This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.mft
File:                     4CE80122D6DDFCAC903327698E75EF1407FA8195.mft (raw, json)
Hash identifier:          frTKKnNURQ5bUduyh2fd099KV3xpOBDFj7hBXL7ExV0=
Subject key identifier:   B2:6D:B8:5E:00:91:71:C0:20:2B:4D:1A:D4:10:2C:18:63:53:A6:0B
Authority key identifier: 4C:E8:01:22:D6:DD:FC:AC:90:33:27:69:8E:75:EF:14:07:FA:81:95
Certificate issuer:       /CN=4CE80122D6DDFCAC903327698E75EF1407FA8195
Certificate serial:       0B5EB75735686CCD305940690F0FE8A40C04C331
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE80122D6DDFCAC903327698E75EF1407FA8195.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.mft
Manifest number:          D2
Signing time:             Sat 24 Jan 2026 18:19:28 +0000
Manifest this update:     Sat 24 Jan 2026 18:14:28 +0000
Manifest next update:     Sun 25 Jan 2026 21:35:28 +0000
Files and hashes:         1: 3230302e35332e37362e302f32332d3233203d3e20323731333136.roa (hash: JrtUeuMd7mlklugszg0TSGLi9BvMubCDLCd3d5HWus4=)
                          2: 3230302e35332e37362e302f32342d3234203d3e20323731333136.roa (hash: nIV6ZpOOJoFXarVbTgdRMvC2g1BanYy7ldked+11w1Y=)
                          3: 4CE80122D6DDFCAC903327698E75EF1407FA8195.crl (hash: kvIJmBJMr2DA7qcQTUe3Sax05hY0G02S1EibjHmZyJk=)
                          4: 3230302e35332e37372e302f32342d3234203d3e20323731333136.roa (hash: X1ipdbYyA0gvYxdeI8aFDgD73ImCQ+DUuOrszHZNSlA=)
                          5: 3230302e35332e37392e302f32342d3234203d3e20323731333136.roa (hash: 93zKVOrKHbSo5HEeLoH37RJ11jpFLfz+QyEJo6hXuuk=)
                          6: 323830343a373939633a3a2f33332d3333203d3e20323731333136.roa (hash: 9dyqlba/doiFEieE0RYOotWF/WfNx8FttH4AXlnPn5s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.crl
                          rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE80122D6DDFCAC903327698E75EF1407FA8195.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 25 Jan 2026 21:35:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:5e:b7:57:35:68:6c:cd:30:59:40:69:0f:0f:e8:a4:0c:04:c3:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CE80122D6DDFCAC903327698E75EF1407FA8195
        Validity
            Not Before: Jan 24 18:14:28 2026 GMT
            Not After : Jan 25 21:35:28 2026 GMT
        Subject: CN=B26DB85E009171C0202B4D1AD4102C186353A60B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cc:97:fa:04:9c:19:04:56:d9:7a:85:16:21:
                    92:25:39:a3:45:9f:8e:02:f3:ec:e7:20:6c:cc:5b:
                    6d:1a:33:b1:f9:7d:91:f2:5a:a3:f0:68:1b:0e:82:
                    e7:11:e8:f4:4d:5d:51:2c:9e:68:4a:f6:8b:0f:a0:
                    3f:c7:49:be:67:6c:87:22:41:12:b7:d5:92:10:13:
                    e5:60:65:de:02:e8:79:34:bd:c9:06:fa:06:79:fc:
                    d9:fb:ec:eb:b3:7f:82:a8:51:e4:bd:b6:14:9a:ba:
                    f4:aa:ff:aa:93:8d:56:3a:f9:cb:3b:76:6c:21:86:
                    ef:82:e4:8e:fa:7b:51:d4:34:66:bf:d5:b7:89:4b:
                    1c:5a:76:f8:5c:a7:51:16:e0:a6:2a:51:b7:15:7a:
                    68:6e:4b:4f:71:2d:cd:bd:6d:d7:86:d7:20:4a:7b:
                    5b:32:e4:8d:35:8b:52:8a:7c:f8:4b:b3:04:b8:6f:
                    0d:18:01:00:f8:6c:87:10:a4:ca:8e:af:8c:17:3f:
                    f5:63:ef:53:2b:57:f4:49:66:06:21:0c:5c:0c:ad:
