This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/068991FC2FF257F34E828050A9B08B36CB649BE0.mft
File:                     068991FC2FF257F34E828050A9B08B36CB649BE0.mft (raw, json)
Hash identifier:          mMUI062Y9oykcJRgeXd/wQ4Ysm7N0kBtEJCWRkWTF8w=
Subject key identifier:   D3:ED:AF:59:B0:36:7C:C9:5B:20:F8:EE:C8:ED:87:88:C0:63:CE:4E
Authority key identifier: 06:89:91:FC:2F:F2:57:F3:4E:82:80:50:A9:B0:8B:36:CB:64:9B:E0
Certificate issuer:       /CN=068991FC2FF257F34E828050A9B08B36CB649BE0
Certificate serial:       650E79152A37D0214E89996789ED1A84991FCE13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068991FC2FF257F34E828050A9B08B36CB649BE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/068991FC2FF257F34E828050A9B08B36CB649BE0.mft
Manifest number:          05
Signing time:             Mon 26 Jan 2026 02:59:00 +0000
Manifest this update:     Mon 26 Jan 2026 02:54:00 +0000
Manifest next update:     Tue 27 Jan 2026 03:46:00 +0000
Files and hashes:         1: 3136342e3136332e3130352e302f32342d3234203d3e20323636393631.roa (hash: KTQqtQcgbA8p5ixe8JP0wf7DPCi4Nx5dbFTx95Hru0A=)
                          2: 3136342e3136332e3130362e302f32342d3234203d3e20323636393631.roa (hash: wbkw7HM2O6y513p4q8v8Re3lN11iAvVM1DbUk/lK7Hs=)
                          3: 068991FC2FF257F34E828050A9B08B36CB649BE0.crl (hash: jG3rldpvpDYRaVXupgM+184ocsYv+8HV2vUI1lgI23w=)
                          4: 34352e3232362e37322e302f32342d3234203d3e20323636393631.roa (hash: X6rT+TsDkD4an/019dcvH197zaHEuUmepHnLZ1ZwbI4=)
                          5: 3136342e3136332e3130342e302f32322d3232203d3e20323636393631.roa (hash: fHQfnUHqttENf+sCFB0GZhFbK6GCDGJjo0140JKqYPU=)
                          6: 34352e3232362e37322e302f32322d3232203d3e20323636393631.roa (hash: 9FJFoRLmZ+TcLT9iILVQx9EK62ZcdbhSteyJ97JR1Tg=)
                          7: 34352e3232362e37332e302f32342d3234203d3e20323636393631.roa (hash: Wr7jLC4Of4OmSMjAOib7JFoVHVLiA6x0QcZC1oT4LUU=)
                          8: 34352e3232362e37342e302f32342d3234203d3e20323636393631.roa (hash: wZ7fymRUzBPm7Qc+Yu6m0OcoKLtlkkX93Ko1XdrzJAQ=)
                          9: 34352e3232362e37352e302f32342d3234203d3e20323636393631.roa (hash: 1ajtWrz8WgPJxujKDvXTL/UknHfJ7oXq6Km9b+fKAzA=)
                          10: 3136342e3136332e3130342e302f32342d3234203d3e20323636393631.roa (hash: hEK0eXgAsOyiBInNwyCXf/rjEsj9umyamAycOvrIsDQ=)
                          11: 323830343a343630303a3a2f33322d3332203d3e20323636393631.roa (hash: Sq1S0YjZntH109BjZiU3x0FkoB91l0rX/6K5UER/jb8=)
                          12: 3136342e3136332e3130372e302f32342d3234203d3e20323636393631.roa (hash: SY/XyFydfyVNfqtvel353lyhkd4a20k1iMgYdw99oMA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/068991FC2FF257F34E828050A9B08B36CB649BE0.crl
                          rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/068991FC2FF257F34E828050A9B08B36CB649BE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068991FC2FF257F34E828050A9B08B36CB649BE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 03:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:0e:79:15:2a:37:d0:21:4e:89:99:67:89:ed:1a:84:99:1f:ce:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=068991FC2FF257F34E828050A9B08B36CB649BE0
