This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.mft
File:                     BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.mft (raw, json)
Hash identifier:          Dx+Li2UCFryrCOFL7jriPM+fx6nCEA81DcYedXKhkJA=
Subject key identifier:   8A:22:02:16:95:C4:F9:40:6C:96:B2:38:38:5F:FF:D0:79:CA:53:4B
Authority key identifier: BD:E7:57:A6:7F:5F:D4:AE:77:93:B2:38:AC:B9:73:05:6E:9B:1E:C4
Certificate issuer:       /CN=BDE757A67F5FD4AE7793B238ACB973056E9B1EC4
Certificate serial:       4955996A54426A02EBE84D92B32996D8CDA11C62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.mft
Manifest number:          32
Signing time:             Sun 25 Jan 2026 16:35:56 +0000
Manifest this update:     Sun 25 Jan 2026 16:30:56 +0000
Manifest next update:     Mon 26 Jan 2026 20:01:56 +0000
Files and hashes:         1: 323830343a6332633a3a2f33322d313238203d3e203238313931.roa (hash: DOPUXCHzSg+B3KrVTaoa/cCsDyL4h9g88EsNGnUalsc=)
                          2: 3138362e3139332e3137362e302f32302d3332203d3e203238313931.roa (hash: oUZXNFb2GR6UUeRTfeQToLXwsS/pEsCqQogh7JXARIY=)
                          3: 3138392e39302e33322e302f32302d3332203d3e203238313931.roa (hash: Tnxet1B56KRHDgiPUTdAQYrJWkjqMH/9nPrrsCnQKlQ=)
                          4: BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.crl (hash: tEvOzQXR9lHzY9zcgNWMxDqI9OIMhyxvqYlGnvriZf8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.crl
                          rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 20:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:55:99:6a:54:42:6a:02:eb:e8:4d:92:b3:29:96:d8:cd:a1:1c:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDE757A67F5FD4AE7793B238ACB973056E9B1EC4
        Validity
            Not Before: Jan 25 16:30:56 2026 GMT
            Not After : Jan 26 20:01:56 2026 GMT
        Subject: CN=8A22021695C4F9406C96B238385FFFD079CA534B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ed:45:72:35:00:1b:dd:44:c5:f5:13:10:d7:
                    00:cb:41:df:dc:1e:4a:55:7b:d3:ff:5e:8b:3f:00:
                    37:b6:f0:7b:19:81:d2:dc:2c:42:7b:de:ea:a4:cb:
                    bb:69:b3:82:7a:ae:7d:ad:44:fb:96:1c:43:09:27:
                    a1:b0:23:30:90:cf:07:04:17:86:c5:58:85:ff:9e:
                    c8:b7:6c:de:47:75:6c:78:e4:2c:ae:0c:e8:35:57:
                    76:ba:0e:e9:f2:02:22:80:1c:35:86:63:e9:e5:41:
                    6a:67:14:c3:dc:63:03:72:9b:40:e9:e6:fc:19:c6:
                    15:fd:72:65:60:78:2b:7e:44:f5:af:f1:66:43:ae:
                    51:2e:45:72:2d:44:84:da:f3:35:bf:40:cb:f0:0b:
                    3f:12:9d:6e:3b:78:c4:50:84:72:ca:c0:7e:ed:06:
                    ce:e8:9d:40:2a:23:da:12:bd:0c:f3:85:08:67:ca:
                    d2:67:5a:d2:30:c4:3d:f7:97:03:24:34:2a:de:b1:
                    0d:b5:85:28:35:05:33:bb:0d:8f:b4:99:92:0a:04:
                    39:e3:21:e1:32:d7:1a:e2:a6:c3:b2:51:82:32:02:
                    2c:2f:bd:0b:d3:bc:2d:a1:76:f2:f8:0b:7e:4e:2c:
                    fb:0b:f2:48:74:ee:dd:b9:e6:ec:f0:f7:53:70:e6:
                    9a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:22:02:16:95:C4:F9:40:6C:96:B2:38:38:5F:FF:D0:79:CA:53:4B
            X509v3 Authority Key Identifier:
                keyid:BD:E7:57:A6:7F:5F:D4:AE:77:93:B2:38:AC:B9:73:05:6E:9B:1E:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:2c:1b:16:af:45:53:7b:74:d1:85:e0:33:31:a6:6a:7d:45:
         70:c1:d0:5a:70:29:40:0d:d3:22:0a:cf:74:84:69:5a:69:e7:
         a0:bf:bc:25:d7:5c:bc:dc:b9:8f:31:ba:23:36:73:e6:f8:eb:
         43:da:a4:6b:02:1e:a9:91:49:c0:74:8e:50:ba:0d:57:c3:6e:
         51:36:32:52:d1:7c:06:c5:88:e6:35:64:26:be:a0:f7:fb:01:
         f6:d3:f0:52:f4:19:04:53:e9:eb:ab:f4:52:2f:d2:8c:fc:34:
         da:23:33:53:ec:8d:51:6a:72:70:41:80:74:ea:b2:98:c8:34:
         04:b5:b4:cd:c9:61:0b:06:96:9b:55:2b:8d:84:65:85:88:c3:
         64:1d:f1:97:04:fe:ab:e2:c0:28:53:8b:b4:f2:49:d9:f4:4e:
         44:47:0f:0f:43:12:8e:f5:bd:f0:10:10:c4:c4:8b:c6:05:70:
         f7:9e:ba:31:22:08:81:40:59:75:4e:b5:1d:01:80:71:08:66:
         a8:cf:7f:c0:c9:2f:ea:22:e1:3f:4d:a1:ab:b0:ff:ae:42:07:
         ce:8d:82:36:39:18:ba:37:2a:39:30:e9:ca:67:fe:a5:61:12:
         2e:9a:9c:82:ac:eb:e9:9b:95:44:11:ab:5d:75:25:87:2d:61:
         c0:cb:aa:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:52:43 2026 by rpki-client