This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6FFhxBJ55Jr7xJSkra3sTtjzFBspWkqxG6LAtPyyK4go/0/42F151EC6332FC2768F7C46E57772FDBBFA6D092.mft
File:                     42F151EC6332FC2768F7C46E57772FDBBFA6D092.mft (raw, json)
Hash identifier:          kf9kYIKRveYz8pB+qaQEkWxCFgKL+fLsG+nOe98Yz3U=
Subject key identifier:   DE:A2:AD:16:3B:CD:B8:BF:87:AE:0B:A7:42:1F:B4:F7:46:27:AD:AD
Authority key identifier: 42:F1:51:EC:63:32:FC:27:68:F7:C4:6E:57:77:2F:DB:BF:A6:D0:92
Certificate issuer:       /CN=42F151EC6332FC2768F7C46E57772FDBBFA6D092
Certificate serial:       3B7BA846324BCC00039014269E37F693F7D51CDB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42F151EC6332FC2768F7C46E57772FDBBFA6D092.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FFhxBJ55Jr7xJSkra3sTtjzFBspWkqxG6LAtPyyK4go/0/42F151EC6332FC2768F7C46E57772FDBBFA6D092.mft
Manifest number:          49
Signing time:             Sun 25 Jan 2026 12:49:31 +0000
Manifest this update:     Sun 25 Jan 2026 12:44:31 +0000
Manifest next update:     Mon 26 Jan 2026 13:51:31 +0000
Files and hashes:         1: 3137372e38342e3234302e302f32312d3332203d3e20323632353934.roa (hash: 3zB2FSeh+NJPJNGWiVbuq5aynYc1XkNU14DQAsUk4NQ=)
                          2: 42F151EC6332FC2768F7C46E57772FDBBFA6D092.crl (hash: VhqZPd0KwZDDnMlBMA/YNv1zK90bSuneNWQ8K3YqYZE=)
                          3: 323830343a3638633a3a2f33322d313238203d3e20323632353934.roa (hash: a9uSBnVmhWL+rAy+roz4Y7RFXYsRevtEOedLhHqfF08=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6FFhxBJ55Jr7xJSkra3sTtjzFBspWkqxG6LAtPyyK4go/0/42F151EC6332FC2768F7C46E57772FDBBFA6D092.crl
                          rsync://rpki-repo.registro.br/repo/6FFhxBJ55Jr7xJSkra3sTtjzFBspWkqxG6LAtPyyK4go/0/42F151EC6332FC2768F7C46E57772FDBBFA6D092.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42F151EC6332FC2768F7C46E57772FDBBFA6D092.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:51:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:7b:a8:46:32:4b:cc:00:03:90:14:26:9e:37:f6:93:f7:d5:1c:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42F151EC6332FC2768F7C46E57772FDBBFA6D092
        Validity
            Not Before: Jan 25 12:44:31 2026 GMT
            Not After : Jan 26 13:51:31 2026 GMT
        Subject: CN=DEA2AD163BCDB8BF87AE0BA7421FB4F74627ADAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ee:e3:4d:0b:1b:e8:7e:6a:8f:9a:bd:9c:ab:
                    21:d8:cb:48:73:8f:a1:1a:a0:e8:c2:99:3a:4a:19:
                    1a:28:c8:b7:c4:d5:b6:0f:63:54:8a:fb:3b:79:a2:
                    a9:55:8b:97:6b:53:c3:32:24:aa:39:47:b9:21:23:
                    63:d0:dd:c3:7c:b6:9e:f5:88:fb:44:ec:d1:be:ab:
                    76:d8:ec:47:8c:24:48:68:c8:85:54:f3:aa:25:1b:
                    80:58:7d:e5:6c:99:1b:65:93:57:93:92:1a:8e:b0:
                    73:da:e9:a4:04:d1:cf:fe:1c:5e:79:8c:72:d3:e1:
                    87:1e:d5:2a:43:93:68:70:61:4c:d4:c2:8e:48:a8:
                    4f:41:00:35:93:e7:31:61:6d:2f:04:95:dc:1c:b4:
                    7f:25:cb:c8:27:72:1c:41:19:62:05:2e:aa:1c:cd:
                    17:d6:d2:5c:03:e2:6b:92:84:df:04:4f:6f:5c:e0:
                    8e:7a:6a:64:77:df:a3:5a:ab:2f:2b:ed:67:e5:f1:
                    8b:ba:c2:c1:12:d3:23:f6:93:32:db:2a:db:e2:df:
                    31:9e:01:fa:0b:78:3b:8e:9e:e1:66:4a:1b:fc:dc:
                    32:03:14:33:eb:d7:17:62:4a:55:cb:92:31:96:e3:
                    93:52:c5:2c:90:dc:bc:14:9d:45:81:e2:a8:7b:82:
                    76:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A2:AD:16:3B:CD:B8:BF:87:AE:0B:A7:42:1F:B4:F7:46:27:AD:AD
            X509v3 Authority Key Identifier:
                keyid:42:F1:51:EC:63:32:FC:27:68:F7:C4:6E:57:77:2F:DB:BF:A6:D0:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FFhxBJ55Jr7xJSkra3sTtjzFBspWkqxG6LAtPyyK4go/0/42F151EC6332FC2768F7C46E57772FDBBFA6D092.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42F151EC6332FC2768F7C46E57772FDBBFA6D092.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FFhxBJ55Jr7xJSkra3sTtjzFBspWkqxG6LAtPyyK4go/0/42F151EC6332FC2768F7C46E57772FDBBFA6D092.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:0f:42:6b:63:d3:d9:8f:40:8e:a4:71:cd:bb:be:9b:fb:23:
         f0:e8:de:b0:eb:0f:15:f0:bd:26:6d:12:a8:cc:2c:4e:dc:d8:
         86:7d:ef:1c:37:54:c8:f1:bd:35:db:21:d3:36:5b:12:ad:b4:
         e8:bc:dd:5d:b4:82:e6:72:ad:b9:5b:32:c9:b0:d5:4d:dc:30:
         6a:68:d9:c4:34:69:5c:60:e0:be:d6:6e:89:07:f8:d4:47:a5:
         89:0d:f7:f1:95:ea:58:e6:29:50:b4:f3:3e:4f:1c:14:10:77:
         a6:25:13:5e:60:7d:67:76:2a:75:05:93:3a:b5:20:69:f6:d5:
         a1:5a:01:36:5c:c8:6f:10:3f:1c:c6:44:8f:84:54:8a:5a:4a:
         1a:b3:9b:c0:a4:88:e3:25:51:98:f1:f6:96:4b:c1:43:7f:10:
         7b:49:36:2c:ad:1f:b9:b0:ab:c3:fd:e7:e3:04:54:47:b8:6a:
         14:da:b6:ed:1c:20:cd:aa:15:f4:58:65:7f:11:09:b4:b5:5c:
         9d:0e:78:77:55:dd:94:24:e4:87:e1:e5:6e:8f:82:86:18:c4:
         dd:10:1c:af:90:a1:d9:a6:4c:3f:b8:88:5e:e2:9d:98:31:5d:
         52:2f:e3:9b:0b:d6:5d:43:48:50:24:78:16:18:eb:33:7c:ad:
         df:87:1e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:54:49 2026 by rpki-client