This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2hEGyP8k4orCvxZe1Je9834aisNAp9zRkm5pmvYorZ1r/0/E4195C7AEC20ACF2FE3778AC72F036A58D056588.mft
File:                     E4195C7AEC20ACF2FE3778AC72F036A58D056588.mft (raw, json)
Hash identifier:          nSRbqv2HmCoH0/l6wmHEcty0VgyftPQG696FdJShbBE=
Subject key identifier:   3F:5E:37:29:30:6B:24:2F:D1:43:4B:56:F8:67:B3:4B:BC:2A:52:10
Authority key identifier: E4:19:5C:7A:EC:20:AC:F2:FE:37:78:AC:72:F0:36:A5:8D:05:65:88
Certificate issuer:       /CN=E4195C7AEC20ACF2FE3778AC72F036A58D056588
Certificate serial:       1282B373114DCBCBDCE637686216C2401BEFD938
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4195C7AEC20ACF2FE3778AC72F036A58D056588.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2hEGyP8k4orCvxZe1Je9834aisNAp9zRkm5pmvYorZ1r/0/E4195C7AEC20ACF2FE3778AC72F036A58D056588.mft
Manifest number:          19
Signing time:             Sun 25 Jan 2026 03:57:56 +0000
Manifest this update:     Sun 25 Jan 2026 03:52:56 +0000
Manifest next update:     Mon 26 Jan 2026 06:59:56 +0000
Files and hashes:         1: E4195C7AEC20ACF2FE3778AC72F036A58D056588.crl (hash: gnOQ+VE9SaXEO3LkTnMR5Pxt+LsHr7lvODwlRIoI310=)
                          2: 323830343a346237633a3a2f33322d313238203d3e203238323237.roa (hash: 77iPd4aLxfm7LKUbWKYSvRhK8QjguJyfn6gRCsckjV0=)
                          3: 3138362e3230392e3138342e302f32312d3332203d3e203238323237.roa (hash: 8BXPK+UE4nHpvd/64ixQIyd2mZGgN5rosZbAHqmQPFk=)
                          4: 3138392e3132362e3230382e302f32302d3332203d3e203238323237.roa (hash: z5WT02ECH4y5EWMWT0olN+gx1W+kUd49Y/UkwmEGAZA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2hEGyP8k4orCvxZe1Je9834aisNAp9zRkm5pmvYorZ1r/0/E4195C7AEC20ACF2FE3778AC72F036A58D056588.crl
                          rsync://rpki-repo.registro.br/repo/2hEGyP8k4orCvxZe1Je9834aisNAp9zRkm5pmvYorZ1r/0/E4195C7AEC20ACF2FE3778AC72F036A58D056588.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4195C7AEC20ACF2FE3778AC72F036A58D056588.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 06:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:82:b3:73:11:4d:cb:cb:dc:e6:37:68:62:16:c2:40:1b:ef:d9:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4195C7AEC20ACF2FE3778AC72F036A58D056588
        Validity
            Not Before: Jan 25 03:52:56 2026 GMT
            Not After : Jan 26 06:59:56 2026 GMT
        Subject: CN=3F5E3729306B242FD1434B56F867B34BBC2A5210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:47:ee:4f:e5:08:90:54:48:0f:bd:cd:fc:88:
                    5d:55:73:1e:0e:f3:3e:73:81:e7:dc:90:cc:3e:82:
                    3e:d5:1e:18:a9:ac:f3:6c:ac:11:fe:08:0e:36:8d:
                    b6:55:7b:49:a8:92:3b:fd:da:20:18:9a:2a:77:50:
                    c3:f5:e2:bd:d4:98:d2:ff:d5:46:70:0e:49:18:1f:
                    0c:8b:43:e1:25:d0:30:3d:5d:b1:ec:b7:19:6e:1e:
                    4a:90:5a:2e:9e:c9:63:72:ce:5c:e9:e0:48:6a:09:
                    87:9a:95:a0:a0:ee:c4:26:0c:97:85:eb:e4:58:9c:
                    5c:3c:bb:24:ed:f0:fb:c1:d5:bf:08:75:40:38:58:
                    04:da:ef:d7:cd:6d:07:d2:68:1f:fe:36:3f:85:29:
                    e4:e4:90:89:a5:a5:3f:d9:f4:80:3e:29:a8:e1:2a:
                    d4:47:4a:44:47:6e:dd:09:41:f7:84:1f:2f:35:bb:
                    56:ab:86:b3:5b:5f:59:64:b3:58:01:2f:15:92:b0:
                    a4:55:b2:ad:69:2e:ee:cf:56:31:17:ab:e6:51:de:
                    aa:cf:61:f0:9b:6c:e6:c0:bd:8f:2f:39:e4:da:68:
                    f0:b6:64:25:f1:40:6f:51:6b:11:c9:76:4d:3f:ad:
                    a2:4b:6c:5d:34:1c:24:fc:a6:65:ae:71:f5:55:ee:
                    23:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:5E:37:29:30:6B:24:2F:D1:43:4B:56:F8:67:B3:4B:BC:2A:52:10
            X509v3 Authority Key Identifier:
                keyid:E4:19:5C:7A:EC:20:AC:F2:FE:37:78:AC:72:F0:36:A5:8D:05:65:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2hEGyP8k4orCvxZe1Je9834aisNAp9zRkm5pmvYorZ1r/0/E4195C7AEC20ACF2FE3778AC72F036A58D056588.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4195C7AEC20ACF2FE3778AC72F036A58D056588.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hEGyP8k4orCvxZe1Je9834aisNAp9zRkm5pmvYorZ1r/0/E4195C7AEC20ACF2FE3778AC72F036A58D056588.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:fd:31:4a:1a:e1:f4:4e:95:84:2c:59:5e:79:ea:ef:8e:36:
         3a:5f:b6:f7:8c:fd:2f:59:79:1d:5a:e5:c2:bd:40:ad:97:38:
         98:04:3a:39:4a:43:51:06:37:50:a2:d3:c6:63:42:83:e5:a8:
         20:0a:6a:db:51:e3:e8:e8:34:32:7e:5f:62:1e:af:e0:5d:99:
         85:9e:c4:b4:2a:43:6f:93:1f:0c:a9:ba:0f:19:09:b9:88:93:
         ba:f4:bc:44:b2:4c:f8:47:c7:d8:b6:ca:03:c8:eb:85:34:06:
         cb:83:ba:da:23:e8:46:42:09:4c:bc:5d:61:f9:63:dc:5c:f4:
         f7:15:f0:15:60:37:d5:84:9a:58:92:ae:4c:a3:88:dc:6e:f9:
         e3:43:92:eb:b9:58:04:4d:24:d0:3f:ed:80:9b:67:b9:67:a7:
         ba:49:80:5f:9f:b2:ad:21:ac:cc:8a:88:da:67:9d:57:f4:63:
         8e:3b:00:dc:29:3d:ca:08:4e:ac:49:f3:ac:2b:9e:48:6c:50:
         67:00:a3:e7:a7:40:8a:fb:45:2e:44:32:67:72:5e:cd:81:cf:
         fb:a0:a2:04:43:9f:a6:c1:35:ea:34:af:8c:c0:53:94:95:c8:
         59:70:18:fa:c4:f5:92:40:a8:49:24:2b:4b:c7:66:fd:68:7d:
         af:6b:a8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:16:58 2026 by rpki-client