This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft
File:                     D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft (raw, json)
Hash identifier:          GXNYXe5X98uV6CukPUPAxzdTATMiyOUBk34zW/P8KF4=
Subject key identifier:   F4:EF:4F:78:15:2D:15:68:85:1E:3B:DA:F1:60:0B:8C:36:A1:17:A4
Authority key identifier: D8:BA:7C:35:A5:C2:42:05:89:B3:0C:33:D9:CF:13:74:50:5F:3D:BC
Certificate issuer:       /CN=D8BA7C35A5C2420589B30C33D9CF1374505F3DBC
Certificate serial:       231C0F4AB6B7E107EAC0D5E80E102FFB0A9E3C45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft
Manifest number:          01D0
Signing time:             Sun 25 Jan 2026 07:00:48 +0000
Manifest this update:     Sun 25 Jan 2026 06:55:48 +0000
Manifest next update:     Mon 26 Jan 2026 09:39:48 +0000
Files and hashes:         1: 3137302e3233332e32302e302f32322d3234203d3e20323638323839.roa (hash: nJHKWcaMdxBbjOC5bhFit9A5idnCknzOdY01So/X9KM=)
                          2: D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl (hash: rcdVDTwJANUN+LJd2DJDORZPjRsKRSxK8pP8Wwwq/1k=)
                          3: 34352e3233372e3230302e302f32322d3234203d3e20323638323839.roa (hash: E0joDVbK7d76B68vuV8WXolFT2AAlH6oKz3TDd96iqs=)
                          4: 323830343a346565343a3a2f33322d3438203d3e20323638323839.roa (hash: CpJuHDvAI+/wiKeDtSMafBkRDb76lm4oyzY5Bieg4T4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl
                          rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 09:39:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:1c:0f:4a:b6:b7:e1:07:ea:c0:d5:e8:0e:10:2f:fb:0a:9e:3c:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8BA7C35A5C2420589B30C33D9CF1374505F3DBC
        Validity
            Not Before: Jan 25 06:55:48 2026 GMT
            Not After : Jan 26 09:39:48 2026 GMT
        Subject: CN=F4EF4F78152D1568851E3BDAF1600B8C36A117A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:70:cd:61:d3:36:1d:c0:2d:67:21:83:4f:34:
                    88:d9:f3:8b:65:18:b9:ab:a5:c2:0f:48:6e:b0:75:
                    66:d9:e8:81:b6:d0:01:4c:03:cd:0a:a8:59:59:a1:
                    18:71:4d:43:71:40:ea:a7:44:33:ef:80:f7:24:d1:
                    fc:fb:10:bf:8f:1b:99:f6:f8:97:68:31:a1:5e:82:
                    1a:64:95:96:d0:b0:2b:80:3c:01:7a:87:c5:f0:1d:
                    a1:84:84:4d:f0:45:10:3e:5b:85:85:a7:5c:ff:9d:
                    d9:d4:fd:ab:d3:e3:b9:a3:94:ad:ee:d3:81:90:71:
                    e4:a8:85:17:80:08:b4:30:76:d2:4e:70:f6:f1:09:
                    bd:d9:6c:84:90:63:58:2a:ea:be:07:ce:42:fc:b6:
                    e6:76:bb:e2:d7:24:b3:85:3c:81:3a:9e:66:46:80:
                    5a:0e:7d:89:e1:ee:86:4d:00:11:40:c2:e1:4b:78:
                    2d:fe:d2:e2:8c:2e:50:30:27:1c:49:be:e0:d3:fb:
                    33:90:1a:f9:28:7e:f8:d1:71:5a:7c:f9:19:64:49:
                    f6:75:31:93:c5:67:a7:1a:60:71:60:49:0b:e8:48:
                    ef:9a:f1:42:72:3d:29:4b:e7:2d:d3:e2:a8:ce:df:
                    0b:8a:e5:d2:b1:2c:81:82:0c:23:e4:2f:0f:75:bf:
