This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4f8gC33Zn6pj5ZfTcmXB3ah5jdoELqTU2MHzdvpvXLeX/0/6DFF8D779C907C4E2EAB49685D35DD3BD2C37B85.mft
File:                     6DFF8D779C907C4E2EAB49685D35DD3BD2C37B85.mft (raw, json)
Hash identifier:          KOQM8Ymf0GUEAdYoFH4IfcqjaKK5xMz4BlBTsw9jbmg=
Subject key identifier:   B4:C2:1A:28:BA:A1:52:F9:C1:94:72:46:36:D9:9A:D0:B0:C9:C5:12
Authority key identifier: 6D:FF:8D:77:9C:90:7C:4E:2E:AB:49:68:5D:35:DD:3B:D2:C3:7B:85
Certificate issuer:       /CN=6DFF8D779C907C4E2EAB49685D35DD3BD2C37B85
Certificate serial:       2CD457675B3BFA2AFA3F9134B1FC25355CFAF9ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DFF8D779C907C4E2EAB49685D35DD3BD2C37B85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4f8gC33Zn6pj5ZfTcmXB3ah5jdoELqTU2MHzdvpvXLeX/0/6DFF8D779C907C4E2EAB49685D35DD3BD2C37B85.mft
Manifest number:          79
Signing time:             Sun 25 Jan 2026 21:13:28 +0000
Manifest this update:     Sun 25 Jan 2026 21:08:28 +0000
Manifest next update:     Mon 26 Jan 2026 22:33:28 +0000
Files and hashes:         1: 34352e3136312e31322e302f32322d3332203d3e20323638343339.roa (hash: QB5DsiE4RjFrcKixfjlm9tXyBb9XCaXgrDMv2YV9seA=)
                          2: 323830343a353133633a3a2f33322d313238203d3e20323638343339.roa (hash: 9ZfI0lwT2k412VGKqsFFpbiSYloDbVJsUJ9EhXxZO0Y=)
                          3: 6DFF8D779C907C4E2EAB49685D35DD3BD2C37B85.crl (hash: JuZNIzZxjZp+O56FsFie0r+iIWsUth544SsnIK4qp5c=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4f8gC33Zn6pj5ZfTcmXB3ah5jdoELqTU2MHzdvpvXLeX/0/6DFF8D779C907C4E2EAB49685D35DD3BD2C37B85.crl
                          rsync://rpki-repo.registro.br/repo/4f8gC33Zn6pj5ZfTcmXB3ah5jdoELqTU2MHzdvpvXLeX/0/6DFF8D779C907C4E2EAB49685D35DD3BD2C37B85.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DFF8D779C907C4E2EAB49685D35DD3BD2C37B85.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 22:33:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:d4:57:67:5b:3b:fa:2a:fa:3f:91:34:b1:fc:25:35:5c:fa:f9:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DFF8D779C907C4E2EAB49685D35DD3BD2C37B85
        Validity
            Not Before: Jan 25 21:08:28 2026 GMT
            Not After : Jan 26 22:33:28 2026 GMT
        Subject: CN=B4C21A28BAA152F9C194724636D99AD0B0C9C512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e7:f4:0e:7b:a9:ff:f6:d7:1e:e9:2b:a6:b9:
                    51:1c:fa:82:f3:4d:c6:32:06:8b:c9:e0:00:3a:60:
                    87:7d:ec:09:26:0c:39:6b:e1:aa:bb:3a:30:99:29:
                    c7:aa:2c:45:fb:51:a6:b9:40:b8:36:e5:c1:ac:8a:
                    39:fa:8c:6f:80:66:e0:26:3a:37:18:16:93:96:9f:
                    4b:0f:2e:f0:1f:23:28:10:b1:0e:4f:84:a4:c2:b5:
                    a5:d6:36:6b:34:6a:3c:c7:67:4e:44:25:2a:47:b8:
                    c7:4b:d6:8c:44:39:50:58:33:c2:ac:9b:61:11:8e:
                    ba:68:62:f6:0a:fc:9a:51:de:29:b2:50:4c:36:f9:
                    61:82:50:c4:f5:04:b1:3c:21:3a:d3:b2:82:6b:47:
                    c0:e8:7e:3d:cc:20:53:99:67:63:5a:28:ff:04:94:
                    73:85:dd:e4:53:61:48:7d:09:88:3b:10:da:16:80:
                    19:74:fa:c5:b0:0c:84:60:1e:6d:d7:70:da:6d:7c:
                    3b:57:c8:f4:ab:92:80:04:69:61:3d:de:d0:07:56:
                    92:63:f4:26:cd:f9:ea:b8:64:8d:4c:65:8f:ab:c2:
                    35:29:85:d3:37:8b:65:6e:76:bc:22:a8:20:69:33:
