This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/2A6585BE340D4347071D6C4483B0834A82A049D4.mft
File:                     2A6585BE340D4347071D6C4483B0834A82A049D4.mft (raw, json)
Hash identifier:          VBMRXj1IzAvzy5aT0LPOVl+aIaEhzBaBIj1Qk4hgoD8=
Subject key identifier:   0A:24:CA:4C:2C:1D:F8:3D:14:CB:C9:7E:20:F9:C4:D4:5E:4C:95:1F
Authority key identifier: 2A:65:85:BE:34:0D:43:47:07:1D:6C:44:83:B0:83:4A:82:A0:49:D4
Certificate issuer:       /CN=2A6585BE340D4347071D6C4483B0834A82A049D4
Certificate serial:       43D2A769FF1D761BF18D39659E9A2945EAD47682
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6585BE340D4347071D6C4483B0834A82A049D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/2A6585BE340D4347071D6C4483B0834A82A049D4.mft
Manifest number:          14
Signing time:             Sun 25 Jan 2026 11:20:07 +0000
Manifest this update:     Sun 25 Jan 2026 11:15:07 +0000
Manifest next update:     Mon 26 Jan 2026 14:35:07 +0000
Files and hashes:         1: 323830343a373432383a3a2f33322d313238203d3e20323730393632.roa (hash: 3JKEOIaKqirQOFpsQzkNRW/CJTipk1ADFZSGg2DGT70=)
                          2: 3138372e38342e3132302e302f32322d3332203d3e20323730393632.roa (hash: 7NU3Fzawk61TbtgcbkV3wU+Opr9IYhSscZrAICXCAmA=)
                          3: 2A6585BE340D4347071D6C4483B0834A82A049D4.crl (hash: kvPhuzlmGqk0OnJ7na1odNBhM7u7ZTxZiGxOWrmi8eI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/2A6585BE340D4347071D6C4483B0834A82A049D4.crl
                          rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/2A6585BE340D4347071D6C4483B0834A82A049D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6585BE340D4347071D6C4483B0834A82A049D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 14:35:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:d2:a7:69:ff:1d:76:1b:f1:8d:39:65:9e:9a:29:45:ea:d4:76:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A6585BE340D4347071D6C4483B0834A82A049D4
        Validity
            Not Before: Jan 25 11:15:07 2026 GMT
            Not After : Jan 26 14:35:07 2026 GMT
        Subject: CN=0A24CA4C2C1DF83D14CBC97E20F9C4D45E4C951F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a4:f3:35:36:21:f5:54:b7:d4:d8:f8:5c:46:
                    78:6b:60:af:13:9b:e3:81:4b:c7:57:16:ff:4c:42:
                    29:49:25:47:72:0a:8d:7c:1f:d9:5b:11:93:03:1d:
                    b1:2a:be:c7:b8:4a:2e:6b:ed:ba:61:0b:32:93:88:
                    03:70:df:ce:70:1a:22:d1:0c:79:6d:8c:48:58:87:
                    a8:bd:2c:10:a2:4c:c5:1f:27:45:d1:49:5f:ff:02:
                    62:92:a7:c2:cf:2e:a7:06:9c:9a:89:aa:69:b2:18:
                    f4:19:ac:52:71:0b:ce:4a:61:75:d3:7f:26:0e:fb:
                    00:68:49:92:12:b0:92:4c:96:ad:15:31:73:d2:81:
                    63:d3:02:7c:d2:bb:fb:bd:9c:7b:e1:56:92:e8:72:
                    10:09:37:6d:76:38:a3:a9:b3:cc:bf:a6:7c:64:4d:
                    72:46:29:00:b5:55:a6:65:06:28:9b:1f:4c:e5:e3:
                    d3:20:25:25:77:5e:3d:7d:3f:ab:c4:e1:c5:36:ad:
                    0f:e6:eb:cc:90:32:ca:5f:d2:62:2f:15:7e:24:18:
                    52:93:3b:31:9a:31:9c:9d:10:20:a4:b3:06:70:0f:
                    9a:42:2b:04:33:9c:7a:0a:50:15:4d:a6:a1:38:c0:
                    b8:69:f1:04:c6:3f:53:0d:8d:b0:c4:9b:6f:1f:4b:
