This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.mft
File:                     42CDD454B3E8670C26A58056A69FE952D8C533F3.mft (raw, json)
Hash identifier:          t0QUmuLuHwVhfbAaGT0wG6XCafTemo+70ftTtnneh8M=
Subject key identifier:   44:55:DB:C5:21:CD:95:FE:34:10:A2:7C:42:5B:88:B6:70:2C:45:88
Authority key identifier: 42:CD:D4:54:B3:E8:67:0C:26:A5:80:56:A6:9F:E9:52:D8:C5:33:F3
Certificate issuer:       /CN=42CDD454B3E8670C26A58056A69FE952D8C533F3
Certificate serial:       7FA2C55E9E54EBB52A9EBD90ACA27516DDCAB174
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CDD454B3E8670C26A58056A69FE952D8C533F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.mft
Manifest number:          64
Signing time:             Sun 25 Jan 2026 07:17:55 +0000
Manifest this update:     Sun 25 Jan 2026 07:12:55 +0000
Manifest next update:     Mon 26 Jan 2026 09:30:55 +0000
Files and hashes:         1: 323830313a38303a336538303a3a2f34382d313238203d3e20323731363430.roa (hash: mbujdo6DlwAmJYjBhooo5Os0om9AiyEjErzRsPs5DBo=)
                          2: 3230302e3233352e3132382e302f31372d3332203d3e20323731363430.roa (hash: WZuTtUN09mCdVgOP/CQKKArbd1YguwxIubngi24thqs=)
                          3: 42CDD454B3E8670C26A58056A69FE952D8C533F3.crl (hash: ec31ilEqmS0js8L7g7mdRsBPAMz3fMrHDZe2i/Rk/tw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.crl
                          rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CDD454B3E8670C26A58056A69FE952D8C533F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 09:30:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a2:c5:5e:9e:54:eb:b5:2a:9e:bd:90:ac:a2:75:16:dd:ca:b1:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42CDD454B3E8670C26A58056A69FE952D8C533F3
        Validity
            Not Before: Jan 25 07:12:55 2026 GMT
            Not After : Jan 26 09:30:55 2026 GMT
        Subject: CN=4455DBC521CD95FE3410A27C425B88B6702C4588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:27:f5:97:67:5d:a8:73:65:ea:ee:d2:a6:92:
                    40:d7:be:84:04:c7:94:f3:75:b2:ad:ab:70:84:02:
                    32:54:20:a6:c1:9d:f8:93:4d:db:d2:5f:c4:5f:f6:
                    cd:43:d0:75:6e:30:00:32:20:86:2c:87:ee:13:b0:
                    f8:93:cf:b0:ff:9d:31:fb:ab:14:02:69:ba:51:c4:
                    d4:70:6c:e8:9c:75:9c:cf:44:34:f2:27:86:47:d4:
                    0f:28:6a:5a:48:07:6c:93:6e:8c:eb:2d:fc:d6:42:
                    33:af:e5:2f:b4:86:0e:c7:fb:06:5d:ff:ba:e9:d2:
                    a8:9f:04:2a:76:a5:80:e4:6f:f9:b5:04:a4:8e:c4:
                    da:5c:2a:d6:72:bd:a8:9b:1c:fd:7a:41:79:48:c0:
                    16:04:40:fd:4a:48:4c:06:b6:09:c6:b0:f5:3c:4f:
                    0c:35:32:cc:f5:15:af:b1:90:f2:39:35:0a:1d:74:
                    af:d1:05:ea:ee:9d:c4:04:aa:af:f9:d2:ef:2b:2f:
                    a9:09:ea:03:58:44:18:38:58:d9:78:a1:1c:e9:84:
                    8c:a1:39:74:fe:77:d1:f6:47:94:99:23:e6:79:55:
                    f8:89:7c:61:86:2b:a0:d9:8d:8f:54:2f:67:ae:b6:
                    91:0f:e9:82:4e:4c:7b:cc:aa:0c:a1:6c:3e:72:b6:
                    c5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:55:DB:C5:21:CD:95:FE:34:10:A2:7C:42:5B:88:B6:70:2C:45:88
            X509v3 Authority Key Identifier:
                keyid:42:CD:D4:54:B3:E8:67:0C:26:A5:80:56:A6:9F:E9:52:D8:C5:33:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CDD454B3E8670C26A58056A69FE952D8C533F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:2d:ba:3f:fc:f3:4e:c6:5c:02:0b:74:2b:6e:2e:45:fe:e9:
         a4:b3:90:44:e2:7b:35:e4:bf:e7:7d:3a:c7:99:ae:47:28:18:
         a4:1e:41:d6:a6:90:6f:3a:9d:c7:95:52:a2:8b:8b:b9:bf:02:
         89:0c:9e:5e:00:4d:d5:1f:0c:fb:94:e2:04:c4:b9:9a:df:c0:
         a0:9a:94:a2:ce:65:5a:3a:92:c6:68:c4:c8:20:b9:2b:39:c8:
         68:f4:d5:39:b6:43:2a:41:33:1a:9a:fe:e5:a9:83:f1:fc:32:
         70:83:67:b4:9d:74:46:b9:cc:53:4c:8f:5b:52:8b:a2:4a:1f:
         3b:63:77:24:5c:99:11:05:9a:d1:26:44:ae:87:b6:a7:6c:95:
         2b:b6:58:21:8f:f2:63:f0:5e:e2:46:fe:81:d0:1a:b9:3d:bb:
         d7:ba:1c:e5:cf:72:53:55:04:57:0c:45:8a:80:a1:61:8a:49:
         1c:70:f7:82:69:36:e3:45:3f:36:7c:a5:57:be:ba:98:99:2a:
         23:c0:d8:d4:c6:0c:96:ec:1d:65:5d:cd:6f:25:a9:39:9c:a7:
         64:19:5b:e4:42:06:44:c1:b5:fd:0f:6c:55:8c:ce:25:6b:72:
         6a:c1:0f:10:55:9b:44:8e:36:a3:f0:59:37:7a:42:f1:ed:c0:
         45:fa:3a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----