                    c4:e5:39:1e:98:ce:0c:38:a4:17:d9:1a:9e:f4:f0:
                    07:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C2:1A:28:BA:A1:52:F9:C1:94:72:46:36:D9:9A:D0:B0:C9:C5:12
            X509v3 Authority Key Identifier:
                keyid:6D:FF:8D:77:9C:90:7C:4E:2E:AB:49:68:5D:35:DD:3B:D2:C3:7B:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4f8gC33Zn6pj5ZfTcmXB3ah5jdoELqTU2MHzdvpvXLeX/0/6DFF8D779C907C4E2EAB49685D35DD3BD2C37B85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DFF8D779C907C4E2EAB49685D35DD3BD2C37B85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4f8gC33Zn6pj5ZfTcmXB3ah5jdoELqTU2MHzdvpvXLeX/0/6DFF8D779C907C4E2EAB49685D35DD3BD2C37B85.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:cb:d8:15:b3:fb:2b:8c:87:2a:3f:d9:bb:1b:aa:13:6d:88:
         39:8a:cc:a7:32:63:a7:fe:a1:a9:68:24:e7:8f:11:86:fa:32:
         09:dd:f8:f1:92:da:ee:db:e1:6d:e8:d5:1d:fa:cd:4b:c4:6f:
         13:fb:84:ff:c1:28:15:10:f5:61:57:c5:34:8a:dc:16:36:bb:
         f1:05:be:4f:d0:ee:00:db:b9:b0:b7:62:85:9c:55:0c:83:66:
         e0:01:37:5b:58:e2:9d:a6:4c:6e:11:df:e3:28:b2:ee:7c:36:
         a4:15:a7:fc:d6:27:d3:d7:06:dc:49:9a:f0:36:97:3b:bc:a9:
         58:20:5b:57:d0:1e:e4:59:31:9b:59:30:18:31:08:37:55:0c:
         ec:d2:09:0a:07:77:0c:4f:7f:b8:1b:74:8f:b9:08:9d:9c:4c:
         84:e0:48:3d:5e:1c:d8:e7:ca:29:34:95:b5:40:8d:d8:66:47:
         e7:36:3f:88:9d:68:71:97:42:db:68:2b:3c:cb:12:97:bb:03:
         71:f7:1d:7f:0a:70:57:a5:c5:ea:76:6a:45:5b:21:aa:c9:e5:
         84:04:a0:f3:68:3e:36:bf:f5:f6:3f:a4:46:35:59:dd:59:f9:
         80:3f:ef:93:cb:60:ee:57:fc:e4:e9:ab:23:89:14:0f:47:72:
         92:ea:86:5e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULNRXZ1s7+ir6P5E0sfwlNVz6+e0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkRGRjhENzc5QzkwN0M0RTJFQUI0OTY4NUQzNUREM0JE
MkMzN0I4NTAeFw0yNjAxMjUyMTA4MjhaFw0yNjAxMjYyMjMzMjhaMDMxMTAvBgNV
BAMTKEI0QzIxQTI4QkFBMTUyRjlDMTk0NzI0NjM2RDk5QUQwQjBDOUM1MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd5/QOe6n/9tce6SumuVEc+oLz
TcYyBovJ4AA6YId97AkmDDlr4aq7OjCZKceqLEX7Uaa5QLg25cGsijn6jG+AZuAm
OjcYFpOWn0sPLvAfIygQsQ5PhKTCtaXWNms0ajzHZ05EJSpHuMdL1oxEOVBYM8Ks
m2ERjrpoYvYK/JpR3imyUEw2+WGCUMT1BLE8ITrTsoJrR8Dofj3MIFOZZ2NaKP8E
lHOF3eRTYUh9CYg7ENoWgBl0+sWwDIRgHm3XcNptfDtXyPSrkoAEaWE93tAHVpJj
9CbN+eq4ZI1MZY+rwjUphdM3i2VudrwiqCBpM8TlOR6Yzgw4pBfZGp708AcJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUtMIaKLqhUvnBlHJGNtma0LDJxRIwHwYDVR0j
BBgwFoAUbf+Nd5yQfE4uq0loXTXdO9LDe4UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGY4Z0MzM1puNnBqNVpmVGNtWEIzYWg1amRvRUxxVFUyTUh6ZHZwdlhM
ZVgvMC82REZGOEQ3NzlDOTA3QzRFMkVBQjQ5Njg1RDM1REQzQkQyQzM3Qjg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZERkY4RDc3OUM5MDdDNEUy
RUFCNDk2ODVEMzVERDNCRDJDMzdCODUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NGY4Z0MzM1puNnBqNVpmVGNtWEIzYWg1amRvRUxxVFUyTUh6ZHZwdlhMZVgvMC82
REZGOEQ3NzlDOTA3QzRFMkVBQjQ5Njg1RDM1REQzQkQyQzM3Qjg1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkcvYFbP7K4yHKj/ZuxuqE22IOYrMpzJjp/6hqWgk548RhvoyCd348ZLa7tvh
bejVHfrNS8RvE/uE/8EoFRD1YVfFNIrcFja78QW+T9DuANu5sLdihZxVDINm4AE3
W1jinaZMbhHf4yiy7nw2pBWn/NYn09cG3Ema8DaXO7ypWCBbV9Ae5Fkxm1kwGDEI
N1UM7NIJCgd3DE9/uBt0j7kInZxMhOBIPV4c2OfKKTSVtUCN2GZH5zY/iJ1ocZdC
22grPMsSl7sDcfcdfwpwV6XF6nZqRVshqsnlhASg82g+Nr/19j+kRjVZ3Vn5gD/v
k8tg7lf85OmrI4kUD0dykuqGXg==
-----END CERTIFICATE-----
Generated at Mon Jan 26 00:27:23 2026 by rpki-client