This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/44B54D2555E4ED03AEFAFC0B4B4563635A9FBA39.mft
File:                     44B54D2555E4ED03AEFAFC0B4B4563635A9FBA39.mft (raw, json)
Hash identifier:          7Va7/u6DYpWUoWkvRSmfmu6Qt2ALZKa8VVXoyuKfH+U=
Subject key identifier:   7A:6A:FD:9E:55:1A:87:D4:41:B9:01:4B:2C:7F:41:DB:28:10:4F:04
Authority key identifier: 44:B5:4D:25:55:E4:ED:03:AE:FA:FC:0B:4B:45:63:63:5A:9F:BA:39
Certificate issuer:       /CN=44B54D2555E4ED03AEFAFC0B4B4563635A9FBA39
Certificate serial:       3727C255544BDD5959DD3081D440CF3715C80357
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44B54D2555E4ED03AEFAFC0B4B4563635A9FBA39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/44B54D2555E4ED03AEFAFC0B4B4563635A9FBA39.mft
Manifest number:          21
Signing time:             Sun 25 Jan 2026 03:29:22 +0000
Manifest this update:     Sun 25 Jan 2026 03:24:22 +0000
Manifest next update:     Mon 26 Jan 2026 07:24:22 +0000
Files and hashes:         1: 34352e3137302e3133372e302f32342d3234203d3e20323733333131.roa (hash: hz0zsoQcCQHAIeMR+UzkGZs+wOugUE9WtILS8dTBevY=)
                          2: 323830343a386338383a3a2f33322d3438203d3e20323733333131.roa (hash: EgwJ42oqabBLSt341k6rowzLzzjq1/i+Hka42ubuLkI=)
                          3: 44B54D2555E4ED03AEFAFC0B4B4563635A9FBA39.crl (hash: GkR7HeGsDqzujZM6R3idEAZNp4eHQcITydUZ3ZzoiN8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/44B54D2555E4ED03AEFAFC0B4B4563635A9FBA39.crl
                          rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/44B54D2555E4ED03AEFAFC0B4B4563635A9FBA39.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44B54D2555E4ED03AEFAFC0B4B4563635A9FBA39.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 07:24:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:27:c2:55:54:4b:dd:59:59:dd:30:81:d4:40:cf:37:15:c8:03:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44B54D2555E4ED03AEFAFC0B4B4563635A9FBA39
        Validity
            Not Before: Jan 25 03:24:22 2026 GMT
            Not After : Jan 26 07:24:22 2026 GMT
        Subject: CN=7A6AFD9E551A87D441B9014B2C7F41DB28104F04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e0:6f:38:d0:db:8c:e8:4f:42:4a:a2:32:ff:
                    0f:41:c9:b7:68:9e:8a:cd:8a:53:d7:3f:83:a2:37:
                    3b:19:40:a3:7e:aa:f7:c6:49:30:2b:df:bb:26:26:
                    83:7f:64:24:49:ee:01:58:3b:30:c1:d9:f5:ba:92:
                    72:28:a2:80:a0:39:25:db:fd:ea:c5:57:6a:76:30:
                    32:f2:b2:23:e5:fd:90:41:31:1c:4d:9f:4b:ae:c5:
                    f3:2a:29:47:91:14:55:4d:a2:54:07:42:b5:56:46:
                    ad:ce:81:ab:82:9c:44:f4:0d:32:24:9c:b3:bc:4d:
                    b4:79:f8:33:ea:db:8b:a7:88:9c:61:2b:d1:b6:ee:
                    b8:c6:3e:ca:66:5b:b2:93:fd:67:bc:57:8f:54:d1:
                    17:b1:95:b8:b2:ac:8d:80:16:13:ab:75:f5:eb:82:
                    39:c3:d9:03:6f:c3:55:fa:6b:6a:52:6d:b4:99:44:
                    14:26:98:42:ed:1f:f1:af:60:dd:56:76:56:75:fa:
                    1d:e3:0e:a3:80:c1:af:dc:8a:69:3e:25:95:e8:8f:
                    2e:3a:5e:78:41:e8:36:1d:a9:9f:60:75:23:e8:b2:
                    a0:e2:b1:8a:9c:65:68:fe:da:7e:f2:f3:a9:8f:1f:
                    13:a1:65:54:8d:42:88:54:21:1a:42:da:61:e5:f7:
