This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/0/E9D872ED250D3E92E59CA13EB7DE8A5B095DB686.mft
File:                     E9D872ED250D3E92E59CA13EB7DE8A5B095DB686.mft (raw, json)
Hash identifier:          UTclY6WPhxI0JTea/OSIA6DfnBjRcvox5cQMNy1DygI=
Subject key identifier:   E6:03:76:EA:5C:C4:5A:0A:70:94:00:8F:6A:C0:FB:0C:91:C5:07:52
Authority key identifier: E9:D8:72:ED:25:0D:3E:92:E5:9C:A1:3E:B7:DE:8A:5B:09:5D:B6:86
Certificate issuer:       /CN=E9D872ED250D3E92E59CA13EB7DE8A5B095DB686
Certificate serial:       49BE7FF38109A2233B963AE7A1B8A6DA0CC7AF94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9D872ED250D3E92E59CA13EB7DE8A5B095DB686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/0/E9D872ED250D3E92E59CA13EB7DE8A5B095DB686.mft
Manifest number:          24
Signing time:             Sun 25 Jan 2026 09:04:49 +0000
Manifest this update:     Sun 25 Jan 2026 08:59:49 +0000
Manifest next update:     Mon 26 Jan 2026 12:24:49 +0000
Files and hashes:         1: E9D872ED250D3E92E59CA13EB7DE8A5B095DB686.crl (hash: lC1GWzbOCTBrsRUoamHkWZjrQwlDriuqIdtTtDrNDwk=)
                          2: 34352e3137372e3134382e302f32322d3332203d3e20323638393938.roa (hash: 2MPAoCsWFJa4sZtN7DkgUa0Vl5eA+0Z8KsctNuq5WkY=)
                          3: 323830343a356465303a3a2f33322d313238203d3e20323638393938.roa (hash: 58zaA0K5Govfq6M37QjQE8oLv3I4lql94dhzS4TQjVY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/0/E9D872ED250D3E92E59CA13EB7DE8A5B095DB686.crl
                          rsync://rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/0/E9D872ED250D3E92E59CA13EB7DE8A5B095DB686.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9D872ED250D3E92E59CA13EB7DE8A5B095DB686.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 12:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:be:7f:f3:81:09:a2:23:3b:96:3a:e7:a1:b8:a6:da:0c:c7:af:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9D872ED250D3E92E59CA13EB7DE8A5B095DB686
        Validity
            Not Before: Jan 25 08:59:49 2026 GMT
            Not After : Jan 26 12:24:49 2026 GMT
        Subject: CN=E60376EA5CC45A0A7094008F6AC0FB0C91C50752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:d3:aa:e0:76:36:65:25:fa:92:03:c0:b4:a4:
                    b2:8f:e0:94:57:28:05:fb:4a:a9:57:88:4c:ee:02:
                    c3:50:4a:1d:ad:3a:72:54:c4:14:e7:b3:ac:39:e5:
                    db:73:27:9e:d1:b0:c7:e1:4c:fd:a3:3d:0a:8f:19:
                    b4:83:50:95:cb:2e:79:e4:c3:15:f5:ce:bf:bb:92:
                    fa:b0:a3:58:b5:89:3f:6d:1f:a7:0b:bc:a3:ce:38:
                    44:ab:53:82:c6:0b:7b:21:71:72:70:9c:0b:14:df:
                    01:f3:16:3c:80:9d:72:60:9c:84:54:83:3c:57:96:
                    00:cc:52:bf:ea:f6:b7:34:f0:bd:b5:fc:ce:9b:56:
                    44:da:2b:ab:13:ce:0d:f4:e4:fb:3f:48:3e:6c:25:
                    62:4d:22:11:50:cc:ed:80:8b:23:52:48:5c:89:15:
                    6f:6d:c7:86:03:d5:53:36:16:9a:5b:71:f1:1d:e7:
                    3a:bd:38:be:fa:98:2b:aa:f2:21:25:92:9b:11:59:
                    25:f6:e0:0e:40:8c:04:b6:aa:ab:0c:a8:91:dc:1c:
                    78:37:42:a5:cf:3f:7f:6d:8d:0b:dc:0b:3c:6e:11:
                    cf:1e:c8:1d:88:bc:6b:6f:db:00:21:47:df:b0:57:
                    33:94:8e:5b:37:15:24:cd:c8:f8:c7:01:0b:0d:00:
                    fe:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:03:76:EA:5C:C4:5A:0A:70:94:00:8F:6A:C0:FB:0C:91:C5:07:52
            X509v3 Authority Key Identifier:
                keyid:E9:D8:72:ED:25:0D:3E:92:E5:9C:A1:3E:B7:DE:8A:5B:09:5D:B6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/0/E9D872ED250D3E92E59CA13EB7DE8A5B095DB686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9D872ED250D3E92E59CA13EB7DE8A5B095DB686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/0/E9D872ED250D3E92E59CA13EB7DE8A5B095DB686.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:b6:f5:17:d9:1f:70:b1:29:51:31:b7:19:bb:e1:82:a0:39:
         53:bc:29:fb:0c:0e:2e:65:ac:bb:e6:c1:25:60:41:0a:8c:68:
         84:e0:77:95:9b:cd:4d:cf:06:a7:39:18:b4:28:b0:22:2d:02:
         13:5e:cc:53:74:90:97:e4:86:a7:45:f7:cb:97:c0:a1:c9:5a:
         76:19:24:23:3e:44:21:42:6f:42:cc:51:7b:42:ed:ac:8b:45:
         7f:1c:c0:eb:6a:b5:99:c3:97:24:0d:ae:4f:3c:53:4c:7b:84:
         18:6b:09:07:a3:87:80:6f:86:2c:44:5f:58:90:83:42:cc:7d:
         81:41:2f:a1:df:72:3e:6d:34:5f:e3:33:c8:38:6b:ab:93:90:
         ec:5d:15:77:d3:e8:a3:96:d7:bd:34:9b:30:82:b7:51:4d:98:
         a1:c1:dd:3b:c9:85:b9:96:ca:c2:8d:57:14:ef:17:87:7f:84:
         6c:3d:8c:36:6c:01:96:4c:f5:18:7f:8d:e1:8c:ab:51:53:d0:
         7d:a8:ea:14:1b:05:f6:e9:51:30:29:b9:40:f4:7d:c1:2f:53:
         52:f0:33:61:8f:dd:d4:76:26:12:d4:98:17:f0:94:3e:a0:ba:
         8a:dd:6a:f8:45:50:65:75:a4:b3:30:8a:13:a3:2f:b3:1d:96:
         7e:33:48:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:52:11 2026 by rpki-client