This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4A249vTWWhmntGi9DJR588BrCwL5ndNQrXpsq1y8NJgs/0/F8DA4F7739BFF5C8C9C8C8E63B8D4DC2F64356EE.mft
File:                     F8DA4F7739BFF5C8C9C8C8E63B8D4DC2F64356EE.mft (raw, json)
Hash identifier:          cw9eEHknkuTRSkwRLvh+N/46D33NPHaa43S1TqaqQeM=
Subject key identifier:   BC:A3:30:7C:8A:2B:58:7C:29:E4:2B:57:3A:31:8C:9A:51:FA:58:6B
Authority key identifier: F8:DA:4F:77:39:BF:F5:C8:C9:C8:C8:E6:3B:8D:4D:C2:F6:43:56:EE
Certificate issuer:       /CN=F8DA4F7739BFF5C8C9C8C8E63B8D4DC2F64356EE
Certificate serial:       22CF7D94A17B5380CFC86B14481DF2B64840A165
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8DA4F7739BFF5C8C9C8C8E63B8D4DC2F64356EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4A249vTWWhmntGi9DJR588BrCwL5ndNQrXpsq1y8NJgs/0/F8DA4F7739BFF5C8C9C8C8E63B8D4DC2F64356EE.mft
Manifest number:          14
Signing time:             Sun 25 Jan 2026 18:30:21 +0000
Manifest this update:     Sun 25 Jan 2026 18:25:21 +0000
Manifest next update:     Mon 26 Jan 2026 21:23:21 +0000
Files and hashes:         1: 323830343a376134343a3a2f33322d313238203d3e20323731333539.roa (hash: PmvR7HkefnOERRXEzkOO3kSI77myCE9oXGKs8Ext4AE=)
                          2: F8DA4F7739BFF5C8C9C8C8E63B8D4DC2F64356EE.crl (hash: GO0WbN76ASSbSvhumBLjrGnKKmoW8wx2sVwD62fwPfg=)
                          3: 3230302e38302e3130302e302f32322d3332203d3e20323731333539.roa (hash: V6Unm9F8xagpwU4SJ1lr26H/9DohRxUkYnGA9POiBJc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4A249vTWWhmntGi9DJR588BrCwL5ndNQrXpsq1y8NJgs/0/F8DA4F7739BFF5C8C9C8C8E63B8D4DC2F64356EE.crl
                          rsync://rpki-repo.registro.br/repo/4A249vTWWhmntGi9DJR588BrCwL5ndNQrXpsq1y8NJgs/0/F8DA4F7739BFF5C8C9C8C8E63B8D4DC2F64356EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8DA4F7739BFF5C8C9C8C8E63B8D4DC2F64356EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 21:23:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:cf:7d:94:a1:7b:53:80:cf:c8:6b:14:48:1d:f2:b6:48:40:a1:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8DA4F7739BFF5C8C9C8C8E63B8D4DC2F64356EE
        Validity
            Not Before: Jan 25 18:25:21 2026 GMT
            Not After : Jan 26 21:23:21 2026 GMT
        Subject: CN=BCA3307C8A2B587C29E42B573A318C9A51FA586B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:86:0a:c1:07:a5:d0:f4:07:9b:9d:b3:e3:86:
                    d1:a7:e2:12:76:76:89:93:61:7f:11:d0:c4:57:df:
                    f6:c0:d7:a6:57:0e:ad:fc:3d:9e:42:74:3d:8b:2a:
                    73:3c:b9:c5:71:1a:4e:15:0c:a6:f5:af:f1:23:4c:
                    a3:d1:0d:bf:c2:e4:2a:a1:29:f2:ac:d4:f7:00:fe:
                    5f:e1:07:c7:6b:94:47:be:b6:85:6d:0e:26:4e:b5:
                    94:04:17:47:b5:5f:57:61:83:ef:2e:a2:bb:34:b0:
                    a0:e3:2c:b0:87:86:9f:2c:91:a6:d5:bb:89:fe:f3:
                    fc:f2:65:39:22:f3:ea:d2:d0:08:e4:fb:ec:fe:7e:
                    b1:a6:bf:78:bc:48:c6:b6:bb:a2:4b:6d:d2:49:73:
                    a1:ab:b9:20:7d:4a:1b:88:d4:66:1b:1f:01:4d:f8:
                    d4:09:8e:cf:26:00:df:3b:b0:71:fd:80:83:d4:34:
                    2d:9f:1f:ce:32:74:0b:35:91:ec:e2:f2:16:5a:77:
                    01:43:5b:97:20:42:02:5a:ac:1f:de:85:31:9d:e3:
                    05:06:ea:9b:a1:82:ef:ed:3f:3c:dc:ec:46:39:96:
                    9c:69:ce:d4:ef:a5:18:7f:99:ea:f1:16:80:ab:06:
                    ce:71:5d:d4:aa:eb:c3:43:d2:b9:f3:b9:dc:9e:9d:
                    3c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A3:30:7C:8A:2B:58:7C:29:E4:2B:57:3A:31:8C:9A:51:FA:58:6B
            X509v3 Authority Key Identifier:
                keyid:F8:DA:4F:77:39:BF:F5:C8:C9:C8:C8:E6:3B:8D:4D:C2:F6:43:56:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4A249vTWWhmntGi9DJR588BrCwL5ndNQrXpsq1y8NJgs/0/F8DA4F7739BFF5C8C9C8C8E63B8D4DC2F64356EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8DA4F7739BFF5C8C9C8C8E63B8D4DC2F64356EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4A249vTWWhmntGi9DJR588BrCwL5ndNQrXpsq1y8NJgs/0/F8DA4F7739BFF5C8C9C8C8E63B8D4DC2F64356EE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:55:5f:97:d0:d9:c8:a6:de:93:e3:a9:4c:a8:0d:74:2c:8b:
         e0:d8:4d:b9:3b:1c:36:e0:b8:3e:b0:80:1f:e0:c4:1e:f8:23:
         4d:47:6f:63:8a:5e:4d:8a:a5:8b:83:76:90:6b:ac:c1:8b:72:
         67:0a:87:f2:ff:69:e6:50:24:2a:58:7b:4b:49:60:e2:6d:7b:
         d7:37:d1:e3:ac:46:f9:96:dc:10:1e:5c:b5:15:4d:e8:bb:cb:
         41:13:4b:25:44:b7:bd:00:15:07:72:d3:14:69:54:a3:34:d3:
         ac:6c:7a:c6:24:10:ba:4d:3e:50:58:3b:56:46:65:ba:3e:f4:
         15:ff:91:32:b5:80:af:d7:3b:4d:8b:ec:11:ed:62:f9:76:29:
         74:b2:da:1d:e2:08:96:16:50:aa:d2:4b:0e:76:25:26:a4:16:
         55:78:49:0f:ac:b4:90:61:37:3b:2f:7d:e1:fc:fa:91:95:14:
         75:52:ec:ec:e0:64:4e:f4:8a:05:d6:7a:c7:86:98:98:d4:9e:
         fc:cf:fe:62:da:31:61:44:f1:24:a6:0f:b1:da:26:85:78:1d:
         11:40:74:e0:cd:e9:0b:5d:55:35:42:31:75:be:6a:75:96:cf:
         e0:38:e6:c8:74:19:7b:c7:54:84:fa:15:fb:88:1e:7f:98:8d:
         e1:83:5f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:52:26 2026 by rpki-client