This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft
File:                     CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft (raw, json)
Hash identifier:          wuWKQwKVJvysyeEF5vrJZ/TO968CyE/qkAiISipcwG8=
Subject key identifier:   54:A8:B3:A4:75:60:E7:BE:0D:AC:E2:62:39:5C:C2:3A:84:35:B6:92
Authority key identifier: CA:1C:4B:54:62:22:EE:15:6A:0D:43:48:D2:AB:00:43:BD:AB:4B:EA
Certificate issuer:       /CN=CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA
Certificate serial:       762C71889E8FB13FE02778700EE225A627494F91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft
Manifest number:          0375
Signing time:             Sun 25 Jan 2026 08:02:55 +0000
Manifest this update:     Sun 25 Jan 2026 07:57:55 +0000
Manifest next update:     Mon 26 Jan 2026 10:38:55 +0000
Files and hashes:         1: 323830343a333661303a3a2f33322d3335203d3e20323636333630.roa (hash: rXszqdwUvQGrhVWf0dQGexOPbYRtVFxMgBAZYV51XYo=)
                          2: 3137302e3233392e3235322e302f32322d3234203d3e20323636333630.roa (hash: N9HuU1W9ryFGU85A3ZfF+Ao4jsgW1hWTRMLA6XPYlk0=)
                          3: CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.crl (hash: U2W162IZjzC46eTyDQIvbM7wf8BkrpvBoggTbivvl3E=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.crl
                          rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 10:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:2c:71:88:9e:8f:b1:3f:e0:27:78:70:0e:e2:25:a6:27:49:4f:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA
        Validity
            Not Before: Jan 25 07:57:55 2026 GMT
            Not After : Jan 26 10:38:55 2026 GMT
        Subject: CN=54A8B3A47560E7BE0DACE262395CC23A8435B692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3e:59:80:e2:39:3c:73:aa:db:4c:51:d1:79:
                    6c:d5:80:0e:7d:09:5c:78:49:51:a0:25:ae:85:52:
                    34:87:63:59:23:40:9d:bf:15:44:b4:f4:7d:71:b8:
                    12:c2:66:2a:75:65:77:6c:a1:cc:2a:28:b9:8b:09:
                    c9:ef:08:49:83:d3:6c:44:df:5b:58:17:98:de:46:
                    f5:0d:21:bf:d7:ce:32:59:80:78:f0:d2:43:46:61:
                    38:8a:85:01:f0:b7:0d:8b:68:f4:74:eb:dc:bf:1d:
                    e6:14:27:38:27:e1:9d:24:8c:9a:66:db:b0:41:c7:
                    1b:15:36:72:2a:d7:37:cd:27:1a:93:b7:3f:46:5b:
                    8b:41:57:49:59:e1:d0:ed:c5:08:80:8c:77:13:20:
                    76:80:a4:ff:f8:ac:5f:5c:ea:d4:17:df:71:b1:3f:
                    b1:ad:6d:14:18:5e:a7:4f:bd:50:9e:aa:b6:dd:b6:
                    87:21:92:11:5a:58:96:ff:6d:25:3b:93:9c:11:8c:
                    a2:ff:92:64:1d:b6:30:fc:d1:15:f5:c9:ee:fb:13:
                    0b:70:17:64:fa:0d:00:79:35:20:ae:96:6e:da:28:
                    74:8e:42:60:1f:23:de:23:71:ea:5e:c2:d7:53:ac:
                    34:88:fe:78:ef:78:2e:df:76:b2:89:5c:20:da:c6:
                    b2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A8:B3:A4:75:60:E7:BE:0D:AC:E2:62:39:5C:C2:3A:84:35:B6:92
            X509v3 Authority Key Identifier:
                keyid:CA:1C:4B:54:62:22:EE:15:6A:0D:43:48:D2:AB:00:43:BD:AB:4B:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:55:ab:ea:71:e3:49:09:af:fc:c9:37:34:df:d4:e0:42:34:
         45:01:f7:c7:e6:99:aa:c1:a4:10:41:b5:28:c2:12:14:bd:5b:
         cb:ba:fe:ea:c9:db:b6:e4:cb:10:38:61:c3:fc:0b:9e:44:d0:
         01:c3:a9:48:17:6e:ad:55:3a:b0:39:d2:e4:42:dc:5b:32:43:
         b2:0d:3d:71:3e:bb:e7:1e:10:63:93:43:03:48:f7:93:7e:4c:
         7c:a5:bc:01:09:22:6c:b6:87:fe:f0:eb:15:83:3f:ca:76:a9:
         3f:dc:fe:e8:ff:51:ee:b2:63:40:6b:d5:34:aa:b0:b5:b1:eb:
         e8:94:b7:1b:03:51:0b:ea:db:e4:12:be:0a:7b:71:61:c7:b0:
         45:d0:e6:8e:50:c4:8d:bb:72:61:70:49:39:a8:1a:d0:51:47:
         ea:45:98:46:17:4f:3a:3f:ce:35:45:a4:da:82:bf:71:05:df:
         f8:c0:a6:06:f3:b7:8a:8b:19:88:78:32:8b:e8:fe:9f:82:c3:
         25:54:e9:f1:5b:a1:1f:81:7c:22:6a:08:d1:de:cd:1a:20:67:
         52:bf:22:36:06:17:6f:75:72:07:7b:a9:c9:05:5c:a7:4d:f8:
         15:4d:c7:55:b6:44:fb:ed:bf:00:3d:e8:b3:3f:be:8e:ff:25:
         91:b1:5b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:29:08 2026 by rpki-client