This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.mft
File:                     5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.mft (raw, json)
Hash identifier:          wmQB2KWH02xp6TgqMVmBHSvb9AeMv3LKgCdOyF4s3zc=
Subject key identifier:   C1:C4:91:21:92:7F:F8:A0:5A:30:62:22:4A:B6:C2:1F:20:0F:BD:D8
Authority key identifier: 5A:97:D9:AB:7E:B0:B4:A3:7A:68:7D:F4:82:43:A8:6F:6F:ED:59:6D
Certificate issuer:       /CN=5A97D9AB7EB0B4A37A687DF48243A86F6FED596D
Certificate serial:       5A862A6FAD53EE933CCFE9F2172C4FDC11E2EDF1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.mft
Manifest number:          018E
Signing time:             Sat 24 Jan 2026 22:29:52 +0000
Manifest this update:     Sat 24 Jan 2026 22:24:52 +0000
Manifest next update:     Mon 26 Jan 2026 01:03:52 +0000
Files and hashes:         1: 5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.crl (hash: DQezE1sn3ekKR9H2Xu7CPQzNlKJKARqobRdnDds9/Ts=)
                          2: 3137392e3132372e3131322e302f32322d3234203d3e203238363035.roa (hash: UQP0wJ5wqmSobZc8N7a17BgDSkdk/rrpPPH5BS6bj+w=)
                          3: 3230312e32302e3134342e302f32302d3234203d3e203238363035.roa (hash: mgiFm+AQ1BARPvCimt0jOUhKbYnFekRlOF5rW1eyGgI=)
                          4: 323830343a3363303a3a2f33322d3438203d3e203238363035.roa (hash: +MUz/wBhqbn7O6CpHNLXpJA1y8rso/jWmFlEx31j/JY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.crl
                          rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 01:03:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:86:2a:6f:ad:53:ee:93:3c:cf:e9:f2:17:2c:4f:dc:11:e2:ed:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A97D9AB7EB0B4A37A687DF48243A86F6FED596D
        Validity
            Not Before: Jan 24 22:24:52 2026 GMT
            Not After : Jan 26 01:03:52 2026 GMT
        Subject: CN=C1C49121927FF8A05A3062224AB6C21F200FBDD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:10:e2:d2:d2:a3:a2:31:c2:ba:97:a4:16:1d:
                    bb:81:f7:14:dc:24:c9:42:ee:ec:da:59:f8:a0:a7:
                    56:77:47:b5:27:1a:b5:25:89:4d:11:97:9d:65:cd:
                    c2:cf:d5:7c:40:57:96:02:bf:c2:b5:06:9c:fa:56:
                    f8:62:4f:30:19:55:e3:2c:67:8b:b6:90:a1:63:b8:
                    6a:c0:16:91:09:df:43:eb:b3:b8:ba:4c:c3:6a:4f:
                    ea:ed:27:e9:d5:d6:a6:c4:24:2b:f2:3c:33:f9:86:
                    f4:1c:91:3e:15:e6:ce:60:7a:00:94:89:45:65:cf:
                    0e:03:26:1b:4e:dd:eb:85:7f:d1:24:1f:9d:16:6a:
                    59:e7:84:b6:87:63:01:a6:1c:b6:b5:26:b0:e6:b8:
                    e9:f9:74:e3:01:6a:4f:e0:26:21:b9:cf:a6:d2:be:
                    00:61:dc:d8:51:82:bb:2b:8e:5c:ee:f4:3a:5d:fd:
                    4a:24:a6:b0:ba:b9:c0:05:5b:90:ff:13:68:83:64:
                    a6:ac:77:13:f5:cf:fd:b4:a1:dc:85:a0:15:49:b4:
                    ef:87:c4:e3:49:46:11:12:a8:db:d4:69:d1:82:8c:
                    90:14:43:6b:bd:02:7f:9f:6f:fe:63:28:52:94:ec:
                    d4:80:8a:3e:d2:61:41:f9:f3:b9:03:18:78:72:dd:
                    70:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C4:91:21:92:7F:F8:A0:5A:30:62:22:4A:B6:C2:1F:20:0F:BD:D8
            X509v3 Authority Key Identifier:
                keyid:5A:97:D9:AB:7E:B0:B4:A3:7A:68:7D:F4:82:43:A8:6F:6F:ED:59:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:7d:2e:99:72:ff:fe:96:92:02:7a:a5:d9:9f:ea:c1:d9:f2:
         df:c1:af:e9:a5:5f:4b:13:64:f5:4a:33:c6:04:6c:08:7a:32:
         78:b3:24:4c:95:c7:62:fb:9f:0e:20:ba:24:5c:fe:f8:ea:66:
         ca:d7:02:aa:9e:47:a8:f1:d1:d4:7c:f1:7f:29:81:d5:1a:0d:
         61:52:88:99:93:0b:c1:8e:ee:86:ee:53:a9:5d:fc:f3:73:7d:
         ec:81:cd:82:33:83:d4:a4:9e:c5:af:ef:e9:0d:41:af:a6:3d:
         0d:2b:4a:5f:49:76:11:13:45:38:ba:04:cd:a8:c5:a5:d1:9b:
         79:9b:cd:c6:35:b5:f3:a4:b3:ea:97:2f:9e:1a:78:b1:f9:7b:
         30:19:49:eb:46:8f:47:27:b7:dc:e1:a2:7e:92:b6:a8:91:73:
         35:69:80:fb:20:ec:a4:c1:28:71:9f:4f:1c:13:67:3c:f2:09:
         8b:2b:ab:0e:84:c4:37:04:f1:8e:b5:31:a3:44:bc:5e:72:f8:
         e8:7b:39:e4:c4:46:7d:84:f6:b2:ca:9a:19:ff:b0:93:f5:bc:
         78:fd:28:df:ff:29:05:ac:74:2e:cc:d3:a6:40:3e:94:84:14:
         f6:71:95:63:97:f3:fc:25:62:e9:50:48:98:b4:7b:c2:b7:6e:
         9a:eb:01:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:29:10 2026 by rpki-client