This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/0FF30EC686201018DE081110542623BAED2ADF49.mft
File:                     0FF30EC686201018DE081110542623BAED2ADF49.mft (raw, json)
Hash identifier:          q3RvuQEW7GsU9FwSCpuwnu1l0Qirk85H97S8WqfMPyQ=
Subject key identifier:   28:9B:70:08:EA:BD:F3:DB:0D:FD:CF:DF:38:6E:91:16:55:60:5E:A1
Authority key identifier: 0F:F3:0E:C6:86:20:10:18:DE:08:11:10:54:26:23:BA:ED:2A:DF:49
Certificate issuer:       /CN=0FF30EC686201018DE081110542623BAED2ADF49
Certificate serial:       74F78EF3A5A949B2F2B073FE164DD2B76994161E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF30EC686201018DE081110542623BAED2ADF49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/0FF30EC686201018DE081110542623BAED2ADF49.mft
Manifest number:          8D
Signing time:             Sun 25 Jan 2026 17:31:58 +0000
Manifest this update:     Sun 25 Jan 2026 17:26:58 +0000
Manifest next update:     Mon 26 Jan 2026 21:19:58 +0000
Files and hashes:         1: 34352e3233322e392e302f32342d3234203d3e20323637323831.roa (hash: LD0LNBOUe+KaCs9fHrnFqKtKqI/+evteffS0xhzFkaE=)
                          2: 323830343a346231303a3a2f33322d313238203d3e20323637323831.roa (hash: tCOFJPWp962RlOBLCO22Q0JeyHBfBK1s2u+rVzjRj9M=)
                          3: 323830343a346231303a3830303a3a2f33382d3338203d3e20323637323831.roa (hash: +NjpNHc5vEp4zjeNHo0kxYhdyv/GrmRkC3dsj0ntWSc=)
                          4: 34352e3233322e382e302f32322d3234203d3e20323637323831.roa (hash: /LSPdhY31SsM1AfPIsY9XAowB2kJ2aQ1tOiSWx4JfUc=)
                          5: 34352e3233322e382e302f32342d3234203d3e20323637323831.roa (hash: XtF3gvS0axSWvAgHEcB9Rp6dQpTavOYGEshzYrUGgLM=)
                          6: 34352e3233322e31312e302f32342d3234203d3e20323637323831.roa (hash: UNyYgbrXto25IpJMw/nANC/eK3pm63gUXU88NvvU/9Q=)
                          7: 323830343a346231303a6330303a3a2f33382d3338203d3e20323637323831.roa (hash: so3kq643rYwMksZK2ukUC6RDVZt3LVQQnDvGujXqy3I=)
                          8: 34352e3233322e31302e302f32342d3234203d3e20323637323831.roa (hash: yPwrjK2Dcqh1VGcgl1YSu+0Xb66+0we1xuyZxz3B6zg=)
                          9: 323830343a346231303a3430303a3a2f33382d3338203d3e20323637323831.roa (hash: bNJ3OcDZFv6BFTdxM2Pc/JWRl7XDk6SijMQlCmDjlvw=)
                          10: 323830343a346231303a3a2f33382d3338203d3e20323637323831.roa (hash: 8TVv7LP4F7CjHAIIbBOMop3rHdqVwkKp8EYbzX1GLUw=)
                          11: 0FF30EC686201018DE081110542623BAED2ADF49.crl (hash: WvoTBgIcEXGLC9PFWcgpApgV4LAv/1tnLtCvBsfj42o=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/0FF30EC686201018DE081110542623BAED2ADF49.crl
                          rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/0FF30EC686201018DE081110542623BAED2ADF49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF30EC686201018DE081110542623BAED2ADF49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 19:08:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f7:8e:f3:a5:a9:49:b2:f2:b0:73:fe:16:4d:d2:b7:69:94:16:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FF30EC686201018DE081110542623BAED2ADF49
