This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft
File:                     BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft (raw, json)
Hash identifier:          kJAnGUetx9co02FHSFP3ZMt/trVxLwM/G24KDTKO1Lc=
Subject key identifier:   1E:47:F5:0B:3B:4D:B5:C9:E0:AF:D7:43:83:5B:9A:75:50:2E:5F:F2
Authority key identifier: BA:57:D2:39:D2:DC:0A:C2:57:37:3A:7B:BA:D5:18:86:AA:5D:4C:46
Certificate issuer:       /CN=BA57D239D2DC0AC257373A7BBAD51886AA5D4C46
Certificate serial:       16E3EFA7779C0865C81438EBE420399143BD8E38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft
Manifest number:          F7
Signing time:             Sun 25 Jan 2026 08:06:26 +0000
Manifest this update:     Sun 25 Jan 2026 08:01:26 +0000
Manifest next update:     Mon 26 Jan 2026 10:06:26 +0000
Files and hashes:         1: BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl (hash: O1RnxNwsJvDX9k9gVdJabTMzyGgVi+BZ4S6/VI2eiec=)
                          2: 323830343a393339303a3a2f33322d3438203d3e203631363233.roa (hash: LG7owg69fyxfKV8rigMC7sBkP5B19iTBtW4UQCyl/2Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl
                          rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 10:06:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e3:ef:a7:77:9c:08:65:c8:14:38:eb:e4:20:39:91:43:bd:8e:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA57D239D2DC0AC257373A7BBAD51886AA5D4C46
        Validity
            Not Before: Jan 25 08:01:26 2026 GMT
            Not After : Jan 26 10:06:26 2026 GMT
        Subject: CN=1E47F50B3B4DB5C9E0AFD743835B9A75502E5FF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c5:80:65:ec:ca:09:c6:b7:25:bd:0b:35:f0:
                    ee:2b:8c:04:bd:a5:96:d9:63:66:af:93:5c:28:09:
                    6c:ee:a6:24:da:dc:0a:71:d8:cf:97:84:63:31:52:
                    0e:df:5e:f8:ec:8f:1b:ea:73:b2:57:54:ca:bc:ce:
                    9d:99:59:c1:1c:bc:bb:ec:de:22:dd:56:be:19:c5:
                    1e:a8:b9:c4:a2:55:0c:b9:22:bc:30:83:5f:9e:9e:
                    4c:c2:8c:7e:d8:fa:13:61:31:76:0d:f3:b3:15:04:
                    c2:73:10:40:ad:ca:27:46:73:81:34:5e:4d:c8:a6:
                    fe:80:95:e2:86:b5:77:ef:42:ed:94:e7:3c:c3:90:
                    24:f1:f6:13:dc:37:a2:2c:90:ff:91:15:eb:e9:7e:
                    00:06:03:ed:e1:89:2d:0b:ad:80:19:5c:7e:c6:a6:
                    79:f5:81:84:6f:7e:22:09:36:53:7d:81:34:6c:0a:
                    d5:64:84:a0:aa:08:ef:04:9b:0e:fb:af:60:58:47:
                    32:9b:d1:a3:02:be:fe:5d:ac:f0:94:0c:cb:ba:53:
                    29:5a:49:47:47:7e:95:56:63:dc:75:76:56:b3:f3:
                    b9:e5:08:4c:bf:64:01:5c:7b:a3:85:9f:62:52:ed:
                    1a:db:3b:7f:a6:05:a1:0f:f0:df:60:e8:6b:81:3c:
                    06:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:47:F5:0B:3B:4D:B5:C9:E0:AF:D7:43:83:5B:9A:75:50:2E:5F:F2
            X509v3 Authority Key Identifier:
                keyid:BA:57:D2:39:D2:DC:0A:C2:57:37:3A:7B:BA:D5:18:86:AA:5D:4C:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:d2:63:ab:50:6f:47:4f:8a:54:77:a0:52:96:c0:79:c1:96:
         9e:fd:d0:a2:f9:e5:24:43:e9:5e:8c:93:ea:81:79:26:ce:c2:
         49:18:d7:eb:bc:b1:89:45:20:d5:15:ba:8c:e6:4e:20:81:3e:
         a2:91:eb:56:46:75:61:bc:fe:4f:ed:8f:aa:49:55:f0:8f:ee:
         6b:aa:85:ae:c8:08:e3:92:5b:5d:ce:b3:65:20:cd:d3:5e:45:
         71:0d:69:26:d6:c7:29:bb:e6:06:c6:ca:2d:4a:4b:c7:0c:df:
         8c:f2:9e:28:de:df:05:3e:0f:78:32:0d:4c:01:fe:fb:58:24:
         aa:b7:bc:3b:b1:8f:6a:7a:e4:14:d6:b2:5d:75:7d:23:75:1b:
         d5:2f:64:11:4c:29:7e:8c:9b:80:d5:28:e1:c6:06:63:e7:47:
         00:1e:df:17:3c:3b:26:78:c6:7c:62:d8:39:0a:c1:43:9e:bb:
         8b:13:0d:57:46:ba:95:9f:42:51:60:1e:12:e9:17:88:c2:12:
         02:90:26:cd:5c:ae:85:ca:12:e3:dd:15:cf:3c:67:bf:5f:c6:
         a9:8f:88:ad:aa:61:eb:bc:c1:2d:82:ac:b2:57:22:6f:82:06:
         79:5d:b6:3c:40:b0:c4:62:51:1d:53:b2:d4:8c:17:e0:8f:a3:
         e3:17:3e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:50:46 2026 by rpki-client