This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.mft
File:                     642D27C2B88FC1E644188313B8DE644A2705C863.mft (raw, json)
Hash identifier:          W5P4354MfVRoKvQlygIYPrJmFn5yEb7Rpr90i6nEjm0=
Subject key identifier:   22:02:E7:30:0E:D1:09:06:CD:09:96:CC:27:D5:75:7D:D9:9E:47:24
Authority key identifier: 64:2D:27:C2:B8:8F:C1:E6:44:18:83:13:B8:DE:64:4A:27:05:C8:63
Certificate issuer:       /CN=642D27C2B88FC1E644188313B8DE644A2705C863
Certificate serial:       715EDE27FFCDADD0AAEDD2129D5848B6D558FF86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642D27C2B88FC1E644188313B8DE644A2705C863.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.mft
Manifest number:          0372
Signing time:             Sat 24 Jan 2026 20:46:00 +0000
Manifest this update:     Sat 24 Jan 2026 20:41:00 +0000
Manifest next update:     Sun 25 Jan 2026 23:44:00 +0000
Files and hashes:         1: 3138362e3232352e36342e302f32302d3332203d3e203533313732.roa (hash: 2N05kYY36sPD4dzgURL5LBC/w+Ebo1TNhqpVhz8vlPE=)
                          2: 3134332e3133372e382e302f32322d3332203d3e203533313732.roa (hash: Z4Kd/Q+ef3fAVAPdsLOqBV3jmjz3c+VRnOX7iZB4V5E=)
                          3: 642D27C2B88FC1E644188313B8DE644A2705C863.crl (hash: 8X5euJWoplMubJmF/OJ/y+qZaoMeC01WJ9pqz51Y25Q=)
                          4: 323830343a323938303a3a2f33322d313238203d3e203533313732.roa (hash: noo9CnK8b+ZBOYaxBrPhEjf2vRApCvi1hI1y7VNaBW4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.crl
                          rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642D27C2B88FC1E644188313B8DE644A2705C863.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 25 Jan 2026 23:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:5e:de:27:ff:cd:ad:d0:aa:ed:d2:12:9d:58:48:b6:d5:58:ff:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=642D27C2B88FC1E644188313B8DE644A2705C863
        Validity
            Not Before: Jan 24 20:41:00 2026 GMT
            Not After : Jan 25 23:44:00 2026 GMT
        Subject: CN=2202E7300ED10906CD0996CC27D5757DD99E4724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e6:6e:24:6d:46:87:ca:ac:57:64:c4:9d:2d:
                    69:dc:87:f2:ca:45:b9:54:6b:f1:63:48:aa:32:d6:
                    b0:47:77:95:42:86:7a:f4:c7:6f:21:8c:13:78:52:
                    d9:87:c0:af:a7:4e:a9:2c:3b:9c:00:f7:fb:c7:bb:
                    2f:b1:6c:1a:c3:60:c9:9d:1d:37:df:d3:ba:be:82:
                    35:bd:ba:3f:ee:9c:a9:b7:25:80:6a:3e:d3:cf:f6:
                    05:b5:7e:f6:e0:e3:56:d6:96:b1:a7:59:b5:38:cd:
                    32:e8:24:4c:66:74:9a:1f:24:c2:57:a8:ac:31:36:
                    d1:32:94:6a:7f:5e:f7:4d:4c:74:0c:29:ea:f0:8c:
                    44:da:73:32:c6:77:89:0a:ee:52:21:7b:21:cc:91:
                    ce:d6:35:86:5a:2a:55:d8:a4:bb:14:d6:9c:08:53:
                    71:d1:0a:19:78:6b:83:59:44:22:c6:a7:5b:8d:f7:
                    49:bc:c6:58:fd:5e:da:9d:cf:3d:61:54:59:b8:e8:
                    3d:79:c5:3c:d3:47:f0:89:df:fe:e1:33:35:7f:a3:
                    df:84:93:c2:23:af:0d:9f:c6:74:5f:27:d7:6b:05:
                    3f:e2:c2:ef:82:e6:7a:d3:cb:f2:ee:b1:41:b8:a6:
