This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/154E883FCB52E91706C17788E2199491DC6E45F7.mft
File:                     154E883FCB52E91706C17788E2199491DC6E45F7.mft (raw, json)
Hash identifier:          TdIPlncmU6WBHenHey5i9zLKCaEPKhVloDkbnqHds/g=
Subject key identifier:   F6:34:D4:BA:98:76:1F:42:E3:52:FE:79:89:D2:AD:63:87:DF:5F:1B
Authority key identifier: 15:4E:88:3F:CB:52:E9:17:06:C1:77:88:E2:19:94:91:DC:6E:45:F7
Certificate issuer:       /CN=154E883FCB52E91706C17788E2199491DC6E45F7
Certificate serial:       24B1CF35101C0CF592081267D2E66F7846046DE4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/154E883FCB52E91706C17788E2199491DC6E45F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/154E883FCB52E91706C17788E2199491DC6E45F7.mft
Manifest number:          021A
Signing time:             Sun 25 Jan 2026 15:23:18 +0000
Manifest this update:     Sun 25 Jan 2026 15:18:18 +0000
Manifest next update:     Mon 26 Jan 2026 16:14:18 +0000
Files and hashes:         1: 323830343a323264633a3a2f33322d3438203d3e20323634313237.roa (hash: orUpteGth+JTOjLIpkDk5D2ZHYpZbmhzL1wAvYz4Wnc=)
                          2: 154E883FCB52E91706C17788E2199491DC6E45F7.crl (hash: +ue3olXPqCvcx1G1JBQd9wJCUnWE6SSJQTb89szsgM8=)
                          3: 3133382e35392e3232302e302f32322d3234203d3e20323634313237.roa (hash: i+uywVGIPRQCDVi+ciOxowF1cKfIM0mnralZfI9BqLI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/154E883FCB52E91706C17788E2199491DC6E45F7.crl
                          rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/154E883FCB52E91706C17788E2199491DC6E45F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/154E883FCB52E91706C17788E2199491DC6E45F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 16:14:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:b1:cf:35:10:1c:0c:f5:92:08:12:67:d2:e6:6f:78:46:04:6d:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154E883FCB52E91706C17788E2199491DC6E45F7
        Validity
            Not Before: Jan 25 15:18:18 2026 GMT
            Not After : Jan 26 16:14:18 2026 GMT
        Subject: CN=F634D4BA98761F42E352FE7989D2AD6387DF5F1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f9:6f:58:50:60:23:4f:79:a5:42:ee:21:27:
                    51:7a:67:fe:79:93:82:8d:29:80:8a:c2:ad:57:18:
                    51:ad:f0:ce:66:39:57:f2:a8:ab:13:8d:d4:cd:36:
                    0c:02:2f:53:1a:d6:c6:05:1a:b0:7e:c9:4c:ad:26:
                    cb:ad:66:05:17:68:ce:fe:af:85:02:6d:22:b3:1f:
                    9c:24:ac:60:b6:d7:3e:52:e1:82:c0:4c:19:04:63:
                    48:ca:a7:f6:1c:31:8a:2c:80:e5:84:4d:68:c2:b3:
                    fd:ee:4a:be:bb:da:63:ca:63:4c:d9:48:ba:ef:95:
                    45:b0:4a:58:50:17:ca:18:2a:ec:75:c1:1c:55:95:
                    0e:13:de:70:6c:6b:3f:f9:6b:96:1c:6e:95:39:91:
                    f7:78:3c:be:ab:2c:64:6b:6e:d1:2c:04:b7:d5:de:
                    a4:27:bb:b2:05:be:da:de:3e:59:95:20:90:3c:f4:
                    cf:65:93:1b:4c:6a:c6:28:f6:fe:09:ba:83:f4:57:
                    a7:7b:ae:70:f6:34:49:b6:db:ea:4c:96:78:02:9c:
                    d0:00:a6:ed:88:b3:43:35:f5:49:3f:0c:1c:4f:dc:
                    55:a9:98:81:3d:6a:0f:18:69:e0:48:51:ae:41:52:
                    5e:88:f9:af:fc:00:37:f9:a8:5b:65:41:24:c2:b0:
                    59:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:34:D4:BA:98:76:1F:42:E3:52:FE:79:89:D2:AD:63:87:DF:5F:1B
            X509v3 Authority Key Identifier:
                keyid:15:4E:88:3F:CB:52:E9:17:06:C1:77:88:E2:19:94:91:DC:6E:45:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/154E883FCB52E91706C17788E2199491DC6E45F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/154E883FCB52E91706C17788E2199491DC6E45F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/154E883FCB52E91706C17788E2199491DC6E45F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:69:61:cd:3c:eb:f3:87:22:d7:3f:3a:57:50:66:d6:55:9e:
         ab:53:c9:bd:6f:e3:28:e1:4b:d0:b3:ee:f4:bc:41:a6:01:f8:
         ab:81:a7:69:01:93:e7:11:07:88:30:bc:7f:af:b6:db:86:ea:
         79:7e:bb:d9:e2:94:60:8c:cf:f4:45:f3:20:3a:d5:07:cc:58:
         9d:9b:f9:73:33:da:90:46:99:68:ae:97:ed:7a:29:c4:0f:1b:
         84:ed:19:98:41:b2:04:4a:3e:f5:c5:f3:d2:96:be:6e:09:3e:
         c8:25:ce:84:57:66:15:58:17:c6:e7:82:0b:6f:51:83:e0:5d:
         50:cc:ac:36:25:a8:23:70:a5:07:25:ae:95:0f:75:3d:77:14:
         f3:f2:a0:2f:9f:a1:60:d6:06:71:e5:32:bc:e0:f1:57:37:0d:
         98:7a:8f:62:86:80:36:5f:b8:3a:94:e1:80:fe:0d:07:1e:21:
         a0:0e:95:8e:0e:d3:fd:b6:d2:9f:a0:9d:2c:8b:02:36:d1:89:
         4f:39:9d:93:bd:4d:a2:c4:57:c2:c2:27:cc:14:a0:0e:1e:13:
         16:ad:ed:26:31:af:e8:7b:83:43:54:fb:51:4f:e8:38:ca:69:
         ae:c4:57:a8:f2:2e:24:38:e0:d9:ca:52:74:cf:18:df:ae:79:
         6b:45:d2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----