        Validity
            Not Before: Jan 26 02:54:00 2026 GMT
            Not After : Jan 27 03:46:00 2026 GMT
        Subject: CN=D3EDAF59B0367CC95B20F8EEC8ED8788C063CE4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8a:1d:5a:f9:96:ea:dc:e7:04:ad:4c:2b:76:
                    22:81:6c:ed:8a:39:c0:72:30:22:56:30:64:55:0b:
                    26:2c:d6:ef:2b:9d:35:1a:ce:f0:4a:0c:a6:2a:89:
                    df:89:d4:04:e2:b5:64:48:9b:f5:33:7d:e2:db:30:
                    c4:ca:9f:9b:f3:89:86:45:60:62:9b:f5:7d:66:76:
                    47:e9:b9:d4:09:7c:9a:20:16:ad:08:0f:d0:19:2f:
                    65:c8:0b:90:94:d5:a4:2b:9b:ae:11:f9:15:63:20:
                    87:a6:ec:16:94:19:46:63:06:9e:9f:b0:af:26:58:
                    da:63:99:ad:39:0c:4e:ec:3b:12:7c:08:ea:c2:8a:
                    4b:54:76:db:8a:e5:f7:8b:88:ad:a5:b6:8e:2e:09:
                    6c:fa:3d:73:e6:22:ca:b5:27:77:18:58:90:31:c3:
                    f4:47:50:02:b3:06:d6:76:f3:5a:01:cb:66:99:61:
                    49:b4:72:85:63:61:6b:01:af:2f:11:d1:f1:77:86:
                    92:46:00:b3:fb:68:e1:88:21:5b:0c:f2:bf:83:dc:
                    27:65:a2:7c:1d:06:63:22:e6:9e:f3:7d:e7:38:94:
                    61:d9:2b:4f:a7:09:77:3d:6a:ab:cb:8f:66:25:25:
                    12:b9:c3:f6:51:f8:b1:cf:97:26:c6:e0:6a:3e:37:
                    f0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:ED:AF:59:B0:36:7C:C9:5B:20:F8:EE:C8:ED:87:88:C0:63:CE:4E
            X509v3 Authority Key Identifier:
                keyid:06:89:91:FC:2F:F2:57:F3:4E:82:80:50:A9:B0:8B:36:CB:64:9B:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/068991FC2FF257F34E828050A9B08B36CB649BE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068991FC2FF257F34E828050A9B08B36CB649BE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/068991FC2FF257F34E828050A9B08B36CB649BE0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f9:17:b0:d9:76:dd:76:2d:b4:28:24:57:76:1f:fb:ae:d7:
         24:1b:73:f6:77:ef:75:6b:b4:db:ac:0b:2b:3c:2c:70:92:35:
         6a:fa:12:c7:91:58:0f:dc:58:5f:fb:91:e6:fb:91:81:c1:67:
         b7:93:5c:32:69:47:21:be:ab:51:99:f4:70:7a:e6:4d:86:6a:
         7d:86:e9:df:20:40:61:95:e1:ed:7e:9c:1e:9c:a9:e9:26:8c:
         48:00:2b:b2:b5:d4:03:bd:84:23:bf:97:8b:69:4f:8f:c2:74:
         a9:b4:ed:86:24:8c:fc:62:d4:72:c6:12:63:46:d8:2f:df:28:
         16:41:00:e6:0c:01:38:bd:07:f8:10:71:ee:81:08:da:88:89:
         46:bb:99:f0:2b:22:69:66:31:2c:f3:ea:ca:c3:79:ea:85:81:
         c1:23:d7:7e:61:4a:86:3d:96:09:43:47:ee:ed:af:8c:ce:f0:
         fc:c3:79:cd:6b:5c:f4:bd:0e:c9:64:d1:58:dd:d8:3b:63:19:
         b0:3d:09:45:4f:6b:a6:1f:b2:fa:43:3b:bc:3a:62:ba:ea:76:
         5f:9a:d9:40:73:2c:dd:bf:6c:6d:24:c7:89:e2:e4:cd:c7:b5:
         44:48:8b:87:58:75:b7:72:bc:e2:e0:7d:7d:cd:6f:9e:ac:8f:
         c3:c5:11:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:58:02 2026 by rpki-client