                    b5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:6A:FD:9E:55:1A:87:D4:41:B9:01:4B:2C:7F:41:DB:28:10:4F:04
            X509v3 Authority Key Identifier:
                keyid:44:B5:4D:25:55:E4:ED:03:AE:FA:FC:0B:4B:45:63:63:5A:9F:BA:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/44B54D2555E4ED03AEFAFC0B4B4563635A9FBA39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44B54D2555E4ED03AEFAFC0B4B4563635A9FBA39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/44B54D2555E4ED03AEFAFC0B4B4563635A9FBA39.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:27:b3:e4:f9:f2:76:d3:9a:44:01:0f:a9:96:dc:e7:01:92:
         4f:8d:0f:64:44:e6:53:27:7e:3b:3f:91:60:eb:22:34:b6:09:
         e6:ca:11:c7:8a:2d:ba:01:dc:96:bf:96:4e:3f:54:6b:ab:73:
         42:01:2b:28:6b:a5:07:a6:ef:94:bc:70:e5:d9:94:82:44:7d:
         06:83:f7:73:61:db:1d:da:e5:33:3c:ce:cd:85:6c:81:3b:28:
         5d:93:6a:3a:a6:fb:f8:60:db:a2:47:7f:05:14:4e:bc:3b:27:
         8c:b9:38:31:d2:e6:b4:8e:b5:83:24:fe:9e:fe:5d:e1:56:97:
         ac:bd:15:2b:26:d0:ef:05:44:18:f5:74:36:66:f1:44:21:7e:
         e4:c7:70:47:b1:4a:be:c0:54:7a:b5:3b:ea:99:b4:f3:fd:ba:
         a7:55:6a:ab:bf:39:60:4c:d3:8f:70:4f:a7:a8:30:9d:6f:e4:
         83:74:69:c1:d2:56:4e:45:b0:e6:8c:89:33:54:e9:c8:fe:56:
         13:2b:f5:c0:1c:15:97:58:6f:93:c4:c8:47:5e:58:69:72:3e:
         cd:e5:19:de:13:c0:87:04:eb:c4:09:98:50:5e:b1:0f:92:b8:
         4a:1a:f1:bc:a6:bf:c6:bb:5f:af:f6:1a:2a:95:7c:dd:48:02:
         67:c9:24:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNyfCVVRL3VlZ3TCB1EDPNxXIA1cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDRCNTREMjU1NUU0RUQwM0FFRkFGQzBCNEI0NTYzNjM1
QTlGQkEzOTAeFw0yNjAxMjUwMzI0MjJaFw0yNjAxMjYwNzI0MjJaMDMxMTAvBgNV
BAMTKDdBNkFGRDlFNTUxQTg3RDQ0MUI5MDE0QjJDN0Y0MURCMjgxMDRGMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC54G840NuM6E9CSqIy/w9Bybdo
norNilPXP4OiNzsZQKN+qvfGSTAr37smJoN/ZCRJ7gFYOzDB2fW6knIoooCgOSXb
/erFV2p2MDLysiPl/ZBBMRxNn0uuxfMqKUeRFFVNolQHQrVWRq3OgauCnET0DTIk
nLO8TbR5+DPq24uniJxhK9G27rjGPspmW7KT/We8V49U0RexlbiyrI2AFhOrdfXr
gjnD2QNvw1X6a2pSbbSZRBQmmELtH/GvYN1WdlZ1+h3jDqOAwa/cimk+JZXojy46
XnhB6DYdqZ9gdSPosqDisYqcZWj+2n7y86mPHxOhZVSNQohUIRpC2mHl97U3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUemr9nlUah9RBuQFLLH9B2ygQTwQwHwYDVR0j
BBgwFoAURLVNJVXk7QOu+vwLS0VjY1qfujkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHozeWlqRDFCQmhpU0ZQN2RXOEZzR2hzTTNGckZ2RW1ETDljQmFtSlJI
VEMvMC80NEI1NEQyNTU1RTRFRDAzQUVGQUZDMEI0QjQ1NjM2MzVBOUZCQTM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0QjU0RDI1NTVFNEVEMDNB
RUZBRkMwQjRCNDU2MzYzNUE5RkJBMzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NHozeWlqRDFCQmhpU0ZQN2RXOEZzR2hzTTNGckZ2RW1ETDljQmFtSlJIVEMvMC80
NEI1NEQyNTU1RTRFRDAzQUVGQUZDMEI0QjQ1NjM2MzVBOUZCQTM5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMyez5PnydtOaRAEPqZbc5wGST40PZETmUyd+Oz+RYOsiNLYJ5soRx4otugHc
lr+WTj9Ua6tzQgErKGulB6bvlLxw5dmUgkR9BoP3c2HbHdrlMzzOzYVsgTsoXZNq
Oqb7+GDbokd/BRROvDsnjLk4MdLmtI61gyT+nv5d4VaXrL0VKybQ7wVEGPV0Nmbx
RCF+5MdwR7FKvsBUerU76pm08/26p1Vqq785YEzTj3BPp6gwnW/kg3RpwdJWTkWw
5oyJM1TpyP5WEyv1wBwVl1hvk8TIR15YaXI+zeUZ3hPAhwTrxAmYUF6xD5K4Shrx
vKa/xrtfr/YaKpV83UgCZ8kk3Q==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:14:56 2026 by rpki-client