This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/54NKmLxabHU5BKeyF2o7dPNJZeX8GauKPPCEmnRKpygK/0/230621F0568B19CE05FE2306C094C84B666D6C54.mft
File:                     230621F0568B19CE05FE2306C094C84B666D6C54.mft (raw, json)
Hash identifier:          r4bniFKvua74XAKX1QvD2Bf4koZ3FOGPpkbpNqJfEtg=
Subject key identifier:   8E:CA:2C:D4:B0:23:F8:F7:12:F7:63:74:86:45:10:B1:37:D7:A3:F1
Authority key identifier: 23:06:21:F0:56:8B:19:CE:05:FE:23:06:C0:94:C8:4B:66:6D:6C:54
Certificate issuer:       /CN=230621F0568B19CE05FE2306C094C84B666D6C54
Certificate serial:       497557D753980708D7D52297208BB37F2A936127
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/230621F0568B19CE05FE2306C094C84B666D6C54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54NKmLxabHU5BKeyF2o7dPNJZeX8GauKPPCEmnRKpygK/0/230621F0568B19CE05FE2306C094C84B666D6C54.mft
Manifest number:          C3
Signing time:             Sun 25 Jan 2026 14:14:04 +0000
Manifest this update:     Sun 25 Jan 2026 14:09:04 +0000
Manifest next update:     Mon 26 Jan 2026 18:06:04 +0000
Files and hashes:         1: 323830343a373966303a3a2f33322d313238203d3e20323731333337.roa (hash: 7JOsyAvXXm4sba6PaOCGgjCahzBFIy5C1I6O2V6KZII=)
                          2: 230621F0568B19CE05FE2306C094C84B666D6C54.crl (hash: DC0wvrThuUYz7u6vPoMJavrM+NJ46sCNOyV5m9ILd3E=)
                          3: 3230302e3130362e3232322e302f32332d3332203d3e20323731333337.roa (hash: NPntOO2elGKDRNaLdt/ldA/TWyF7vuDHAexjiwgjuNY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/54NKmLxabHU5BKeyF2o7dPNJZeX8GauKPPCEmnRKpygK/0/230621F0568B19CE05FE2306C094C84B666D6C54.crl
                          rsync://rpki-repo.registro.br/repo/54NKmLxabHU5BKeyF2o7dPNJZeX8GauKPPCEmnRKpygK/0/230621F0568B19CE05FE2306C094C84B666D6C54.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/230621F0568B19CE05FE2306C094C84B666D6C54.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 18:06:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:75:57:d7:53:98:07:08:d7:d5:22:97:20:8b:b3:7f:2a:93:61:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=230621F0568B19CE05FE2306C094C84B666D6C54
        Validity
            Not Before: Jan 25 14:09:04 2026 GMT
            Not After : Jan 26 18:06:04 2026 GMT
        Subject: CN=8ECA2CD4B023F8F712F76374864510B137D7A3F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a6:1d:0f:3a:ea:a9:5a:12:2e:cd:bf:d1:72:
                    6e:59:44:de:90:68:78:69:45:79:fd:24:26:2d:57:
                    9a:47:8b:93:c2:5d:6c:5b:25:73:e4:7c:93:39:6d:
                    46:01:b5:0e:60:b1:4b:a6:38:41:54:5b:60:87:8d:
                    d2:31:e5:07:66:67:3a:f6:94:df:a6:f6:57:b0:12:
                    23:0b:6e:b6:93:bd:2b:fb:dd:9c:56:2c:a4:11:8e:
                    02:c0:d2:36:87:52:aa:c8:5f:21:26:a3:66:03:51:
                    6b:6f:e8:4f:ea:1f:83:a6:36:1c:bd:32:0e:d2:03:
                    77:c7:a1:dd:19:bd:f1:35:ed:5e:9a:18:0f:1f:c0:
                    e6:76:89:85:c9:e0:5b:08:e7:1f:61:58:05:7d:73:
                    62:a0:a0:71:ce:1b:83:b8:41:6c:29:4f:d7:07:b4:
                    4e:90:93:0c:90:6e:d1:bc:c5:85:c6:57:93:67:d8:
                    d7:d6:0b:d9:ec:23:ae:fb:3f:34:bf:cc:0d:93:81:
                    c6:0e:b1:3c:1e:e5:d2:2f:4d:9f:12:09:e2:4e:0a:
                    6e:15:31:2a:cb:f1:95:6c:c9:96:21:4f:e5:48:aa:
                    7b:6e:be:0c:38:2b:9b:b8:96:fa:83:0d:c6:e6:a6:
                    4a:87:5b:28:83:42:e8:fe:f8:d4:15:d1:19:73:64:
                    1e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:CA:2C:D4:B0:23:F8:F7:12:F7:63:74:86:45:10:B1:37:D7:A3:F1
            X509v3 Authority Key Identifier:
                keyid:23:06:21:F0:56:8B:19:CE:05:FE:23:06:C0:94:C8:4B:66:6D:6C:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54NKmLxabHU5BKeyF2o7dPNJZeX8GauKPPCEmnRKpygK/0/230621F0568B19CE05FE2306C094C84B666D6C54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/230621F0568B19CE05FE2306C094C84B666D6C54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54NKmLxabHU5BKeyF2o7dPNJZeX8GauKPPCEmnRKpygK/0/230621F0568B19CE05FE2306C094C84B666D6C54.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:a3:99:0a:7b:54:08:09:0b:b4:7b:d1:e3:ae:f5:9c:18:89:
         ac:3e:87:15:7b:26:66:8e:e6:7d:b4:2e:78:cd:18:19:a5:85:
         ed:d3:fa:43:3e:5a:dd:b7:7f:1a:50:80:6b:40:62:b8:36:2d:
         54:41:15:e5:e4:28:82:d2:8e:1c:ff:65:b8:76:27:ee:f7:36:
         dc:77:ea:e1:7d:5f:50:7d:b3:ee:e1:c0:c1:db:7a:f4:83:7e:
         79:03:6c:1d:eb:8d:fc:ba:93:7f:cd:dc:ce:8b:23:42:b6:d6:
         3e:10:a3:68:10:08:96:4f:c1:f0:03:c9:4b:c5:7b:e9:17:ca:
         49:44:89:b0:d9:48:e6:c6:e6:ed:46:b6:42:2d:a5:ec:f4:76:
         59:04:65:d7:eb:d0:2c:8b:96:0c:fe:eb:51:b6:48:9f:7a:5e:
         27:58:d6:d8:36:ae:6b:b2:40:12:10:a3:3a:8a:e2:57:37:20:
         bd:50:fa:59:54:de:0d:c3:b2:50:70:2e:06:48:49:2e:cf:b9:
         a8:d7:cf:15:89:35:c7:c3:07:73:78:ff:46:8b:2d:a1:fb:34:
         24:f8:e0:56:70:d5:f9:d5:52:8e:9d:af:bc:17:69:63:ad:67:
         26:ab:a1:08:03:a9:53:ed:e5:d9:50:1d:fd:77:7c:3e:ee:82:
         89:2c:27:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:23:47 2026 by rpki-client