This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.mft
File:                     ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.mft (raw, json)
Hash identifier:          fJ+Oflt69CXRlJjld2XKTAGu+LWAiVJTN0ZZq4iY6bk=
Subject key identifier:   41:1A:AC:B2:77:57:F9:89:37:FC:C2:97:1F:DF:DF:FD:A1:34:F7:30
Authority key identifier: AC:E8:E0:81:BB:25:25:CD:B1:FC:85:C9:CE:1C:36:67:C8:3E:AC:1F
Certificate issuer:       /CN=ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F
Certificate serial:       33F84A2053862AE9C0A6469F942BA38A39ADA269
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.mft
Manifest number:          011D
Signing time:             Sun 25 Jan 2026 01:45:42 +0000
Manifest this update:     Sun 25 Jan 2026 01:40:42 +0000
Manifest next update:     Mon 26 Jan 2026 04:05:42 +0000
Files and hashes:         1: 3134332e302e3133362e302f32332d3233203d3e20323634303131.roa (hash: oCCbozumKWHZNHnsrflEH8CMEBxq5kK+7kdgsxrCOpk=)
                          2: 323830343a323936303a3a2f33322d3332203d3e20323634303131.roa (hash: uwtntgDhZ8NLwZsO5HmD9mt3dlpHQTwDXJ+5+Ywo8ss=)
                          3: ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.crl (hash: wgTpirpMExDzI1pqh0Rkkvo4nlRAmztJJnaxiyxYAYw=)
                          4: AS264011.asa (hash: aKti5PO3+eKPGpfYq1y92FXs+uyIvP6QJNFiJe6BX4M=)
                          5: 3134332e302e3133382e302f32332d3233203d3e20323634303131.roa (hash: a5waSVlquwcNa0Nsm6dZUKIcH/5Vp01v3948d0ByAhc=)
                          6: 3134332e302e3133362e302f32322d3232203d3e20323634303131.roa (hash: yLdeTcnv1NdbuM/lnH5oQE82RG04eOyAcuE+WQNkhJc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.crl
                          rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 04:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f8:4a:20:53:86:2a:e9:c0:a6:46:9f:94:2b:a3:8a:39:ad:a2:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F
        Validity
            Not Before: Jan 25 01:40:42 2026 GMT
            Not After : Jan 26 04:05:42 2026 GMT
        Subject: CN=411AACB27757F98937FCC2971FDFDFFDA134F730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b3:9b:20:58:f3:5d:40:61:41:bc:48:71:eb:
                    56:0a:e4:85:f1:31:d3:70:24:fa:79:a5:91:a3:da:
                    dc:65:0c:75:49:22:bb:81:2b:2d:61:b2:bc:c3:6c:
                    bb:c1:fe:32:b3:05:bd:d5:7a:9e:4b:00:42:20:86:
                    64:f0:85:48:11:df:5d:60:d5:d0:d9:f1:69:74:8f:
                    2c:cb:14:32:30:9f:d7:4f:ab:ff:4a:ee:3c:e7:25:
                    b8:d8:fe:bb:3f:50:2f:f3:4b:f2:65:d1:34:3e:26:
                    3e:14:db:9f:0f:d0:bb:8a:bf:bd:f1:5f:71:28:3f:
                    32:36:9c:4c:13:10:85:55:b7:b3:c0:3d:08:9f:36:
                    05:34:7c:ce:aa:47:c9:1e:4d:a6:67:b7:dd:5b:75:
                    24:ea:18:86:19:c0:58:53:93:9c:de:22:2e:67:61:
                    1f:76:de:ea:f4:a2:8a:44:da:16:b7:42:8c:b0:f9:
                    c9:ff:ce:b8:82:07:43:14:e1:56:af:b5:31:28:2e:
                    77:3e:21:1f:e5:9e:b1:f9:5e:88:a1:7c:b2:cd:8c:
                    34:28:d2:9c:64:47:08:c7:79:d8:37:34:2f:50:87:
                    ab:e7:c2:00:7d:fe:31:17:5d:a3:0b:c9:9b:14:6f:
                    09:4b:55:24:bc:bc:bc:24:e3:ec:c2:ec:ca:75:85:
                    49:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1A:AC:B2:77:57:F9:89:37:FC:C2:97:1F:DF:DF:FD:A1:34:F7:30
            X509v3 Authority Key Identifier:
                keyid:AC:E8:E0:81:BB:25:25:CD:B1:FC:85:C9:CE:1C:36:67:C8:3E:AC:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:49:1a:26:d1:b3:31:70:8b:96:09:49:12:5e:15:63:ed:a4:
         b9:26:a7:75:33:17:35:1f:07:85:86:f1:82:a4:83:6e:5a:c8:
         81:a4:a0:2d:9c:9e:a4:70:11:fa:57:1a:fa:34:2f:65:70:e5:
         11:26:81:de:29:75:93:45:10:0d:db:f7:b6:ca:14:9b:34:f8:
         21:7e:92:42:cf:6d:ba:55:19:92:2e:e7:66:94:3c:b6:d4:42:
         b7:6d:9b:cc:92:4c:42:8a:39:62:7a:ad:6d:64:22:92:d0:c4:
         0c:60:2b:a9:32:73:bd:ad:fd:cc:b6:73:cf:39:76:1f:03:56:
         e3:90:d1:16:02:98:4c:8a:30:de:c9:17:ff:5d:94:da:a1:4e:
         92:31:26:f3:d3:a2:d7:73:1f:81:d6:5e:56:25:8b:06:a0:8b:
         53:55:01:48:bd:5d:fa:14:bf:8f:28:45:01:4c:8b:2c:72:f9:
         5d:d5:a0:25:2e:cf:44:bb:b5:05:d2:40:e1:a8:93:60:51:10:
         4e:1a:f3:99:11:02:d5:85:bf:17:7c:69:82:5d:4c:1c:5f:84:
         a7:ef:86:ee:ec:00:64:cb:5f:68:76:ab:75:2a:74:2b:33:25:
         64:68:cf:42:e9:b0:72:3b:95:41:5c:94:ad:f2:f7:56:6d:80:
         a8:87:96:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:44:47 2026 by rpki-client