        Validity
            Not Before: Jan 25 17:26:58 2026 GMT
            Not After : Jan 26 21:19:58 2026 GMT
        Subject: CN=289B7008EABDF3DB0DFDCFDF386E911655605EA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b7:11:c0:a9:6b:4a:76:aa:b2:d6:bb:20:d0:
                    d5:5c:26:af:87:10:36:31:38:30:fd:f7:89:27:4f:
                    77:7b:91:61:8c:dc:37:30:cc:63:a8:35:13:37:79:
                    9b:28:b9:cb:0b:c6:f5:04:3a:41:51:98:47:65:e7:
                    6d:e8:44:5f:30:f4:d6:ca:55:a7:5c:6d:a3:5a:60:
                    0b:7d:e4:35:d3:a1:45:21:c2:6d:b8:68:7c:ac:ee:
                    71:25:6a:c0:35:26:78:10:7c:d9:75:bc:09:eb:50:
                    81:ac:b6:7d:c1:97:1d:24:75:e7:5b:6b:af:1a:36:
                    a4:e8:dd:9f:54:3d:41:77:ad:d8:d1:bf:29:25:c0:
                    49:b2:e3:58:a0:91:c0:e4:f0:f8:f0:e0:1a:bb:91:
                    e7:d4:5e:27:a9:d5:f8:fd:0b:ac:bc:27:db:fa:91:
                    41:92:9d:e2:83:5b:93:6b:53:29:8e:44:9e:60:dd:
                    8b:6b:11:c3:a7:16:7c:53:6b:2d:3c:d0:16:04:fb:
                    0d:34:8b:08:7b:17:b1:7f:20:64:b4:d0:60:e8:b7:
                    51:63:17:27:bb:2e:2a:4a:6a:74:ab:ab:8a:44:70:
                    de:ef:36:3a:86:38:fd:12:83:2c:23:33:80:f1:13:
                    6d:ac:eb:09:86:2a:5e:51:d0:87:1f:6b:64:2e:0c:
                    c6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:9B:70:08:EA:BD:F3:DB:0D:FD:CF:DF:38:6E:91:16:55:60:5E:A1
            X509v3 Authority Key Identifier:
                keyid:0F:F3:0E:C6:86:20:10:18:DE:08:11:10:54:26:23:BA:ED:2A:DF:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/0FF30EC686201018DE081110542623BAED2ADF49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF30EC686201018DE081110542623BAED2ADF49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/0FF30EC686201018DE081110542623BAED2ADF49.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:15:b2:6a:b8:36:be:8e:27:a8:ce:69:75:a4:42:eb:48:4b:
         d7:e1:b1:03:3a:4a:d7:44:86:78:67:bb:cb:bb:7f:eb:ca:2a:
         89:cd:28:18:74:60:ea:47:bb:c3:44:ed:b7:cd:82:b4:cf:dc:
         b2:d4:b4:c2:8a:64:a5:0e:0d:72:c8:7d:c8:56:bc:58:1a:11:
         d9:12:ac:b0:91:b8:05:fd:b8:ed:c0:6c:96:dc:0f:4b:fd:01:
         25:ff:ed:45:33:f4:8b:28:5b:69:37:99:35:57:4f:99:c2:7f:
         83:32:6b:60:d1:1a:d5:30:f6:e3:12:24:e1:4f:6d:b3:2e:4d:
         18:79:4d:3c:d8:00:0c:eb:ad:a5:83:f0:f5:80:11:69:f6:bf:
         22:9a:1e:31:27:ad:12:d4:64:db:bf:36:f5:8f:3c:20:5a:31:
         0d:4b:ed:2b:66:2b:7d:e6:13:b6:cf:24:3d:b8:11:87:de:bf:
         76:40:f7:1e:e8:38:9c:c7:e1:d6:7f:60:42:1e:ad:b8:18:e6:
         c4:0b:08:bd:90:25:15:ce:76:96:ac:59:46:e3:c4:d9:54:54:
         37:2f:e1:b7:96:bc:74:59:7b:fd:0e:0e:5c:5a:01:83:32:7c:
         a0:ad:c4:3e:94:d6:03:0a:a0:f5:0c:bb:66:49:f0:25:31:6a:
         d0:37:18:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:27:01 2026 by rpki-client