This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/43CC4EF545CF6D6E4A7D42B8BEBA5651743C8E74.mft
File:                     43CC4EF545CF6D6E4A7D42B8BEBA5651743C8E74.mft (raw, json)
Hash identifier:          2Zcp7oYoufxW2e5sPKhxsSFOaEqCkK7eAbfKXBcwKmE=
Subject key identifier:   67:DF:13:DC:F0:00:07:28:0F:75:40:10:7B:43:78:A8:56:9C:84:27
Authority key identifier: 43:CC:4E:F5:45:CF:6D:6E:4A:7D:42:B8:BE:BA:56:51:74:3C:8E:74
Certificate issuer:       /CN=43CC4EF545CF6D6E4A7D42B8BEBA5651743C8E74
Certificate serial:       6B18EFF675346E942B909EDA492B0D7DB6E7C6F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43CC4EF545CF6D6E4A7D42B8BEBA5651743C8E74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/43CC4EF545CF6D6E4A7D42B8BEBA5651743C8E74.mft
Manifest number:          1F
Signing time:             Sun 25 Jan 2026 08:38:58 +0000
Manifest this update:     Sun 25 Jan 2026 08:33:58 +0000
Manifest next update:     Mon 26 Jan 2026 12:33:58 +0000
Files and hashes:         1: 34352e3137342e32382e302f32322d3234203d3e20323638383336.roa (hash: 1MCs0HCugueOsWDOygTYmyNEJdXvXmDVEwldSJlCIKg=)
                          2: 43CC4EF545CF6D6E4A7D42B8BEBA5651743C8E74.crl (hash: mKeLE3purwLEomuX1LKQt1ehL13tlIXoWxOs3tOr5kY=)
                          3: 323830343a356235383a3a2f33322d3438203d3e20323638383336.roa (hash: iraN3shVsT5Zspdn5UkOF0vytVP3Djs+rfD0fnAUfT8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/43CC4EF545CF6D6E4A7D42B8BEBA5651743C8E74.crl
                          rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/43CC4EF545CF6D6E4A7D42B8BEBA5651743C8E74.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43CC4EF545CF6D6E4A7D42B8BEBA5651743C8E74.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 12:33:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:18:ef:f6:75:34:6e:94:2b:90:9e:da:49:2b:0d:7d:b6:e7:c6:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43CC4EF545CF6D6E4A7D42B8BEBA5651743C8E74
        Validity
            Not Before: Jan 25 08:33:58 2026 GMT
            Not After : Jan 26 12:33:58 2026 GMT
        Subject: CN=67DF13DCF00007280F7540107B4378A8569C8427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:80:f8:40:35:f1:7f:9e:dc:a8:19:7a:9d:1d:
                    6d:de:d4:ea:bc:1f:12:e6:a2:5d:c6:11:6c:55:75:
                    66:f0:35:84:b5:dc:0f:74:cc:ba:78:23:0c:ce:26:
                    93:53:71:c2:d0:c4:6e:1c:d0:bb:83:24:f7:5e:66:
                    84:35:ed:ee:7c:44:a2:35:c7:e7:5b:f4:84:88:5f:
                    ac:e4:d5:ae:b2:5c:a7:0c:f2:43:58:c7:89:fd:8c:
                    18:b4:2a:36:49:24:e4:ef:b9:7a:37:3d:6c:04:fe:
                    13:39:e0:30:20:65:3a:8d:4f:de:1f:ab:31:3a:ec:
                    64:66:29:9b:24:a8:3b:e5:80:9f:ea:af:cc:33:04:
                    9f:a6:54:b4:72:75:ae:1c:ed:1a:d4:b0:10:f8:c7:
                    25:ba:18:82:06:fa:55:81:97:d8:90:19:5f:c9:79:
                    15:0a:cb:48:f3:38:d8:59:cf:c7:03:0b:17:3a:c1:
                    19:34:0f:aa:9b:e5:c1:85:10:6d:46:18:a5:42:37:
                    de:62:c0:c1:77:90:d8:8e:50:0a:bc:7a:b9:7f:9a:
                    07:74:da:67:74:d1:a3:87:0c:eb:42:9d:02:99:3d:
                    36:c4:94:ca:3b:54:e8:5e:c6:3e:49:e9:b0:65:f5:
                    4d:4d:71:37:cc:5f:59:14:0f:aa:d6:9e:0b:41:5a:
                    98:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:DF:13:DC:F0:00:07:28:0F:75:40:10:7B:43:78:A8:56:9C:84:27
            X509v3 Authority Key Identifier:
                keyid:43:CC:4E:F5:45:CF:6D:6E:4A:7D:42:B8:BE:BA:56:51:74:3C:8E:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/43CC4EF545CF6D6E4A7D42B8BEBA5651743C8E74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43CC4EF545CF6D6E4A7D42B8BEBA5651743C8E74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/43CC4EF545CF6D6E4A7D42B8BEBA5651743C8E74.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:be:bb:73:54:7e:31:8e:e2:0f:04:8e:23:7d:3f:5e:c8:56:
         4b:2e:04:f2:f4:6c:50:22:54:7f:f0:4a:b6:66:c2:4a:ba:90:
         b3:63:14:be:b8:a0:e4:9b:e7:81:af:7f:e2:b5:df:fe:f8:4a:
         bb:ce:a9:b6:23:d8:8f:50:d5:58:1c:b1:65:f7:d1:25:f2:f2:
         d5:91:f6:f1:27:67:c9:68:1f:15:bc:c9:65:ec:c7:af:13:5e:
         ab:76:33:c9:7f:ec:3c:02:f4:d2:31:8c:71:e1:df:78:1e:dd:
         4a:03:a8:66:c1:e4:05:24:8a:4e:17:d5:d4:fd:5c:b9:96:96:
         71:27:42:6c:1c:30:9d:60:e9:0b:2d:db:b8:b3:8d:99:1f:b9:
         86:45:7d:0b:34:a9:5a:e7:a7:3c:79:15:f6:7a:2e:23:46:5d:
         b0:fa:ec:a0:52:f6:7c:a5:47:a1:c4:54:d8:c0:8d:6b:e8:a1:
         2a:3f:1a:45:16:ac:87:85:ef:86:38:d1:22:5a:c3:30:30:29:
         11:21:c1:c7:2f:21:77:cd:9d:b7:c9:75:5b:de:ec:2f:17:76:
         f1:ae:81:59:17:12:2d:c3:15:8b:74:ed:ca:72:fa:8a:32:8c:
         2f:b1:98:a0:5b:3d:27:38:d6:64:2e:8c:79:9b:f2:a6:24:b6:
         c2:3a:65:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:17:45 2026 by rpki-client