This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/D158C3BF05B29EB9F5393618B97CD510D1DA2355.mft
File:                     D158C3BF05B29EB9F5393618B97CD510D1DA2355.mft (raw, json)
Hash identifier:          rS6vf09pGa9HpM+kZU4K1qjfGoUdctWzFBNSPw2wW7w=
Subject key identifier:   B3:42:F0:F4:03:B4:F7:4F:9E:4D:96:A7:EA:6F:F0:C4:10:C3:2D:D5
Authority key identifier: D1:58:C3:BF:05:B2:9E:B9:F5:39:36:18:B9:7C:D5:10:D1:DA:23:55
Certificate issuer:       /CN=D158C3BF05B29EB9F5393618B97CD510D1DA2355
Certificate serial:       328E82A40305CE9C33D2F21436F4C5CD06A8D41C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D158C3BF05B29EB9F5393618B97CD510D1DA2355.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/D158C3BF05B29EB9F5393618B97CD510D1DA2355.mft
Manifest number:          BB
Signing time:             Sun 25 Jan 2026 15:56:08 +0000
Manifest this update:     Sun 25 Jan 2026 15:51:08 +0000
Manifest next update:     Mon 26 Jan 2026 17:41:08 +0000
Files and hashes:         1: D158C3BF05B29EB9F5393618B97CD510D1DA2355.crl (hash: 4mqceMxQ6Nt3ZTN+mxs70zTqkfjjf6key5LD9iyJ1MA=)
                          2: 323830343a343335343a3a2f33322d3334203d3e20323637353633.roa (hash: CcH1j8F+T9Zf+T+1dUTp6a0eFbQUdNiN+s+CdGuVYPU=)
                          3: 323830343a343335343a3330303a3a2f34302d313238203d3e20323637353633.roa (hash: V0db29BzuxDJqVtuiLOsVXtKc4ShasUYke9RN8b/tg0=)
                          4: 34352e37302e3132382e302f32322d3234203d3e20323637353633.roa (hash: WNywvlvXljse7AjHRs4abLsKQQbN7xfFK1PvG1ChbNM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/D158C3BF05B29EB9F5393618B97CD510D1DA2355.crl
                          rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/D158C3BF05B29EB9F5393618B97CD510D1DA2355.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D158C3BF05B29EB9F5393618B97CD510D1DA2355.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 17:41:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:8e:82:a4:03:05:ce:9c:33:d2:f2:14:36:f4:c5:cd:06:a8:d4:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D158C3BF05B29EB9F5393618B97CD510D1DA2355
        Validity
            Not Before: Jan 25 15:51:08 2026 GMT
            Not After : Jan 26 17:41:08 2026 GMT
        Subject: CN=B342F0F403B4F74F9E4D96A7EA6FF0C410C32DD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:99:ba:f7:7a:43:e9:13:a7:50:1d:24:14:7d:
                    85:40:a9:5a:13:92:5c:34:c9:f5:f6:4a:c8:7a:cf:
                    fd:4e:1b:74:b5:ed:b9:3a:49:98:d1:71:66:d5:96:
                    3b:f0:37:d8:14:47:49:f3:4a:7e:14:43:44:7c:88:
                    4d:93:e7:11:a9:af:a2:88:56:12:0d:01:66:d3:09:
                    1f:11:12:a0:58:d3:d1:36:69:1e:3f:8b:9c:65:44:
                    28:8a:4b:9b:b3:7f:c7:62:35:2c:ff:3a:33:a1:33:
                    55:e9:50:ca:41:da:3b:2f:b3:3d:f4:9e:25:ef:3f:
                    8f:b4:de:f6:67:c6:c6:4d:3d:10:9e:c7:74:19:bc:
                    d5:14:3f:27:d1:88:95:05:07:86:55:36:48:43:06:
                    31:a9:09:5a:65:18:21:1f:30:85:83:ed:df:31:13:
                    28:88:76:12:41:50:af:be:2d:ef:21:61:86:86:1b:
                    53:1b:e4:37:29:51:cf:7c:19:83:6f:a1:a6:31:6e:
                    c9:e5:a1:e8:af:7a:d2:0a:c1:e2:e7:17:92:fd:b9:
                    fd:e3:1d:1a:e9:63:95:4d:3c:fb:2e:47:b0:1b:91:
                    5d:8c:ab:97:bb:0d:4a:d1:dd:00:07:82:b2:b3:2f:
                    28:42:45:38:2d:5d:a8:59:44:06:73:92:f6:a6:2f:
                    be:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:42:F0:F4:03:B4:F7:4F:9E:4D:96:A7:EA:6F:F0:C4:10:C3:2D:D5
            X509v3 Authority Key Identifier:
                keyid:D1:58:C3:BF:05:B2:9E:B9:F5:39:36:18:B9:7C:D5:10:D1:DA:23:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/D158C3BF05B29EB9F5393618B97CD510D1DA2355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D158C3BF05B29EB9F5393618B97CD510D1DA2355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/D158C3BF05B29EB9F5393618B97CD510D1DA2355.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:be:5b:53:67:a9:68:27:51:c3:44:51:87:59:56:9f:75:0f:
         23:0b:f8:ed:02:c3:fd:ba:90:91:9a:94:08:35:dd:2a:0f:b9:
         32:53:37:5a:19:6f:20:72:6c:37:9d:ca:80:35:58:22:5f:17:
         c4:c5:8b:0e:eb:e7:7b:3e:a0:12:3e:18:29:b4:d7:a8:e6:0b:
         bc:64:8e:73:82:d8:0b:ba:88:84:51:ce:81:0c:20:06:60:19:
         a9:22:62:91:59:17:92:cd:46:c3:df:78:4e:7b:db:b2:ef:0a:
         9d:ff:fb:52:cd:81:0d:bb:04:bb:ae:12:0c:3d:de:48:b4:4a:
         45:b2:d0:6a:56:3d:cd:9c:31:6e:2e:cb:1c:02:45:24:1c:cb:
         ed:7e:f1:5b:8c:a9:dc:d2:a7:5a:52:5a:7e:0e:7b:6b:67:b8:
         31:66:1b:d1:d3:ed:2e:4d:c3:a9:23:71:c3:2d:2a:cf:ce:df:
         7d:4f:35:7d:e5:a4:f0:c6:c2:ce:96:97:c4:93:bb:c0:67:f9:
         48:e1:f1:fc:01:4f:34:81:6c:06:df:ee:6d:99:a1:3f:71:85:
         17:c1:f1:cf:f2:b6:b4:a2:5b:65:c1:7a:99:ec:ac:66:2f:8a:
         b0:91:3d:f5:69:a3:7a:64:8c:93:0f:37:00:4a:1a:c1:a8:85:
         50:57:da:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:24:23 2026 by rpki-client