This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/66A56D870457AAEA1EED831D71D318FB7DA99B42.mft
File:                     66A56D870457AAEA1EED831D71D318FB7DA99B42.mft (raw, json)
Hash identifier:          oeWN6fxO6FtDEdmmxm0RWjDEjBTULePhbP4PK7TdXcQ=
Subject key identifier:   D2:8E:D7:23:CF:15:EA:A8:DE:91:51:E3:77:09:50:7E:B9:BF:F1:35
Authority key identifier: 66:A5:6D:87:04:57:AA:EA:1E:ED:83:1D:71:D3:18:FB:7D:A9:9B:42
Certificate issuer:       /CN=66A56D870457AAEA1EED831D71D318FB7DA99B42
Certificate serial:       682C433737EDDB05757022E9E3B72A87C55167A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66A56D870457AAEA1EED831D71D318FB7DA99B42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/66A56D870457AAEA1EED831D71D318FB7DA99B42.mft
Manifest number:          D5
Signing time:             Sun 25 Jan 2026 13:29:00 +0000
Manifest this update:     Sun 25 Jan 2026 13:24:00 +0000
Manifest next update:     Mon 26 Jan 2026 15:28:00 +0000
Files and hashes:         1: 3133382e3132322e34342e302f32322d3332203d3e20323634333135.roa (hash: /7QCn7F15gVDL46tm6gVsPYtNwIkAxryJGBHyUGpsvE=)
                          2: 66A56D870457AAEA1EED831D71D318FB7DA99B42.crl (hash: D5vK1OrTJCtcd/NVPwSZGTYgSDeO1ssNy/ZsApgTyPQ=)
                          3: 323830343a323566383a3a2f33322d313238203d3e20323634333135.roa (hash: 1KthrIa60igSCZtKVf+DVJcgC6oFsB1IOVzRTY1jw9s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/66A56D870457AAEA1EED831D71D318FB7DA99B42.crl
                          rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/66A56D870457AAEA1EED831D71D318FB7DA99B42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66A56D870457AAEA1EED831D71D318FB7DA99B42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:2c:43:37:37:ed:db:05:75:70:22:e9:e3:b7:2a:87:c5:51:67:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66A56D870457AAEA1EED831D71D318FB7DA99B42
        Validity
            Not Before: Jan 25 13:24:00 2026 GMT
            Not After : Jan 26 15:28:00 2026 GMT
        Subject: CN=D28ED723CF15EAA8DE9151E37709507EB9BFF135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:50:2f:84:fe:13:2e:6b:b1:5f:11:ef:4f:3e:
                    6c:7e:24:fc:a2:30:a3:24:bd:1f:79:97:34:c0:87:
                    90:56:50:7b:70:dc:48:17:ac:23:cd:f4:d4:d1:60:
                    00:88:a8:9f:3a:1d:30:19:9c:24:39:49:0a:58:82:
                    ec:ba:d0:97:ee:db:4f:80:e0:d0:c7:e7:af:2a:89:
                    d0:fb:84:27:62:c4:60:30:4c:0e:07:6a:89:1a:d8:
                    e4:8f:1f:eb:f5:fd:e4:8a:f5:3e:a0:1c:53:55:e2:
                    ab:64:ec:04:83:ff:5e:1b:dd:30:4a:fc:36:f6:8d:
                    35:7e:fc:67:ac:4d:d4:ab:56:b5:11:47:26:6f:d4:
                    27:d3:60:f8:50:5e:e9:f5:7a:4a:b1:b1:de:1d:87:
                    be:d4:eb:46:6c:b7:7a:9f:08:98:cd:e7:32:58:06:
                    bf:b8:a2:6c:15:a3:00:04:b3:26:70:60:cb:21:a0:
                    52:c9:e4:1f:f0:7e:79:f0:8e:3d:fa:df:ae:9e:6a:
                    cc:a0:f7:4f:38:6a:46:e2:ca:11:40:53:e7:2d:bd:
                    02:20:87:36:77:f6:d5:67:fe:3b:7b:aa:1a:92:c7:
                    eb:79:48:e8:56:b4:c5:b1:6f:ce:e6:59:3d:89:4e:
                    2c:4c:f8:3a:5e:79:3a:6e:83:7a:35:dd:19:9e:d2:
                    8b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:8E:D7:23:CF:15:EA:A8:DE:91:51:E3:77:09:50:7E:B9:BF:F1:35
            X509v3 Authority Key Identifier:
                keyid:66:A5:6D:87:04:57:AA:EA:1E:ED:83:1D:71:D3:18:FB:7D:A9:9B:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/66A56D870457AAEA1EED831D71D318FB7DA99B42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66A56D870457AAEA1EED831D71D318FB7DA99B42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/66A56D870457AAEA1EED831D71D318FB7DA99B42.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:a7:99:1a:98:aa:bb:44:99:92:ca:34:1f:47:a1:3e:89:74:
         67:82:e5:0b:1e:fc:39:3b:16:97:81:e6:19:5a:cf:76:6d:ff:
         bd:fd:bd:d1:9e:19:70:0f:6e:20:cd:8a:13:e6:9c:64:07:63:
         3f:54:a6:b9:8b:14:8e:0c:75:8f:71:4a:aa:d9:f4:b0:a8:fe:
         64:53:2e:0e:aa:f0:53:3b:3b:dc:17:90:17:9d:69:6b:b7:d9:
         0f:e9:54:3d:f1:b8:cf:03:80:c1:de:72:8c:32:ab:56:48:07:
         81:b2:9f:32:5e:b6:67:c4:fe:f3:f0:4a:26:cb:d2:a4:7a:e6:
         9b:58:ab:dc:49:93:7b:57:52:b6:c5:8f:b4:17:b1:7e:24:e5:
         f1:1e:c5:f8:09:8e:c8:e5:89:09:99:ab:fd:cf:75:7e:27:40:
         be:38:54:59:d2:a8:59:21:0c:3d:15:1d:81:84:5b:69:05:f8:
         4e:8c:30:8a:36:fe:3a:25:24:1d:47:92:bf:3a:1e:0f:13:20:
         54:14:64:52:bf:0a:85:e3:c5:53:a2:d9:08:3e:16:90:fa:af:
         e1:ee:37:3a:78:34:87:0e:02:c9:33:bf:ea:2e:15:5b:a4:bf:
         03:93:ce:cf:4d:78:95:ef:e1:f3:16:81:07:0d:b7:d0:c6:04:
         73:47:f8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:13:50 2026 by rpki-client