This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.mft
File:                     2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.mft (raw, json)
Hash identifier:          vE1lRVIvdU/nXPccJjnCSHpOcYZaphhc4fl3z73SFw0=
Subject key identifier:   2E:3C:7C:50:02:31:9E:60:AF:6A:82:D3:BD:49:ED:04:F6:95:ED:6E
Authority key identifier: 2D:FD:4B:E1:F9:27:C8:BE:F3:5D:FC:0E:99:76:94:31:71:A5:17:B1
Certificate issuer:       /CN=2DFD4BE1F927C8BEF35DFC0E9976943171A517B1
Certificate serial:       30AE1204A0DD92F8C3806F915B34F65674159564
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.mft
Manifest number:          ED
Signing time:             Sat 24 Jan 2026 22:58:32 +0000
Manifest this update:     Sat 24 Jan 2026 22:53:32 +0000
Manifest next update:     Mon 26 Jan 2026 00:20:32 +0000
Files and hashes:         1: 34352e3232372e3136382e302f32322d3234203d3e20323637303237.roa (hash: gY9FLBibYF5xfxYl0Nb9MQTIvah3Wu8qO7IYCcOhaFs=)
                          2: 2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.crl (hash: tNz7Of4Rz4mH1v4h0ez0x3d1d6WRzZFT0myraoV+0u8=)
                          3: 323830343a343730383a3a2f33322d3337203d3e20323637303237.roa (hash: U/9M15TeapksX8XUjds2E9NJq2AK4bxt/Wst1EkaNVc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.crl
                          rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 00:20:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ae:12:04:a0:dd:92:f8:c3:80:6f:91:5b:34:f6:56:74:15:95:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DFD4BE1F927C8BEF35DFC0E9976943171A517B1
        Validity
            Not Before: Jan 24 22:53:32 2026 GMT
            Not After : Jan 26 00:20:32 2026 GMT
        Subject: CN=2E3C7C5002319E60AF6A82D3BD49ED04F695ED6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:78:aa:c8:10:d0:a7:fc:bd:39:68:57:d2:45:
                    b5:32:2b:25:d6:39:6a:73:49:dc:2b:c0:4d:67:47:
                    51:cb:29:9a:56:34:fb:bd:99:67:c2:db:2f:30:fe:
                    8b:ff:b5:d3:f0:d4:38:5e:26:c3:7b:21:6f:ea:dd:
                    50:38:d3:42:fd:86:cf:2e:61:fc:e2:71:e7:0a:44:
                    4f:da:eb:31:a5:eb:89:45:f9:46:4f:10:ad:75:be:
                    c4:8b:cc:f5:83:c6:f3:92:0e:3b:77:71:2b:e8:5c:
                    0d:b9:4c:05:d5:41:d5:ae:41:fb:c1:dd:8f:92:cd:
                    36:20:9a:28:76:ed:e7:60:d2:2c:81:aa:8a:29:8e:
                    09:60:9f:bf:fe:5e:ca:9f:e8:6d:c1:94:ec:2a:3e:
                    7f:c0:a7:9a:cb:9a:7c:74:dd:91:00:d3:8c:99:a3:
                    d7:d2:78:b4:f4:aa:33:80:f5:34:8a:61:3c:43:9e:
                    39:fa:2e:da:70:83:63:5c:87:18:4f:21:94:db:d0:
                    c3:30:4b:b2:bb:c8:64:50:61:1a:c4:4d:af:a8:25:
                    0e:fc:0c:9d:a0:3b:84:0b:f2:de:fa:a1:fb:9b:a8:
                    b0:93:c5:39:e4:f7:0c:c9:fb:45:0b:12:1e:ec:7b:
                    df:40:fe:1f:87:e8:0e:63:c7:8d:07:71:07:8c:fa:
                    70:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:3C:7C:50:02:31:9E:60:AF:6A:82:D3:BD:49:ED:04:F6:95:ED:6E
            X509v3 Authority Key Identifier:
                keyid:2D:FD:4B:E1:F9:27:C8:BE:F3:5D:FC:0E:99:76:94:31:71:A5:17:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:8d:37:c5:76:1e:01:11:25:c1:a5:19:78:46:f8:8d:14:86:
         c8:56:39:73:2a:52:1b:1a:d8:09:14:69:d1:4d:1a:9d:35:a1:
         25:87:d8:21:9c:45:4d:fc:d7:d8:ca:99:a8:0e:74:4e:83:ea:
         6e:3e:aa:59:46:05:e4:7a:46:e9:c9:50:16:dc:60:76:a3:cf:
         d9:1c:a9:2f:44:bc:d4:9f:d7:21:89:5d:e5:1d:dc:99:9e:cd:
         4d:c0:98:49:e3:e6:2f:e5:12:8c:bf:5c:ca:62:53:e0:e9:51:
         5a:9a:17:44:9f:4c:1f:3d:a0:32:ca:50:4e:5d:d4:bb:da:d4:
         1e:87:58:04:58:7d:d8:d6:bc:2b:e2:ec:db:97:40:57:95:62:
         9e:3c:29:38:fc:de:23:f5:96:3f:fd:5a:16:c5:7f:f7:db:77:
         81:1a:84:8e:20:99:8b:63:4f:03:21:39:ef:1b:69:b4:eb:19:
         3e:06:92:5c:e0:f9:25:86:9b:ba:75:fc:06:b6:ea:cb:13:44:
         40:dc:c1:a0:5f:8a:c5:53:4e:45:88:68:80:17:62:38:30:f6:
         7d:f5:02:3a:6c:c2:02:48:9c:fc:9e:76:c9:2d:14:32:6b:31:
         79:2e:3e:2c:1a:e4:32:24:1a:34:7b:f7:9f:f7:40:45:04:f5:
         56:9f:59:05
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUMK4SBKDdkvjDgG+RWzT2VnQVlWQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkRGRDRCRTFGOTI3QzhCRUYzNURGQzBFOTk3Njk0MzE3
MUE1MTdCMTAeFw0yNjAxMjQyMjUzMzJaFw0yNjAxMjYwMDIwMzJaMDMxMTAvBgNV
BAMTKDJFM0M3QzUwMDIzMTlFNjBBRjZBODJEM0JENDlFRDA0RjY5NUVENkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqeKrIENCn/L05aFfSRbUyKyXW
OWpzSdwrwE1nR1HLKZpWNPu9mWfC2y8w/ov/tdPw1DheJsN7IW/q3VA400L9hs8u
YfzicecKRE/a6zGl64lF+UZPEK11vsSLzPWDxvOSDjt3cSvoXA25TAXVQdWuQfvB
3Y+SzTYgmih27edg0iyBqoopjglgn7/+Xsqf6G3BlOwqPn/Ap5rLmnx03ZEA04yZ
o9fSeLT0qjOA9TSKYTxDnjn6Ltpwg2NchxhPIZTb0MMwS7K7yGRQYRrETa+oJQ78
DJ2gO4QL8t76ofubqLCTxTnk9wzJ+0ULEh7se99A/h+H6A5jx40HcQeM+nCRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQULjx8UAIxnmCvaoLTvUntBPaV7W4wHwYDVR0j
BBgwFoAULf1L4fknyL7zXfwOmXaUMXGlF7EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXV1RFpxZ0xxWVBvdEVjZUJzbWNTNlNlTWR3cHlxWFZ1YWhodnJhV3RK
WXovMC8yREZENEJFMUY5MjdDOEJFRjM1REZDMEU5OTc2OTQzMTcxQTUxN0IxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJERkQ0QkUxRjkyN0M4QkVG
MzVERkMwRTk5NzY5NDMxNzFBNTE3QjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NXV1RFpxZ0xxWVBvdEVjZUJzbWNTNlNlTWR3cHlxWFZ1YWhodnJhV3RKWXovMC8y
REZENEJFMUY5MjdDOEJFRjM1REZDMEU5OTc2OTQzMTcxQTUxN0IxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJ403xXYeARElwaUZeEb4jRSGyFY5cypSGxrYCRRp0U0anTWhJYfYIZxFTfzX
2MqZqA50ToPqbj6qWUYF5HpG6clQFtxgdqPP2RypL0S81J/XIYld5R3cmZ7NTcCY
SePmL+USjL9cymJT4OlRWpoXRJ9MHz2gMspQTl3Uu9rUHodYBFh92Na8K+Ls25dA
V5VinjwpOPzeI/WWP/1aFsV/99t3gRqEjiCZi2NPAyE57xtptOsZPgaSXOD5JYab
unX8BrbqyxNEQNzBoF+KxVNORYhogBdiODD2ffUCOmzCAkic/J52yS0UMmsxeS4+
LBrkMiQaNHv3n/dARQT1Vp9ZBQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:56:07 2026 by rpki-client