                    73:ff:e4:6d:9a:27:91:72:90:1b:10:2c:78:98:fe:
                    c5:3f:14:d1:50:44:52:a7:50:60:88:80:dd:f9:8d:
                    e7:d8:9c:24:7a:f2:c8:8c:63:62:bd:01:fb:f3:35:
                    32:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:6D:B8:5E:00:91:71:C0:20:2B:4D:1A:D4:10:2C:18:63:53:A6:0B
            X509v3 Authority Key Identifier:
                keyid:4C:E8:01:22:D6:DD:FC:AC:90:33:27:69:8E:75:EF:14:07:FA:81:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE80122D6DDFCAC903327698E75EF1407FA8195.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:3d:a9:c5:4e:50:a8:ec:c6:69:8d:2f:a5:91:9b:84:16:26:
         a5:78:1b:1f:75:fd:b1:ee:39:d8:1b:df:28:b7:19:bb:5a:75:
         cf:0d:04:0b:4f:ab:33:b1:14:14:eb:6e:a6:e2:df:43:c4:ef:
         79:57:10:72:67:ac:9e:41:8f:14:75:24:65:83:61:41:55:86:
         08:c6:36:2e:e5:f7:a6:b8:ef:d3:13:84:9a:74:2b:0b:e9:73:
         c3:51:36:df:45:4f:2f:1b:f5:b2:72:18:60:e7:dc:e1:c3:ba:
         b1:0f:53:18:ee:70:86:df:16:66:cb:e1:ee:43:52:4f:6c:e1:
         93:6d:6a:7e:d5:8a:54:5d:4e:76:eb:fa:a9:8f:03:75:93:51:
         50:f5:db:45:2f:29:8f:82:d2:8c:30:05:0b:7f:f5:a5:ea:ed:
         10:6b:a4:00:87:48:d3:a9:4d:8d:85:9d:b0:37:7c:90:03:9e:
         7c:c6:1e:e8:4e:01:8f:fa:ed:fa:69:71:d3:f3:e1:1d:6b:74:
         50:b4:17:21:6d:62:ea:14:5e:01:b4:5b:71:b6:65:c3:19:fd:
         89:a6:7e:79:fc:08:cd:6d:0a:04:9b:57:c3:4d:76:72:63:d2:
         2c:32:c9:0a:00:28:ce:16:f5:12:f6:4e:18:3a:f0:2b:b8:04:
         fe:b8:07:83
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUC163VzVobM0wWUBpDw/opAwEwzEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNENFODAxMjJENkRERkNBQzkwMzMyNzY5OEU3NUVGMTQw
N0ZBODE5NTAeFw0yNjAxMjQxODE0MjhaFw0yNjAxMjUyMTM1MjhaMDMxMTAvBgNV
BAMTKEIyNkRCODVFMDA5MTcxQzAyMDJCNEQxQUQ0MTAyQzE4NjM1M0E2MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEzJf6BJwZBFbZeoUWIZIlOaNF
n44C8+znIGzMW20aM7H5fZHyWqPwaBsOgucR6PRNXVEsnmhK9osPoD/HSb5nbIci
QRK31ZIQE+VgZd4C6Hk0vckG+gZ5/Nn77Ouzf4KoUeS9thSauvSq/6qTjVY6+cs7
dmwhhu+C5I76e1HUNGa/1beJSxxadvhcp1EW4KYqUbcVemhuS09xLc29bdeG1yBK
e1sy5I01i1KKfPhLswS4bw0YAQD4bIcQpMqOr4wXP/Vj71MrV/RJZgYhDFwMrXP/
5G2aJ5FykBsQLHiY/sU/FNFQRFKnUGCIgN35jefYnCR68siMY2K9AfvzNTL1AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUsm24XgCRccAgK00a1BAsGGNTpgswHwYDVR0j
BBgwFoAUTOgBItbd/KyQMydpjnXvFAf6gZUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEc0RVhvNnA1N0xDdWF4Z0hLUnNGRXZuaFAzZURVajdOaUhIR0M3MlZB
Z3MvMC80Q0U4MDEyMkQ2RERGQ0FDOTAzMzI3Njk4RTc1RUYxNDA3RkE4MTk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDRTgwMTIyRDZEREZDQUM5
MDMzMjc2OThFNzVFRjE0MDdGQTgxOTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NEc0RVhvNnA1N0xDdWF4Z0hLUnNGRXZuaFAzZURVajdOaUhIR0M3MlZBZ3MvMC80
Q0U4MDEyMkQ2RERGQ0FDOTAzMzI3Njk4RTc1RUYxNDA3RkE4MTk1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMz2pxU5QqOzGaY0vpZGbhBYmpXgbH3X9se452BvfKLcZu1p1zw0EC0+rM7EU
FOtupuLfQ8TveVcQcmesnkGPFHUkZYNhQVWGCMY2LuX3prjv0xOEmnQrC+lzw1E2
30VPLxv1snIYYOfc4cO6sQ9TGO5wht8WZsvh7kNST2zhk21qftWKVF1Oduv6qY8D
dZNRUPXbRS8pj4LSjDAFC3/1pertEGukAIdI06lNjYWdsDd8kAOefMYe6E4Bj/rt
+mlx0/PhHWt0ULQXIW1i6hReAbRbcbZlwxn9iaZ+efwIzW0KBJtXw012cmPSLDLJ
CgAozhb1EvZOGDrwK7gE/rgHgw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:03:17 2026 by rpki-client