This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/4BFCE5FC9A3645DB029C80D748212328591F7EC7.mft
File:                     4BFCE5FC9A3645DB029C80D748212328591F7EC7.mft (raw, json)
Hash identifier:          i8fdRXg/E1vQZie7mPY/TRX1E8YdMM7dFvqrAlmAink=
Subject key identifier:   92:10:47:0C:C5:84:69:2D:AB:7D:B9:D1:06:B3:38:A1:02:E3:DE:B5
Authority key identifier: 4B:FC:E5:FC:9A:36:45:DB:02:9C:80:D7:48:21:23:28:59:1F:7E:C7
Certificate issuer:       /CN=4BFCE5FC9A3645DB029C80D748212328591F7EC7
Certificate serial:       6C6D431AAE7FAAB0AE7F7004D282423065DBACBC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCE5FC9A3645DB029C80D748212328591F7EC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/4BFCE5FC9A3645DB029C80D748212328591F7EC7.mft
Manifest number:          9A
Signing time:             Sun 25 Jan 2026 15:48:15 +0000
Manifest this update:     Sun 25 Jan 2026 15:43:15 +0000
Manifest next update:     Mon 26 Jan 2026 17:49:15 +0000
Files and hashes:         1: 323830343a383337633a383030303a3a2f33332d3333203d3e20323732323031.roa (hash: 9XDoAfm7De4sDyoh39gcI5DxhojffFWqbroXJEpqWvU=)
                          2: 4BFCE5FC9A3645DB029C80D748212328591F7EC7.crl (hash: x9c0O2KWYZ0k+WfqIqpqQ30FZFRa72Nq1hiPSdobXWM=)
                          3: 323830343a383337633a3a2f33322d3332203d3e20323732323031.roa (hash: Q3YEtRo3xkXexNJe8+W+KK+do/HA/hyNxTXledKmbKg=)
                          4: 3137392e34382e3133392e302f32342d3234203d3e20323732323031.roa (hash: SeV8cj8cukqegcvLW5DdE77K1OGxpztmdS5rTw/whwI=)
                          5: 323830343a383337633a3a2f33332d3333203d3e20323732323031.roa (hash: ++2LIdnH40IAkrTxkDaokLEKVnE5dtYjBRStGMrWkZo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/4BFCE5FC9A3645DB029C80D748212328591F7EC7.crl
                          rsync://rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/4BFCE5FC9A3645DB029C80D748212328591F7EC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCE5FC9A3645DB029C80D748212328591F7EC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 17:49:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:6d:43:1a:ae:7f:aa:b0:ae:7f:70:04:d2:82:42:30:65:db:ac:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BFCE5FC9A3645DB029C80D748212328591F7EC7
        Validity
            Not Before: Jan 25 15:43:15 2026 GMT
            Not After : Jan 26 17:49:15 2026 GMT
        Subject: CN=9210470CC584692DAB7DB9D106B338A102E3DEB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e5:a3:fa:ff:35:10:fb:c8:72:a2:76:1a:39:
                    8d:a7:24:4a:34:e6:1b:31:0b:99:c2:47:e9:c1:18:
                    d1:35:d8:4c:8d:95:44:ea:6a:50:ae:9a:d2:68:db:
                    a2:1f:c1:fc:fc:e9:83:d0:aa:1e:04:2a:25:b4:b5:
                    ac:bf:27:21:f6:34:f1:e3:c1:fc:f1:3b:43:28:fd:
                    55:23:3e:07:9b:cd:e4:6c:ac:b5:30:7b:82:0a:10:
                    5a:ac:24:67:fc:10:60:1b:64:a1:da:28:2e:5c:90:
                    3e:19:48:f7:8f:28:3d:98:49:4d:d2:ee:2f:7a:91:
                    3b:e5:c0:21:76:94:33:e3:24:f9:6e:b0:49:38:4d:
                    f0:a8:c4:9f:25:e9:fa:97:ed:80:04:60:23:c5:67:
                    82:65:74:b9:29:7a:18:c3:7a:f6:49:f5:54:57:11:
                    e4:fe:35:51:b5:51:19:72:a1:85:67:02:f8:73:b7:
                    9d:60:b6:c0:ec:3e:9b:77:e9:a4:d1:8e:31:d7:6e:
                    d1:a2:16:29:ee:26:be:c1:e1:07:12:c9:de:dd:40:
                    b0:e3:0d:a9:c9:63:4e:84:98:d1:c9:76:cd:d5:98:
                    58:a0:00:ca:83:f2:dd:79:3c:1c:73:93:39:8f:1a:
                    90:57:0a:11:3b:bf:39:19:8e:61:6b:71:e0:8b:59:
                    51:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:10:47:0C:C5:84:69:2D:AB:7D:B9:D1:06:B3:38:A1:02:E3:DE:B5
            X509v3 Authority Key Identifier:
                keyid:4B:FC:E5:FC:9A:36:45:DB:02:9C:80:D7:48:21:23:28:59:1F:7E:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/4BFCE5FC9A3645DB029C80D748212328591F7EC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCE5FC9A3645DB029C80D748212328591F7EC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/4BFCE5FC9A3645DB029C80D748212328591F7EC7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:33:ce:d5:78:17:7c:7e:02:ad:72:08:14:63:73:68:cc:4e:
         8f:af:e4:ee:a6:b6:9e:58:3a:2e:bd:2a:dc:63:1f:19:ae:56:
         60:a5:57:6c:1e:43:d4:91:b8:2c:d0:b2:46:18:52:77:00:e4:
         b1:0b:b0:83:e7:e4:bc:75:d8:b1:94:e7:4a:63:af:2c:be:fa:
         44:30:30:eb:15:9b:44:4c:f6:fd:25:44:a3:54:9d:ca:67:66:
         a9:f6:93:ca:eb:a5:39:a6:6d:24:81:b0:ea:4b:a2:a8:fe:cb:
         64:0f:94:85:57:88:92:48:54:c0:b8:f8:90:0e:e0:6d:d3:a5:
         0c:68:f5:86:91:3d:ee:65:6f:29:8b:95:02:fb:fd:d8:3d:d1:
         1e:3d:a7:bd:4d:7f:ba:33:7d:29:75:12:7c:d3:dc:ca:b8:87:
         eb:00:64:6d:f8:be:cf:f6:39:c4:a3:4d:19:aa:46:5e:a9:96:
         0d:6f:b3:7e:db:52:a2:26:27:96:bb:fd:f7:dc:0f:4f:0c:61:
         86:c1:38:b2:95:67:77:3e:b3:06:1c:f4:a2:cd:6d:54:2f:11:
         6c:5b:57:b8:f6:48:f5:8e:73:9c:40:78:2e:44:7f:7d:94:64:
         88:e0:0f:12:4a:46:50:4f:09:44:96:27:7b:2a:5a:85:89:c2:
         72:7c:d0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:43:41 2026 by rpki-client