This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft
File:                     33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft (raw, json)
Hash identifier:          xDzdwp/I/4j2Pm3pS+5VmZNOUqs6PFdWuvMbY8b0aQI=
Subject key identifier:   8A:F7:56:99:4D:AC:D4:33:F8:DA:05:2E:AE:70:69:FA:6E:82:43:34
Authority key identifier: 33:70:23:11:AD:CA:7F:C6:C8:5D:C0:65:5A:92:17:C0:0B:E5:E1:EC
Certificate issuer:       /CN=33702311ADCA7FC6C85DC0655A9217C00BE5E1EC
Certificate serial:       62CC17EF5486C143BB98D1E7996C9B9D94B6EC21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft
Manifest number:          14
Signing time:             Sun 25 Jan 2026 20:01:37 +0000
Manifest this update:     Sun 25 Jan 2026 19:56:37 +0000
Manifest next update:     Mon 26 Jan 2026 21:28:37 +0000
Files and hashes:         1: 323830343a333563303a3a2f33322d313238203d3e20323636333034.roa (hash: LIdBu4hH76fjQZltvNuNl4Sk11vROmmGVVYxeEIWdRU=)
                          2: 33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.crl (hash: mZhjrrgk6lfZNBogaDEof4W6KVgLkuXSnqcE6+xaWss=)
                          3: 3137302e37392e3230322e302f32332d3332203d3e20323636333034.roa (hash: pLHLAyc3v38AwOZ1l5MAIcR4fRXI2Nn9ORHjbHU/uIU=)
                          4: 3137302e37392e3230302e302f32322d3332203d3e20323636333034.roa (hash: F0hl7fFUX/02GFyDa1Q0o9KwtX4RrOs5ypWX63He8Tk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.crl
                          rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 21:28:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:cc:17:ef:54:86:c1:43:bb:98:d1:e7:99:6c:9b:9d:94:b6:ec:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33702311ADCA7FC6C85DC0655A9217C00BE5E1EC
        Validity
            Not Before: Jan 25 19:56:37 2026 GMT
            Not After : Jan 26 21:28:37 2026 GMT
        Subject: CN=8AF756994DACD433F8DA052EAE7069FA6E824334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:be:f3:dc:2c:56:01:aa:eb:67:3a:00:d4:8e:
                    1c:b0:23:d8:9f:2e:03:3e:f1:ae:95:3b:71:89:3e:
                    28:af:d8:cc:90:9c:5c:f0:94:ab:cf:15:b4:f5:29:
                    45:6e:72:36:2e:30:a9:58:32:39:ef:b5:6c:a4:1f:
                    96:92:dc:22:59:e0:4e:d0:df:36:c4:73:fa:c2:cf:
                    2b:9b:65:e3:cc:ba:5b:98:94:f2:79:b8:8f:45:5d:
                    a3:bc:8b:db:34:07:b6:53:65:c6:6a:42:18:93:7d:
                    00:9f:76:1f:e4:94:33:a6:2b:e8:92:18:3e:ad:4a:
                    07:f1:1d:e0:9e:57:19:04:37:18:61:6d:0c:df:20:
                    a2:13:a5:aa:90:11:e5:87:1e:43:cc:66:c6:ab:1f:
                    f3:7b:f0:5b:d6:4e:2e:25:99:73:03:dc:99:14:9b:
                    e7:02:6f:5f:f5:22:c5:6d:c3:bf:e5:c7:6a:7e:67:
                    84:96:eb:3f:c2:18:2a:7a:6f:4b:c4:1a:80:4f:55:
                    5b:00:f8:e7:32:2a:e4:b8:54:0c:d5:2a:34:f3:56:
                    b9:f4:76:ff:c4:44:e3:4e:ac:91:33:e4:11:50:ab:
                    f4:ca:04:1b:97:92:12:4f:7e:dd:d3:f9:e5:98:c9:
                    56:71:e1:54:68:c6:1c:40:19:29:9b:65:e9:79:1d:
                    fb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F7:56:99:4D:AC:D4:33:F8:DA:05:2E:AE:70:69:FA:6E:82:43:34
            X509v3 Authority Key Identifier:
                keyid:33:70:23:11:AD:CA:7F:C6:C8:5D:C0:65:5A:92:17:C0:0B:E5:E1:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f3:4c:7f:81:60:08:43:54:e7:00:fc:a5:ce:4a:4c:3f:2e:
         73:48:eb:10:c1:c0:7c:08:a6:e9:ca:eb:1f:39:23:ac:f5:44:
         ac:b5:eb:09:56:6b:21:ab:a5:b4:93:7c:06:0b:fd:0c:52:04:
         44:cf:9c:e8:cf:83:3e:d8:87:dd:b4:50:c9:bb:73:07:9a:79:
         8a:4e:77:83:93:cc:6f:f4:f8:cd:d0:93:0d:79:84:cd:4a:ae:
         6a:d4:9d:c1:db:a0:e9:fc:94:78:1f:32:6e:e3:41:93:51:4e:
         85:2c:33:51:c7:de:fc:fa:f0:12:c4:e9:ac:39:75:45:58:f2:
         36:f4:d3:4a:05:ea:09:88:c3:ad:e5:35:42:75:35:0f:32:98:
         bc:53:ff:51:39:98:c8:36:b4:5d:34:92:04:63:b3:c4:11:49:
         c2:81:b8:a5:25:58:ca:b5:21:49:e8:a2:29:17:4e:80:96:a7:
         52:3a:20:93:f7:df:42:f5:54:5d:8e:99:6e:94:cc:ba:61:68:
         46:db:6c:f6:ee:1e:4e:ce:55:f9:a0:42:2b:f8:e5:2e:fa:5c:
         4b:51:12:05:f0:f0:d2:92:fb:2e:12:24:6a:01:b4:7c:70:f7:
         06:05:6c:ac:cc:0d:46:48:96:36:40:39:79:62:64:06:18:3e:
         a9:67:be:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:21:50 2026 by rpki-client