a:5b:
         a3:f9:45:7c:ad:5e:c1:b7:2e:d1:9b:52:50:7e:af:ac:2f:22:
         fd:22:e8:37:e0:01:6d:bc:5f:75:1a:93:3c:f9:bd:19:b4:b2:
         42:35:10:59:ca:94:17:4a:52:9a:83:52:34:71:5b:a0:25:ae:
         17:af:88:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:15:11 2026 by rpki-client