                    4d:fd:38:b3:b9:17:f8:24:ad:74:a5:ae:80:f3:f5:
                    72:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:02:E7:30:0E:D1:09:06:CD:09:96:CC:27:D5:75:7D:D9:9E:47:24
            X509v3 Authority Key Identifier:
                keyid:64:2D:27:C2:B8:8F:C1:E6:44:18:83:13:B8:DE:64:4A:27:05:C8:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642D27C2B88FC1E644188313B8DE644A2705C863.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:ce:d0:ff:bf:6f:47:d0:02:22:a4:12:4b:98:89:c2:92:d9:
         2b:49:80:db:5d:60:de:61:b7:4f:89:46:62:28:40:8d:17:55:
         a6:ce:65:0a:71:0a:f3:2b:62:2b:46:04:45:a9:0b:fd:2a:db:
         3c:ac:8b:8f:5e:ac:d1:bc:48:01:8c:6d:af:78:73:22:5c:4a:
         b0:33:dc:94:fd:f3:91:53:b5:20:b0:db:b2:be:60:a7:1b:39:
         b7:52:7b:d5:a2:64:36:c9:df:ee:fd:9e:01:80:4c:b6:15:d9:
         f8:60:32:31:b8:eb:f0:cc:9d:10:58:8a:0c:46:45:c3:ad:32:
         31:c0:df:f1:0b:7f:0b:38:a1:de:5b:84:43:5f:96:16:b0:67:
         f5:51:9b:1b:e2:2c:d1:22:16:ea:d0:4a:5a:59:4e:63:b5:f2:
         a1:88:11:3b:79:a3:a0:39:d0:2c:65:83:9a:64:53:e5:bc:73:
         08:a0:60:ae:b7:8d:48:0e:cc:4e:39:58:51:53:71:45:bf:3f:
         79:34:7b:fe:00:3a:1d:e1:28:ab:8e:cf:91:84:77:75:5a:74:
         f6:5a:d8:b6:74:a4:f6:1a:45:d9:c3:62:41:39:84:29:fb:65:
         35:d7:76:b1:8e:92:54:70:5e:ce:4a:8e:21:ed:ef:37:58:e9:
         cb:ab:87:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcV7eJ//NrdCq7dISnVhIttVY/4YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQyRDI3QzJCODhGQzFFNjQ0MTg4MzEzQjhERTY0NEEy
NzA1Qzg2MzAeFw0yNjAxMjQyMDQxMDBaFw0yNjAxMjUyMzQ0MDBaMDMxMTAvBgNV
BAMTKDIyMDJFNzMwMEVEMTA5MDZDRDA5OTZDQzI3RDU3NTdERDk5RTQ3MjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC35m4kbUaHyqxXZMSdLWnch/LK
RblUa/FjSKoy1rBHd5VChnr0x28hjBN4UtmHwK+nTqksO5wA9/vHuy+xbBrDYMmd
HTff07q+gjW9uj/unKm3JYBqPtPP9gW1fvbg41bWlrGnWbU4zTLoJExmdJofJMJX
qKwxNtEylGp/XvdNTHQMKerwjETaczLGd4kK7lIheyHMkc7WNYZaKlXYpLsU1pwI
U3HRChl4a4NZRCLGp1uN90m8xlj9Xtqdzz1hVFm46D15xTzTR/CJ3/7hMzV/o9+E
k8Ijrw2fxnRfJ9drBT/iwu+C5nrTy/LusUG4pk39OLO5F/gkrXSlroDz9XLPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUIgLnMA7RCQbNCZbMJ9V1fdmeRyQwHwYDVR0j
BBgwFoAUZC0nwriPweZEGIMTuN5kSicFyGMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2hKNFJDTlBRdlluUlRtU3BERnpjZjFQV2F4UTlZMTFva0V4cjdkcTVu
NWsvMS82NDJEMjdDMkI4OEZDMUU2NDQxODgzMTNCOERFNjQ0QTI3MDVDODYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0MkQyN0MyQjg4RkMxRTY0
NDE4ODMxM0I4REU2NDRBMjcwNUM4NjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M2hKNFJDTlBRdlluUlRtU3BERnpjZjFQV2F4UTlZMTFva0V4cjdkcTVuNWsvMS82
NDJEMjdDMkI4OEZDMUU2NDQxODgzMTNCOERFNjQ0QTI3MDVDODYzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAr87Q/79vR9ACIqQSS5iJwpLZK0mA211g3mG3T4lGYihAjRdVps5lCnEK8yti
K0YERakL/SrbPKyLj16s0bxIAYxtr3hzIlxKsDPclP3zkVO1ILDbsr5gpxs5t1J7
1aJkNsnf7v2eAYBMthXZ+GAyMbjr8MydEFiKDEZFw60yMcDf8Qt/Czih3luEQ1+W
FrBn9VGbG+Is0SIW6tBKWllOY7XyoYgRO3mjoDnQLGWDmmRT5bxzCKBgrreNSA7M
TjlYUVNxRb8/eTR7/gA6HeEoq47PkYR3dVp09lrYtnSk9hpF2cNiQTmEKftlNdd2
sY6SVHBezkqOIe3vN1jpy6uHTw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:05:25 2026 by rpki-client