This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft
File:                     A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft (raw, json)
Hash identifier:          snQQDKOsEKTacXkwAk1CxzN+hSO06noIXKZ/uADMvvY=
Subject key identifier:   2A:00:C5:03:88:78:6A:8F:85:2E:CB:06:B6:81:9E:A2:A4:7E:E3:5D
Authority key identifier: A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11
Certificate issuer:       /CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
Certificate serial:       62AD07AC334934050DD42322ACBB1AE12D2D5B74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft
Manifest number:          013B
Signing time:             Sun 25 Jan 2026 11:59:49 +0000
Manifest this update:     Sun 25 Jan 2026 11:54:49 +0000
Manifest next update:     Mon 26 Jan 2026 12:51:49 +0000
Files and hashes:         1: 323830343a353837383a383030303a3a2f33342d3334203d3e20323638313331.roa (hash: m6476XY9hw1HT0KFo3xqMgTPgV2DyCBCaY7VP3otwhE=)
                          2: 34352e3136392e3139302e302f32342d3234203d3e20323638313331.roa (hash: 1arKiTMmd2wiJhxrLN/csmN5OxeZEvisOYN30+Mb+zM=)
                          3: 34352e3136392e3139312e302f32342d3234203d3e20323638313331.roa (hash: YMF1WGUqO/koid6qkm4eWU5+384jv5Woh3UeAEtElo0=)
                          4: 323830343a353837383a3a2f33342d3334203d3e20323638313331.roa (hash: pD7uON0MR1cx9vrRl3bnWsw8Pci3XbwtAVzSZrjF0nU=)
                          5: 34352e3136392e3138382e302f32332d3233203d3e20323638313331.roa (hash: VMtWnY/47+9VSdifVKXNAHzknKkgZcf9Z5+e1w7prrA=)
                          6: A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl (hash: BogXTwgsUy1IM1V873nrhUVKmm7JOEslePD7R1YFwqw=)
                          7: 34352e3136392e3138392e302f32342d3234203d3e20323638313331.roa (hash: 76v3PwoFqjIvYhNGggm0A6GKqZidjpsE3qEBiwvNcVI=)
                          8: 34352e3136392e3139302e302f32332d3233203d3e20323638313331.roa (hash: gNfhoQu/TfDOi2RqItKVnvpLsxNGPBsfnb6MxhNe3qk=)
                          9: 34352e3136392e3138382e302f32322d3232203d3e20323638313331.roa (hash: 4ezrZSIPRM2pWqs0nvSc684pzx0RAIeuMtmRPXlLzec=)
                          10: 323830343a353837383a343030303a3a2f34382d3438203d3e20323638313331.roa (hash: ouhAyOcH2VayZfDA15PmGMIddBURZIqd8LmFxV/D8kg=)
                          11: 323830343a353837383a3a2f33322d3332203d3e20323638313331.roa (hash: o712cBG4hVGA//PBX0FB/svdi3YsE7E/rUiUf67iUFs=)
                          12: 323830343a353837383a323030303a3a2f33362d3336203d3e20323638313331.roa (hash: YLRZFFurNnhOHIp+/ksNrdmT9wg1MccOCRFRPdpkpZE=)
                          13: 323830343a353837383a343030303a3a2f33342d3334203d3e20323638313331.roa (hash: bec0x/Cqckg2a+aVdlOWK1zgbnr5jAeqZG2vSjYskV8=)
                          14: 323830343a353837383a633030303a3a2f33342d3334203d3e20323638313331.roa (hash: 1JBlkGMIGxMWY7LQTFqU4rMW/3V4sS50t4cD7k2sodI=)
                          15: 323830343a353837383a3a2f33332d3333203d3e20323638313331.roa (hash: vstmsY9Bxo51pO/q7iKPVEPpP1nhCTQDRYXv4ff95ZU=)
                          16: 323830343a353837383a383030303a3a2f33332d3333203d3e20323638313331.roa (hash: p7Oa9YECuMMpX3lKf1BIHAgMsEdZxp1BAHLE2bpiWLI=)
                          17: 34352e3136392e3138382e302f32342d3234203d3e20323638313331.roa (hash: lQE0H5i+BmmRfKCVNDuwT4u8OEjW/9FHvTmmfwT2Nnk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl
                          rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 12:51:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ad:07:ac:33:49:34:05:0d:d4:23:22:ac:bb:1a:e1:2d:2d:5b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
        Validity
            Not Before: Jan 25 11:54:49 2026 GMT
            Not After : Jan 26 12:51:49 2026 GMT
        Subject: CN=2A00C50388786A8F852ECB06B6819EA2A47EE35D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:35:40:a1:0a:52:cd:cd:2f:18:b6:8f:d0:4a:
                    1e:c4:ec:80:27:79:09:21:07:9b:5b:c2:90:33:d1:
                    6e:b8:22:e7:59:c6:c5:3b:60:07:45:d7:3b:4f:6d:
                    1c:28:39:23:e5:5f:84:c0:13:c9:13:f6:76:4a:7f:
                    8b:39:61:be:f6:c1:5b:9a:82:7c:51:31:1d:be:97:
                    7a:ed:93:c5:48:f5:68:94:c3:d5:ba:46:c0:d2:9c:
                    b6:7d:ea:73:ad:b3:55:16:35:6b:4e:dc:bc:da:67:
                    8f:91:4a:db:eb:b6:f1:4f:a3:14:ae:80:a9:65:ac:
                    5e:4e:a6:79:28:49:29:2e:79:fa:35:f4:06:cc:04:
                    d3:4e:10:5e:3c:40:b7:19:66:d7:ce:c6:24:2d:ae:
                    30:3e:4b:d3:be:70:1f:ef:c6:23:51:af:28:fe:3f:
                    b6:15:53:14:4e:88:b8:ca:69:c3:0e:af:83:09:0d:
                    67:f2:04:1a:3a:96:ce:72:5f:e9:7a:aa:12:9d:27:
                    f0:e8:e4:d9:c7:ae:ce:ae:5e:74:86:3c:c5:73:88:
                    56:4a:cc:79:64:13:4a:07:54:b4:86:a1:a3:24:1d:
                    f4:22:15:3d:9f:25:60:7c:85:d9:a0:28:2b:26:5f:
                    1d:36:a4:de:46:cd:35:4e:1c:01:29:5c:6e:1d:84:
                    a0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:00:C5:03:88:78:6A:8F:85:2E:CB:06:B6:81:9E:A2:A4:7E:E3:5D
            X509v3 Authority Key Identifier:
                keyid:A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:b5:70:08:f8:62:f0:af:8c:ac:e5:14:6f:d2:e8:d0:4e:fe:
         d1:8b:40:52:04:ce:16:88:10:3c:a3:e2:bf:09:57:66:36:07:
         62:79:6e:51:97:75:29:b1:b3:c4:e6:8f:bd:4d:13:d6:fd:eb:
         fb:d4:f2:df:22:bb:3b:78:ed:b6:a9:ed:e3:66:25:b3:3e:35:
         71:b3:9c:39:a8:7f:ff:a0:ef:cd:97:ab:f7:76:b5:c1:c2:ad:
         d4:14:9b:f3:56:df:7e:1e:40:16:0c:f1:9d:51:eb:b1:52:d8:
         2b:48:54:3a:13:b0:3c:df:6f:aa:64:c1:b8:b2:b3:13:fa:35:
         56:d1:67:ae:ad:d3:f0:2f:d0:b2:cc:c2:ab:67:97:63:a9:88:
         ee:0a:12:8e:b6:6e:56:df:6c:b5:47:c9:8c:65:9b:ef:d2:99:
         47:a3:31:67:a3:18:11:b8:97:bb:ea:2f:b0:c2:0e:2a:f4:09:
         dd:b6:3d:c4:e2:e6:3e:7a:0c:78:61:6e:69:cf:46:d2:af:9a:
         17:bd:7f:5b:af:c8:32:ec:df:e3:c0:73:12:ac:42:0a:78:f3:
         18:10:f2:45:fa:2b:a4:fa:c6:58:fa:07:08:25:c6:e4:d9:47:
         33:4e:46:0f:15:7d:48:72:0c:6b:47:38:d9:70:d1:02:ed:64:
         02:f3:5c:9c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYq0HrDNJNAUN1CMirLsa4S0tW3QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBDREQyQ0Y1ODlERkM0QUI0ODJBQzAyRUMwNUVCQjVD
M0JFNUIxMTAeFw0yNjAxMjUxMTU0NDlaFw0yNjAxMjYxMjUxNDlaMDMxMTAvBgNV
BAMTKDJBMDBDNTAzODg3ODZBOEY4NTJFQ0IwNkI2ODE5RUEyQTQ3RUUzNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2NUChClLNzS8Yto/QSh7E7IAn
eQkhB5tbwpAz0W64IudZxsU7YAdF1ztPbRwoOSPlX4TAE8kT9nZKf4s5Yb72wVua
gnxRMR2+l3rtk8VI9WiUw9W6RsDSnLZ96nOts1UWNWtO3LzaZ4+RStvrtvFPoxSu
gKllrF5OpnkoSSkuefo19AbMBNNOEF48QLcZZtfOxiQtrjA+S9O+cB/vxiNRryj+
P7YVUxROiLjKacMOr4MJDWfyBBo6ls5yX+l6qhKdJ/Do5NnHrs6uXnSGPMVziFZK
zHlkE0oHVLSGoaMkHfQiFT2fJWB8hdmgKCsmXx02pN5GzTVOHAEpXG4dhKB9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUKgDFA4h4ao+FLssGtoGeoqR+410wHwYDVR0j
BBgwFoAUoM3Sz1id/Eq0gqwC7AXrtcO+WxEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2JlN0VQNGVneEJWYmM5NkgzV3ZCMUdNU2V3azlUN0pZMnRXR1Vack5G
QkcvMC9BMENERDJDRjU4OURGQzRBQjQ4MkFDMDJFQzA1RUJCNUMzQkU1QjExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwQ0REMkNGNTg5REZDNEFC
NDgyQUMwMkVDMDVFQkI1QzNCRTVCMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N2JlN0VQNGVneEJWYmM5NkgzV3ZCMUdNU2V3azlUN0pZMnRXR1Vack5GQkcvMC9B
MENERDJDRjU4OURGQzRBQjQ4MkFDMDJFQzA1RUJCNUMzQkU1QjExLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFrVwCPhi8K+MrOUUb9Lo0E7+0YtAUgTOFogQPKPivwlXZjYHYnluUZd1KbGz
xOaPvU0T1v3r+9Ty3yK7O3jttqnt42Ylsz41cbOcOah//6DvzZer93a1wcKt1BSb
81bffh5AFgzxnVHrsVLYK0hUOhOwPN9vqmTBuLKzE/o1VtFnrq3T8C/QsszCq2eX
Y6mI7goSjrZuVt9stUfJjGWb79KZR6MxZ6MYEbiXu+ovsMIOKvQJ3bY9xOLmPnoM
eGFuac9G0q+aF71/W6/IMuzf48BzEqxCCnjzGBDyRforpPrGWPoHCCXG5NlHM05G
DxV9SHIMa0c42XDRAu1kAvNcnA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:13:49 2026 by rpki-client