                    39:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:EF:4F:78:15:2D:15:68:85:1E:3B:DA:F1:60:0B:8C:36:A1:17:A4
            X509v3 Authority Key Identifier:
                keyid:D8:BA:7C:35:A5:C2:42:05:89:B3:0C:33:D9:CF:13:74:50:5F:3D:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:25:ee:f7:c0:47:96:0d:f9:83:df:33:6b:10:18:f1:d3:39:
         36:41:97:25:4a:61:51:a2:72:c5:40:ec:7b:3c:56:a3:8d:00:
         f7:2a:b9:cf:53:65:9f:2f:68:03:28:1f:8d:57:fe:9a:85:7e:
         e6:c4:28:65:b6:d8:68:d7:11:2b:76:3a:97:4e:c1:73:48:fa:
         ee:99:e8:67:c1:60:51:a2:45:05:be:48:6b:59:da:be:cf:0c:
         4a:2c:ac:9c:a1:e5:92:59:87:38:f9:c5:73:07:9e:cd:87:55:
         e7:12:bc:28:7b:fe:d1:b2:78:3c:35:ba:f4:5f:5a:c2:3d:48:
         da:94:f3:e9:02:4f:d6:39:45:cf:12:50:87:f7:53:5a:cc:15:
         f5:f4:a0:84:35:6e:b1:e8:a6:10:cd:3e:74:35:76:27:d2:1d:
         3c:0c:9c:d2:d8:a8:00:82:54:96:3c:72:72:f5:60:67:45:f7:
         e9:f5:5e:c4:8f:f3:41:16:b5:38:c2:d0:19:3b:a8:73:80:0e:
         31:0b:8e:93:ac:d9:a1:1e:f6:2b:d1:58:b8:a8:c1:1e:6d:bf:
         e5:2e:56:40:95:d8:12:2d:92:7b:2e:db:e8:7d:db:7d:d4:c2:
         5a:a6:b1:b1:5f:66:d6:1d:19:23:67:16:9b:ad:78:ef:73:c5:
         01:59:a1:ae
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIxwPSra34QfqwNXoDhAv+wqePEUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhCQTdDMzVBNUMyNDIwNTg5QjMwQzMzRDlDRjEzNzQ1
MDVGM0RCQzAeFw0yNjAxMjUwNjU1NDhaFw0yNjAxMjYwOTM5NDhaMDMxMTAvBgNV
BAMTKEY0RUY0Rjc4MTUyRDE1Njg4NTFFM0JEQUYxNjAwQjhDMzZBMTE3QTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrcM1h0zYdwC1nIYNPNIjZ84tl
GLmrpcIPSG6wdWbZ6IG20AFMA80KqFlZoRhxTUNxQOqnRDPvgPck0fz7EL+PG5n2
+JdoMaFeghpklZbQsCuAPAF6h8XwHaGEhE3wRRA+W4WFp1z/ndnU/avT47mjlK3u
04GQceSohReACLQwdtJOcPbxCb3ZbISQY1gq6r4HzkL8tuZ2u+LXJLOFPIE6nmZG
gFoOfYnh7oZNABFAwuFLeC3+0uKMLlAwJxxJvuDT+zOQGvkofvjRcVp8+RlkSfZ1
MZPFZ6caYHFgSQvoSO+a8UJyPSlL5y3T4qjO3wuK5dKxLIGCDCPkLw91vzmbAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU9O9PeBUtFWiFHjva8WALjDahF6QwHwYDVR0j
BBgwFoAU2Lp8NaXCQgWJswwz2c8TdFBfPbwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNU5XZ0dUbnlQSlR2dmhCWVc0OFZpVG4xV0toOGljeVN0VmVjeHE3eVR6
VnQvMC9EOEJBN0MzNUE1QzI0MjA1ODlCMzBDMzNEOUNGMTM3NDUwNUYzREJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4QkE3QzM1QTVDMjQyMDU4
OUIzMEMzM0Q5Q0YxMzc0NTA1RjNEQkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NU5XZ0dUbnlQSlR2dmhCWVc0OFZpVG4xV0toOGljeVN0VmVjeHE3eVR6VnQvMC9E
OEJBN0MzNUE1QzI0MjA1ODlCMzBDMzNEOUNGMTM3NDUwNUYzREJDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALSXu98BHlg35g98zaxAY8dM5NkGXJUphUaJyxUDsezxWo40A9yq5z1Nlny9o
AygfjVf+moV+5sQoZbbYaNcRK3Y6l07Bc0j67pnoZ8FgUaJFBb5Ia1navs8MSiys
nKHlklmHOPnFcweezYdV5xK8KHv+0bJ4PDW69F9awj1I2pTz6QJP1jlFzxJQh/dT
WswV9fSghDVuseimEM0+dDV2J9IdPAyc0tioAIJUljxycvVgZ0X36fVexI/zQRa1
OMLQGTuoc4AOMQuOk6zZoR72K9FYuKjBHm2/5S5WQJXYEi2Sey7b6H3bfdTCWqax
sV9m1h0ZI2cWm61473PFAVmhrg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:45:45 2026 by rpki-client