                    16:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:24:CA:4C:2C:1D:F8:3D:14:CB:C9:7E:20:F9:C4:D4:5E:4C:95:1F
            X509v3 Authority Key Identifier:
                keyid:2A:65:85:BE:34:0D:43:47:07:1D:6C:44:83:B0:83:4A:82:A0:49:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/2A6585BE340D4347071D6C4483B0834A82A049D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6585BE340D4347071D6C4483B0834A82A049D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/2A6585BE340D4347071D6C4483B0834A82A049D4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:ba:07:f5:b2:10:5b:06:dd:35:c8:7d:39:98:41:79:bb:18:
         24:03:74:e8:30:d4:da:b0:d3:a1:87:28:43:97:21:68:5c:9c:
         34:e5:9d:0f:35:ae:15:79:ae:af:03:0f:e8:4f:4c:81:b2:15:
         b9:b1:13:c9:7e:99:7c:f8:77:e5:d9:bc:39:05:5d:39:d5:be:
         58:37:71:c6:2b:8b:24:f6:cb:b1:2b:df:c2:51:3e:30:d8:6a:
         c6:6e:4e:1b:b7:4c:b3:5f:b1:f4:eb:18:a6:2c:92:81:b5:19:
         3c:39:10:27:50:e7:7c:77:c0:0c:19:4b:c4:a3:85:da:51:b6:
         dd:8d:ec:69:72:46:f1:6a:42:58:69:03:6c:d5:90:46:b7:44:
         54:64:00:dc:56:1e:67:ac:aa:e0:80:78:27:74:44:7d:bc:0f:
         ba:17:f7:5b:92:96:c8:23:ff:8a:04:31:a1:d9:9a:05:0f:53:
         d2:0e:d4:44:1f:52:0d:22:4e:88:cc:5f:11:ce:b8:ca:fc:2f:
         59:eb:27:43:0e:f2:48:f4:17:2b:a9:99:7a:4c:f2:28:5a:6b:
         75:f2:20:9e:e0:39:95:44:07:26:c9:98:b9:cd:09:a6:22:78:
         34:26:b4:de:06:b4:d2:24:ac:03:7e:79:ed:54:e7:b2:ed:d2:
         5f:fd:c6:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQ9Knaf8ddhvxjTllnpopRerUdoIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE2NTg1QkUzNDBENDM0NzA3MUQ2QzQ0ODNCMDgzNEE4
MkEwNDlENDAeFw0yNjAxMjUxMTE1MDdaFw0yNjAxMjYxNDM1MDdaMDMxMTAvBgNV
BAMTKDBBMjRDQTRDMkMxREY4M0QxNENCQzk3RTIwRjlDNEQ0NUU0Qzk1MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHpPM1NiH1VLfU2PhcRnhrYK8T
m+OBS8dXFv9MQilJJUdyCo18H9lbEZMDHbEqvse4Si5r7bphCzKTiANw385wGiLR
DHltjEhYh6i9LBCiTMUfJ0XRSV//AmKSp8LPLqcGnJqJqmmyGPQZrFJxC85KYXXT
fyYO+wBoSZISsJJMlq0VMXPSgWPTAnzSu/u9nHvhVpLochAJN212OKOps8y/pnxk
TXJGKQC1VaZlBiibH0zl49MgJSV3Xj19P6vE4cU2rQ/m68yQMspf0mIvFX4kGFKT
OzGaMZydECCkswZwD5pCKwQznHoKUBVNpqE4wLhp8QTGP1MNjbDEm28fSxbhAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUCiTKTCwd+D0Uy8l+IPnE1F5MlR8wHwYDVR0j
BBgwFoAUKmWFvjQNQ0cHHWxEg7CDSoKgSdQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNW5pdDNORFBLSGpINzFxTnlhZ1RWN3htR2M3ZUpXZEZFQ0Q3WTdXTHk3
MTUvMC8yQTY1ODVCRTM0MEQ0MzQ3MDcxRDZDNDQ4M0IwODM0QTgyQTA0OUQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNjU4NUJFMzQwRDQzNDcw
NzFENkM0NDgzQjA4MzRBODJBMDQ5RDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NW5pdDNORFBLSGpINzFxTnlhZ1RWN3htR2M3ZUpXZEZFQ0Q3WTdXTHk3MTUvMC8y
QTY1ODVCRTM0MEQ0MzQ3MDcxRDZDNDQ4M0IwODM0QTgyQTA0OUQ0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANLoH9bIQWwbdNch9OZhBebsYJAN06DDU2rDToYcoQ5chaFycNOWdDzWuFXmu
rwMP6E9MgbIVubETyX6ZfPh35dm8OQVdOdW+WDdxxiuLJPbLsSvfwlE+MNhqxm5O
G7dMs1+x9OsYpiySgbUZPDkQJ1DnfHfADBlLxKOF2lG23Y3saXJG8WpCWGkDbNWQ
RrdEVGQA3FYeZ6yq4IB4J3REfbwPuhf3W5KWyCP/igQxodmaBQ9T0g7URB9SDSJO
iMxfEc64yvwvWesnQw7ySPQXK6mZekzyKFprdfIgnuA5lUQHJsmYuc0JpiJ4NCa0
3ga00iSsA3557VTnsu3SX/3GBA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 07:35:59 2026 by rpki-client